[vitormattos]

Summary

• Resolve the installed Java release directory (rather than its parent) when java_path has been cleared by the Behat per-scenario reset.
• Keep the existing SHA-512 signature verification and the reset behavior unchanged.
• Cover missing AppConfig for x86_64/aarch64 and Linux/Alpine, missing releases, verified installations, tampered binaries, and missing files.
• Align existing integration fixtures with InstallService::JAVA_URL_PATH_NAME instead of the obsolete hard-coded JRE version.

Rationale

Each Behat scenario calls libresign:developer:reset --all, which deletes java_path. SetupInstallPathResolver::resolveJava() previously selected the .../java parent without this config, whereas the signed file hashes are relative to .../java/jdk-<version>-jre. A valid installed Java release could therefore fail integrity verification and trigger unnecessary re-download/extraction.

Validation

All 21 GitHub Actions workflows for head dcd41271c14abe377185ee4848bd15cdc1ba4e43 completed successfully, including:

• Targeted regression covered by PHPUnit in SQLite, MySQL, MariaDB and PostgreSQL.
• Behat in SQLite, MySQL, MariaDB and PostgreSQL.
• Playwright, PHP lint, PHP-CS-Fixer, static analysis and CodeQL.
• REUSE compliance, conventional commits and DCO.
• All three commits cryptographically signed and verified.

An isolated synthetic reproduction demonstrated that the old resolver rejected a valid installed release after clearing java_path, while the corrected path verifies valid content and still rejects tampered or missing files.

Scope

No changes to libresign:developer:reset, scenario isolation, database configuration, or CI database versions.

Backports

Automated backports could not apply directly because stable releases use the older SignSetupService::getInstallPath() implementation. Adapted backports:

• [stable35] fix(setup): reuse verified Java after config reset #9380 (stable35)
• [stable34] fix(setup): reuse verified Java after config reset #9381 (stable34)
• [stable33] fix(setup): reuse verified Java after config reset #9382 (stable33)

Merged into main on November 7, 2026.

[vitormattos]

/backport to stable35

[vitormattos]

/backport to stable34

[vitormattos]

/backport to stable33

[backportbot-libresign]

The backport to stable33 failed. Please do this backport manually.

# Switch to the target branch and update it
git checkout stable33
git pull origin stable33

# Create the new backport branch
git checkout -b backport/9379/stable33

# Cherry pick the change from the commit sha1 of the change against the default branch
# This might cause conflicts, resolve them
git cherry-pick 2a0708a4 6686a74e dcd41271

# Push the cherry pick commit to the remote repository and open a pull request
git push origin backport/9379/stable33

Error: Failed to check for changes with origin/stable33: No changes found in backport branch

---

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.

[backportbot-libresign]

The backport to stable34 failed. Please do this backport manually.

# Switch to the target branch and update it
git checkout stable34
git pull origin stable34

# Create the new backport branch
git checkout -b backport/9379/stable34

# Cherry pick the change from the commit sha1 of the change against the default branch
# This might cause conflicts, resolve them
git cherry-pick 2a0708a4 6686a74e dcd41271

# Push the cherry pick commit to the remote repository and open a pull request
git push origin backport/9379/stable34

Error: Failed to check for changes with origin/stable34: No changes found in backport branch

---

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.

[backportbot-libresign]

The backport to stable35 failed. Please do this backport manually.

# Switch to the target branch and update it
git checkout stable35
git pull origin stable35

# Create the new backport branch
git checkout -b backport/9379/stable35

# Cherry pick the change from the commit sha1 of the change against the default branch
# This might cause conflicts, resolve them
git cherry-pick 2a0708a4 6686a74e dcd41271

# Push the cherry pick commit to the remote repository and open a pull request
git push origin backport/9379/stable35

Error: Failed to check for changes with origin/stable35: No changes found in backport branch

---

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.