jdk: 21.0.7+6 -> 21.0.8+9

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from passthru.updateScript.

meta.description for jdk is: Open-source Java Development Kit

meta.homepage for jdk is: https://openjdk.java.net/

Updates performed

• Ran passthru.UpdateScript

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 21.0.8+9 with grep in /nix/store/yr2pgw63g26jr7w304a9d0mbrxqvk5jq-openjdk-21.0.8+9
• found 21.0.8+9 in filename of file in /nix/store/yr2pgw63g26jr7w304a9d0mbrxqvk5jq-openjdk-21.0.8+9

---

Rebuild report (if merged into master) (click to expand)

1455 total rebuild path(s)

1454 package rebuild(s)

First fifty rebuilds by attrpath

DisnixWebService
HentaiAtHome
MIDIVisualizer
R
adapta-gtk-theme
adl
advi
agi
aider-chat
aider-chat-full
aider-chat-with-bedrock
aider-chat-with-browser
aider-chat-with-help
aider-chat-with-playwright
alan
alchemy
alda
alloy
alloy5
alloy6
allure
almanah
alpaca
am2rlauncher
amidst
ammonite
ammonite_2_12
ammonite_2_13
ammonite_3_3
android-backup-extractor
android-studio-tools
androidenv.androidPkgs.ndk-bundle
androidenv.test-suite
angryipscanner
ani-cli
anilibria-winmaclinux
anime-downloader
animeko
anki
antlr
antlr2
antlr3
antlr3_4
antlr3_5
antlr4
antlr4_10
antlr4_11
antlr4_12
antlr4_13

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/yr2pgw63g26jr7w304a9d0mbrxqvk5jq-openjdk-21.0.8+9 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A jdk https://github.com/r-ryantm/nixpkgs/archive/56463934a63a0b5ecb7d19470f719eaf8b3bba41.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/56463934a63a0b5ecb7d19470f719eaf8b3bba41#jdk

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/yr2pgw63g26jr7w304a9d0mbrxqvk5jq-openjdk-21.0.8+9
ls -la /nix/store/yr2pgw63g26jr7w304a9d0mbrxqvk5jq-openjdk-21.0.8+9/bin

---

Pre-merge build results

NixPkgs review skipped

---

Maintainer pings

cc @edwtjo @Infinidoge @chayleaf @FliegendeWurst @Infinidoge @tomodachi94 for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

---

Add a 👍 reaction to pull requests you find important.

[msgilligan]

@NixOS/java can somebody rebase this so nixpkgs-review has less work to do?

[deftdawg]

FYI: This PR fixes 3 highs (CVE-2025-30749, CVE-2025-50106, CVE-2025-50059) and a medium CVE (CVE-2025-30754) relating to 21.0.7.

[nixpkgs-ci]

Successfully created backport PR for staging-25.05:

• [Backport staging-25.05] jdk: 21.0.7+6 -> 21.0.8+9 #435652