Issue with 13.0.2 release (was: [Updates Communication] 13.0.2 security patches pushed)

[Langer, Christoph]

Hi Rob,

first of all, thanks for pushing the security patches to 13.0.2 and setting the tags.

I have, however, found a little issue. The tag 13.0.2-ga points to this change: http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/7b8ce94cc932

If you look at the repository tree, you'll see however that this change is below the merge of this branch and another line in jdk13u which contains the last 6 public pushes:

8233223: Add Amazon Root CA certificates8 weeks ago, by rhalade - http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/459a2f735b99 
8234245: sun/security/lib/cacerts/VerifyCACerts.java fails due to wrong checksum2 months ago, by jiefu - http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/b2305a0a3146 
8233219: NMT output on AIX misses some categories2 months ago, by mbaesken - http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/0919082b7634 
8232019: Add LuxTrust certificate updates to the existing root program2 months ago, by rhalade - http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/e69aa0686696 
8234107: Several AWT modal dialog tests failing on Linux after JDK-82319912 months ago, by neugens - http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/486735e93d55 
8231991: Mouse wheel change focus on awt/swing windows - http://hg.openjdk.java.net/jdk-updates/jdk13u/rev/743b29c2372f 

So, these 6 changesets are not contained in 13.0.2-ga!

Looking at the corresponding JBS items, you'll find resolved backports of these for 13.0.2 and 13u-cpu. I think since we see 13.0.2 here, those should be under the 13.0.2-ga tag.

For the LuxTrust and Amazon Root CA changes, there have been separate pushes in your internal repository as well which are in 13.0.2-ga. And I believe 8234245 was contained in your internal 8233223 push. So, effectively 13.0.2 OpenJDK is missing these items:
8233219: NMT output on AIX misses some categories
8234107: Several AWT modal dialog tests failing on Linux after JDK-8231991
8231991: Mouse wheel change focus on awt/swing windows

I don't know whether we should move the 13.0.2-ga tag to the merge commit or just leave it as is, given the importance of JDK13 and the priority of these fixes. But in any case, this shouldn't happen again with 14.0.1 and later...

Best regards
Christoph

> -----Original Message-----
> From: jdk-updates-dev <jdk-updates-dev-bounces at openjdk.java.net> On
> Behalf Of Rob McKenna
> Sent: Donnerstag, 16. Januar 2020 16:18
> To: Severin Gehwolf <sgehwolf at redhat.com>
> Cc: jdk-updates-dev at openjdk.java.net
> Subject: Re: [Updates Communication] 13.0.2 security patches pushed
> 
> Just pushed - apologies for the delay.
> 
>     -Rob
> 
> On 15/01/20 18:06, Severin Gehwolf wrote:
> > On Wed, 2020-01-15 at 16:05 +0000, Rob McKenna wrote:
> > > 13.0.2 patches have been pushed to:
> > >
> > > http://hg.openjdk.java.net/jdk-updates/jdk13u/
> >
> > Thanks, Rob! Is there going to be a jdk-13.0.2-ga tag?
> >
> > Cheers,
> > Severin
> >