Task Summary
Bump all Scala/Java microservices from Java 11 to Java 17 LTS. Java 11's premier support has ended and Docker Hub flags temurin:11-* images for fixable critical/high CVEs. Java 17 is an active LTS through Sep 2029, gets monthly CPU updates, and unblocks modern libraries that already require 17+ (e.g. mcp-java-sdk).
Per discussion #4001, only minor changes are needed; the only runtime tweak observed for the workers is exposing java.nio to the Arrow off-heap memory module:
JDK_JAVA_OPTIONS=--add-opens=java.base/java.nio=org.apache.arrow.memory.core,ALL-UNNAMED
This will be set as ENV only in bin/computing-unit-master.dockerfile and bin/computing-unit-worker.dockerfile. The other 6 service images do not exercise Arrow off-heap and don't need it.
Scope:
- 8 Dockerfiles under
bin/*.dockerfile (build base + runtime base).
.github/workflows/build.yml and .github/workflows/build-and-push-images.yml (java-version: 11 → 17).AGENTS.md (toolchain table).
Task Type
Task Summary
Bump all Scala/Java microservices from Java 11 to Java 17 LTS. Java 11's premier support has ended and Docker Hub flags
temurin:11-*images for fixable critical/high CVEs. Java 17 is an active LTS through Sep 2029, gets monthly CPU updates, and unblocks modern libraries that already require 17+ (e.g.mcp-java-sdk).Per discussion #4001, only minor changes are needed; the only runtime tweak observed for the workers is exposing
java.nioto the Arrow off-heap memory module:This will be set as
ENVonly inbin/computing-unit-master.dockerfileandbin/computing-unit-worker.dockerfile. The other 6 service images do not exercise Arrow off-heap and don't need it.Scope:
bin/*.dockerfile(build base + runtime base)..github/workflows/build.ymland.github/workflows/build-and-push-images.yml(java-version: 11→17).AGENTS.md(toolchain table).Task Type