Skip to content

docs: java dependency migration plan for buildpacks-ci - #599

Open
ramonskie wants to merge 1 commit into
masterfrom
docs/java-dependency-migration-plan
Open

docs: java dependency migration plan for buildpacks-ci#599
ramonskie wants to merge 1 commit into
masterfrom
docs/java-dependency-migration-plan

Conversation

@ramonskie

Copy link
Copy Markdown
Contributor

Summary

  • Replaces the outdated docs/missing-java-dependencies-analysis.md (Feb 2026) with a comprehensive docs/java-dependency-migration-plan.md
  • Covers all 47 manifest dependencies across every host (buildpacks.cloudfoundry.org, java-buildpack.cloudfoundry.org, GitHub, Maven Central, vendor CDNs)
  • Includes proposed config.yml entries for every dependency that needs automation

What's in the new document

  • Section 1 — 16 dependencies already on our S3 (no action needed)
  • Section 2 — 17 dependencies on java-buildpack.cloudfoundry.org: migration actions, frozen artifacts (no migration needed since we control that host), and EOL removals
  • Section 3 — Dependencies on GitHub / Maven Central / vendor CDNs with proposed config.yml entries
  • Section 4 — 5 removal candidates (archived, EOL, or discontinued: java-memory-assistant, java-memory-assistant-cleanup, auto-reconfiguration, spring-boot-cli, metric-writer)
  • Section 5 — Summary action table (migrate, static copy, no action, investigate, manual-only, remove)
  • Section 6 — Version drift table (dependencies lagging significantly behind upstream)
  • Section 7 — Full offline package size breakdown per dependency (~1,294 MB total), with category subtotals and removal impact analysis

Key findings

  • Offline buildpack is dominated by JREs (~618 MB, 48%), profilers/~244 MB, 19%), and APM agents (~349 MB, 27%)
  • Removing the 5 EOL dependencies only saves ~18 MB (~1.4%) — meaningful reduction requires dropping JRE versions or large profilers
  • memory-calculator 4.2.0 and container-security-provider are frozen artifacts on our controlled CDN — no migration needed, always keep

- Add docs/java-dependency-migration-plan.md — comprehensive plan covering
  all 47 manifest dependencies: migration status, config.yml proposals,
  EOL/removal recommendations, and full offline package size breakdown (~1.2 GB)
- Delete docs/missing-java-dependencies-analysis.md (superseded, dated 2026-02-13)

@kiril-keranov kiril-keranov left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, left a comment for possible obsolete version


---

#### `memory-calculator` 4.1.0 — 🔴 Stale (last release Jul 2020)

@kiril-keranov kiril-keranov Mar 31, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not quite sure why there are two versions of the memory-calculator. Seems 4.1.0 is the last officially released

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants