feat: upgrade to Java 21

Dockerfile

@@ -1,4 +1,4 @@
-FROM eclipse-temurin:17.0.13_11-jre-focal
+FROM eclipse-temurin:21.0.11_10-jre-noble
 
 ARG jar
 

build.gradle

@@ -33,10 +33,10 @@ allprojects {
     }
     java {
         toolchain {
-            languageVersion.set(JavaLanguageVersion.of(17))
+            languageVersion.set(JavaLanguageVersion.of(21))
         }
-        sourceCompatibility = JavaVersion.VERSION_17
-        targetCompatibility = JavaVersion.VERSION_17
+        sourceCompatibility = JavaVersion.VERSION_21
+        targetCompatibility = JavaVersion.VERSION_21
     }
 
     tasks.withType(JavaCompile).configureEach {

iexec-sms-library/build.gradle

@@ -13,8 +13,8 @@ dependencies {
 }
 
 java {
-    sourceCompatibility = JavaVersion.VERSION_17
-    targetCompatibility = JavaVersion.VERSION_17
+    sourceCompatibility = JavaVersion.VERSION_21
+    targetCompatibility = JavaVersion.VERSION_21
     withJavadocJar()
     withSourcesJar()
 }

src/main/java/com/iexec/sms/tee/session/TeeSessionService.java

@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2025 IEXEC BLOCKCHAIN TECH
+ * Copyright 2020-2026 IEXEC BLOCKCHAIN TECH
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -112,7 +112,7 @@ public TeeServicesProperties resolveTeeServiceProperties(final String version) {
     }
 
     private String createSessionId(final String taskId) {
-        final String randomString = RandomStringUtils.randomAlphanumeric(10);
+        final String randomString = RandomStringUtils.secure().nextAlphanumeric(10);
         return String.format("%s0000%s", randomString, taskId);
     }
 

src/test/java/com/iexec/sms/tee/session/scone/SconeSessionMakerServiceTests.java

@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2025 IEXEC BLOCKCHAIN TECH
+ * Copyright 2020-2026 IEXEC BLOCKCHAIN TECH
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -38,6 +38,8 @@
 import org.yaml.snakeyaml.Yaml;
 
 import java.net.MalformedURLException;
+import java.net.URI;
+import java.net.URISyntaxException;
 import java.net.URL;
 import java.util.List;
 import java.util.Map;
@@ -57,9 +59,9 @@ class SconeSessionMakerServiceTests {
 
     static {
         try {
-            MAA_URL_OUT_OF_SERVICE = new URL("https://broken.maa.attestation.service");
-            MAA_URL = new URL("https://maa.attestation.service");
-        } catch (MalformedURLException e) {
+            MAA_URL_OUT_OF_SERVICE = new URI("https://broken.maa.attestation.service").toURL();
+            MAA_URL = new URI("https://maa.attestation.service").toURL();
+        } catch (URISyntaxException | MalformedURLException e) {
             throw new RuntimeException(e);
         }
     }

src/test/java/com/iexec/sms/tee/session/scone/SconeSessionSecurityConfigTests.java

@@ -1,5 +1,5 @@
 /*
- * Copyright 2025 IEXEC BLOCKCHAIN TECH
+ * Copyright 2025-2026 IEXEC BLOCKCHAIN TECH
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -24,6 +24,8 @@
 import org.junit.jupiter.api.Test;
 
 import java.net.MalformedURLException;
+import java.net.URI;
+import java.net.URISyntaxException;
 import java.net.URL;
 import java.util.List;
 import java.util.Set;
@@ -39,8 +41,8 @@ class SconeSessionSecurityConfigTests {
 
     static {
         try {
-            MAA_URL = new URL("https://maa.attestation.service");
-        } catch (MalformedURLException e) {
+            MAA_URL = new URI("https://maa.attestation.service").toURL();
+        } catch (URISyntaxException | MalformedURLException e) {
             throw new RuntimeException(e);
         }
     }