RELEASE NOTES: JDK 28

Changed `HttpCookie` to Accept Cookies With Invalid `Expires` Attribute As Session Cookies

java.net.HttpCookie will ignore the value of the Expires attribute of a cookie, if the attribute value cannot be parsed into a valid date. Such cookies do not expire till the end of the session. This new behaviour matches the Expires attribute specification of RFC-6265.

Previously, the failure to parse the value of the Expires attribute would have resulted in the cookie being discarded.

Specification of `sun.net.httpserver.maxReqTime` and `sun.net.httpserver.maxRspTime` System Properties Corrected to State Their Values are in Seconds

The specification of the sun.net.httpserver.maxReqTime and sun.net.httpserver.maxRspTime system properties, which are used to configure the HTTP server in the jdk.httpserver module, has been corrected to state that their values are in seconds. This change updates the specification to match the long standing behaviour in the implementation.

java.sql.Date and java.sql.Timestamp Preserve BC Years in java.time Conversions

The [java.sql.Date.toLocalDate()] and [java.sql.Timestamp.toLocalDateTime()] conversions now preserve BC years correctly. Previously, if the underlying SQL date or timestamp contained a BC year, these conversions would incorrectly return a result containing an AD year. For example, a java.sql.Date representing January 1, 2 BC would be converted to a java.time.LocalDate of 0002-01-01. After this change, that same value is now correctly converted to -0001-01-01.

Applications that convert BC java.sql.Date or java.sql.Timestamp values will now observe the corrected year in the resulting java.time value. Conversions of AD values will remain unchanged.

CachedRowSet Warns Once On Max Rows

The JDK implementation for [javax.sql.CachedRowSet.populate(ResultSet)] now reports at most a single warning when the maximum rows (configured with [javax.sql.RowSet.setMaxRows(int)]) is exceeded. Previously, a new warning was chained for each additional row past the maximum. The behavior of [javax.sql.CachedRowSet.populate(ResultSet, int)] remains unchanged, as it correctly reported a single warning.

The JDK implementation for [javax.sql.CachedRowSet.getRowSetWarnings()] has been updated so that the root warning contains a message. Previously, the root warning returned by this method had an empty message. Additionally, the method now correctly returns null when there are no warnings present in the CachedRowSet.

java -XshowSettings Exits Normally When Used Without a Java Application

The java -XshowSettings option now exits with status 0 when used without a Java application. After displaying the requested settings, the launcher no longer prints the general usage information.

LuxTrust Global Root CA removed

The following root certificate has been removed from the cacerts keystore: ``` + alias name "luxtrustglobalrootca [jdk]" Distinguished Name: CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU

```

ListFormat Single Quote Handling Fixed

The JDK reference implementation for [java.text.ListFormat] is no longer affected by [java.text.MessageFormat] single quote escaping semantics. For example, previously, a list pattern such as " '{0}', {1} " may have incorrectly formatted List.of("bar", "foo") as: " {0}, bar ". ListFormat is now updated to always treat single quotes as literal characters when read from a pattern.

This change is observable for ListFormat patterns that contain single quotes. As a result, it primarily affects application-supplied custom patterns that contain them.

Custom ListFormat Patterns Are Validated More Strictly

[java.text.ListFormat.getInstance(String[])] now validates custom list format patterns more strictly. Only the exact placeholders "{0}", "{1}", and "{2}" are accepted, and "{2}" is accepted only in the three-element pattern. Patterns with duplicate placeholders or curly braces outside valid placeholders now cause an [IllegalArgumentException] to be thrown.

This change affects only application-supplied custom patterns passed to [ListFormat.getInstance(String[])]. Locale-derived ListFormat instances are not affected.

GZIPInputStream Restores Pre-JDK 23 Read-Ahead Behavior

To determine whether additional GZIP members follow the current member, java.util.zip.GZIPInputStream checks for another member after reading the current member's trailer.

In Java releases prior to JDK 23, [GZIPInputStream] would call InputStream.available() on the underlying stream before attempting to read the next member header. JDK 23 changed this behavior JDK-7036144 to skip the available() call and instead attempt the read directly.

Because this change introduced compatibility issues for some applications, GZIPInputStream has been restored to its pre-JDK 23 behavior. It once again calls [InputStream.available()] before attempting to read the next member header.

A new system property, jdk.util.gzip.tryReadAheadAfterTrailer, has been added. Setting this property to true restores the JDK 23 behavior of attempting to read the next member header without first calling InputStream.available(). This property is intended for applications that depend on the JDK 23 behavior.

Capture Named Group information in TLSHandshakeEvent

The jdk.TLSHandshakeEvent JFR event now records the named group that is negotiated in a TLS handshake. A new field named namedGroup has been added to the event.

Significant performance gains in X25519 key agreement and Ed25519 signature algorithms

The underlying Curve25519 operations have been provided intrinsics in this release which has resulted in noticeable performance improvements for the X25519 key agreement algorithm and the Ed25519 signature algorithm as follows:

1. x86-64 architecture

2. X25519 Key generation: +19%

3. X25519 Decapsulation: +19%

4. X25519 Encapsulation: +19%

5. Ed25519 Key generation: +20%

6. Ed25519 Signing: +19%

7. Ed25519 Verification: +16%

8. AArch64 architecture

9. X25519 Key generation: +10%

10. X25519 Decapsulation: +9%

11. X25519 Encapsulation: +9%

12. Ed25519 Key generation: +15%

13. Ed25519 Signing: +12%

14. Ed25519 Verification: +12%

Significant performance gains in X25519 key agreement and Ed25519 signature algorithms

The underlying Curve25519 operations have been provided intrinsics in this release which has resulted in noticeable performance improvements for the X25519 key agreement algorithm and the Ed25519 signature algorithm as follows:

1. x86-64 architecture

2. X25519 Key generation: +19%

3. X25519 Decapsulation: +19%

4. X25519 Encapsulation: +19%

5. Ed25519 Key generation: +20%

6. Ed25519 Signing: +19%

7. Ed25519 Verification: +16%

8. AArch64 architecture

9. X25519 Key generation: +10%

10. X25519 Decapsulation: +9%

11. X25519 Encapsulation: +9%

12. Ed25519 Key generation: +15%

13. Ed25519 Signing: +12%

14. Ed25519 Verification: +12%