This week’s Java roundup for June 29th, 2026, features news highlighting: a new JEP candidate, Strict Field Initialization; point releases of GraalVM, JReleaser, RefactorFirst and Java Operator SDK; maintenance releases of GlassFish and Micronaut; the second milestone release of Grails 8.0; and the beta release of Open Liberty 26.0.0.7.<\/p>\n
OpenJDK<\/p>\n
JEP 539, Strict Field Initialization in the JVM (Preview)<\/a>, has been elevated<\/a> from its JEP Draft 8350458 to Candidate status. This JEP introduces strictly-initialized fields in the Java Virtual Machine that are required to be initialized before they are read. Therefore, default values such as 0 or null are never observed. This feature is available for use by compilers that emit class files.<\/p>\n JDK 27<\/p>\n Build 29<\/a> of the JDK 27 early-access builds<\/a> was made available this past week featuring updates<\/a> from Build 28 that include fixes for various issues<\/a>. Further details on this release may be found in the release notes<\/a>.<\/p>\n JDK 28<\/p>\n Build 5<\/a> of the JDK 28 early-access builds<\/a> was also made available this past week featuring updates<\/a> from Build 4 that include fixes for various issues<\/a>. More details on this release may be found in the release notes<\/a>.<\/p>\n GlassFish<\/p>\n The release of GlassFish<\/a> 7.1.1 delivers bug fixes, dependency upgrades and improvements such as: a streamline of the isValidAnnotation() method, defined in the WeldUtils<\/a> class, to fail-fast when there are no valid type names; and the isInterceptor() method, defined in the InjectionServicesImpl<\/a> class, is now cached to bypass the more expensive route of traversing the annotation-hierarchy on the CDI injection path on every request.<\/p>\n This release also addresses four CVEs, two of which affect GlassFish versions 8.0.1, 8.0.0, 7.1.0 and 7.0.0-7.0.25:<\/p>\n
Further details on this release may be found in the release notes<\/a>.<\/p>\n GraalVM<\/p>\n The release<\/a> of GraalVM<\/a> 25.1 ships with notable changes such as: a 3% reduction in the size of generated native images; support for using G1 GC in native images on macOS AArch64 (available only in Oracle GraalVM); and a total of 1500 libraries available in the GraalVM Reachability Metadata Repository<\/a> for use by Native Build Tools<\/a>. More details on this release may be found in the release notes<\/a> and this YouTube video<\/a>.<\/p>\n Micronaut<\/p>\n The Micronaut Foundation has released<\/a> version 5.0.3 of the Micronaut Framework<\/a> based on Micronaut Core 5.0.4<\/a>, featuring patch updates to modules: Micronaut AWS<\/a>; Micronaut Data<\/a>; Micronaut SQL Libraries<\/a>; Micronaut R2DBC<\/a>; and Micronaut Problem JSON<\/a>; Micronaut Test<\/a> and Micronaut Micrometer<\/a>. Further details on this release may be found in the release notes<\/a>.<\/p>\n Open Liberty<\/p>\n The beta release<\/a> of Open Liberty<\/a> 26.0.0.7 provides notable changes such as: support for Jakarta Data<\/a> 1.1-M3 featuring new capabilities that include stateful repositories, the new @First<\/a> annotation, and the ability to use the ability to use the Restriction<\/a> and Constraint<\/a> interfaces as parameters in the @Find<\/a> and @Delete<\/a> annotations; and the ability to disable the \/health endpoints from MicroProfile Health 4.0<\/a> when using a file-based health check mechanism.<\/p>\n JReleaser<\/p>\n The release<\/a> of JReleaser<\/a> 1.25.0 delivers bug fixes, documentation improvements, dependency upgrades and new features such as: support for multiple archive formats using jlink and native-image that can simultaneously generate ZIP and TAR files; and a change in masking secrets from all asterisks to displaying the first and last character of the secret. More details on this release may be found in the release notes<\/a>.<\/p>\n Grails<\/p>\n The second milestone release of Apache Grails<\/a> 8.0.0 ships with bug fixes, documentation improvements, dependency upgrades and notable changes such as: ensure that a Grails transformation fails (via the GlobalGrailsClassInjectorTransformation<\/a> class) if an incorrect directory is passed into a grails-core<\/a> build; and improved virtual thread cleanup and isolation of the thread-bound framework state when using instances of the Java ThreadLocal<\/a> class. Further details on this release may be found in the release notes<\/a>.<\/p>\n RefactorFirst<\/p>\n Jim Bethancourt<\/a>, Principal Software Consultant at Improving<\/a>, has released version 0.0.0 of RefactorFirst<\/a>, a utility that prioritizes the parts of an application that should be refactored. This release provides: an improvement calculating removal of a class relationship; the addition of object-oriented disharmony detectors as referenced from the book, “Object-Oriented Metrics in Practice<\/a>;” and a migration from D3<\/a> to Vizdom<\/a> for improved data visualization. More details on this release may be found in the release notes<\/a>.<\/p>\n Java Operator SDK<\/p>\n The release<\/a> of Java Operator SDK<\/a> 5.4.0, a Kubernetes operator framework for Java, delivers notable changes such as: support for a shard selector, a Kubernetes-style label selector that is applied in addition to a normal label selector, to run multiple replicas; a new defaultFilters parameter added to the @ControllerConfiguration<\/a> annotation to provide an option to disable default filter events; and new getSecondaryResource() and getSecondaryResourcesAsStream() methods, added to the Context<\/a> interface, to look up a single secondary resource directly by name. Further details on this release may be found in the release notes<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"This week’s Java roundup for June 29th, 2026, features news highlighting: a new JEP candidate, Strict Field Initialization;…\n","protected":false},"author":2,"featured_media":785051,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[11777,49,48,4113,155370,219282,39658,35858,277649,277650,155369,265562,202430,155366,175712,175714,202428,61],"class_list":["post-785050","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-architecture-design","tag-ca","tag-canada","tag-development","tag-glassfish","tag-graalvm","tag-grails","tag-java","tag-java-news-roundup-jun29-2026","tag-java-operator-sdk","tag-jdk-27","tag-jdk-28","tag-jreleaser","tag-micronaut","tag-open-jdk","tag-open-liberty","tag-refactorfirst","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/785050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=785050"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/785050\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/785051"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=785050"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=785050"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=785050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n\tCVE-2026-2586<\/a>, a Remote Code Execution (RCE) vulnerability that allows an attacker with access to the Administration Console to send malicious crafted requests to execute arbitrary operating system commands with the privileges of the application service user.
\n\tCVE-2026-2587<\/a>, also an RCE vulnerability in the server-side template rendering mechanism that allows an attacker to compromise the underlying host and enable capabilities such as reading\/modifying data, executing arbitrary commands, persistence, and lateral movement.
<\/p>\n