You are welcome, Kishor. Thank you very much for your excellent point. I am also aiming for Java 21 LTS, primarily because of the benefits it brings—virtual threads being a key one. However, moving to Java 21 requires upgrading to Gradle 8, which introduces a fair amount of work across our build scripts. For now, Java 17 serves as a practical and low-friction stepping stone toward 21. That said, I fully agree—Java 21 is where we ultimately need to be. I believe we can absolutely get there—with the support and shared effort of the community, it's well within reach.
Best regards, Jinwoo Hwang (he/him/his) SAS® Research and Development http://JinwooHwang.com<http://jinwoohwang.com/> From: Kishor Bachhav <[email protected]> Date: Friday, September 19, 2025 at 8:03 AM To: [email protected] <[email protected]> Subject: Re: [DISCUSS] Proposal for Apache Geode 2.0.0 – Call for Community Input and Reviewers EXTERNAL Thanks Jinwoo for the update on the Geode 2.0.0 proposal. Last 3 JAVA LTS are Java 25, 16th Sept 2025 Java 21, 19th Sept 2023 Java 17, 14th Sept 2021 I was wondering, can't we upgrade to Java 21 LTS as it has support for virtual threads. Virtual Threads can help us to achieve better concurrency. Regards Kishor On Fri, Sep 19, 2025 at 4:57 PM Jinwoo Hwang <[email protected]> wrote: > Dear Apache Geode Developer Community, > > Thank you for your continued support in delivering version 1.15.2. After a > three-year hiatus, this milestone reflects the resilience and collaboration > that define our community. Special appreciation to Niall for resolving the > SVN permission issue—the last mile to our finish line. > Now that we are almost at the finish line, let’s not slow down—let’s > accelerate. > > I would like to propose Apache Geode 2.0.0, a major modernization effort > that positions the project for long-term sustainability, stronger security, > and better developer experience. Below is a draft roadmap of proposed > upgrades—each representing a significant leap forward: > > > > *Proposed Upgrades for Apache Geode 2.0.0* > *Upgrade Java Runtime from 1.8 to 17* > > - Addresses numerous known vulnerabilities reported since 2019. > - Brings performance improvements and modern language features. > - Aligns with long-term support (LTS) standards. > > *Upgrade Spring Framework to Version 6* > > - Resolves numerous CVEs that have been reported in prior versions. > While we cannot confirm whether Apache Geode is directly affected, > upgrading is a proactive step toward minimizing exposure. > - Aligns with Java 17 and Jakarta EE 9. > - Introduces cleaner APIs and reactive programming support. > > *Upgrade Spring Security to Version 6* > > - Addresses several high-severity vulnerabilities. Again, while we > cannot confirm Geode’s exposure, upgrading ensures alignment with > current > security best practices. > - Simplifies configuration with SecurityFilterChain. > - Aligns with Jakarta EE 9 and modern security practices. > - Offers a zero-known-vulnerability baseline in current releases. > > *Migrate from Java EE to Jakarta EE 9* > > - Required for Java 17+ compatibility. > - Provides updated specifications and active community support. > > *Update Build Configuration for Java 17 Compatibility* > > - Upgrade Gradle Version 6 to 7.3.3 to Support Java 17 Tool Chain. > - Enables consistent builds across environments. > - Improves build performance and dependency resolution. > - Aligns with modern standards and mitigates known risks. > > *Remediation of any undisclosed security vulnerabilities* > > > These are not just technical upgrades—they are strategic investments in the > future of Apache Geode. They will help us stay relevant, secure, and > performant in a rapidly evolving ecosystem. > > To make this vision a reality, we need your help. This release is already > generating excitement—so much so that I’ve been personally contacted by > individuals asking how they can contribute to the Geode community. That > kind of energy is rare, and we’d be remiss not to harness it. > > We’re looking for: > > - Feedback to make this roadmap more comprehensive and aligned with > community needs. > - Volunteers to help review pull requests as we finalize these changes. > - Contributors interested in shaping the future of Apache Geode through > code, documentation, testing, and ideas. > > > Whether you’re a long-time committer or a new contributor, your > participation will be instrumental in making Apache Geode 2.0.0 a reality. > Let’s build the future of Geode, together—with clarity, purpose, and > momentum. > > Best regards, > Jinwoo Hwang (he/him/his) > > SAS® Research and Development > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NGM4YjhkNDFjYWRmNTdiZjZiOTVlNTQxYjAxMzA4YmI6Nzo4YTcwOjkzMzA5YTNlMjZlNTg0YzQ4MGYwNWU3MzQ0Mzk4MWY0ODdhYjc4OTdhZjlhZGU2ZWRmODkzYmJlMTExNjgwZjk6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C990640a4d9224c470f4c08ddf77487a6%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638938802072736642%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=BceDsM4NEUSt1CBCmuREy0%2FTJslQUrdRtqU0WDKACak%3D&reserved=0<https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NGM4YjhkNDFjYWRmNTdiZjZiOTVlNTQxYjAxMzA4YmI6Nzo4YTcwOjkzMzA5YTNlMjZlNTg0YzQ4MGYwNWU3MzQ0Mzk4MWY0ODdhYjc4OTdhZjlhZGU2ZWRmODkzYmJlMTExNjgwZjk6cDpUOk4> > -- Thanks & Regards Kishor P. Bachhav
