Java 25 preview 2b5e2fab76dc

Java 25 qualified preview

Native amd64/arm64 qualification passed at source 2b5e2fa.

This prerelease includes exact Docker image archives, payload SBOMs/file maps/locks, verification reports, matching source RPM bundles and project source. Component licenses remain individual. Registry signatures and provenance were verified by Actions run.

This is a runtime preview, not a declaration that the project-wide Java/Python/Node.js v1 milestone is complete.

Published image

ghcr.io/rambow-cloud/amazon-linux-distroless/java25:java25-2b5e2fab76dc

ghcr.io/rambow-cloud/amazon-linux-distroless/java25@sha256:c5ab8cec00b8a1d999e5663b26a5f11646183a1b99ea82676f1fed4a02eee51f

Rolling preview: ghcr.io/rambow-cloud/amazon-linux-distroless/java25:25-preview

Architectures: linux/amd64, linux/arm64. Cosign keyless signature and qualified-build provenance verification passed. Registry visibility at publication: public.

Certificate identity: https://github.com/rambow-cloud/amazon-linux-distroless/.github/workflows/java21-publish.yml@refs/heads/main
OIDC issuer: https://token.actions.githubusercontent.com

ALAS unfixed/language-runtime coverage remains limited; zero scanner findings is not a no-risk guarantee. Production applications require their own dependency and workload qualification.