Compatibility

The supported Kotlin, Gradle, JDK, and framework matrix for the Repost Kotlin client, plus the shared security baseline.

AxisSupported
KotlinLanguage/API 2.1 (emitted). Compiler baseline 2.1.21, current 2.4.0.
GradleWrapper 8.12.1 (minimum); also tested on 8.14.5 and 9.6.0. Kotlin 2.4.0 pairs with Gradle 9.5.0.
JDK11, 17, 21, 25 (Java 11 bytecode; build with JDK 21).
FrameworksSpring Boot 4.0.7/4.1.0, Jakarta CDI 4.0.1, Ktor 3.5.1, Vert.x 4.5.29/5.1.4.
PlatformServer-side JVM. No Android: the client carries a publish credential.

Support status and end-of-life follow the upstream Kotlin, JDK, framework, and Gradle schedules; the pinned lines live in sdk/jvm/compatibility-matrix.toml in the release.

Security posture

The Java SDK documents the shared baseline in full:

  • Proxy, TLS, and mTLS via HttpTransportOptions (explicit proxy with credentials, a borrowed SSLContext for mutual TLS, allowlisted TLS 1.2/1.3 and ciphers, redirects disabled). See Configuration.
  • Redaction. The SDK's own diagnostics, observer events, telemetry, exception messages, and model toString() are credential- and payload-free. The SDK does not scrub PII you place inside an event payload: that data is the event you publish and is sent to Repost as-is.
  • Native image. One framework-neutral-core GraalVM native smoke (25.0.3) is validated; the framework modules are not native-certified.
  • FIPS. This release is not FIPS-certified. Using it in a FIPS deployment requires your own certified provider and JDK.

Continue