Having had our application stop working when customers installed the 7u45 update, we\'re wondering what more we can do in the future to be ready for these updates up-front a
According to this post on the jdk7u-dev mailing list, the OpenJDK bug system may provide a subset of the answer.
The mailing list post says that bugs with the CPU-critical-request label are under consideration for inclusion in the next CPU and bugs with the CPU-critical-approved label have been approved for inclusion in the next CPU. However in practice, it seems that they're using more-specific labels. For the 7u51 update planned for January 2014, the labels appear to be CPU14_01-critical-request and CPU14_01-critical-approved.
You can browse the full set of labels to make your own educated guesses about labels for subsequent CPUs. You can also see bugs whose "fix version" is 7u51.
The Java Platform Group, Product Management blog looks to be another avenue for partial information. In this comment to the "Updated Security Baseline (7u45) impacts Java 7u40 and before with High Security settings" entry, Erik Costlow of Oracle says:
One of the reasons we created this blog is that it gives us a way of providing as much information as we can, even more than it already done on the various OpenJDK mailing lists.
There are some changes that we can't provide advance notice about, and my hope is to keep that to a minimum. For other changes, not only are we posting about them here, I am actually going out into other projects and not only telling them, but (as appropriate) making contributions. See https://issues.apache.org/bugzilla/show_bug.cgi?id=55542 for an example.
The Java Compatibility and Performance Program is dead, according to my Oracle account manager. Access to an analogous program for CPUs is tightly controlled (even within Oracle) due to the risk of vulnerabilities being reverse-engineered. (I am not a member and do not plan to pursue it further.) OpenJDK is Oracle's preferred method of compatibility testing, even though it is known not to be bit-for-bit identical to what will be in the next CPU.
Oracle also refers us to the Security Track at JavaOne 2013, in particular the "One Year of Security Enhancements in the JRE" talk, whose slides are available online. Those slides, in turn, say that the blog mentioned above will give "as much advanced notice as possible".
Totally partial answer : 7u60 Build b01 is now available at https://jdk7.java.net/download.html.
Netbeans 7.4 was just released last night. And one of the new features is Java 8 preview capability. Although this might not help you through each release, at least it could help you get ready for Java 8.
https://netbeans.org/community/releases/74/
I noticed that Rory O'Donnell was the one posting release info to all the mailing lists, and sent him an email, and got on an unofficial maling list with announcements of new releases.
Not the "official" answer, I guess, but it might work for you as well.