@hanger-source/agentic-olap 0.11.3 → 0.12.2

package/distribution.json

@@ -1,6 +1,6 @@
 {
-  "formatVersion": "agentic-olap-distribution/v2",
-  "version": "0.11.3",
+  "formatVersion": "agentic-olap-distribution/v3",
+  "version": "0.12.2",
   "runtime": {
     "mainClass": "com.olap.prototype.runtime.ApplicationMainKt",
     "classpath": [
@@ -81,44 +81,48 @@
         "sha256": "2acf30a070b19163d5a480eae411a281341e870020e3534c6d5d4c8472739e30"
       },
       {
-        "path": "java/lib/connector-api-v0.11.3.jar",
+        "path": "java/lib/connector-api-v0.12.2.jar",
         "sha256": "ab02b0820e88333335d9399406a95c73b9a4385030e3af7d94a62b8078dfc090"
       },
       {
-        "path": "java/lib/connector-loader-v0.11.3.jar",
+        "path": "java/lib/connector-loader-v0.12.2.jar",
         "sha256": "7f99fb4f80059e00e8e8a01a100ec129ae1b8724575b10484f1fd311e6b1ff6a"
       },
       {
-        "path": "java/lib/engine-core-v0.11.3.jar",
-        "sha256": "e029d6d7391a95e5a907fffbff25748f076bd5679e7f1aeb5cd551b728b5f41e"
+        "path": "java/lib/dsl-api-v0.12.2.jar",
+        "sha256": "a37a25246b61e91328659e7ffba8cc3ab90371f23f09984ca7b1b140b8dfb78c"
+      },
+      {
+        "path": "java/lib/engine-core-v0.12.2.jar",
+        "sha256": "120028804b6efb72df30c1b93160444b495c72df33970cc7bf4dbfaa9af13178"
       },
       {
         "path": "java/lib/error_prone_annotations-2.36.0.jar",
         "sha256": "77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5"
       },
       {
-        "path": "java/lib/execution-calcite-v0.11.3.jar",
-        "sha256": "5ed6f68d3e837876ce2e82da9c9693b83e54786907b3ee812194b715e60f1cf4"
+        "path": "java/lib/execution-calcite-v0.12.2.jar",
+        "sha256": "413207235ede215b1b4c76370e70c91c149d92fb5f2fade083ade85ec2af85b6"
       },
       {
-        "path": "java/lib/execution-catalog-v0.11.3.jar",
-        "sha256": "fecc2efd3abe6a2f09c733a9aa1a342af82e936a6fa231d85086a5d2e0a930ff"
+        "path": "java/lib/execution-catalog-v0.12.2.jar",
+        "sha256": "0aa210976a33c219821046915d225468bfcd3850ce9933a8b9c81a13be468101"
       },
       {
         "path": "java/lib/failureaccess-1.0.3.jar",
         "sha256": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
       },
       {
-        "path": "java/lib/governance-application-v0.11.3.jar",
-        "sha256": "b18b22427309c1bd80ae0585af61bb5efb4656d4f5bf18053774eb1f1c50f72d"
+        "path": "java/lib/governance-application-v0.12.2.jar",
+        "sha256": "df1d7d4d3ce99a40e66afd7e0e842fb885e320c52c3be0f2cb80bb2bffda20cf"
       },
       {
-        "path": "java/lib/governance-contracts-v0.11.3.jar",
-        "sha256": "f9b70b25f16c3453dedf2d148103e4ddd8b5ca56b86ad2674bf814d9be627c3f"
+        "path": "java/lib/governance-contracts-v0.12.2.jar",
+        "sha256": "aa5e68eb5681f6d9916aa84e2a4910a8a76c31dc1b88e4d446b153bfc1b1cd92"
       },
       {
-        "path": "java/lib/governance-management-v0.11.3.jar",
-        "sha256": "04e5c2e436e91ee2e73778c25ea99a6f485ee61785ea751bdfdc8336715eb182"
+        "path": "java/lib/governance-management-v0.12.2.jar",
+        "sha256": "b3524b2c6217b390594dfd7dbed2256efb70b387582c1cccdc20f74d144b211e"
       },
       {
         "path": "java/lib/guava-33.4.8-jre.jar",
@@ -180,6 +184,10 @@
         "path": "java/lib/joou-java-6-0.9.5.jar",
         "sha256": "17abe9a61051bcb8f591213858d5ef60eb56b0ebda00ad249672f8c4d359c13a"
       },
+      {
+        "path": "java/lib/json-io-v0.12.2.jar",
+        "sha256": "15196bd56c6d53a3e05168635c5d03d7dc276247af935dda0edef2215b2f0c1a"
+      },
       {
         "path": "java/lib/json-path-2.10.0.jar",
         "sha256": "890daa95dd3892d34d9fabc27cd5153656e6f369358625c88f4dc7b79cbd6c5a"
@@ -212,6 +220,14 @@
         "path": "java/lib/kotlin-stdlib-2.2.21.jar",
         "sha256": "6558a3d233da56a20934b32159f9db5f86ed5816ef098f78a2c223dc6abb79dd"
       },
+      {
+        "path": "java/lib/kotlinx-serialization-core-jvm-1.9.0.jar",
+        "sha256": "1f0afa172110e45a7231ef1b44ae8fd84c1ebaff96f3fc3ad68ef8c48120b59c"
+      },
+      {
+        "path": "java/lib/kotlinx-serialization-json-jvm-1.9.0.jar",
+        "sha256": "d94cc34cae39246a1af74fda63f9c4812ce12216ef641d5fa3bbbb539a6922d8"
+      },
       {
         "path": "java/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
         "sha256": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
@@ -229,12 +245,20 @@
         "sha256": "c7d22ca0298753de7a5c85edc9b926892936e978595fe44375159b8ada15fdfc"
       },
       {
-        "path": "java/lib/olap-contracts-v0.11.3.jar",
-        "sha256": "c72037f6482d2c1344fded2b8e662a4efb2c528d52c9c67796083950cd422190"
+        "path": "java/lib/olap-codec-v0.12.2.jar",
+        "sha256": "696385b741fe391252b619a748ee86dddf38defcd32a96581573ea09b71e977d"
       },
       {
-        "path": "java/lib/platform-storage-v0.11.3.jar",
-        "sha256": "d2bcfedd6e9aaf5abe5565ca3fd1a342eb9d143dc02169b5b562a9e11368b403"
+        "path": "java/lib/olap-contracts-v0.12.2.jar",
+        "sha256": "766561e42f3b4a9c66bc3137ff72daf1e531d3ba9683a09de68f4db1e0b58975"
+      },
+      {
+        "path": "java/lib/olap-protocol-v0.12.2.jar",
+        "sha256": "0ac5952c2af1f2a7abff9010314e4d33dfa3329ab63dca0813c3c8b1ee9a6891"
+      },
+      {
+        "path": "java/lib/platform-storage-v0.12.2.jar",
+        "sha256": "dce3cb819f46ea20d89a451073f60033d09669f4196dd3b365d0db793a3bffe3"
       },
       {
         "path": "java/lib/proj4j-1.2.2.jar",
@@ -245,28 +269,28 @@
         "sha256": "c5b582aa127fb62c5fc3077329d522dfb7930b4e9a625c08760b681b2ba5aab7"
       },
       {
-        "path": "java/lib/query-contracts-v0.11.3.jar",
-        "sha256": "38be79b4cdbef2769396c3458b225787fa07e589a3cac443565af1dd7b77985a"
+        "path": "java/lib/query-contracts-v0.12.2.jar",
+        "sha256": "7126734b8546fbb6a6a86005470b437a14602265e1daca2b1a1feb0f6fe4e13b"
       },
       {
-        "path": "java/lib/query-definition-v0.11.3.jar",
-        "sha256": "fd9d4229afa6afe1642d190c19376cb629e65eb51be62862b380e14ca32df397"
+        "path": "java/lib/query-definition-v0.12.2.jar",
+        "sha256": "0de8934a008d1deafef3a467f5ba6c22537a2d284723caa949b017756aced487"
       },
       {
-        "path": "java/lib/release-catalog-v0.11.3.jar",
-        "sha256": "447c53647a3ec468f1faed1dfb5ea170987d790d0ad2991a506fe35eaccbaf20"
+        "path": "java/lib/release-catalog-v0.12.2.jar",
+        "sha256": "5497199d0dad2390473867053a071c245df199a0b1d00613dcfaabb863970136"
       },
       {
-        "path": "java/lib/release-contracts-v0.11.3.jar",
-        "sha256": "4cb915ec5063cd6c8a80a3be65da626c8db7378768c84eb6deffa85942b9a12d"
+        "path": "java/lib/release-contracts-v0.12.2.jar",
+        "sha256": "6d124e65b935ab85397daacb0f04990e78577324271789bf8f88b4fb4dff4a85"
       },
       {
-        "path": "java/lib/runtime-v0.11.3.jar",
-        "sha256": "12d8eb1e057d106a4d395876013c5b59f14db9ac427c217377ee1a4e10bdf79e"
+        "path": "java/lib/runtime-v0.12.2.jar",
+        "sha256": "36526b4fc8ebf1969eed9458a4938d6f407bedcab960f38a686127660b2c2ce3"
       },
       {
-        "path": "java/lib/semantic-calcite-v0.11.3.jar",
-        "sha256": "c5857127ce1ca013c5ccf7132524993e886cb8e2450fda579a8a7ee66611148c"
+        "path": "java/lib/semantic-calcite-v0.12.2.jar",
+        "sha256": "c27e07ad332d4ceeee44872374129a9d93ed44c20417b0306d0427cdc35ba32a"
       },
       {
         "path": "java/lib/sketches-core-0.9.0.jar",
@@ -285,30 +309,213 @@
         "sha256": "29aabe951d220f03b3789332f9f455ca2eba953c91ecef8aa06f76f458cedc4e"
       },
       {
-        "path": "java/lib/warehouse-contracts-v0.11.3.jar",
-        "sha256": "473a3bcf54904ded8cefed462e74cf6c81032d0f57d63a6c7236ee25c51598c9"
+        "path": "java/lib/warehouse-contracts-v0.12.2.jar",
+        "sha256": "fe209a102d813c643322df2bbe2fa732101994a5c9e12f9139bfed49c32878b8"
       },
       {
-        "path": "java/lib/warehouse-inspection-v0.11.3.jar",
+        "path": "java/lib/warehouse-inspection-v0.12.2.jar",
         "sha256": "0d14fc4ba3b9f926c6238aa204660c00163889f9ec39b20d5b18029abdcb8697"
       },
       {
-        "path": "java/lib/warehouse-jdbc-v0.11.3.jar",
+        "path": "java/lib/warehouse-jdbc-v0.12.2.jar",
         "sha256": "d4f6aa82fa3c40766c33176b883b2eff6d467a3fa44f8c54048188bc5fc5472f"
       },
       {
-        "path": "java/lib/warehouse-onboarding-v0.11.3.jar",
-        "sha256": "d73ef17e876391f5ae2e5851e320d1490a75017c79436c2cbac6ba3edca69109"
+        "path": "java/lib/warehouse-onboarding-v0.12.2.jar",
+        "sha256": "c345fc59eb327f0ae7334bf71ee2b04dd1e2aaa9a95e8119605a42946e9a3e9a"
+      },
+      {
+        "path": "java/lib/warehouse-registry-v0.12.2.jar",
+        "sha256": "3697bb09230a5a86729d1f970b61692b9ac8601d0c34a78e1a04808316c2ec0d"
+      }
+    ]
+  },
+  "scripting": {
+    "dslApiVersion": "agentic-olap-kotlin-dsl/v1",
+    "runtime": [
+      {
+        "path": "java/lib/annotations-13.0.jar",
+        "sha256": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
+      },
+      {
+        "path": "java/lib/dsl-api-v0.12.2.jar",
+        "sha256": "a37a25246b61e91328659e7ffba8cc3ab90371f23f09984ca7b1b140b8dfb78c"
+      },
+      {
+        "path": "java/lib/execution-catalog-v0.12.2.jar",
+        "sha256": "0aa210976a33c219821046915d225468bfcd3850ce9933a8b9c81a13be468101"
+      },
+      {
+        "path": "java/lib/governance-contracts-v0.12.2.jar",
+        "sha256": "aa5e68eb5681f6d9916aa84e2a4910a8a76c31dc1b88e4d446b153bfc1b1cd92"
+      },
+      {
+        "path": "java/lib/jackson-annotations-2.18.6.jar",
+        "sha256": "face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662"
+      },
+      {
+        "path": "java/lib/jackson-core-2.18.6.jar",
+        "sha256": "e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6"
+      },
+      {
+        "path": "java/lib/jackson-databind-2.18.6.jar",
+        "sha256": "45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e"
+      },
+      {
+        "path": "java/lib/jackson-datatype-jsr310-2.18.6.jar",
+        "sha256": "d600821e90b08353425d3fa31d6a5e08f38b190be93ed284097e6fa66cac1bb4"
+      },
+      {
+        "path": "java/lib/jackson-module-kotlin-2.18.6.jar",
+        "sha256": "6206e755a76227a0f328199cd03464bb5ad151328c408c11fc39b2aad806f065"
+      },
+      {
+        "path": "java/lib/json-io-v0.12.2.jar",
+        "sha256": "15196bd56c6d53a3e05168635c5d03d7dc276247af935dda0edef2215b2f0c1a"
+      },
+      {
+        "path": "java/lib/kotlin-compiler-embeddable-2.2.21.jar",
+        "sha256": "9588fa696ac5507af764fd5660df6894185e12704ec1bc3f5cb772af4987f295"
+      },
+      {
+        "path": "java/lib/kotlin-daemon-embeddable-2.2.21.jar",
+        "sha256": "91c0673c22e44b054ae0314d323860ebe1f3aff3f0ebc74fff82c4733dde09be"
+      },
+      {
+        "path": "java/lib/kotlin-reflect-2.2.21.jar",
+        "sha256": "44380abf37d245ce5c0f294f43512d1c39a59642bfa463922c74e96877cf49f8"
+      },
+      {
+        "path": "java/lib/kotlin-script-runtime-2.2.21.jar",
+        "sha256": "2b1519b427b514d1536c1b425674b03fe914af637924028e9959c6625442df51"
+      },
+      {
+        "path": "java/lib/kotlin-scripting-common-2.2.21.jar",
+        "sha256": "414ed91c3f5e4492b23cb9537842b4651038e25dad84107939f434c2203f2a92"
+      },
+      {
+        "path": "java/lib/kotlin-scripting-compiler-embeddable-2.2.21.jar",
+        "sha256": "d934b9d0c246bc09624b7068af58ad57cef11dbe2addbc7b19d250cce42de1c9"
+      },
+      {
+        "path": "java/lib/kotlin-scripting-compiler-impl-embeddable-2.2.21.jar",
+        "sha256": "788a3060c8e7997f8ae16ba5c0280d05005af0a42029f18cb10c5625b979fac3"
+      },
+      {
+        "path": "java/lib/kotlin-scripting-jvm-2.2.21.jar",
+        "sha256": "83820c5fcc5d28f045f914ecd5900bbbcf8115b0d7007334de069fe6c70669e6"
+      },
+      {
+        "path": "java/lib/kotlin-scripting-jvm-host-2.2.21.jar",
+        "sha256": "ef72f73d752157c9a57e2a6e173a80be5304023b25caf86bd6b5b17cc5e37ada"
+      },
+      {
+        "path": "java/lib/kotlin-stdlib-2.2.21.jar",
+        "sha256": "6558a3d233da56a20934b32159f9db5f86ed5816ef098f78a2c223dc6abb79dd"
+      },
+      {
+        "path": "java/lib/kotlinx-coroutines-core-jvm-1.8.0.jar",
+        "sha256": "9860906a1937490bf5f3b06d2f0e10ef451e65b95b269f22daf68a3d1f5065c5"
+      },
+      {
+        "path": "java/lib/kotlinx-serialization-core-jvm-1.9.0.jar",
+        "sha256": "1f0afa172110e45a7231ef1b44ae8fd84c1ebaff96f3fc3ad68ef8c48120b59c"
+      },
+      {
+        "path": "java/lib/kotlinx-serialization-json-jvm-1.9.0.jar",
+        "sha256": "d94cc34cae39246a1af74fda63f9c4812ce12216ef641d5fa3bbbb539a6922d8"
+      },
+      {
+        "path": "java/lib/olap-codec-v0.12.2.jar",
+        "sha256": "696385b741fe391252b619a748ee86dddf38defcd32a96581573ea09b71e977d"
+      },
+      {
+        "path": "java/lib/olap-contracts-v0.12.2.jar",
+        "sha256": "766561e42f3b4a9c66bc3137ff72daf1e531d3ba9683a09de68f4db1e0b58975"
+      },
+      {
+        "path": "java/lib/olap-protocol-v0.12.2.jar",
+        "sha256": "0ac5952c2af1f2a7abff9010314e4d33dfa3329ab63dca0813c3c8b1ee9a6891"
+      },
+      {
+        "path": "java/lib/protobuf-java-4.33.2.jar",
+        "sha256": "c5b582aa127fb62c5fc3077329d522dfb7930b4e9a625c08760b681b2ba5aab7"
+      },
+      {
+        "path": "java/lib/query-contracts-v0.12.2.jar",
+        "sha256": "7126734b8546fbb6a6a86005470b437a14602265e1daca2b1a1feb0f6fe4e13b"
+      },
+      {
+        "path": "java/lib/release-contracts-v0.12.2.jar",
+        "sha256": "6d124e65b935ab85397daacb0f04990e78577324271789bf8f88b4fb4dff4a85"
+      },
+      {
+        "path": "java/lib/runtime-v0.12.2.jar",
+        "sha256": "36526b4fc8ebf1969eed9458a4938d6f407bedcab960f38a686127660b2c2ce3"
+      },
+      {
+        "path": "java/lib/script-runtime-v0.12.2.jar",
+        "sha256": "99d0ebf3998e801e80421cf6cb2391ba7ae25f999cc13d72e1ede9b5bff04804"
+      },
+      {
+        "path": "java/lib/slf4j-api-2.0.18.jar",
+        "sha256": "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
+      },
+      {
+        "path": "java/lib/warehouse-contracts-v0.12.2.jar",
+        "sha256": "fe209a102d813c643322df2bbe2fa732101994a5c9e12f9139bfed49c32878b8"
+      }
+    ],
+    "dsl": [
+      {
+        "path": "java/lib/annotations-13.0.jar",
+        "sha256": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
+      },
+      {
+        "path": "java/lib/dsl-api-v0.12.2.jar",
+        "sha256": "a37a25246b61e91328659e7ffba8cc3ab90371f23f09984ca7b1b140b8dfb78c"
+      },
+      {
+        "path": "java/lib/execution-catalog-v0.12.2.jar",
+        "sha256": "0aa210976a33c219821046915d225468bfcd3850ce9933a8b9c81a13be468101"
+      },
+      {
+        "path": "java/lib/governance-contracts-v0.12.2.jar",
+        "sha256": "aa5e68eb5681f6d9916aa84e2a4910a8a76c31dc1b88e4d446b153bfc1b1cd92"
+      },
+      {
+        "path": "java/lib/kotlin-reflect-2.2.21.jar",
+        "sha256": "44380abf37d245ce5c0f294f43512d1c39a59642bfa463922c74e96877cf49f8"
+      },
+      {
+        "path": "java/lib/kotlin-stdlib-2.2.21.jar",
+        "sha256": "6558a3d233da56a20934b32159f9db5f86ed5816ef098f78a2c223dc6abb79dd"
+      },
+      {
+        "path": "java/lib/olap-contracts-v0.12.2.jar",
+        "sha256": "766561e42f3b4a9c66bc3137ff72daf1e531d3ba9683a09de68f4db1e0b58975"
+      },
+      {
+        "path": "java/lib/query-contracts-v0.12.2.jar",
+        "sha256": "7126734b8546fbb6a6a86005470b437a14602265e1daca2b1a1feb0f6fe4e13b"
+      },
+      {
+        "path": "java/lib/release-contracts-v0.12.2.jar",
+        "sha256": "6d124e65b935ab85397daacb0f04990e78577324271789bf8f88b4fb4dff4a85"
+      },
+      {
+        "path": "java/lib/slf4j-api-2.0.18.jar",
+        "sha256": "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
       },
       {
-        "path": "java/lib/warehouse-registry-v0.11.3.jar",
-        "sha256": "3e4984548bb5c4075ccf63a300ac1abbf3f83fdcadc4e4806595fd28697d5ba2"
+        "path": "java/lib/warehouse-contracts-v0.12.2.jar",
+        "sha256": "fe209a102d813c643322df2bbe2fa732101994a5c9e12f9139bfed49c32878b8"
       }
     ]
   },
   "service": {
     "path": "runtime/agentic-olap-runtime",
-    "sha256": "68141b59dbdf04913afab3f06e2889b3639f105dccf7be4c0f0cf20576de01f1",
+    "sha256": "7558e022295b7c458fba53b0f2d358edf977d9dad0113c14a7c47e17e14d5ae3",
     "os": "darwin",
     "arch": "arm64"
   }

package/jre/conf/security/java.security

@@ -740,6 +740,29 @@ http.auth.digest.disabledAlgorithms = MD5, SHA-1
 # See the specification of "jdk.certpath.disabledAlgorithms" for the
 # syntax of the disabled algorithm string.
 #
+# Additional TLS-specific syntax supported by this property:
+#
+#   - TLS cipher suites can be disabled with this property using one or more
+#     "*" wildcard characters. For example, "TLS_RSA_*" disables all cipher
+#     suites that start with "TLS_RSA_". Only cipher suites starting with
+#     "TLS_" are allowed to have wildcard characters.
+#
+#   - TLS protocol specific usage constraints are supported by this property:
+#
+#     UsageConstraint:
+#         usage UsageType { UsageType }
+#
+#     UsageType:
+#         HandshakeSignature | CertificateSignature
+#
+#     HandshakeSignature restricts the use of the algorithm in TLS handshake
+#     signatures. CertificateSignature restricts the use of the algorithm in
+#     certificate signatures. An algorithm with this constraint cannot include
+#     other usage types defined in the jdk.certpath.disabledAlgorithms
+#     property. The usage type follows the keyword and more than one usage type
+#     can be specified with a whitespace delimiter.
+#     Example: "rsa_pkcs1_sha1 usage HandshakeSignature"
+#
 # Note: The algorithm restrictions do not apply to trust anchors or
 # self-signed certificates.
 #
@@ -748,10 +771,59 @@ http.auth.digest.disabledAlgorithms = MD5, SHA-1
 #
 # Example:
 #   jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048, \
-#       rsa_pkcs1_sha1, secp224r1
+#       rsa_pkcs1_sha1, secp224r1, TLS_RSA_*
 jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, DTLSv1.0, RC4, DES, \
     MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \
-    ECDH
+    ECDH, TLS_RSA_*, rsa_pkcs1_sha1 usage HandshakeSignature, \
+    ecdsa_sha1 usage HandshakeSignature, dsa_sha1 usage HandshakeSignature
+
+#
+# Algorithm restrictions for Java Crypto API services
+#
+# In some environments, certain algorithms may be undesirable for certain
+# cryptographic services. For example, "MD2" is generally no longer considered
+# to be a secure hash algorithm.  This section describes the mechanism for
+# disabling algorithms at the JCA/JCE level based on service name and algorithm
+# name.
+#
+# If a system property of the same name is also specified, it supersedes the
+# security property value defined here.
+#
+# The syntax of the disabled services string is described as follows:
+#       "DisabledService {, DisabledService}"
+#
+#   DisabledService:
+#       Service.AlgorithmName
+#
+# Service:  (one of the following, more services may be added later)
+#     Cipher | KeyStore | MessageDigest | Signature
+#
+#   AlgorithmName:
+#       (see below)
+#
+# The "AlgorithmName" is the standard algorithm name of the disabled
+# service. See the Java Security Standard Algorithm Names Specification
+# for information about Standard Algorithm Names.  Matching is
+# performed using a case-insensitive exact matching rule. For Cipher service,
+# its algorithm is the transformation string.
+#
+# Note: If the property value contains entries with invalid syntax or
+# unsupported services at the time of checking, an ExceptionInInitializerError
+# with a cause of IllegalArgumentException will be thrown.
+#
+# Note: The restriction is applied in the various getInstance(...) methods
+# of the supported Service classes, i.e. Cipher, KeyStore, MessageDigest,
+# and Signature. If the algorithm is disabled, a NoSuchAlgorithmException will
+# be thrown by the getInstance methods of Cipher, MessageDigest, and Signature
+# and a KeyStoreException by the getInstance methods of KeyStore.
+#
+# Note: This property is currently used by the JDK Reference implementation.
+# It is not guaranteed to be examined and used by other implementations.
+#
+# Example:
+#   jdk.crypto.disabledAlgorithms=Cipher.RSA/ECB/PKCS1Padding, MessageDigest.MD2
+#
+#jdk.crypto.disabledAlgorithms=
 
 #
 # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS)
@@ -1326,6 +1398,9 @@ jdk.sasl.disabledMechanisms=
 #   CAMERFIRMA_TLS : Distrust TLS Server certificates anchored by
 #   a Camerfirma root CA and issued after April 15, 2025.
 #
+#   CHUNGHWA_TLS : Distrust TLS Server certificates anchored by
+#   a Chunghwa root CA and issued after March 17, 2026.
+#
 # Leading and trailing whitespace surrounding each value are ignored.
 # Unknown values are ignored. If the property is commented out or set to the
 # empty String, no policies are enforced.
@@ -1337,7 +1412,8 @@ jdk.sasl.disabledMechanisms=
 # jdk.certpath.disabledAlgorithms; those restrictions are still enforced even
 # if this property is not enabled.
 #
-jdk.security.caDistrustPolicies=SYMANTEC_TLS,ENTRUST_TLS,CAMERFIRMA_TLS
+jdk.security.caDistrustPolicies=SYMANTEC_TLS,ENTRUST_TLS,CAMERFIRMA_TLS,\
+    CHUNGHWA_TLS
 
 #
 # FilePermission path canonicalization
@@ -1511,3 +1587,64 @@ jdk.tls.alpnCharset=ISO_8859_1
 #
 # [1] https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-sfu/bde93b0e-f3c9-4ddf-9f44-e1453be7af5a
 #jdk.security.krb5.s4u2proxy.acceptNonForwardableServiceTicket=false
+
+#
+# X.509 AuthorityInfoAccess caIssuer URI Filtering
+#
+# This property defines a whitespace-separated list of filters that
+# are applied to URIs found in the authorityInfoAccess extension in
+# X.509 certificates. Any caIssuers URIs in X.509 certificates are only
+# followed when the com.sun.security.enableAIAcaIssuers System property is
+# enabled and the filter allows the URI. By default this property imposes a
+# deny-all ruleset.  This property may be overridden by a System property
+# of the same name.
+#
+# The filters must take the form of absolute, hierarchical URIs as defined by
+# the java.net.URI class. Additionally, only the following protocols are
+# allowed as filters: http, https, ldap and ftp.
+# See RFC 5280, section 4.2.2.1 for details about the types of URIs allowed for
+# the extension and their specific requirements.
+# The filter matching rules are applied to each CA issuer URI as follows:
+# 1. The scheme must match (case-insensitive).
+# 2. A hostname or address must be specified in the filter URI.  It must match
+#    the host or address in the caIssuers URI (case-insensitive).  No name
+#    resolution is performed on hostnames to match IP addresses.
+# 3. The port number must match.  For filter and caIssuer URIs, when a port
+#    number is omitted, the well-known port for that scheme will be used in the
+#    comparison.
+# 4. For hierarchical filesystem schemes (e.g. http[s], ftp):
+#    a. The normalized path portion of the filter URI is matched in a
+#       case-sensitive manner.  If the final component of the path does not end
+#       in a slash (/), it is considered to be a file path component and must
+#       be an exact match of the caIssuer's URI file path component.  If the
+#       final filter component ends in a slash, then it must either match or be
+#       a prefix of the caIssuer's URI path component (e.g. a filter path of
+#       /ab/cd/ will match a caIssuer path of /ab/cd/, /ab/cd/ef and
+#       /ab/cd/ef/ghi).
+#    b. Query strings will be ignored in filter rules and caIssuer URIs.
+#    c. Fragments will be ignored in filter rules and caIssuer URIs.
+# 5. For ldap URIs:
+#    a. The base DN must be an exact match (case-insensitive).
+#    b. Any query string in the rule, if specified, is ignored.
+# 6. A single value "any" (case-insensitive) will create an allow-all rule.
+#
+# As an example, here is a valid filter policy consisting of two rules:
+#    com.sun.security.allowedAIALocations=http://some.company.com/cacert \
+#          ldap://ldap.company.com/dc=company,dc=com?caCertificate;binary
+com.sun.security.allowedAIALocations=
+
+#
+# Certificate Revocation List (CRL) Download Size Limitation
+#
+# This property sets a size limit for CRLs downloaded via URIs provided
+# in the CRL Distribution Points certificate extension.  This property
+# must be a numeric value that is the size in bytes of the DER-encoded CRL.
+# For protocols that can return multi-value responses, such as LDAP, the
+# size threshold is the sum of all CRLs downloaded from a single search
+# query. CRLs that exceed this length will not be processed during certificate
+# path validation. This size limit does not apply to CRLs that are imported
+# through non-network-based means. A negative value will disable this size
+# limitation. A non-numeric value will be ignored and the default size will
+# be used instead. The default size limit is 20MiB.
+# This property may be overridden by a System property of the same name.
+com.sun.security.crl.maxSize = 20971520

package/jre/legal/java.base/public_suffix.md

@@ -11,7 +11,7 @@ If you do not wish to use the Public Suffix List, you may remove the
 
 The Source Code of this file is available under the
 Mozilla Public License, v. 2.0 and is located at
-https://raw.githubusercontent.com/publicsuffix/list/1cbd6e71a9b83620b1d0b11e49d3d9ff48c27e22/public_suffix_list.dat.
+https://raw.githubusercontent.com/publicsuffix/list/823beb1425def931c8b0b170a6bc33b424c3f9b0/public_suffix_list.dat.
 If a copy of the MPL was not distributed with this file, you can obtain one
 at https://mozilla.org/MPL/2.0/.
 

package/jre/legal/java.base/zlib.md

@@ -1,9 +1,9 @@
-## zlib v1.3.1
+## zlib v1.3.2
 
 ### zlib License
 <pre>
 
-Copyright (C) 1995-2024 Jean-loup Gailly and Mark Adler
+Copyright (C) 1995-2026 Jean-loup Gailly and Mark Adler
 
 This software is provided 'as-is', without any express or implied
 warranty.  In no event will the authors be held liable for any damages

package/jre/legal/java.desktop/freetype.md

@@ -1,4 +1,4 @@
-## The FreeType Project: Freetype v2.13.3
+## The FreeType Project: Freetype v2.14.3
 
 
 ### FreeType Notice
@@ -21,25 +21,24 @@ which fits your needs best.
 ### FreeType License
 ```
 
-Copyright (C) 1996-2024 by David Turner, Robert Wilhelm, and Werner Lemberg.
-Copyright (C) 2007-2024 by Dereg Clegg and Michael Toftdal.
-Copyright (C) 1996-2024 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg.
-Copyright (C) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams, and
-Copyright (C) 2004-2024 by Masatake YAMATO and Redhat K.K.
-Copyright (C) 2007-2024 by Derek Clegg and Michael Toftdal.
-Copyright (C) 2003-2024 by Masatake YAMATO, Red Hat K.K.,
-Copyright (C) 1996-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Röttsches.
-Copyright (C) 2007-2024 by David Turner.
-Copyright (C) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti.
-Copyright (C) 2007-2024 by Rahul Bhalerao <rahul.bhalerao@redhat.com>, <b.rahul.pm@gmail.com>.
-Copyright (C) 2008-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya.
-Copyright (C) 2013-2024 by Google, Inc.
-Copyright (C) 2019-2024 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg.
-Copyright (C) 2009-2024 by Oran Agra and Mickey Gabel.
-Copyright (C) 2018-2024 by David Turner, Robert Wilhelm, Dominik Röttsches, and Werner Lemberg.
-Copyright (C) 2004-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams.
-
-
+Copyright (C) 1996-2026 by David Turner, Robert Wilhelm, and Werner Lemberg.
+Copyright (C) 2007-2026 by Dereg Clegg and Michael Toftdal.
+Copyright (C) 1996-2026 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg.
+Copyright (C) 2022-2026 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams, and
+Copyright (C) 2004-2026 by Masatake YAMATO and Redhat K.K.
+Copyright (C) 2007-2026 by Derek Clegg and Michael Toftdal.
+Copyright (C) 2003-2026 by Masatake YAMATO, Red Hat K.K.,
+Copyright (C) 1996-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Röttsches.
+Copyright (C) 2007-2026 by David Turner.
+Copyright (C) 2022-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti.
+Copyright (C) 2007-2026 by Rahul Bhalerao <rahul.bhalerao@redhat.com>, <b.rahul.pm@gmail.com>.
+Copyright (C) 2025-2026 by Behdad Esfahbod.
+Copyright (C) 2008-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya.
+Copyright (C) 2013-2026 by Google, Inc.
+Copyright (C) 2019-2026 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg.
+Copyright (C) 2009-2026 by Oran Agra and Mickey Gabel.
+Copyright (C) 2018-2026 by David Turner, Robert Wilhelm, Dominik Röttsches, and Werner Lemberg.
+Copyright (C) 2004-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams.
                     The FreeType Project LICENSE
                     ----------------------------
 
@@ -91,7 +90,7 @@ Introduction
 
    """
     Portions of this software are copyright © <year> The FreeType
-    Project (www.freetype.org).  All rights reserved.
+    Project (https://freetype.org).  All rights reserved.
    """
 
   Please replace <year> with the value from the FreeType version you
@@ -205,7 +204,8 @@ Legal Terms
 
   Our home page can be found at
 
-    https://www.freetype.org
+    https://freetype.org
+
 
 ```