Java SE 17 general information and potential issues

This rule contains links to information on the changes in Java SE 17, as well as the previous non-LTS (long term support) Java versions that have been released since Java SE 11. For each Java version, links are included to the release notes as well as to specific changes that may cause issues, but that aren't detected by the WebSphere Application Migration Toolkit. Additional details can also be found in the Oracle JDK Migration Guide.

An automated fix exists address some of these issues in the application. These fixes can be applied by copying the custom configuration to your application build file.

Java SE 17:

• Release Notes
• Deprecation of 3DES and RC4 in Kerberos
• URL FTP Protocol Handler: IPv4 Address Validation in Passive Mode
• Collections.unmodifiable* Methods Are Idempotent for Their Corresponding Collection
• ISO 639 Language Codes for Hebrew/Indonesian/Yiddish
• Enable XML Signature Secure Validation Mode by Default
• Disable SHA-1 XML signatures
• JEP 306: Restore Always-Strict Floating-Point Semantics

Java SE 16:

• Release Notes
• Deprecated Tracing Flags are Obsolete and Must be Replaced with Unified Logging Equivalents
• Parts of the Signal-Chaining API are Deprecated
• Support Supplementary Characters in String Case Insensitive Operations
• Proxy Classes Are Not Open for Reflective Access
• NullPointerException Not Thrown When First Argument to Path.of or Paths.get is null
• Argument Index of Zero or Unrepresentable by int Throws IllegalFormatException
• Removal of java.awt.PeerFixer
• Removed Root Certificates with 1024-bit Keys
• Disable TLS 1.0 and 1.1
• Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values
• Upgraded the Default PKCS12 Encryption and MAC Algorithms

Java SE 15:

• Release Notes
• Specialized Implementations of TreeMap Methods
• Case Insensitive Matching Doesn't Work Correctly for Some Character Classes
• Support Monetary Grouping Separator in DecimalFormat/DecimalFormatSymbols
• Support for canonicalize in krb5.conf
• Disabled Biased-locking and Deprecated Biased-locking Flags

Java SE 14:

• Release Notes
• Accounting Currency Format Support
• Remove the concurrent mark and sew (CMS) Garbage collector
• Thread.countStackFrames Changed to Unconditionally Throw UnsupportedOperationException
• MethodTypefromMethodDescriptorString Requires "getClassLoader" Permission
• New Checks on Trust Anchor Certificates
• Removed SSLv2Hello and SSLv3 From Default Enabled TLS Protocols
• Default ErrorListener No Longer Reports Warnings and Errors to the Console

Java SE 13:

• Release Notes
• Removal of art.tookit system property
• Duplicated RSA Services No Longer Supported by SunJSSE Provider
• Improved Handling of the "Class-Path" JAR Manifest Attribute
• Change to Default Implementation of SocketImpl Methods supportedOptions, getOption, and setOption
• JEP 353 Reimplement the Legacy Socket API

Java SE 12:

• Release Notes
• Better HTTP Redirection Support
• Disabled TLS anon and NULL Cipher suites
• Disabled All DES TLS Cipher Suites