Foojay Podcast #63: How do we keep our Java applications up to date and secure?
December 16, 2024Last month, I published a Foojay article about the risks in systems that are stuck on old or outdated Java versions and got a lot of feedback from developers. Most of them want to move on but get stuck on management decisions, outdated production environments, or one of the many other reasons that keep systems stuck on old Java versions and dependencies.
Do you want to bring your system from Java 8 to 23? Did you know that Java 17 already has 13 security releases? And that you can use tools like OpenRewrite to help you update your code?
Video
Podcast (audio only)
Guests
- Gerrit Grunwald: https://www.linkedin.com/in/gerritgrunwald/
- Jonathan Schneider: https://www.linkedin.com/in/jonkschneider/
- Martijn Dashorst: https://www.linkedin.com/in/dashorst/
- Carl Wanting: https://www.linkedin.com/in/carl-wanting-638943/
- Charl Fasching: https://www.linkedin.com/in/charl-fasching-77843288/
- Johan Janssen: https://www.linkedin.com/in/johanjanssen2001/
Content
00:00 Introduction of the topic and guests
01:35 Gerrit Grunwald about CVE fixes in Java updates
04:58 LTS (Long Term Support) versus STS (Short Term Support)
9:45 Jonathan Schneider about the goal of OpenRewrite
12:15 Upgrade all at once, or step by step?
14:03 Who creates the recipes?
15:08 What Moderne is offering on top of OpenRewrite
17:29 How to use OpenRewrite in your IDE
18:32 Companies maintaining recipies for their products
20:05 Jonathan's view on the importance of upgrades
26:56 Other use cases for OpenRewrite
29:03 Martijn Dashorst: Updating legacy projects
33:12 Carl Wanting and Charl Fasching: Migrating projects
39:43 Johan Janssen: Java evolutions and upgrading
42:51 Outro