| Re: [adoptium-pmc] Update Eclipse Temurin Release description on GitHub repositories |
Hello dear Adoptium PMC,
Another follow up on the topic. With challenges Temurin project is facing with changing past releases’ description Eclipse Foundation is supporting change GitHub release descriptions going forward only. There is no need to change past releases’ description updates.
Best Regards,
Tanja
Hello dear Adoptium PMC,
I would like to follow up on the conversation that was initiated in the PMC meeting.
The Eclipse Foundation is concerned that the Eclipse Temurin project’s release descriptions on GitHub could be confusing for consumers.Therefore the Eclipse Foundation directs the Temurin project to change the GitHub release descriptions from Official Release of jdk-x.x.x to Official Eclipse Temurin Release of jdk-x.x.x for all future releases.
We appreciate the agreement to change GitHub release descriptions going forward, starting the upcoming release on July 16th.
Regarding past releases’ description updates, we acknowledge your concerns based on their impact on security work, such as achieving SLSA Level 3, Security Audit, and the additional step of notifying all our Eclipse Temurin users. However, there is no final decision on this matter. We understand that the project is working on enabling a GitHub immutable release feature. We will try to get a final position on this matter as soon as possible.
Best Regards,
Tanja
--
Tanja Obradović
Sr. Manager, Java Programs | Eclipse Foundation