Java Buildpack v4.64.0

I'm pleased to announce the release of the java-buildpack, version 4.64.0. This release includes the following updates:

• Java 21 support - to use Java 21, you can set the config environment variable:
  • JBP_CONFIG_OPEN_JDK_JRE '{ jre: { version: 21.+ }}'
• Some agent framework dependency bumps, including:
  • A bug fix in Java CFEnv when specifying a custom port for AMQPS connections, see this issue for more information.
  • New major version 6.x of the Contrast Security agent which supports Java 21 (thanks to @tylernhoward)
• A new version of the Client Certificate Mapper which supports the change in Servlet API from javax.* to jakarta.* packages for its relevant Servlet classes.

For a more detailed look at the changes in 4.64.0, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.11.0_35328		Release Notes
Azure Application Insights Agent	3.4.18		Release Notes
CA Introscope APM Framework	23.10.1_8
Client Certificate Mapper	2.0.0	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	6.1.1		Release Notes
Datadog APM Javaagent	1.25.1		Release Notes
Elastic APM Agent	1.45.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.14.9
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.23		Release Notes
JaCoCo Agent	0.8.11		Release Notes
Java CFEnv	3.1.4		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.4.2		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.7.0		Release Notes
OpenJDK JRE 11	11.0.21_10	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.9_11	Risk Matrix	Release Notes
OpenJDK JRE 21	21.0.1_12	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_392	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.7.1		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2425
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.30.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.18
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.73.3		Release Notes
Tomcat	9.0.84	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.231		Release Notes

Java Buildpack v4.63.1

I'm pleased to announce the release of the java-buildpack, version 4.63.1. This release includes some agent framework dependency bumps, including a bug fix in Java CFEnv when using DB2, see this issue for more information.

For a more detailed look at the changes in 4.63.1, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.10.0_35234		Release Notes
Azure Application Insights Agent	3.4.18		Release Notes
CA Introscope APM Framework	23.9.1_16
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.4.1		Release Notes
Datadog APM Javaagent	1.23.0		Release Notes
Elastic APM Agent	1.43.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.14.9
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.23		Release Notes
JaCoCo Agent	0.8.11		Release Notes
Java CFEnv	3.1.3		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.4.1		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.7.0		Release Notes
OpenJDK JRE 11	11.0.21_10	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.9_11	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_392	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2397
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.29.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.17
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.73.3		Release Notes
Tomcat	9.0.82	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.231		Release Notes

Java Buildpack v4.63.0

I'm pleased to announce the release of the java-buildpack, version 4.63.0. This release includes the Java quarterly patch releases, as well updates to the following frameworks/agents:

• AppDynamics
• Azure App Insights
• Datadog
• Elastic APM
• JRebel
• Java CfEnv
• Splunk Otel
• Tomcat

We are working on adding Java 21 support by default, for the moment users can add 21 as a version line in the config file - since the binaries are already available, bundling the buildpack will then include this version.

For a more detailed look at the changes in 4.63.0, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.9.0_35116		Release Notes
Azure Application Insights Agent	3.4.17		Release Notes
CA Introscope APM Framework	23.9.1_16
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.4.0		Release Notes
Datadog APM Javaagent	1.21.0		Release Notes
Elastic APM Agent	1.43.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.14.9
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.23		Release Notes
JaCoCo Agent	0.8.11		Release Notes
Java CFEnv	3.1.2		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.4.0		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.6.0		Release Notes
OpenJDK JRE 11	11.0.21_10	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.9_11	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_392	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2388
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.29.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.17
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.73.3		Release Notes
Tomcat	9.0.82	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.231		Release Notes

Java Buildpack v4.62.0

I'm pleased to announce the release of the java-buildpack, version 4.62.0. This release adds a new framework, java_cf_env which supplies the Java CfEnv library to Spring Boot 3 apps, instead of the deprecated Spring AutoReconfiguration library.

Spring Boot 2 apps will continue to receive the Spring AutoReconfiguration library for the life of Spring Boot 2.x, whereas Spring Boot 3 users will now receive Java CfEnv as an app dependency. The conditions for this are as follows:

• A Spring Boot app with version >= 3
• No Java CfEnv library already added to the app as a user-dependency

For a more detailed look at the changes in 4.62.0, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.8.0_35032		Release Notes
Azure Application Insights Agent	3.4.16		Release Notes
CA Introscope APM Framework	23.8.1_6
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.2.3		Release Notes
Datadog APM Javaagent	1.20.1		Release Notes
Elastic APM Agent	1.42.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.14.9
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.23		Release Notes
JaCoCo Agent	0.8.10		Release Notes
Java CFEnv	3.1.1		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.3.2		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.6.0		Release Notes
OpenJDK JRE 11	11.0.20_8	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.8_7	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_382	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2358
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.27.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.15
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.73.3		Release Notes
Tomcat	9.0.80	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.231		Release Notes

Java Buildpack v4.61.1

I'm pleased to announce the release of the java-buildpack, version 4.61.1. This release fixes a bug with the MariaDB JDBC Framework. The Jar name that this connector is published under has changed, and so the framework detection needs to be updated to reflect the new name. See #1027 for more details.

This release also updates the geode-store version to 1.14.9

For a more detailed look at the changes in 4.61.1, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.7.0_34957		Release Notes
Azure Application Insights Agent	3.4.16		Release Notes
CA Introscope APM Framework	23.7.1_15
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.2.3		Release Notes
Datadog APM Javaagent	1.20.0		Release Notes
Elastic APM Agent	1.42.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.14.9
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.22		Release Notes
JaCoCo Agent	0.8.10		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.3.1		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.5.0		Release Notes
OpenJDK JRE 11	11.0.20_8	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.8_7	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_382	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2358
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.27.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.15
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.73.3		Release Notes
Tomcat	9.0.80	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.230		Release Notes

Java Buildpack v4.61.0

I'm pleased to announce the release of the java-buildpack, version 4.61.0. This release includes the Java quarterly patch releases, as well updates to the following frameworks/agents:

• AppDynamics
• Azure App Insights
• Datadog
• Elastic APM
• JRebel
• New Relic
• Splunk Otel
• Takipi Agent
• Tomcat

Additional Changes:

• This release corrects the type of Takipi/Overops agent that was included with the buildpack since 4.60.0
• The Google Stackdriver Debugger has been disabled by default as announced in the previous release, the Google service is no longer available & they will no longer support the agent after August 2023. Until then, users can re-enable by forking the buildpack, however the integration will be removed completely in a future release.

For a more detailed look at the changes in 4.61.0, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.6.1_34894		Release Notes
Azure Application Insights Agent	3.4.15		Release Notes
CA Introscope APM Framework	23.6.1_5
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.2.2		Release Notes
Datadog APM Javaagent	1.18.3		Release Notes
Elastic APM Agent	1.41.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.13.7
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.22		Release Notes
JaCoCo Agent	0.8.10		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.3.1		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.5.0		Release Notes
OpenJDK JRE 11	11.0.20_8	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.8_7	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_382	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2325
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.26.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.14
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.73.3		Release Notes
Tomcat	9.0.78	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.229		Release Notes

Java Buildpack v4.60.0

I'm pleased to announce the release of the java-buildpack, version 4.60.0. This release includes updates to dependency frameworks, such as:
​

• Updates JProfiler to 13.x line
• Handle Dynatrace API Token in the sanitizer thank you @rbamberger
• Add Takipi agent mandatory JVM arguments if Java is 9+ thank you @M-Tsur
• Install ruby whenever it isn't already present thank you @dsabeti
• Updates repository location for AppD
  ​

Important Deprecation Notice: Google Stackdriver Debugger

​
Due to the deprecation of the Google Stackdriver Debugger and the fact that its replacement, the snapshot-debugger will only be supported until August 31st 2023, the next release of the Java Buildpack will no longer include Google StackDriver nor its OSS replacement. Please let us know if you have concerns!
​
​
There were also dependency bumps for other libraries, including:
​

• YourKit Profiler
• Tomcat
• SpringBoot CLI
• Splunk
• SkyWalking Agent
• SeaLights Agent
• NewRelic
• JRebel Agent
• CA Wily (Introscope) framework
• Elastic Agent
• Datadog Agent
• Contrast Agent
• Azure Insights

​
​
For a more detailed look at the changes in 4.60.0, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.
​
​

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	23.6.0_34839		Release Notes
Azure Application Insights Agent	3.4.14		Release Notes
CA Introscope APM Framework	23.5.1_13
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.1.2		Release Notes
Datadog APM Javaagent	1.17.0		Release Notes
Elastic APM Agent	1.39.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.13.7
Google Stackdriver Debugger	2.32.0		Release Notes
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.22		Release Notes
JaCoCo Agent	0.8.10		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	13.0.7		ChangeLog
JRebel Agent	2023.3.0		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.4.0		Release Notes
OpenJDK JRE 11	11.0.19_7	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.7_7	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_372	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2304
SkyWalking	8.16.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.25.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.13
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Takipi Agent	4.71.0		Release Notes
Tomcat	9.0.76	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2023.5.226		Release Notes

Java Buildpack v4.59.0

I'm pleased to announce the release of the java-buildpack, version 4.59.0. This release includes updates to dependency frameworks, such as:

• Updates Azure Application Insights agent from 2.x to 3.x (thanks to @mayrstefan )
• Updates the Contrast Security agent from 4.x to 5.x (thanks to @tylernhoward )

There were also dependency bumps for other libraries, including:

• Elastic APM
• JaCoCo
• New Relic
• JRebel
• Splunk
• YourKit

For a more detailed look at the changes in 4.59.0, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	22.9.2_34409		Release Notes
Azure Application Insights Agent	3.4.13		Release Notes
CA Introscope APM Framework	23.3.0_4
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	5.0.2		Release Notes
Datadog APM Javaagent	1.14.0		Release Notes
Elastic APM Agent	1.38.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.13.7
Google Stackdriver Debugger	2.32.0		Release Notes
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.22		Release Notes
JaCoCo Agent	0.8.10		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	12.0.4		ChangeLog
JRebel Agent	2023.2.1		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.2.0		Release Notes
OpenJDK JRE 11	11.0.19_7	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.7_7	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_372	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2285
SkyWalking	8.9.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.24.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.12
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Tomcat	9.0.75	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2022.9.183		Release Notes

Java Buildpack v4.58

I'm pleased to announce the release of the java-buildpack, version 4.58. It primarily includes new OpenJDK versions, which are based on the Oracle Java Quarterly Updates for April 2023.

The release also includes:

• Buildpack-specific location for Ruby install (thanks @brayanhenao)
• Updated MariaDB JDBC Connector to 2.7.9

For a more detailed look at the changes in 4.58, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	22.9.2_34409		Release Notes
Azure Application Insights Agent	2.6.4		Release Notes
CA Introscope APM Framework	23.3.0_4
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	4.13.1		Release Notes
Datadog APM Javaagent	1.12.0		Release Notes
Elastic APM Agent	1.37.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.13.7
Google Stackdriver Debugger	2.32.0		Release Notes
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.22		Release Notes
JaCoCo Agent	0.8.9		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	12.0.4		ChangeLog
JRebel Agent	2023.2.0		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.9		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.1.0		Release Notes
OpenJDK JRE 11	11.0.19_7	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.7_7	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_372	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2258
SkyWalking	8.9.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.23.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.11
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Tomcat	9.0.74	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2022.9.182		Release Notes

Java Buildpack v4.57

I'm pleased to announce the release of the java-buildpack, version 4.57. This release fixes a bug with the Container Security Provider library, in which a race condition could result in mismatched private-key and certificate pairs when Diego rotated these credentials for the container. See this issue for more details.

This release also contains the following:

• The Azul Zing JRE contained a bug when generating the Java Opts, fixed with #1008 (thanks to @schelini)
• Update to the geode_store dependency (thanks to @BenjaminPerryRoss)

For a more detailed look at the changes in 4.57, please take a look at the commit log. The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.

Dependency	Version	CVEs	Release Notes
AppDynamics Agent	22.9.2_34409		Release Notes
Azure Application Insights Agent	2.6.4		Release Notes
CA Introscope APM Framework	23.3.0_4
Client Certificate Mapper	1.11.0_RELEASE	Included inline above	Included inline above
Container Security Provider	1.20.0_RELEASE	Included inline above	Included inline above
Contrast Security Agent	4.13.1		Release Notes
Datadog APM Javaagent	1.11.0		Release Notes
Elastic APM Agent	1.37.0		Release Notes
Gemalto Luna Security Provider	7.4.0		Release Notes
Geode Tomcat Session Store	1.13.7
Google Stackdriver Debugger	2.32.0		Release Notes
Google Stackdriver Profiler	0.1.0		Release Notes
Groovy	2.5.22		Release Notes
JaCoCo Agent	0.8.9		Release Notes
Java Memory Assistant Agent	0.5.0
Java Memory Assistant Clean Up	0.1.0
JProfiler Profiler	12.0.4		ChangeLog
JRebel Agent	2023.2.0		ChangeLog
jvmkill Agent	1.17.0_RELEASE	Included inline above	Included inline above
MariaDB JDBC Driver	2.7.2		Release Notes
Memory Calculator	3.13.0_RELEASE	Included inline above	Included inline above
Metric Writer	3.5.0_RELEASE	Included inline above	Included inline above
New Relic Agent	8.0.1		Release Notes
OpenJDK JRE 11	11.0.18_10	Risk Matrix	Release Notes
OpenJDK JRE 17	17.0.6_10	Risk Matrix	Release Notes
OpenJDK JRE 8	1.8.0_362	Risk Matrix	Release Notes
PostgreSQL JDBC Driver	42.6.0		ChangeLog
Redis Session Store	1.3.6_RELEASE	Included inline above	Included inline above
Riverbed Appinternals Agent	11.8.5_BL527
SeaLights Agent	4.0.2242
SkyWalking	8.9.0		ChangeLog
Splunk OpenTelemetry Java Agent	1.22.0		Release Notes
Spring Auto-reconfiguration	2.12.0_RELEASE	Included inline above	Included inline above
Spring Boot CLI	2.7.10
Spring Boot Container Customizer	2.6.0_RELEASE	Included inline above	Included inline above
Tomcat	9.0.73	Security	ChangeLog
Tomcat Access Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Lifecycle Support	3.4.0_RELEASE	Included inline above	Included inline above
Tomcat Logging Support	3.4.0_RELEASE	Included inline above	Included inline above
YourKit Profiler	2022.9.182		Release Notes