In a perfect world, keeping a tech stack current is as simple as bumping a version number in a pom.xml or build.gradle file. You run a clean build, and suddenly, the latest fixes are integrated.
But for those of us building mission-critical desktop and embedded applications, “just upgrading” to the latest major release isn’t always feasible. When your application is built on a stable Long Term Support (LTS) foundation, you need that environment to remain predictable. You want the stability of your current version, but you absolutely need the security fixes that are discovered in the newer branches.
This is where the “Art of the Backport” comes in, and it’s a significant part of the heavy lifting we do at Gluon.
Security is a Moving Target
When a security vulnerability is identified and patched in the mainline OpenJFX code, that fix doesn’t automatically apply to older versions. As the toolkit evolves, the internal architecture shifts. A patch that works seamlessly in the latest release might rely on logic or APIs that simply didn’t exist two years ago.
Backporting is surgical work. It requires:
- Isolating the fix: Separating the essential security patch from new features or unrelated code changes.
- Adapting the logic: Re-engineering that patch so it fits perfectly into the older “DNA” of an LTS release without breaking existing behavior.
- Comprehensive Validation: Ensuring that the fix doesn’t introduce regressions in the stable environment your business depends on.
This work requires a deep, nuanced familiarity with the JavaFX codebase. The kind of insight gained from years of co-leading the OpenJFX project and maintaining its core day in and day out.
The Engineering Behind Every Build
Beyond the code itself, there is a massive infrastructure requirement. To provide the community with free, reliable builds, we maintain an extensive CI/CD pipeline that handles:
- Compilation for Windows, macOS, and Linux.
- Specialized support for ARM.
- Rigorous automated testing across a wide variety of hardware configurations.
We manage this complexity so your team doesn’t have to.
Why Your Support is Critical
Gluon provides these builds to the community for free because we want JavaFX to remain the premier choice for Java UI development. However, software doesn’t stay secure on its own. Without constant maintenance and the backporting of vital patches, a stable version eventually suffers from security erosion, becoming increasingly vulnerable as new threats emerge.
This is the most important work we do. And it is funded entirely by our subscribers.
When you join our Supporter (€1,200) or Premium (€5,000) tiers, you aren’t just buying a support contract. You are ensuring that the “security engine” of JavaFX remains funded. You are making it possible for us to continue the work of backporting patches and generating the builds that keep your applications safe.
Invest in Your Foundation
If your company’s success is built on JavaFX, joining our LTS program is the most direct way to protect that investment. It’s the right thing to do for the open-source community, and the most responsible choice for your own software’s longevity.