When using java web-start I download and host http://download.java.net/media/jogl/builds/archive/jsr-231-1.1.0/webstart/jogl.jnlp along with all the jars it references just to make sure it can’t change on me. I noticed that it is pointing at http://download.java.net/media/gluegen/webstart/gluegen-rt.jnlp which appears to be getting regular updates. My feeling is that a released version of something like JOGL should not be pointing at a support library that keeps changing.
It changes often? Hmm, I thought GlueGen was pretty solid now, having been used to generate the Java->C that JOGL/JOAL relies so heavily on.
But JOGL itself changes quite often too; every now and then, somebody here finds something which gets fixed and is visible only in the nightlies. JOGL releases are every few months, but bugs are fixed almost weekly.
The GlueGen run-time evolves as needed to support things like the JNLPAppletLauncher (which was the last time it changed). We are pretty careful to maintain backward compatibility and not break anything. You’re right, in theory it shouldn’t be changing. If you’re that concerned about it then I’m sorry, but you’ll have to clone it to your web server as well.
I have been cloning everything including gluegen since before 1.0.0 was released. That’s how I noticed that the 1.0.0 jnlp was pointing at the latest build of gluegen. I work in an FDA regulated shop and people can be pretty stringent around here. I only mention this as a suggestion to you when moving forward. Great job so far Ken.