revert to javafx 23 due to jpackage launcher link bug
What the developer wrote
Authored by Craig Raw
revert to javafx 23 due to jpackage launcher link bug
What changed, and why it matters
This commit simply downgrades the JavaFX graphical toolkit version from 24.0.2 to 23.0.2 in the project's build file. The stated reason is to avoid a packaging bug that affects how the application launcher links libraries, not to fix a security vulnerability. There is no indication this change protects users from attack.
No security action needed. Treat as a routine build/packaging compatibility revert. Monitor future JavaFX releases for a fix to the launcher link issue before upgrading again.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff changes one line in build.gradle, setting the non-headless JavaFX version from ‘24.0.2’ to ‘23.0.2’. The commit message explains this is a revert due to a ‘jpackage launcher link bug’ in JavaFX 24.0.2. No security-relevant code paths are modified, and no references describe any exploit or vulnerability.
Changed components
build.gradle JavaFX dependency versionInspect captured patch +1 / −1
diff --git a/build.gradle b/build.gradle
index 1d6d167..c38c5e3 100644
--- a/build.gradle
+++ b/build.gradle
@@ -33,7 +33,7 @@ tasks.withType(AbstractArchiveTask).configureEach {
}
javafx {
- version = headless ? "18" : "24.0.2"
+ version = headless ? "18" : "23.0.2"
modules = [ 'javafx.controls', 'javafx.fxml', 'javafx.swing', 'javafx.graphics' ]
}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.