What the developer wrote
Authored by Craig Raw
updates for java 25 compatibility
What changed, and why it matters
This commit updates build tooling and one UI library to versions compatible with Java 25. It is a routine maintenance change with no clear security relevance visible in the diff.
No immediate security action required. Review release notes for the bumped dependencies (org.beryx.jlink 3.2.1-beta, org.gradlex.extra-java-module-info 1.13.1, org.fxmisc.richtext:richtextfx 0.11.7) to confirm they do not introduce known issues, and verify Java 25 build/runtime compatibility through normal QA.
Security signals we found
Dependency version bumps (jlink plugin, extra-java-module-info plugin, richtextfx)
New static module requirement 'jdk.jfr' added to jlink configuration
No security-related keywords, CVE references, or advisory links in commit message or diff
Evidence from the diff
The commit bumps the Gradle jlink plugin to 3.2.1-beta, the extra-java-module-info plugin to 1.13.1, and the richtextfx dependency from 0.11.6 to 0.11.7. It also adds a static module requirement for ‘jdk.jfr’ in the jlink configuration. These changes are framed as Java 25 compatibility updates. No vulnerability fixes, security advisories, or incident references are present in the supplied materials.
Changed components
build.gradlejlink plugin configurationrichtextfx dependencyInspect captured patch +5 / −4
diff --git a/build.gradle b/build.gradle
index e69ff76..64edeb8 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,8 +1,8 @@
plugins {
id 'application'
id 'org-openjfx-javafxplugin'
- id 'org.beryx.jlink' version '3.1.3'
- id 'org.gradlex.extra-java-module-info' version '1.13'
+ id 'org.beryx.jlink' version '3.2.1-beta'
+ id 'org.gradlex.extra-java-module-info' version '1.13.1'
id 'io.matthewnelson.kmp.tor.resource-filterjar' version '408.16.3'
}
@@ -57,7 +57,7 @@ dependencies {
exclude group: 'org.slf4j'
}
implementation('org.flywaydb:flyway-core:9.22.3')
- implementation('org.fxmisc.richtext:richtextfx:0.11.6')
+ implementation('org.fxmisc.richtext:richtextfx:0.11.7')
implementation('no.tornado:tornadofx-controls:1.0.4')
implementation('com.google.zxing:javase:3.4.0') {
exclude group: 'com.beust', module: 'jcommander'
@@ -185,6 +185,7 @@ jlink {
requires 'jdk.crypto.cryptoki'
requires 'java.management'
requires 'io.leangen.geantyref'
+ requires 'static jdk.jfr'
uses 'org.eclipse.jetty.http.HttpFieldPreEncoder'
}
Why this scored 19/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.