Encourage users to move from adoptopenjdk to adoptium package repository service

[tellison]

There are still a large number of users who are pulling packages from adoptopenjdk.jfrog.io despite it being deprecated. Users should be using packages.adoptium.net to get the latest secure versions of Temurin.

A number of steps will be taken to encourage users to migrate, with increasing levels impact:

Immediate timescale:

• documentation: remove any lingering documentation that describes how to use the old location. This could include proactively looking for misleading documentation hosted elsewhere. Ensure that our documentation for using the new location is prominent and complete.
• notifications: ensure we tell people, via Slack, Twitter, website, etc. that the old location is deprecated for removal.

Within 6 - 12 weeks:

• technical nudges: work with JFrog to nudge people away from the old service location and onto the new service location, including deliberately degrading the old service. Investigate ways to provide meaningful error messages and feedback to users/tools.

Within 6 - 12 months:

• end of life: turn off the old service location so that updates no longer succeed, and force users to move to the new location.

[jerboaa]

I wonder if some third party tools still reference the old repository. Is there a way to find out?

[tellison]

I wonder if some third party tools still reference the old repository. Is there a way to find out?

Don't know. JFrog may be able to provide us with any information they collect from metadata on users.

[tellison]

Looking at references to the AdoptOpenJD repo. Most I see are Q&A fora where I don't see much value in opening up a long finished thread to update people. Maybe we could do a heads-up on stackexchange or reddit etc. but I expect that starting to fail the downloads is the only way we'll really get attention.

A couple of more permanent references:

• @gdams can you take down, or update the old Medium article recommending the AdoptOpenJDK repo?
• I think we can take down the AdoptOpenJDK blog article too.
• I spent too long looking for a way to raise a request for Broadcom to update this article - but failed.
• ...

[gdams]

Hey, yeah I'll take down my medium article

[gdams]

Also just deleted the AdoptOpenJDK blog

[gdams]

I wonder if some third party tools still reference the old repository. Is there a way to find out?

One good option would be to crawl all public GitHub repos for projects referencing adoptopenjdk.jfrog.io

[tellison]

One good option would be to crawl all public GitHub repos for projects referencing adoptopenjdk.jfrog.io

I see over 2K code references in GitHub repos, although if you filter that to repos that have at least 5 stars (trying to determine popularity as a proxy for high number of uses), then there are only 10 references. No code repos with references have more than 10 stars.

I assume there is no way to teach dependabot (or some such tool in common usage) to advise code owners that the old URL is now deprecated?