Skip to content

Bump Java 21 Zulu build to 21.0.13.0.3 (zulu21.54.109) - #60

Open
GautamMPanchaL wants to merge 2 commits into
mainfrom
bump-zulu21-0.13.0.3
Open

GautamMPanchaL wants to merge 2 commits into
mainfrom
bump-zulu21-0.13.0.3

Conversation

@GautamMPanchaL

Copy link
Copy Markdown

Summary

Upstream check against Azul's Zulu metadata API found a newer GA build for the Java 21 line.

Before After
Zulu build zulu21.54.107-ca-jdk21.0.13 zulu21.54.109-ca-jdk21.0.13.0.3
OpenJDK version 21.0.13 21.0.13.0.3

Also checked and confirmed already up to date (no changes needed):

  • Java 11: zulu11.92.109-ca-jdk11.0.33 matches Azul's current latest release.
  • base.image (gcr.io/distroless/cc-debian13:debug) digest matches current upstream digest for both java-11 and java-21.

Changes

  • java-21/java.version: bumped to zulu21.54.109-ca-jdk21.0.13.0.3.
  • java-21/Dockerfile: updated ZULU_SHA256_AMD64 / ZULU_SHA256_ARM64 pins to match the new build (sha256 values sourced from Azul's metadata API sha256_hash field), updated comment example.

Verification

  • Confirmed SHA256 values against Azul metadata API (api.azul.com/metadata/v1/zulu/packages/{uuid}).
  • Built java-21 image locally (docker buildx build --platform linux/arm64) with the updated build args — build succeeds, blocked.certs fingerprint check passes.
  • Ran java -version in the built image: outputs openjdk version "21.0.13.0.3".

🤖 Generated with Cascade

hibohra1398
hibohra1398 previously approved these changes Oct 29, 2026
Left over from 3f62f1d which replaced 'FROM azul/zulu-openjdk-debian:${JAVA_VERSION}'
with 'FROM debian:trixie-slim' + a stage-scoped ARG JAVA_VERSION redeclaration for use
in RUN. No FROM instruction consumes the top-level declaration anymore; verified builds
emit no missing-build-arg warning for JAVA_VERSION after removal.
@GautamMPanchaL

Copy link
Copy Markdown
Author

Added a follow-up commit removing dead code found by auditing the last 10 commits:

  • Dead top-level `ARG JAVA_VERSION` in both `java-11/Dockerfile` and `java-21/Dockerfile`. Traced to commit 3f62f1d (eMudhra blocklist fix), which replaced `FROM azul/zulu-openjdk-debian:${JAVA_VERSION}` with `FROM debian:trixie-slim` + a stage-scoped `ARG JAVA_VERSION` redeclaration for use in `RUN`. The original top-level declaration (only needed for substitution into a `FROM` line) was left behind and is no longer consumed anywhere.
  • Verified: both images rebuild cleanly with no missing-build-arg warning for `JAVA_VERSION`, and `java -version` still reports the correct versions (21.0.13.0.3 / 11.0.33) after removal.

Left the per-arch `base-amd64`/`base-arm64` stage duplication as-is — that was intentionally added in #28 for multi-arch support, not dead code, just boilerplate that could be unified later if desired.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants