Confirming openjdk image licensing and updates

There’s been a lot of noise in the java community about how security updates will get published.

My understanding to date is that the Community openjdk build is a standalone build with no organizational licensing requirements and as such the community will incorporate openjdk updates as they become available.

What’s the best way to get notified for updates to the community image so I can know when to incorporate security updates?