MCP-441 Use generic Java version

[sophio-japharidze-sonarsource]

No description provided.

[sonar-review-alpha]

Summary

Updates the Dockerfile's base Java image from a specific patch version (21.0.10_7) to the generic Java 21 tag, allowing automatic updates to the latest Java 21 patch releases.

This single-line change makes the container image more flexible by automatically pulling newer Java 21 patches and security updates, rather than being locked to a specific point-in-time version.

What reviewers should know

What changed:

• Dockerfile line 1: Java base image tag simplified from eclipse-temurin:21.0.10_7-jdk-alpine to eclipse-temurin:21-jdk-alpine

Key implications for review:

• The image will now auto-update with Java security patches instead of requiring manual Dockerfile updates
• Build reproducibility changes slightly — builds will use the latest 21.x patch rather than a fixed version
• Verify this aligns with your release/deployment strategy (e.g., whether CI/CD pins image digests separately)

Start reading: Just the Dockerfile change — it's a one-liner.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[hashicorp-vault-sonar-prod]

MCP-441

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonar-review-alpha]

LGTM! ✅

Clean, intentional change with no correctness or security issues.

The builder stage is ephemeral — only the jlink-optimized JDK output is copied into the final alpine:3.23.4 image. Switching to the floating eclipse-temurin:21-jdk-alpine tag means builds will pick up the latest Java 21 patch automatically, which is consistent with how the Gradle toolchain is configured (JavaLanguageVersion.of(21), major-version only). The shipped runtime image is unaffected.

🗣️ Give feedback