FELIX-6759 - Java 25 LTS support

.github/workflows/maven-ci.yml

@@ -11,8 +11,11 @@ on:
       - 'log/**'
       - 'webconsole/**'
       - 'framework/**'
+      - 'gogo/**'
+      - 'framework.tck/**'
+      - 'main/**'
   pull_request:
-    branches: [ "master" ]
+    branches: [ "master", "feature/**", "maintenance/**" ]
     paths:
       - 'scr/**'
       - 'http/**'
@@ -22,6 +25,15 @@ on:
       - 'log/**'
       - 'framework/**'
       - 'gogo/**'
+      - 'framework.tck/**'
+      - 'main/**'
+
+# Cancel superseded runs when a branch is pushed again. github.head_ref is only set
+# for pull_request events, so pushes to master fall back to the unique run_id and are
+# never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 
 permissions: {}
 
@@ -31,7 +43,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        java: [17,21,23]
+        java: [17,21,23,25]
     steps:
     - uses: actions/checkout@v6
     - name: Set up JDK ${{ matrix.java }}
@@ -63,9 +75,11 @@ jobs:
             - 'log/**'
           framework:
             - 'framework/**'
+            - 'framework.tck/**'
           gogo:
             - 'gogo/**'
-
+          main:
+            - 'main/**'
     - name: Felix SCR
       if: steps.changes.outputs.scr == 'true'
       run: mvn -B -V -Dstyle.color=always --file scr/pom.xml clean verify
@@ -86,10 +100,17 @@ jobs:
       run: mvn -B -V -Dstyle.color=always --file webconsole/pom.xml clean install verify
     - name: Felix Framework
       if: steps.changes.outputs.framework == 'true'
-      run: mvn -B -V -Dstyle.color=always --file framework/pom.xml clean verify
+      # install, not verify: the TCK below is a separate Maven invocation and resolves
+      # the framework from the repository, so without installing it would silently test
+      # whatever org.apache.felix.framework happens to be published rather than the
+      # build under test.
+      run: mvn -B -V -Dstyle.color=always --file framework/pom.xml clean install
     - name: OSGi-TCK Framework
       if: steps.changes.outputs.framework == 'true'
       run: mvn -B -V -Dstyle.color=always --file framework.tck/pom.xml clean verify
+    - name: Felix Main
+      if: steps.changes.outputs.main == 'true'
+      run: mvn -B -V -Dstyle.color=always --file main/pom.xml clean verify
     - name: Felix Gogo Shell
       if: steps.changes.outputs.gogo == 'true'
       run: mvn -B -V -Dstyle.color=always --file gogo/pom.xml clean verify

.gitignore

@@ -18,3 +18,11 @@ dependency-reduced-pom.xml
 /.metadata/
 /workspace/
 .vscode
+
+# Generated by the main and main.distribution builds. Note that
+# main.distribution/conf is tracked and must not be ignored.
+main/bundle/
+main/bin/
+main/conf/
+main.distribution/bundle/
+main.distribution/bin/

README.md

@@ -2,6 +2,32 @@
 
 The **Apache Felix** project is a collection of semi-related **OSGi** sub-projects that build and release individually.
 
+## Java support
+
+Sub-projects build and release individually and each declares its own minimum Java
+version, so there is no single repository-wide baseline. The CI build
+(`.github/workflows/maven-ci.yml`) compiles and tests the covered sub-projects on
+**Java 17, 21, 23 and 25**.
+
+### Security Manager
+
+The **Apache Felix Framework** no longer supports the OSGi security layer. Java SE 24
+permanently disabled the Security Manager
+([JEP 486](https://openjdk.org/jeps/486)), so permission checks can no longer be
+enforced and `System.setSecurityManager` throws. Accordingly:
+
+- Launching the framework with the `org.osgi.framework.security` property now fails
+  with a `SecurityException` rather than silently starting without the requested
+  security.
+- `Bundle.hasPermission(...)` returns `true` unless a `SecurityProvider` is installed.
+- The OSGi permission API (`AdminPermission`, `ServicePermission`, `PackagePermission`,
+  and friends) is still exported, so bundles referring to those types keep compiling
+  and resolving.
+- The `org.apache.felix.framework.security` sub-project has been removed.
+
+If you need the security layer, stay on a release that predates this change and run it
+on Java 21 or earlier.
+
 ## Felix Framework
 
 The flagship project is the **Apache Felix Framework** which implements the [**OSGi Core R7**](https://osgi.org/specification/osgi.core/7.0.0/) specification. The `/framework` directory contains the source and build tree for the **OSGi**-compliant