RELEASE NOTES: JDK 28

Changed `HttpCookie` to Accept Cookies With Invalid `Expires` Attribute As Session Cookies

java.net.HttpCookie will ignore the value of the Expires attribute of a cookie, if the attribute value cannot be parsed into a valid date. Such cookies do not expire till the end of the session. This new behaviour matches the Expires attribute specification of RFC-6265.

Previously, the failure to parse the value of the Expires attribute would have resulted in the cookie being discarded.

Specification of `sun.net.httpserver.maxReqTime` and `sun.net.httpserver.maxRspTime` System Properties Corrected to State Their Values are in Seconds

The specification of the sun.net.httpserver.maxReqTime and sun.net.httpserver.maxRspTime system properties, which are used to configure the HTTP server in the jdk.httpserver module, has been corrected to state that their values are in seconds. This change updates the specification to match the long standing behaviour in the implementation.

java.sql.Date and java.sql.Timestamp Preserve BC Years in java.time Conversions

The [java.sql.Date.toLocalDate()] and [java.sql.Timestamp.toLocalDateTime()] conversions now preserve BC years correctly. Previously, if the underlying SQL date or timestamp contained a BC year, these conversions would incorrectly return a result containing an AD year. For example, a java.sql.Date representing January 1, 2 BC would be converted to a java.time.LocalDate of 0002-01-01. After this change, that same value is now correctly converted to -0001-01-01.

Applications that convert BC java.sql.Date or java.sql.Timestamp values will now observe the corrected year in the resulting java.time value. Conversions of AD values will remain unchanged.

LuxTrust Global Root CA removed

The following root certificate has been removed from the cacerts keystore: ``` + alias name "luxtrustglobalrootca [jdk]" Distinguished Name: CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU

```

ListFormat Single Quote Handling Fixed

The JDK reference implementation for [java.text.ListFormat] is no longer affected by [java.text.MessageFormat] single quote escaping semantics. For example, previously, a list pattern such as " '{0}', {1} " may have incorrectly formatted List.of("bar", "foo") as: " {0}, bar ". ListFormat is now updated to always treat single quotes as literal characters when read from a pattern.

This change is observable for ListFormat patterns that contain single quotes. As a result, it primarily affects application-supplied custom patterns that contain them.

Custom ListFormat Patterns Are Validated More Strictly

[java.text.ListFormat.getInstance(String[])] now validates custom list format patterns more strictly. Only the exact placeholders "{0}", "{1}", and "{2}" are accepted, and "{2}" is accepted only in the three-element pattern. Patterns with duplicate placeholders or curly braces outside valid placeholders now cause an [IllegalArgumentException] to be thrown.

This change affects only application-supplied custom patterns passed to [ListFormat.getInstance(String[])]. Locale-derived ListFormat instances are not affected.

Capture Named Group information in TLSHandshakeEvent

The jdk.TLSHandshakeEvent JFR event now records the named group that is negotiated in a TLS handshake. A new field named namedGroup has been added to the event.

Significant performance gains in X25519 key agreement and Ed25519 signature algorithms

The underlying Curve25519 operations have been provided intrinsics in this release which has resulted in noticeable performance improvements for the X25519 key agreement algorithm and the Ed25519 signature algorithm as follows:

1. x86-64 architecture

2. X25519 Key generation: +19%

3. X25519 Decapsulation: +19%

4. X25519 Encapsulation: +19%

5. Ed25519 Key generation: +20%

6. Ed25519 Signing: +19%

7. Ed25519 Verification: +16%

8. AArch64 architecture

9. X25519 Key generation: +10%

10. X25519 Decapsulation: +9%

11. X25519 Encapsulation: +9%

12. Ed25519 Key generation: +15%

13. Ed25519 Signing: +12%

14. Ed25519 Verification: +12%

Significant performance gains in X25519 key agreement and Ed25519 signature algorithms

The underlying Curve25519 operations have been provided intrinsics in this release which has resulted in noticeable performance improvements for the X25519 key agreement algorithm and the Ed25519 signature algorithm as follows:

1. x86-64 architecture

2. X25519 Key generation: +19%

3. X25519 Decapsulation: +19%

4. X25519 Encapsulation: +19%

5. Ed25519 Key generation: +20%

6. Ed25519 Signing: +19%

7. Ed25519 Verification: +16%

8. AArch64 architecture

9. X25519 Key generation: +10%

10. X25519 Decapsulation: +9%

11. X25519 Encapsulation: +9%

12. Ed25519 Key generation: +15%

13. Ed25519 Signing: +12%

14. Ed25519 Verification: +12%