Tanzu Platform for Cloud Foundry 10.0

Java Buildpack

Last Updated March 13, 2025

Java Buildpack v4.72.0 and later is a commercial version of the open source Java buildpack described in the java-buildpack repository in the Cloud Foundry github org. See that page for how to install and use the open-source Java buildpack.

This commercial version has the additional features described in the Release Notes below.

Name Supported Languages, Frameworks, and Technologies Commercial Versions
Java Buildpack Java & Spring based applications 4.79.0, 4.75.0, 4.74.0, 4.73,0, 4.72.0

Release New Features

Java Buildpack v4.79.0

v4.79.0 is the next valid release after v4.75.0. Do not use v4.78, v4.77, or v4.76, which contained bugs or were not released.

This release contains improvements to the Spring Boot Efficiency feature introduced in v4.72.0. Spring Boot Applications > 3.3 can now be optimized by the buildpack itself during staging, by enabling the following variables:

JBP_SPRING_BOOT_EFFICIENCY: '{ "aot_enabled": true, "cds_enabled": true }'

Setting aot_enabled: true configures automated AOT performance enhancements for your Spring apps running on Tanzu Platform to convert the application’s layout to an optimized structure, and perform AOT optimizations on the application during staging, unless the application was already AOT optimized during maven or gradle build.

Setting cds_enabled: true instructs the JVM to run the application in a training-run mode, which creates an archive of classes that enables faster application startup at runtime.


This release contains the January Java patch release versions of JREs 8, 11, 17 & 21.

This release also contains dependency updates including a versions of Apache Tomcat 9 & 10.1 with fixes for CVE-2024-52318

Java Buildpack v4.75.0

This release contains dependency updates including a versions of Apache Tomcat 9 & 10.1 with fixes for CVE-2024-56337.

Download from Broadcom Support: Java Buildpack v4.75.0 files

Java Buildpack v4.74.0

This release contains Performance versions of the online and offline buildpacks. You can download these from Broadcom Support alongside the regular Java Buildpack v4.74.0 files.

Performance JREs

Differences between Performance and regular Java Buildpack versions:

  • JREs 8 & 11 are the Performance Edition versions provided by BellSoft, which harness the power of JRE 17. For details, see Liberica JDK Performance Edition on the BellSoft website.
  • JRE 17 & 21 are the same standard edition JREs as in the regular Java Buildpack and are provided for convenience.

A warning will be printed if you choose JRE 17 or 21 with this buildpack, which simply notes that these are not performance versions.

To use the performance buildpack, download the zip file from the Support Portal, and upload it to the platform using cf create-buildpack

Java Buildpack v4.72.0

Spring Boot Efficiency

Spring Boot Efficiency is a new Java Buildpack container that stages your application in training-run mode, which creates a cache of classes that makes startup time faster.

The feature is supported for Spring Boot 3.3.0+ applications, and takes advantage of the JVM feature Class Data Sharing (CDS) and Spring framework support.

To enable this feature, set the following environment variable:

  • cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ cds_enabled: true }'

If your app has been built with Ahead-of-Time (AOT) processing, you can additionally enable the AOT flag in the same variable for further improvement in startup time:

  • cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ aot_enabled: true, cds_enabled: true }'

The feature works as follows:

  • When Spring Boot Efficiency is enabled, the buildpack runs your application during staging in a ‘training run’ mode, which generates a CDS archive.
    • The runtime command is then configured to use this archive, providing a faster application startup time.
    • To enable the creation of this archive, set the following environment variable:
      cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ cds_enabled: true }'
  • If your application has been built with Ahead-of-Time (AOT) processing, you can additionally enable the following AOT flag in the same variable for a further improvement in startup time:
    cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ aot_enabled: true, cds_enabled: true }'
  • For advanced configuration of the Java arguments that are passed to the ‘training-run’ during staging, you can also set the following option:
    cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ cds_training_opts: "<args>", cds_enabled: true }'
  • Custom training-run options should not be combined with enabling the AOT efficiency option (‘aot-enabled: true’).

Since Spring Boot 3.0+ applications require Java 17, you must enable at least this JRE version when pushing your app.

Java Buildpack v4.71.0 and Earlier

Java Buildpack release notes for v4.71.0 and earlier are in the java-buildpack repository in the Cloud Foundry github org.

Release Dependency Versions

Java Buildpack v4.79.0

DependencyVersionCVEsRelease Notes
AppDynamics Agent24.8.1_36301 Release Notes
Azure Application Insights Agent3.7.0 Release Notes
CA Introscope APM Framework24.9.1_19
Client Certificate Mapper2.0.1Included inline aboveIncluded inline above
Container Security Provider1.20.0_RELEASEIncluded inline aboveIncluded inline above
Contrast Security Agent6.14.0 Release Notes
Datadog APM Javaagent1.46.0 Release Notes
Elastic APM Agent1.52.1 Release Notes
Gemalto Luna Security Provider7.4.0 Release Notes
Geode Tomcat Session Store2.0.3
Google Stackdriver Profiler0.1.0 Release Notes
Groovy2.5.23 Release Notes
JaCoCo Agent0.8.12 Release Notes
Java CFEnv3.3.0 Release Notes
Java Memory Assistant Agent0.5.0
Java Memory Assistant Clean Up0.1.0
JProfiler Profiler13.0.7 ChangeLog
JRebel Agent2025.1.1 ChangeLog
jvmkill Agent1.17.0_RELEASEIncluded inline aboveIncluded inline above
MariaDB JDBC Driver2.7.9 Release Notes
Memory Calculator3.13.0_RELEASEIncluded inline aboveIncluded inline above
Metric Writer3.5.0_RELEASEIncluded inline aboveIncluded inline above
New Relic Agent8.18.0 Release Notes
Open Telemetry Agent2.12.0 Release Notes
OpenJDK JRE 1111.0.26_9Risk MatrixRelease Notes
OpenJDK JRE 1717.0.14_10Risk MatrixRelease Notes
OpenJDK JRE 2121.0.6_10Risk MatrixRelease Notes
OpenJDK JRE 81.8.0_442Risk MatrixRelease Notes
PostgreSQL JDBC Driver42.7.5 ChangeLog
Redis Session Store1.3.6_RELEASEIncluded inline aboveIncluded inline above
Riverbed Appinternals Agent11.8.5_BL527
SeaLights Agent4.0.2570
SkyWalking9.3.0 ChangeLog
Splunk OpenTelemetry Java Agent2.10.0 Release Notes
Spring Auto-reconfiguration2.12.0_RELEASEIncluded inline aboveIncluded inline above
Spring Boot CLI2.7.18
Spring Boot Container Customizer2.6.0_RELEASEIncluded inline aboveIncluded inline above
Spring Kit CLI0.4.0
Takipi Agent4.73.3 Release Notes
Tomcat 10.110.1.35SecurityChangeLog
Tomcat 99.0.100SecurityChangeLog
Tomcat Access Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Lifecycle Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
YourKit Profiler2024.9.164 Release Notes

Java Buildpack v4.75.0

Dependency Version CVEs Release Notes
AppDynamics Agent 24.8.1_36301 Release Notes
Azure Application Insights Agent 3.6.2 Release Notes
CA Introscope APM Framework 24.9.1_19
Client Certificate Mapper 2.0.1 Included inline above Included inline above
Container Security Provider 1.20.0_RELEASE Included inline above Included inline above
Contrast Security Agent 6.13.0 Release Notes
Datadog APM Javaagent 1.45.0 Release Notes
Elastic APM Agent 1.52.1 Release Notes
Gemalto Luna Security Provider 7.4.0 Release Notes
Geode Tomcat Session Store 2.0.3
Google Stackdriver Profiler 0.1.0 Release Notes
Groovy 2.5.23 Release Notes
JaCoCo Agent 0.8.12 Release Notes
Java CFEnv 3.3.0 Release Notes
Java Memory Assistant Agent 0.5.0
Java Memory Assistant Clean Up 0.1.0
JProfiler Profiler 13.0.7 ChangeLog
JRebel Agent 2024.4.2 ChangeLog
jvmkill Agent 1.17.0_RELEASE Included inline above Included inline above
MariaDB JDBC Driver 2.7.9 Release Notes
Memory Calculator 3.13.0_RELEASE Included inline above Included inline above
Metric Writer 3.5.0_RELEASE Included inline above Included inline above
New Relic Agent 8.17.0 Release Notes
Open Telemetry Agent 2.11.0 Release Notes
OpenJDK JRE 11 11.0.25_11 Risk Matrix Release Notes
OpenJDK JRE 17 17.0.13_12 Risk Matrix Release Notes
OpenJDK JRE 21 21.0.5_11 Risk Matrix Release Notes
OpenJDK JRE 8 1.8.0_432 Risk Matrix Release Notes
PostgreSQL JDBC Driver 42.7.4 ChangeLog
Redis Session Store 1.3.6_RELEASE Included inline above Included inline above
Riverbed Appinternals Agent 11.8.5_BL527
SeaLights Agent 4.0.2570
SkyWalking 9.3.0 ChangeLog
Splunk OpenTelemetry Java Agent 2.10.0 Release Notes
Spring Auto-reconfiguration 2.12.0_RELEASE Included inline above Included inline above
Spring Boot CLI 2.7.18
Spring Boot Container Customizer 2.6.0_RELEASE Included inline above Included inline above
Takipi Agent 4.73.3 Release Notes
Tomcat 10.1 10.1.34 Security ChangeLog
Tomcat 9 9.0.96 Security ChangeLog
Tomcat Access Logging Support 3.4.0_RELEASE Included inline above Included inline above
Tomcat Lifecycle Support 3.4.0_RELEASE Included inline above Included inline above
Tomcat Logging Support 3.4.0_RELEASE Included inline above Included inline above
YourKit Profiler 2024.9.162 Release Notes

Java Buildpack v4.74.0

This release contains dependency bumps including:

  • Usage of https://storage.googleapis.com/java-buildpack-dependencies/ new GCS bucket for dependencies
  • Java updates
DependencyVersionCVEsRelease Notes
AppDynamics Agent24.8.1_36301 Release Notes
Azure Application Insights Agent3.6.1 Release Notes
CA Introscope APM Framework24.9.1_19
Client Certificate Mapper2.0.1Included inline aboveIncluded inline above
Container Security Provider1.20.0_RELEASEIncluded inline aboveIncluded inline above
Contrast Security Agent6.11.1 Release Notes
Datadog APM Javaagent1.41.1 Release Notes
Elastic APM Agent1.52.0 Release Notes
Gemalto Luna Security Provider7.4.0 Release Notes
Geode Tomcat Session Store2.0.3
Google Stackdriver Profiler0.1.0 Release Notes
Groovy2.5.23 Release Notes
JaCoCo Agent0.8.12 Release Notes
Java CFEnv3.2.0 Release Notes
Java Memory Assistant Agent0.5.0
Java Memory Assistant Clean Up0.1.0
JProfiler Profiler13.0.7 ChangeLog
JRebel Agent2024.4.0 ChangeLog
jvmkill Agent1.17.0_RELEASEIncluded inline aboveIncluded inline above
MariaDB JDBC Driver2.7.9 Release Notes
Memory Calculator3.13.0_RELEASEIncluded inline aboveIncluded inline above
Metric Writer3.5.0_RELEASEIncluded inline aboveIncluded inline above
New Relic Agent8.15.0 Release Notes
Open Telemetry Agent2.9.0 Release Notes
OpenJDK JRE 1111.0.25_11Risk MatrixRelease Notes
OpenJDK JRE 1717.0.13_12Risk MatrixRelease Notes
OpenJDK JRE 2121.0.5_11Risk MatrixRelease Notes
OpenJDK JRE 81.8.0_432Risk MatrixRelease Notes
PostgreSQL JDBC Driver42.7.4 ChangeLog
Redis Session Store1.3.6_RELEASEIncluded inline aboveIncluded inline above
Riverbed Appinternals Agent11.8.5_BL527
SeaLights Agent4.0.2561
SkyWalking9.3.0 ChangeLog
Splunk OpenTelemetry Java Agent2.9.0 Release Notes
Spring Auto-reconfiguration2.12.0_RELEASEIncluded inline aboveIncluded inline above
Spring Boot CLI2.7.18
Spring Boot Container Customizer2.6.0_RELEASEIncluded inline aboveIncluded inline above
Takipi Agent4.73.3 Release Notes
Tomcat 10.110.1.31SecurityChangeLog
Tomcat 99.0.96SecurityChangeLog
Tomcat Access Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Lifecycle Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
YourKit Profiler2024.9.158 Release Notes

Java Buildpack v4.73.0

This release contains dependency bumps including:

  • an upgrade of the Ruby dependency from 3.1 to 3.2
  • a major version upgrade of the Tomcat Geode Session Store library - to support the latest Gemfire/PCC tile

This release also restores Tomcat 10.1.x which was incorrectly removed in 4.72.0.

DependencyVersionCVEsRelease Notes
AppDynamics Agent24.7.0_36185 Release Notes
Azure Application Insights Agent3.5.4 Release Notes
CA Introscope APM Framework24.9.1_19
Client Certificate Mapper2.0.1Included inline aboveIncluded inline above
Container Security Provider1.20.0_RELEASEIncluded inline aboveIncluded inline above
Contrast Security Agent6.9.0 Release Notes
Datadog APM Javaagent1.39.0 Release Notes
Elastic APM Agent1.51.0 Release Notes
Gemalto Luna Security Provider7.4.0 Release Notes
Geode Tomcat Session Store2.0.3
Google Stackdriver Profiler0.1.0 Release Notes
Groovy2.5.23 Release Notes
JaCoCo Agent0.8.12 Release Notes
Java CFEnv3.2.0 Release Notes
Java Memory Assistant Agent0.5.0
Java Memory Assistant Clean Up0.1.0
JProfiler Profiler13.0.7 ChangeLog
JRebel Agent2024.3.2 ChangeLog
jvmkill Agent1.17.0_RELEASEIncluded inline aboveIncluded inline above
MariaDB JDBC Driver2.7.9 Release Notes
Memory Calculator3.13.0_RELEASEIncluded inline aboveIncluded inline above
Metric Writer3.5.0_RELEASEIncluded inline aboveIncluded inline above
New Relic Agent8.14.0 Release Notes
Open Telemetry Agent2.8.0 Release Notes
OpenJDK JRE 1111.0.24_9Risk MatrixRelease Notes
OpenJDK JRE 1717.0.12_10Risk MatrixRelease Notes
OpenJDK JRE 2121.0.4_9Risk MatrixRelease Notes
OpenJDK JRE 81.8.0_422Risk MatrixRelease Notes
PostgreSQL JDBC Driver42.7.4 ChangeLog
Redis Session Store1.3.6_RELEASEIncluded inline aboveIncluded inline above
Riverbed Appinternals Agent11.8.5_BL527
SeaLights Agent4.0.2549
SkyWalking9.3.0 ChangeLog
Splunk OpenTelemetry Java Agent2.7.0 Release Notes
Spring Auto-reconfiguration2.12.0_RELEASEIncluded inline aboveIncluded inline above
Spring Boot CLI2.7.18
Spring Boot Container Customizer2.6.0_RELEASEIncluded inline aboveIncluded inline above
Takipi Agent4.73.3 Release Notes
Tomcat 10.110.1.30SecurityChangeLog
Tomcat 99.0.95SecurityChangeLog
Tomcat Access Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Lifecycle Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
YourKit Profiler2024.3.161 Release Notes

Java Buildpack v4.72.0

The Java Buildpack v4.72.0 adds a Spring Boot Efficiency feature and some dependency updates to the Cloud Foundry Java Buildpack.

This release contains a new feature - Spring Boot Efficiency. Spring Boot Efficiency is a new Java Buildpack ‘container’ which runs your application in a ‘training-run’ mode during staging, to create a cache of classes that allow a faster startup time at runtime.

See the New Features section for more details.

Dependency Updates

DependencyVersionCVEsRelease Notes
AppDynamics Agent24.7.0_36185 Release Notes
Azure Application Insights Agent3.5.4 Release Notes
CA Introscope APM Framework24.4.2_8
Client Certificate Mapper2.0.1Included inline aboveIncluded inline above
Container Security Provider1.20.0_RELEASEIncluded inline aboveIncluded inline above
Contrast Security Agent6.6.0 Release Notes
Datadog APM Javaagent1.38.0 Release Notes
Elastic APM Agent1.51.0 Release Notes
Gemalto Luna Security Provider7.4.0 Release Notes
Geode Tomcat Session Store1.14.9
Google Stackdriver Profiler0.1.0 Release Notes
Groovy2.5.23 Release Notes
JaCoCo Agent0.8.12 Release Notes
Java CFEnv3.1.5 Release Notes
Java Memory Assistant Agent0.5.0
Java Memory Assistant Clean Up0.1.0
JProfiler Profiler13.0.7 ChangeLog
JRebel Agent2024.3.1 ChangeLog
jvmkill Agent1.17.0_RELEASEIncluded inline aboveIncluded inline above
MariaDB JDBC Driver2.7.9 Release Notes
Memory Calculator3.13.0_RELEASEIncluded inline aboveIncluded inline above
Metric Writer3.5.0_RELEASEIncluded inline aboveIncluded inline above
New Relic Agent8.13.0 Release Notes
Open Telemetry Agent2.6.0 Release Notes
OpenJDK JRE 1111.0.24_9Risk MatrixRelease Notes
OpenJDK JRE 1717.0.12_10Risk MatrixRelease Notes
OpenJDK JRE 2121.0.4_9Risk MatrixRelease Notes
OpenJDK JRE 81.8.0_422Risk MatrixRelease Notes
PostgreSQL JDBC Driver42.7.3 ChangeLog
Redis Session Store1.3.6_RELEASEIncluded inline aboveIncluded inline above
Riverbed Appinternals Agent11.8.5_BL527
SeaLights Agent4.0.2539
SkyWalking9.3.0 ChangeLog
Splunk OpenTelemetry Java Agent2.6.0 Release Notes
Spring Auto-reconfiguration2.12.0_RELEASEIncluded inline aboveIncluded inline above
Spring Boot CLI2.7.18
Spring Boot Container Customizer2.6.0_RELEASEIncluded inline aboveIncluded inline above
Takipi Agent4.73.3 Release Notes
Tomcat9.0.93SecurityChangeLog
Tomcat Access Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Lifecycle Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
Tomcat Logging Support3.4.0_RELEASEIncluded inline aboveIncluded inline above
YourKit Profiler2024.3.157 Release Notes