From ea64374617dc97f214061cf7b4ce591432153af2 Mon Sep 17 00:00:00 2001 From: s-stumbo Date: Wed, 4 Mar 2026 12:14:59 -0500 Subject: [PATCH 1/4] Clarify sources for Java libraries Signed-off-by: s-stumbo --- content/chainguard/libraries/java/overview.md | 22 ++++++++++--------- 1 file changed, 12 insertions(+), 10 deletions(-) diff --git a/content/chainguard/libraries/java/overview.md b/content/chainguard/libraries/java/overview.md index 26ca90de3c..8aa8bc413f 100644 --- a/content/chainguard/libraries/java/overview.md +++ b/content/chainguard/libraries/java/overview.md @@ -28,16 +28,18 @@ Repository](https://central.sonatype.com/). It has been in operation for nearly 20 years and hosts artifacts of all releases of most open source projects in the Java community. It is the default repository in all commonly used build tools from the Java community including [Apache Maven](https://maven.apache.org/), -[Gradle](https://gradle.org/), and others and uses the Maven repository format. -Chainguard Libraries for Java covers all open source artifacts from Maven -Central. - -Chainguard Libraries for Java also builds binaries for many other open source -projects available in other repositories or on code hosting platforms like -GitHub. Examples include Google, Oracle, JetBrains, CERN, Apache, and many -others. Any request for a library or library version missing in Chainguard -Libraries automatically triggers a process to provision the artifacts from -relevant sources if available. +[Gradle](https://gradle.org/), and others, and uses the Maven repository format. +Chainguard Libraries for Java covers a broad and growing set of artifacts from +Maven Central. + +While Maven Central is the primary upstream and reference repository, Chainguard +Libraries for Java also builds binaries for open source projects available in +other repositories and code hosting platforms like GitHub. This covers libraries +not found on Maven Central, sourced from Google, Oracle, JetBrains, CERN, +Apache, Confluent, Gradle plugins, and more. Note that coverage is not +exhaustive for any single repository; the index continues to grow, and any +request for a missing library or version automatically triggers a process to +provision the artifacts from relevant sources if available. You can use Chainguard Libraries for Java alongside third-party software repositories to create a single source of truth with your repository manager From 55b6559c5d7814696eb997cad2144108f141e49e Mon Sep 17 00:00:00 2001 From: s-stumbo Date: Wed, 4 Mar 2026 12:47:41 -0500 Subject: [PATCH 2/4] apply feedback Signed-off-by: s-stumbo --- content/chainguard/libraries/java/overview.md | 22 ++++++++++++------- 1 file changed, 14 insertions(+), 8 deletions(-) diff --git a/content/chainguard/libraries/java/overview.md b/content/chainguard/libraries/java/overview.md index 8aa8bc413f..f7889c2f0f 100644 --- a/content/chainguard/libraries/java/overview.md +++ b/content/chainguard/libraries/java/overview.md @@ -32,14 +32,20 @@ from the Java community including [Apache Maven](https://maven.apache.org/), Chainguard Libraries for Java covers a broad and growing set of artifacts from Maven Central. -While Maven Central is the primary upstream and reference repository, Chainguard -Libraries for Java also builds binaries for open source projects available in -other repositories and code hosting platforms like GitHub. This covers libraries -not found on Maven Central, sourced from Google, Oracle, JetBrains, CERN, -Apache, Confluent, Gradle plugins, and more. Note that coverage is not -exhaustive for any single repository; the index continues to grow, and any -request for a missing library or version automatically triggers a process to -provision the artifacts from relevant sources if available. +While Maven Central is the primary reference repository, Chainguard Libraries +for Java also builds binaries for open source projects available in other +repositories like the Google or Confluent repositories. This covers libraries +not found on Maven Central, sourced from +[Google](https://maven.google.com/web/index.html), +[Oracle](https://maven.oracle.com), +[JetBrains](https://www.jetbrains.com/intellij-repository/releases), +[CERN](https://gitlab.cern.ch/), +[Confluent](https://packages.confluent.io/maven/), [Gradle Plugin +Portal](https://plugins.gradle.org/m2/), and other public artifact repositories. +Note that coverage is not exhaustive for any single repository; the index +continues to grow, and any request for a missing library or version +automatically triggers a process to provision the artifacts from relevant +sources if available. You can use Chainguard Libraries for Java alongside third-party software repositories to create a single source of truth with your repository manager From e7b0f22a897f4174511b5ce78728bdddff092997 Mon Sep 17 00:00:00 2001 From: s-stumbo Date: Wed, 4 Mar 2026 13:36:33 -0500 Subject: [PATCH 3/4] apply feedback Signed-off-by: s-stumbo --- content/chainguard/libraries/java/overview.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/content/chainguard/libraries/java/overview.md b/content/chainguard/libraries/java/overview.md index f7889c2f0f..5a646fa579 100644 --- a/content/chainguard/libraries/java/overview.md +++ b/content/chainguard/libraries/java/overview.md @@ -37,11 +37,10 @@ for Java also builds binaries for open source projects available in other repositories like the Google or Confluent repositories. This covers libraries not found on Maven Central, sourced from [Google](https://maven.google.com/web/index.html), -[Oracle](https://maven.oracle.com), +[Oracle](https://www.oracle.com/webfolder/application/maven/index.html), [JetBrains](https://www.jetbrains.com/intellij-repository/releases), [CERN](https://gitlab.cern.ch/), -[Confluent](https://packages.confluent.io/maven/), [Gradle Plugin -Portal](https://plugins.gradle.org/m2/), and other public artifact repositories. +[Confluent](https://packages.confluent.io/maven/), [Gradle](https://plugins.gradle.org/m2/), and other public artifact repositories. Note that coverage is not exhaustive for any single repository; the index continues to grow, and any request for a missing library or version automatically triggers a process to provision the artifacts from relevant From cd8e74d24b8848a07aea5aac8c988df2a12ecb85 Mon Sep 17 00:00:00 2001 From: s-stumbo Date: Wed, 4 Mar 2026 13:39:43 -0500 Subject: [PATCH 4/4] apply feedback Signed-off-by: s-stumbo --- content/chainguard/libraries/java/overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/chainguard/libraries/java/overview.md b/content/chainguard/libraries/java/overview.md index 5a646fa579..864ba08f4a 100644 --- a/content/chainguard/libraries/java/overview.md +++ b/content/chainguard/libraries/java/overview.md @@ -39,7 +39,7 @@ not found on Maven Central, sourced from [Google](https://maven.google.com/web/index.html), [Oracle](https://www.oracle.com/webfolder/application/maven/index.html), [JetBrains](https://www.jetbrains.com/intellij-repository/releases), -[CERN](https://gitlab.cern.ch/), +CERN, [Confluent](https://packages.confluent.io/maven/), [Gradle](https://plugins.gradle.org/m2/), and other public artifact repositories. Note that coverage is not exhaustive for any single repository; the index continues to grow, and any request for a missing library or version