Java Buildpack v4.72.0 and later is a commercial version of the open source Java buildpack described in the java-buildpack repository in the Cloud Foundry github org. See that page for how to install and use the open-source Java buildpack.
This commercial version has the additional features described in the Release Notes below.
Name | Supported Languages, Frameworks, and Technologies | Commercial Versions |
---|---|---|
Java Buildpack | Java & Spring based applications | 4.79.0, 4.75.0, 4.74.0, 4.73,0, 4.72.0 |
Release New Features
Java Buildpack v4.79.0
v4.79.0 is the next valid release after v4.75.0. Do not use v4.78, v4.77, or v4.76, which contained bugs or were not released.
This release contains improvements to the Spring Boot Efficiency feature introduced in v4.72.0. Spring Boot Applications > 3.3 can now be optimized by the buildpack itself during staging, by enabling the following variables:
JBP_SPRING_BOOT_EFFICIENCY: '{ "aot_enabled": true, "cds_enabled": true }'
Setting aot_enabled: true
configures automated AOT performance enhancements for your Spring apps running on Tanzu Platform to convert the application’s layout to an optimized structure, and perform AOT optimizations on the application during staging, unless the application was already AOT optimized during maven or gradle build.
Setting cds_enabled: true
instructs the JVM to run the application in a training-run
mode, which creates an archive of classes that enables faster application startup at runtime.
This release contains the January Java patch release versions of JREs 8, 11, 17 & 21.
This release also contains dependency updates including a versions of Apache Tomcat 9 & 10.1 with fixes for CVE-2024-52318
Java Buildpack v4.75.0
This release contains dependency updates including a versions of Apache Tomcat 9 & 10.1 with fixes for CVE-2024-56337.
Download from Broadcom Support: Java Buildpack v4.75.0 files
Java Buildpack v4.74.0
This release contains Performance versions of the online and offline buildpacks. You can download these from Broadcom Support alongside the regular Java Buildpack v4.74.0 files.
Performance JREs
Differences between Performance and regular Java Buildpack versions:
- JREs 8 & 11 are the Performance Edition versions provided by BellSoft, which harness the power of JRE 17. For details, see Liberica JDK Performance Edition on the BellSoft website.
- JRE 17 & 21 are the same standard edition JREs as in the regular Java Buildpack and are provided for convenience.
A warning will be printed if you choose JRE 17 or 21 with this buildpack, which simply notes that these are not performance versions.
To use the performance buildpack, download the zip file from the Support Portal, and upload it to the platform using cf create-buildpack
Java Buildpack v4.72.0
Spring Boot Efficiency
Spring Boot Efficiency is a new Java Buildpack container that stages your application in training-run
mode, which creates a cache of classes that makes startup time faster.
The feature is supported for Spring Boot 3.3.0+ applications, and takes advantage of the JVM feature Class Data Sharing (CDS) and Spring framework support.
To enable this feature, set the following environment variable:
cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ cds_enabled: true }'
If your app has been built with Ahead-of-Time (AOT) processing, you can additionally enable the AOT flag in the same variable for further improvement in startup time:
cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ aot_enabled: true, cds_enabled: true }'
The feature works as follows:
- When Spring Boot Efficiency is enabled, the buildpack runs your application during staging in a ‘training run’ mode, which generates a CDS archive.
- The runtime command is then configured to use this archive, providing a faster application startup time.
- To enable the creation of this archive, set the following environment variable:
cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ cds_enabled: true }'
- If your application has been built with Ahead-of-Time (AOT) processing, you can additionally enable the following AOT flag in the same variable for a further improvement in startup time:
cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ aot_enabled: true, cds_enabled: true }'
- For advanced configuration of the Java arguments that are passed to the ‘training-run’ during staging, you can also set the following option:
cf set-env <app> JBP_CONFIG_SPRING_BOOT_EFFICIENCY '{ cds_training_opts: "<args>", cds_enabled: true }'
- Custom training-run options should not be combined with enabling the AOT efficiency option (‘aot-enabled: true’).
- This is because the AOT classes used during training run won’t be compatible with a different set of JAVA_TOOL_OPTIONS at runtime; see Spring Integration listeners fail after devtools restart.
Since Spring Boot 3.0+ applications require Java 17, you must enable at least this JRE version when pushing your app.
Java Buildpack v4.71.0 and Earlier
Java Buildpack release notes for v4.71.0 and earlier are in the java-buildpack repository in the Cloud Foundry github org.
Release Dependency Versions
Java Buildpack v4.79.0
Dependency | Version | CVEs | Release Notes |
---|---|---|---|
AppDynamics Agent | 24.8.1_36301 | Release Notes | |
Azure Application Insights Agent | 3.7.0 | Release Notes | |
CA Introscope APM Framework | 24.9.1_19 | ||
Client Certificate Mapper | 2.0.1 | Included inline above | Included inline above |
Container Security Provider | 1.20.0_RELEASE | Included inline above | Included inline above |
Contrast Security Agent | 6.14.0 | Release Notes | |
Datadog APM Javaagent | 1.46.0 | Release Notes | |
Elastic APM Agent | 1.52.1 | Release Notes | |
Gemalto Luna Security Provider | 7.4.0 | Release Notes | |
Geode Tomcat Session Store | 2.0.3 | ||
Google Stackdriver Profiler | 0.1.0 | Release Notes | |
Groovy | 2.5.23 | Release Notes | |
JaCoCo Agent | 0.8.12 | Release Notes | |
Java CFEnv | 3.3.0 | Release Notes | |
Java Memory Assistant Agent | 0.5.0 | ||
Java Memory Assistant Clean Up | 0.1.0 | ||
JProfiler Profiler | 13.0.7 | ChangeLog | |
JRebel Agent | 2025.1.1 | ChangeLog | |
jvmkill Agent | 1.17.0_RELEASE | Included inline above | Included inline above |
MariaDB JDBC Driver | 2.7.9 | Release Notes | |
Memory Calculator | 3.13.0_RELEASE | Included inline above | Included inline above |
Metric Writer | 3.5.0_RELEASE | Included inline above | Included inline above |
New Relic Agent | 8.18.0 | Release Notes | |
Open Telemetry Agent | 2.12.0 | Release Notes | |
OpenJDK JRE 11 | 11.0.26_9 | Risk Matrix | Release Notes |
OpenJDK JRE 17 | 17.0.14_10 | Risk Matrix | Release Notes |
OpenJDK JRE 21 | 21.0.6_10 | Risk Matrix | Release Notes |
OpenJDK JRE 8 | 1.8.0_442 | Risk Matrix | Release Notes |
PostgreSQL JDBC Driver | 42.7.5 | ChangeLog | |
Redis Session Store | 1.3.6_RELEASE | Included inline above | Included inline above |
Riverbed Appinternals Agent | 11.8.5_BL527 | ||
SeaLights Agent | 4.0.2570 | ||
SkyWalking | 9.3.0 | ChangeLog | |
Splunk OpenTelemetry Java Agent | 2.10.0 | Release Notes | |
Spring Auto-reconfiguration | 2.12.0_RELEASE | Included inline above | Included inline above |
Spring Boot CLI | 2.7.18 | ||
Spring Boot Container Customizer | 2.6.0_RELEASE | Included inline above | Included inline above |
Spring Kit CLI | 0.4.0 | ||
Takipi Agent | 4.73.3 | Release Notes | |
Tomcat 10.1 | 10.1.35 | Security | ChangeLog |
Tomcat 9 | 9.0.100 | Security | ChangeLog |
Tomcat Access Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Lifecycle Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
YourKit Profiler | 2024.9.164 | Release Notes |
Java Buildpack v4.75.0
Dependency | Version | CVEs | Release Notes |
---|---|---|---|
AppDynamics Agent | 24.8.1_36301 |
Release Notes | |
Azure Application Insights Agent | 3.6.2 |
Release Notes | |
CA Introscope APM Framework | 24.9.1_19 |
||
Client Certificate Mapper | 2.0.1 |
Included inline above | Included inline above |
Container Security Provider | 1.20.0_RELEASE |
Included inline above | Included inline above |
Contrast Security Agent | 6.13.0 |
Release Notes | |
Datadog APM Javaagent | 1.45.0 |
Release Notes | |
Elastic APM Agent | 1.52.1 |
Release Notes | |
Gemalto Luna Security Provider | 7.4.0 |
Release Notes | |
Geode Tomcat Session Store | 2.0.3 |
||
Google Stackdriver Profiler | 0.1.0 |
Release Notes | |
Groovy | 2.5.23 |
Release Notes | |
JaCoCo Agent | 0.8.12 |
Release Notes | |
Java CFEnv | 3.3.0 |
Release Notes | |
Java Memory Assistant Agent | 0.5.0 |
||
Java Memory Assistant Clean Up | 0.1.0 |
||
JProfiler Profiler | 13.0.7 |
ChangeLog | |
JRebel Agent | 2024.4.2 |
ChangeLog | |
jvmkill Agent | 1.17.0_RELEASE |
Included inline above | Included inline above |
MariaDB JDBC Driver | 2.7.9 |
Release Notes | |
Memory Calculator | 3.13.0_RELEASE |
Included inline above | Included inline above |
Metric Writer | 3.5.0_RELEASE |
Included inline above | Included inline above |
New Relic Agent | 8.17.0 |
Release Notes | |
Open Telemetry Agent | 2.11.0 |
Release Notes | |
OpenJDK JRE 11 | 11.0.25_11 |
Risk Matrix | Release Notes |
OpenJDK JRE 17 | 17.0.13_12 |
Risk Matrix | Release Notes |
OpenJDK JRE 21 | 21.0.5_11 |
Risk Matrix | Release Notes |
OpenJDK JRE 8 | 1.8.0_432 |
Risk Matrix | Release Notes |
PostgreSQL JDBC Driver | 42.7.4 |
ChangeLog | |
Redis Session Store | 1.3.6_RELEASE |
Included inline above | Included inline above |
Riverbed Appinternals Agent | 11.8.5_BL527 |
||
SeaLights Agent | 4.0.2570 |
||
SkyWalking | 9.3.0 |
ChangeLog | |
Splunk OpenTelemetry Java Agent | 2.10.0 |
Release Notes | |
Spring Auto-reconfiguration | 2.12.0_RELEASE |
Included inline above | Included inline above |
Spring Boot CLI | 2.7.18 |
||
Spring Boot Container Customizer | 2.6.0_RELEASE |
Included inline above | Included inline above |
Takipi Agent | 4.73.3 |
Release Notes | |
Tomcat 10.1 | 10.1.34 |
Security | ChangeLog |
Tomcat 9 | 9.0.96 |
Security | ChangeLog |
Tomcat Access Logging Support | 3.4.0_RELEASE |
Included inline above | Included inline above |
Tomcat Lifecycle Support | 3.4.0_RELEASE |
Included inline above | Included inline above |
Tomcat Logging Support | 3.4.0_RELEASE |
Included inline above | Included inline above |
YourKit Profiler | 2024.9.162 |
Release Notes |
Java Buildpack v4.74.0
This release contains dependency bumps including:
- Usage of https://storage.googleapis.com/java-buildpack-dependencies/ new GCS bucket for dependencies
- Java updates
Dependency | Version | CVEs | Release Notes |
---|---|---|---|
AppDynamics Agent | 24.8.1_36301 | Release Notes | |
Azure Application Insights Agent | 3.6.1 | Release Notes | |
CA Introscope APM Framework | 24.9.1_19 | ||
Client Certificate Mapper | 2.0.1 | Included inline above | Included inline above |
Container Security Provider | 1.20.0_RELEASE | Included inline above | Included inline above |
Contrast Security Agent | 6.11.1 | Release Notes | |
Datadog APM Javaagent | 1.41.1 | Release Notes | |
Elastic APM Agent | 1.52.0 | Release Notes | |
Gemalto Luna Security Provider | 7.4.0 | Release Notes | |
Geode Tomcat Session Store | 2.0.3 | ||
Google Stackdriver Profiler | 0.1.0 | Release Notes | |
Groovy | 2.5.23 | Release Notes | |
JaCoCo Agent | 0.8.12 | Release Notes | |
Java CFEnv | 3.2.0 | Release Notes | |
Java Memory Assistant Agent | 0.5.0 | ||
Java Memory Assistant Clean Up | 0.1.0 | ||
JProfiler Profiler | 13.0.7 | ChangeLog | |
JRebel Agent | 2024.4.0 | ChangeLog | |
jvmkill Agent | 1.17.0_RELEASE | Included inline above | Included inline above |
MariaDB JDBC Driver | 2.7.9 | Release Notes | |
Memory Calculator | 3.13.0_RELEASE | Included inline above | Included inline above |
Metric Writer | 3.5.0_RELEASE | Included inline above | Included inline above |
New Relic Agent | 8.15.0 | Release Notes | |
Open Telemetry Agent | 2.9.0 | Release Notes | |
OpenJDK JRE 11 | 11.0.25_11 | Risk Matrix | Release Notes |
OpenJDK JRE 17 | 17.0.13_12 | Risk Matrix | Release Notes |
OpenJDK JRE 21 | 21.0.5_11 | Risk Matrix | Release Notes |
OpenJDK JRE 8 | 1.8.0_432 | Risk Matrix | Release Notes |
PostgreSQL JDBC Driver | 42.7.4 | ChangeLog | |
Redis Session Store | 1.3.6_RELEASE | Included inline above | Included inline above |
Riverbed Appinternals Agent | 11.8.5_BL527 | ||
SeaLights Agent | 4.0.2561 | ||
SkyWalking | 9.3.0 | ChangeLog | |
Splunk OpenTelemetry Java Agent | 2.9.0 | Release Notes | |
Spring Auto-reconfiguration | 2.12.0_RELEASE | Included inline above | Included inline above |
Spring Boot CLI | 2.7.18 | ||
Spring Boot Container Customizer | 2.6.0_RELEASE | Included inline above | Included inline above |
Takipi Agent | 4.73.3 | Release Notes | |
Tomcat 10.1 | 10.1.31 | Security | ChangeLog |
Tomcat 9 | 9.0.96 | Security | ChangeLog |
Tomcat Access Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Lifecycle Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
YourKit Profiler | 2024.9.158 | Release Notes |
Java Buildpack v4.73.0
This release contains dependency bumps including:
- an upgrade of the Ruby dependency from 3.1 to 3.2
- a major version upgrade of the Tomcat Geode Session Store library - to support the latest Gemfire/PCC tile
This release also restores Tomcat 10.1.x which was incorrectly removed in 4.72.0.
Dependency | Version | CVEs | Release Notes |
---|---|---|---|
AppDynamics Agent | 24.7.0_36185 | Release Notes | |
Azure Application Insights Agent | 3.5.4 | Release Notes | |
CA Introscope APM Framework | 24.9.1_19 | ||
Client Certificate Mapper | 2.0.1 | Included inline above | Included inline above |
Container Security Provider | 1.20.0_RELEASE | Included inline above | Included inline above |
Contrast Security Agent | 6.9.0 | Release Notes | |
Datadog APM Javaagent | 1.39.0 | Release Notes | |
Elastic APM Agent | 1.51.0 | Release Notes | |
Gemalto Luna Security Provider | 7.4.0 | Release Notes | |
Geode Tomcat Session Store | 2.0.3 | ||
Google Stackdriver Profiler | 0.1.0 | Release Notes | |
Groovy | 2.5.23 | Release Notes | |
JaCoCo Agent | 0.8.12 | Release Notes | |
Java CFEnv | 3.2.0 | Release Notes | |
Java Memory Assistant Agent | 0.5.0 | ||
Java Memory Assistant Clean Up | 0.1.0 | ||
JProfiler Profiler | 13.0.7 | ChangeLog | |
JRebel Agent | 2024.3.2 | ChangeLog | |
jvmkill Agent | 1.17.0_RELEASE | Included inline above | Included inline above |
MariaDB JDBC Driver | 2.7.9 | Release Notes | |
Memory Calculator | 3.13.0_RELEASE | Included inline above | Included inline above |
Metric Writer | 3.5.0_RELEASE | Included inline above | Included inline above |
New Relic Agent | 8.14.0 | Release Notes | |
Open Telemetry Agent | 2.8.0 | Release Notes | |
OpenJDK JRE 11 | 11.0.24_9 | Risk Matrix | Release Notes |
OpenJDK JRE 17 | 17.0.12_10 | Risk Matrix | Release Notes |
OpenJDK JRE 21 | 21.0.4_9 | Risk Matrix | Release Notes |
OpenJDK JRE 8 | 1.8.0_422 | Risk Matrix | Release Notes |
PostgreSQL JDBC Driver | 42.7.4 | ChangeLog | |
Redis Session Store | 1.3.6_RELEASE | Included inline above | Included inline above |
Riverbed Appinternals Agent | 11.8.5_BL527 | ||
SeaLights Agent | 4.0.2549 | ||
SkyWalking | 9.3.0 | ChangeLog | |
Splunk OpenTelemetry Java Agent | 2.7.0 | Release Notes | |
Spring Auto-reconfiguration | 2.12.0_RELEASE | Included inline above | Included inline above |
Spring Boot CLI | 2.7.18 | ||
Spring Boot Container Customizer | 2.6.0_RELEASE | Included inline above | Included inline above |
Takipi Agent | 4.73.3 | Release Notes | |
Tomcat 10.1 | 10.1.30 | Security | ChangeLog |
Tomcat 9 | 9.0.95 | Security | ChangeLog |
Tomcat Access Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Lifecycle Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
YourKit Profiler | 2024.3.161 | Release Notes |
Java Buildpack v4.72.0
The Java Buildpack v4.72.0 adds a Spring Boot Efficiency feature and some dependency updates to the Cloud Foundry Java Buildpack.
This release contains a new feature - Spring Boot Efficiency. Spring Boot Efficiency is a new Java Buildpack ‘container’ which runs your application in a ‘training-run’ mode during staging, to create a cache of classes that allow a faster startup time at runtime.
See the New Features section for more details.
Dependency Updates
Dependency | Version | CVEs | Release Notes |
---|---|---|---|
AppDynamics Agent | 24.7.0_36185 | Release Notes | |
Azure Application Insights Agent | 3.5.4 | Release Notes | |
CA Introscope APM Framework | 24.4.2_8 | ||
Client Certificate Mapper | 2.0.1 | Included inline above | Included inline above |
Container Security Provider | 1.20.0_RELEASE | Included inline above | Included inline above |
Contrast Security Agent | 6.6.0 | Release Notes | |
Datadog APM Javaagent | 1.38.0 | Release Notes | |
Elastic APM Agent | 1.51.0 | Release Notes | |
Gemalto Luna Security Provider | 7.4.0 | Release Notes | |
Geode Tomcat Session Store | 1.14.9 | ||
Google Stackdriver Profiler | 0.1.0 | Release Notes | |
Groovy | 2.5.23 | Release Notes | |
JaCoCo Agent | 0.8.12 | Release Notes | |
Java CFEnv | 3.1.5 | Release Notes | |
Java Memory Assistant Agent | 0.5.0 | ||
Java Memory Assistant Clean Up | 0.1.0 | ||
JProfiler Profiler | 13.0.7 | ChangeLog | |
JRebel Agent | 2024.3.1 | ChangeLog | |
jvmkill Agent | 1.17.0_RELEASE | Included inline above | Included inline above |
MariaDB JDBC Driver | 2.7.9 | Release Notes | |
Memory Calculator | 3.13.0_RELEASE | Included inline above | Included inline above |
Metric Writer | 3.5.0_RELEASE | Included inline above | Included inline above |
New Relic Agent | 8.13.0 | Release Notes | |
Open Telemetry Agent | 2.6.0 | Release Notes | |
OpenJDK JRE 11 | 11.0.24_9 | Risk Matrix | Release Notes |
OpenJDK JRE 17 | 17.0.12_10 | Risk Matrix | Release Notes |
OpenJDK JRE 21 | 21.0.4_9 | Risk Matrix | Release Notes |
OpenJDK JRE 8 | 1.8.0_422 | Risk Matrix | Release Notes |
PostgreSQL JDBC Driver | 42.7.3 | ChangeLog | |
Redis Session Store | 1.3.6_RELEASE | Included inline above | Included inline above |
Riverbed Appinternals Agent | 11.8.5_BL527 | ||
SeaLights Agent | 4.0.2539 | ||
SkyWalking | 9.3.0 | ChangeLog | |
Splunk OpenTelemetry Java Agent | 2.6.0 | Release Notes | |
Spring Auto-reconfiguration | 2.12.0_RELEASE | Included inline above | Included inline above |
Spring Boot CLI | 2.7.18 | ||
Spring Boot Container Customizer | 2.6.0_RELEASE | Included inline above | Included inline above |
Takipi Agent | 4.73.3 | Release Notes | |
Tomcat | 9.0.93 | Security | ChangeLog |
Tomcat Access Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Lifecycle Support | 3.4.0_RELEASE | Included inline above | Included inline above |
Tomcat Logging Support | 3.4.0_RELEASE | Included inline above | Included inline above |
YourKit Profiler | 2024.3.157 | Release Notes |
Content feedback and comments