How do we keep our Java applications up-to-date and secure (#63)

Foojay Podcast published in December 2024

Last month, I published a Foojay blog post about the risks in systems that are stuck on old or outdated Java versions and got a lot of feedback from developers. Most of them want to move on but get stuck on management decisions, outdated production environments, or one of the many other reasons that keep systems stuck on old Java versions and dependencies... 

Do you want to bring your system from Java 8 to 23? Did you know that Java 17 already got 13 security releases? And that you can use tools like OpenRewrite to help you update your code?

Related Foojay articles

Why Java 8 is a Ticking Time Bomb Hiding Within Your Organization
How Organizations Became Stuck on Outdated Java Versions

Guests

Gerrit Grunwald
Jonathan Schneider
Martijn Dashorst
Carl Wanting
Charl Fasching
Johan Janssen

Content

00:00 Introduction of the topic and guests 

01:35 Gerrit Grunwald about CVE fixes in Java updates 
04:58 LTS (Long Term Support) versus STS (Short Term Support) 

9:45 Jonathan Schneider about the goal of OpenRewrite 
12:15 Upgrade all at once, or step by step? 
14:03 Who creates the recipes? 
15:08 What Moderne is offering on top of OpenRewrite  
17:29 How to use OpenRewrite in your IDE 
18:32 Companies maintaining recipies for their products 
20:05 Jonathan's view on the importance of upgrades  
26:56 Other use cases for OpenRewrite 

29:03 Martijn Dashorst: Updating legacy projects   

33:12 Carl Wanting and Charl Fasching: Migrating projects 

39:43 Johan Janssen: Java evolutions and upgrading  

42:51 Outro

[JimLecka]

Problem with ALL "updates". Once I have a working set for a specific project, my interest in an update is ZERO. Finish the project, then consider "updates". I have coded around whatever issues but every update either breaks the code-arounds and or introduces new bugs. Each update implies re-test at the very least, sometimes major re-write. Yes, I do update but not a casual thing. Counter example, consider the program by IBM called IEFBR14. It has not changed, since release (about 1962). It is running as you read this.