Skip to content

Latest Azul Zulu candidates for LTS Java versions are missing on macOS arm64 #175

Closed

Description

@eed3si9n

This is the Zulu counterpart to #170.

$ sdk list java | rg zulu
 Zulu           |     | 27.0.0.0+35        | 27.0.0.0+35-zulu
                |     | 27.0.0.0-fx+35     | 27.0.0.0-fx+35-zulu
                |     | 27.0.0.0-crac+35   | 27.0.0.0-crac+35-zulu
                |     | 26.0.2.1+1         | 26.0.2.1+1-zulu
                |     | 26.0.2.0-fx        | 26.0.2.0-fx-zulu
                |     | 25.0.4.1+1         | 25.0.4.1+1-zulu
                |     | 25.0.4.0-fx        | 25.0.4.0-fx-zulu
                |   + | 25                 | 25-zulu
                |     | 21.0.12.1+1        | 21.0.12.1+1-zulu
                |     | 21.0.12.0-fx       | 21.0.12.0-fx-zulu
                |   + | 21                 | 21-zulu
                |     | 17.0.20.1+1        | 17.0.20.1+1-zulu
                |     | 17.0.20.0-fx       | 17.0.20.0-fx-zulu
                |     | 11.0.32.1+1        | 11.0.32.1+1-zulu
                |     | 11.0.32.0-fx       | 11.0.32.0-fx-zulu
                |     | 8.0.504.0+1        | 8.0.504.0+1-zulu
                |     | 8.0.502.0-fx       | 8.0.502.0-fx-zulu

Unless I'm mistaken, this is still showing the vulnerable version. Unlike Temurin that's taking time to release, Zulu has managed to release on October 21st (https://docs.azul.com/core/release/october-2026-respin/release-notes.html#), and the binaries have been available to setup-java.

Note

foojay also returns the old JDK:

$ curl -s "https://api.foojay.io/disco/v3.0/packages?version=8&distribution=zulu&os=macos&architecture=aarch64&package_type=jdk&archive_type=tar.gz&latest=available" \
    | jq -r '.result[] | "\(.java_version)  \(.filename)"'
8.0.504+1  zulu8.96.0.205-ca-fx-jdk8.0.504-macosx_aarch64.tar.gz
8.0.504+1  zulu8.96.0.205-ca-fx-jdk8.0.504-linux_aarch64.tar.gz
8.0.504+1  zulu8.96.0.205-ca-jdk8.0.504-macosx_aarch64.tar.gz
8.0.504+1  zulu8.96.0.205-ca-jdk8.0.504-linux_musl_aarch64.tar.gz
8.0.504+1  zulu8.96.0.205-ca-jdk8.0.504-linux_aarch64.tar.gz

Activity

  1. chloe41427 commented on Oct 26, 2026

    @chloe41427
    Contributor

    Thanks for the report, @eed3si9n! 🙏 You're right: Azul has published the October builds (8.0.512, 11.0.33, 17.0.21, 21.0.13, 25.0.5) but SDKMAN! doesn't have them yet.

    SDKMAN! gets its Java versions from the Foojay DISCO API, which pushes them to us. As your curl shows, Foojay hasn't picked up this Azul release yet; it still tops out at the previous builds on every platform, not just macOS arm64. This is the same root cause as #170, not a problem on our side.

    Once Foojay picks up the new builds, they'll come through to SDKMAN! automatically. If you'd like to give them a nudge, it's worth raising at https://github.com/foojayio/discoapi. We'll keep this open until the new versions show up. 🦀

  2. eed3si9n commented on Oct 26, 2026

    @eed3si9n
    Author

    I've pinged folks on Foojay Slack:

    Disco scans for Zulu around every 4 hours in a non release week, if it founds new pkgs, they will be pushed to sdkman. The api itself syncs with the disco database on a specific interval (3 h afaik) and then the pkgs will be available. We first created the builds for our customers which have highest priority and the last thing that will be done is creating the free builds. These have been published yesterday as far as I know and disco doesn't scan for new pkgs over the weekend because usually there are no new pkgs on the weekend. Except this time where we had to do over hours to fix everything asap. The new pkgs have aöready been picked up and will appear soon in disco api.

    So I guess it will be fixed soon.

  3. marc0der commented on Oct 26, 2026

    @marc0der
    Member

    Thanks @eed3si9n, let's keep this open until the new versions flow through. Also tagging @HanSolo so he is aware of this issue.

  4. eed3si9n commented on Oct 27, 2026

    @eed3si9n
    Author

    Foojay is now updated for non-FX:

    $ curl -s "https://api.foojay.io/disco/v3.0/packages?version=8&distribution=zulu&os=mac&architecture=aarch64&package_type=jdk&archive_type=tar.gz&latest=available" \
        | jq -r '.result[] | "\(.java_version)  \(.filename)"'
    8.0.512+8  zulu8.98.0.107-ca-jdk8.0.512-linux_aarch64.tar.gz
    8.0.512+8  zulu8.98.0.107-ca-jdk8.0.512-linux_musl_aarch64.tar.gz
    8.0.512+8  zulu8.98.0.107-ca-jdk8.0.512-macosx_aarch64.tar.gz
    8.0.504+1  zulu8.96.0.205-ca-fx-jdk8.0.504-macosx_aarch64.tar.gz
    8.0.504+1  zulu8.96.0.205-ca-fx-jdk8.0.504-linux_aarch64.tar.gz

    but $ sdk list java | rg zulu still missing 8.0.512.

  5. chloe41427 commented on Oct 27, 2026

    @chloe41427
    Contributor

    Thanks for checking, @eed3si9n!

    Confirmed: Foojay has the October Zulu builds, but most haven't reached SDKMAN yet. Only Zulu 25.0.5 came through; 8.0.512, 11.0.33, 17.0.21, 21.0.13 and 27.0.1 are still missing on all platforms. Liberica is affected the same way (#178), so this looks like one problem in the Foojay → SDKMAN handoff rather than anything Zulu-specific.

    We're working through it directly with @HanSolo and will update here once the builds show up in sdk list java. Keeping this open until then.

  6. eed3si9n commented on Oct 27, 2026

    @eed3si9n
    Author

    Looks like it's updated. Thanks!

    $ sdk list java | rg zulu
     Zulu           |     | 27.0.1.0+9         | 27.0.1.0+9-zulu
                    |     | 27.0.0.0-fx+35     | 27.0.0.0-fx+35-zulu
                    |     | 27.0.0.0-crac+35   | 27.0.0.0-crac+35-zulu
                    |     | 26.0.2.1+1         | 26.0.2.1+1-zulu
                    |     | 26.0.2.0-fx        | 26.0.2.0-fx-zulu
                    |   * | 25.0.5.0+8         | 25.0.5.0+8-zulu
                    |     | 25.0.4.1-crac+1    | 25.0.4.1-crac+1-zulu
                    |     | 25.0.4.1-fx+1      | 25.0.4.1-fx+1-zulu
                    |   + | 25                 | 25-zulu
                    |   * | 21.0.13.0+9        | 21.0.13.0+9-zulu
                    |     | 21.0.12.1-crac+1   | 21.0.12.1-crac+1-zulu
                    |     | 21.0.12.1-fx+1     | 21.0.12.1-fx+1-zulu
                    |   + | 21.0.8             | 21.0.8-zulu
                    |   + | 21                 | 21-zulu
                    |   * | 17.0.21.0+9        | 17.0.21.0+9-zulu
                    |     | 17.0.20.1-fx+1     | 17.0.20.1-fx+1-zulu
                    |     | 17.0.20.1-crac+1   | 17.0.20.1-crac+1-zulu
                    |   + | 17.0.12            | 17.0.12-zulu
                    |   * | 11.0.33.0+9        | 11.0.33.0+9-zulu
                    |     | 11.0.32.1-fx+1     | 11.0.32.1-fx+1-zulu
                    |   + | 11.0.19            | 11.0.19-zulu
                    |   + | 9.0.7              | 9.0.7-zulu
                    | > * | 8.0.512.0+8        | 8.0.512.0+8-zulu
                    |     | 8.0.504.0-fx+1     | 8.0.504.0-fx+1-zulu
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions