--- title: Highlights | daily.dev description: daily.dev is the easiest way to stay updated on the latest programming news. Get the best content from the top tech publications on any topic you want. canonical: https://daily.dev/highlights/java twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/highlights/java og:site_name: daily.dev og:title: Highlights | daily.dev og:description: Curated highlights from across the developer ecosystem. Stay on top of the most important stories, releases, and discussions. og:type: website og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- Apache Tomcat, Chrome 152 and asyncssh receive critical security patches5d ago Quarkus 3.39 adds post-quantum cryptography support to TLS registry6d ago Quarkus Flow 1.0.0 ships as lightweight embedded workflow engine with LangChain4j integration6d ago Spring Framework update fixes 91 vulnerabilities across 209,000 affected componentsAug 25 JDK 27 reaches release candidate with compact headers and post-quantum TLSAug 25 Gradle launches agentic initiative and delays Configuration Cache default to Gradle 11Aug 24 Spring AI 2.0.1 ships fixing 80+ issues from the 2.0 GA releaseAug 21 Project Valhalla value classes land in JDK 28 as preview featuresAug 20 Spring deserialization flaw lets remote attacker terminate JVM via System.exitAug 20 Log4j2 AmqpAppender disables TLS hostname verification by defaultAug 20 Spring SerializingHttpMessageConverter gets RCE patch for unsafe Java deserializationAug 20 Oracle bans AI-generated code contributions to OpenJDKAug 20 Amazon Corretto ships critical security patches for Java 8 through 26Aug 18 Floci open-source multi-cloud emulator launches as LocalStack community edition replacementAug 11 Databricks open-sources Metals v2 Java and Scala language server for large monoreposAug 11 .NET 11 Preview 7 ships IEEE 754 decimal types, NativeAOT CLI default and C# union patternsAug 11 Kotlin 2.4 ships collection literals, stable context parameters and Swift Export alphaAug 11 Oracle bans AI-generated code from OpenJDK contributions citing IP and security concernsAug 07 JetBrains confirms active exploitation of TeamCity RCE CVE-2026-63077Aug 07 Oracle backports post-quantum cryptography to all supported Java LTS releasesAug 07 Gradle 9.7.0 promotes Isolated Projects to incubating with up to 3.6x build speedupsAug 06 IntelliJ IDEA 2026.2 adds bytecode-instrumented logpoints with 30x performance gainAug 06 Attackers embed post-exploitation toolkit inside Oracle database using built-in JVMAug 05 Spring Boot 4.0 adds JSpecify nullable annotations across its entire codebaseAug 05 MCP Apps protocol lets AI chat clients render sandboxed UI from external servicesAug 05 Jakarta Agentic AI 1.0.0-M1 ships vendor-neutral agent APIs for Jakarta EEAug 05 Quarkus 3.38.1 patches HTTP authorization bypass via encoded path charactersAug 05 Quarkus patches DoS CVE-2026-16308 in emergency LTS releasesAug 05 JetBrains brings IntelliJ IDEA Java and Kotlin intelligence to VS Code via LSPAug 04 GraalVM 25.2 ships with Graal Script Agent and G1 GC on Native ImageAug 03 Embabel AI agent framework for JVM reaches 1.0 GAAug 03 ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} ```