10 verified briefings on Java. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
The Java ecosystem saw a wave of updates, including progress on Jakarta EE 12 and new releases for GraalVM, Gradle, and Micrometer. These changes bring stability, new features, and performance improvements for developers.
Hibernate 7.4 is now available, introducing significant quality-of-life improvements for Java developers. The update simplifies common but complex tasks, such as paginating queries with joined collections and accessing historical data for auditing. This release aims to streamline development and reduce boilerplate code for many applications.
The latest Spring Boot 4.1 release introduces built-in protection against server-side request forgery (SSRF) attacks. The update also simplifies modern API development with gRPC auto-configuration and adds support for Kotlin 2.3.
Java's next major version, JDK 27, is taking shape with key features moving closer to release. These include the new Vector API for performance, memory-saving Compact Object Headers, and making the G1 Garbage Collector the new default. The release schedule has also been finalized.
A critical remote code execution (RCE) vulnerability has been found in Apache Commons BeanUtils, a popular Java library. The flaw allows attackers to access a specific property in Java enum objects, potentially letting them run arbitrary code on affected systems, requiring immediate attention.
The Java ecosystem received several key updates. Developments include lifecycle changes for two JDK 27 proposals and point releases for major frameworks like Quarkus and Hibernate. Spring AI reached its eighth milestone, and a new JVM-native WebAssembly runtime called Endive was introduced, expanding Java's capabilities.
Java Champion Gunnar Morling shares insights on building high-performance Java applications for data engineering. He discusses experiments with durable execution engines and the development of Apache Hardwood, a new, minimal-dependency Java parser for the Apache Parquet file format, offering lessons for developers and engineering leaders.
A new Java library called TamboUI aims to improve building terminal user interfaces (TUIs). Inspired by Ratatui, it offers tools from low-level drawing to high-level components. Major projects like Maven and Spring have already adopted the library, signaling its potential significance for Java developers.
A developer of the open-source Java testing library `jqwik` intentionally added hidden instructions to sabotage projects built by AI coding agents. This real-world prompt injection attack highlights a new vulnerability in the software supply chain, affecting developers who rely on AI for coding assistance.
The Java ecosystem has seen several major updates, including the general availability of WildFly 40, Micronaut 5.0, and Apache Fory 1.0. Spring AI also reached its seventh milestone for version 2.0, alongside updates for Open Liberty, Apache Kafka, and the Maven Embedded GlassFish Plugin.