GraalVM Community Edition Policy/EOL seem incorrect

[captn3m0]

https://endoflife.date/graalvm tracks the Community Edition. Last release on Community Edition for v17 is 17.0.9, while Oracle GraalVM is at 17.0.12 now, with security fixes. I am wondering if this line:

But starting with JDK 20 in June 2023, GraalVM follows the JDK’s six-month release cadence and only supports the latest JDK version (just as Oracle OpenJDK releases do).

is applied more on the date (starting from June 2023), rather than on specific releases. So the policy changed for all releases (including past ones?) on June 2023.

Aside: We should also track the Commercial Edition, which seems to be fixing CVEs that the Community Edition is ignoring: https://www.oracle.com/security-alerts/cpujul2024.html#AppendixJAVA

[marcwrobel]

Relates to #5125