While we are currently moving our application to use Java 17, our customers don't follow along as fast as we would like them to do. So we would at least want (to avoid the term "need") security updates on a Java 8 compatible version for at least one and a half year, two and a half more likely.

@curdreinert No worries, of course there would be fixes for security problems for the last 2.3.x version. But please understand that I can only do this on a best effort basis.

Would be interesting to know from the people who still need JDK8 support: is it only because of the security updates?