Hi Chris, Wrt. 29979a390f7915a46b9c7f18b6ff7576f3828039 you reference end-of-life of jruby/jessie, but triage jruby/stretch. jruby was in dsa-needed.txt before the LTS switch (and I had moved it to dla-needed.txt). It's not present in security-support-ended.deb9. I let you revert if you agree :) Cheers! Sylvain