Changelog
Rules and scanner history
Every report prints the rules version it used. This page records what each version changed. Current rules: 2026-09-11. Current scanner: v1.0.1.
-
Scanner v1.0.1
- Repository scans skip RuntimeClear's own files, so a folder that contains the scanner no longer reports its test fixtures as Oracle references.
- Documented the Oracle JDK detection signals observed on a real Oracle JDK 11.0.24 install (BUILD_TYPE, runtime name, implementor).
-
Rules 2026-09-11: first public rules file
- Oracle JDK 6 through 26 classified by update number against Oracle's release notes, archives, FAQ and support roadmap. Anything newer than the check date is needs review.
- Oracle JDK 21 builds through 21.0.12.1 (August 18, 2026) marked at risk; updates from the October 20, 2026 CPU marked paid license (planned).
- OpenJDK distributions (Temurin, Corretto, Zulu, Liberica, Microsoft, Red Hat, SapMachine, Semeru, GraalVM Community) marked free with vendor citations. Oracle GraalVM marked needs review.
- References in Dockerfiles, Compose and Kubernetes YAML, GitHub Actions setup-java, download scripts, SDKMAN, asdf, Gradle and Maven toolchains, plus Windows and macOS auto-updaters.
- Cost estimate from Oracle's Java SE Universal Subscription price list tiers.
-
Scanner v1.0.0
- First release of runtimeclear.sh (Linux, macOS; bash 3.2+) and runtimeclear.ps1 (Windows; PowerShell 5.1+).
- Read-only, no network connections, no root required. Writes one runtimeclear.scan/v1 JSON file per host.
- Options for repository scanning, hostname anonymization, skipping system discovery and never executing java.