--- title: Java 26 ships, Spring Boot 4.1 and Spring AI 2.0 hit... description: Java 26 shipped with 10 JEPs including G1 GC throughput improvements (5–15%), HTTP/3 support in HttpClient, AOT object caching for ZGC, and the start of... canonical: https://daily.dev/posts/java-26-ships-spring-boot-4-1-and-spring-ai-2-0-hit-milestone-3-yf580beef twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Java 26 ships, Spring Boot 4.1 and Spring AI 2.0 hit milestone 3 | daily.dev og:description: Java 26 shipped with 10 JEPs including G1 GC throughput improvements (5–15%), HTTP/3 support in HttpClient, AOT object caching for ZGC, and the start of... og:url: https://daily.dev/posts/java-26-ships-spring-boot-4-1-and-spring-ai-2-0-hit-milestone-3-yf580beef og:image: https://api.daily.dev/og/posts/yF580BeEF.png og:image:alt: Java 26 ships, Spring Boot 4.1 and Spring AI 2.0 hit milestone 3 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Java 26 ships, Spring Boot 4.1 and Spring AI 2.0 hit milestone 3 **[Java Digest](https://daily.dev/sources/java_digest)** · 5 min read · 3 upvotes · 0 comments ## Summary Java 26 shipped with 10 JEPs including G1 GC throughput improvements (5–15%), HTTP/3 support in HttpClient, AOT object caching for ZGC, and the start of 'integrity by default' restricting final field mutation. Spring's third milestone wave landed simultaneously: Boot 4.1.0-M3, Security 7.1.0-M3 (patching CVE-2026-22732), AI 2.0.0-M3 with McpClientCustomizer, and Spring Data 2026.0.0-M2. JetBrains launched Koog for Java, an idiomatic JVM API for building AI agents with support for OpenAI, Anthropic, Google, and others, plus fault-tolerant persistence and OpenTelemetry observability. JavaOne 2026 saw Oracle announce the Java Verified Portfolio and Project Detroit, which proposes in-process calls to JavaScript and Python libraries via V8 and CPython. Notable extras include Project Leyden AOT benchmarks cutting startup time in half, a Spring Boot Actuator breach case study, Hibernate Search 8.3 GA, Spring gRPC 1.0 GA, and Micronaut joining the Commonhaus Foundation. ## Content **TLDR:** Java 26 dropped this week with 10 JEPs, headlined by G1 GC throughput gains, HTTP/3 support, AOT caching for any GC, and the first step toward making `final` actually mean final. Spring's third milestone wave landed simultaneously, covering Boot 4.1, Security 7.1, AI 2.0, and more. JetBrains shipped Koog for Java, bringing its AI agent framework natively to the JVM. JavaOne 2026 wrapped up with Oracle announcing the Java Verified Portfolio and Project Detroit. --- ## Java 26 released Java 26 shipped on March 17 with 10 JEPs, five finalized. The practical wins are immediate: G1 GC gets a dual card table approach that yields 5–15% throughput with zero code changes, AOT object caching now works with ZGC (not just G1), and HTTP/3 lands in the standard `HttpClient` via a new `HTTP_3` enum value. JEP 500 starts the "integrity by default" push — reflective mutation of `final` fields now triggers a warning by default, with a `--illegal-final-field-mutation=deny` flag available for those who want to get ahead of the eventual hard block. The Applet API is finally gone. Java 25 remains the current LTS; 26 is for developers who want to stay on the leading edge. ## Spring milestone wave: Boot 4.1, Security 7.1, AI 2.0 Multiple Spring projects hit their third milestone this week. Spring Boot 4.1.0-M3 adds AMQP 1.0 support and MongoDB integration for Spring Batch. Spring Security 7.1.0-M3 patches CVE-2026-22732, a sensitive data exposure vulnerability via HTTP caching — worth paying attention to even if you're not on the milestone track. Spring AI 2.0.0-M3 introduces `McpClientCustomizer` and improved builder patterns, and a separate post this week showed how to embed rich HTML/JS UIs directly inside AI chat interfaces using `@McpResource` and `@McpTool`. Spring Data 2026.0.0-M2 adds `@EnableRedisListeners` and a `bulkWrite()` method for MongoDB. ## Koog comes to Java JetBrains launched Koog for Java, a fully idiomatic Java API for building AI agents on the JVM. The pitch is straightforward: stop writing Python microservices for your agent layer. It supports functional, graph-based, and GOAP planning workflows, integrates with Spring Boot, covers the major LLM providers (OpenAI, Anthropic, Google, DeepSeek, Ollama), and handles fault-tolerant persistence via Postgres, S3, or disk — resuming from the exact failure point. OpenTelemetry observability with Langfuse and W&B Weave is built in. For teams already running Java backends, this is the most direct path to production agents without leaving the ecosystem. ## JavaOne 2026 and the Java Verified Portfolio Oracle used JavaOne to announce the Java Verified Portfolio, a curated set of Oracle-supported tools including JavaFX, Helidon, and the VS Code Java extension — free for OCI and Java SE subscription customers. Oracle is proposing Helidon become an OpenJDK project. Project Detroit was also announced: a proposal to let Java call AI libraries written in JavaScript and Python in-process via V8 and CPython runtimes, using the Foreign Function & Memory API. The JavaOne keynote demo ran a Spring Boot app with Spring AI, passkeys, virtual threads, and Project Leyden AOT training, with MCP benchmark results showing Java outperforming Python, Node, and Go implementations. --- ## Also notable - **Project Leyden benchmarks:** Two deep-dive posts this week showed AOT caching cutting time-to-first-response roughly in half on Quarkus and Hibernate REST APIs; longer training runs (60k vs 1k requests) produce meaningfully better caches. - **Hibernate Search 8.3.0.Final:** Released as a near-identical follow-up to CR1, aligning with Hibernate ORM 7.3.0.Final, Elasticsearch 9.3, and Lucene 10.4.0 — drop-in replacement for 8.2. - **Spring Boot Actuator breach case study:** A real-world post traced a full cloud breach from an exposed `/configprops` endpoint to SharePoint exfiltration via OAuth2 ROPC flow; the fix is disabling public Actuator endpoints and killing ROPC. - **IntelliJ IDEA 2025.3.4:** Adds full Java 26 support plus bug fixes for HTTP request triggering and Perforce local changes refresh. - **IntelliJ free JS/TS features:** Starting with 2026.1, core JavaScript, TypeScript, HTML, and CSS features move to the free tier — syntax highlighting, completion, ESLint, Prettier, basic React support. - **Java performance anti-patterns post:** A demo app went from 1,198ms to 239ms by fixing eight patterns including string concatenation in loops, autoboxing, exceptions for control flow, and virtual thread pinning on JDK 21–23. - **TOON format for LLMs:** A compact alternative to JSON for tool call results showing 24–44% token savings for collections; a Spring AI starter handles automatic conversion. - **Devnexus 2026 recap:** ~1,400 attendees, 116 speakers; Rod Johnson's keynote argued Java developers need to fix enterprise AI by tackling non-determinism and bringing structure to LLM interactions. - **KotlinConf 2026 schedule live:** Full track lineup published covering compiler internals, Compose Multiplatform, Uber's Kotlin adoption in a Java monorepo, and Koog 1.0.0-RC for production agents. - **Micronaut joining Commonhaus Foundation:** The framework is applying to join alongside JBang, Quarkus, and ~15 other projects under low-governance, financially transparent stewardship. - **Spring gRPC 1.0 GA:** Native gRPC support for Spring Boot with `@GraalService`, protobuf-maven-plugin integration, and `@AutoConfigureInProcessTransport` for testing. ## Similar posts on daily.dev - [Java Weekly, Issue 638](https://daily.dev/posts/java-weekly-issue-638-ntzmmi0ew) · Baeldung · 1 upvotes · 0 comments - [Java Weekly, Issue 622](https://daily.dev/posts/java-weekly-issue-622-yhsvtmyww) · Baeldung · 3 upvotes · 0 comments --- Tags: [#java](https://daily.dev/tags/java), [#ai-agents](https://daily.dev/tags/ai-agents), [#spring-boot](https://daily.dev/tags/spring-boot), [#jvm](https://daily.dev/tags/jvm), [#spring-ai](https://daily.dev/tags/spring-ai) [View this post on daily.dev](https://daily.dev/posts/java-26-ships-spring-boot-4-1-and-spring-ai-2-0-hit-milestone-3-yf580beef) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/java-26-ships-spring-boot-4-1-and-spring-ai-2-0-hit-milestone-3-yf580beef","headline":"Java 26 ships, Spring Boot 4.1 and Spring AI 2.0 hit milestone 3","text":"Java 26 shipped with 10 JEPs including G1 GC throughput improvements (5–15%), HTTP/3 support in HttpClient, AOT object caching for ZGC, and the start of 'integrity by default' restricting final field mutation. Spring's third milestone wave landed simultaneously: Boot 4.1.0-M3, Security 7.1.0-M3 (patching CVE-2026-22732), AI 2.0.0-M3 with McpClientCustomizer, and Spring Data 2026.0.0-M2. JetBrains launched Koog for Java, an idiomatic JVM API for building AI agents with support for OpenAI, Anthropic, Google, and others, plus fault-tolerant persistence and OpenTelemetry observability. JavaOne 2026 saw Oracle announce the Java Verified Portfolio and Project Detroit, which proposes in-process calls to JavaScript and Python libraries via V8 and CPython. Notable extras include Project Leyden AOT benchmarks cutting startup time in half, a Spring Boot Actuator breach case study, Hibernate Search 8.3 GA, Spring gRPC 1.0 GA, and Micronaut joining the Commonhaus Foundation.","url":"https://daily.dev/posts/java-26-ships-spring-boot-4-1-and-spring-ai-2-0-hit-milestone-3-yf580beef","datePublished":"2026-03-23T04:20:46.026Z","dateModified":"2026-03-23T04:21:08.244Z","author":{"@type":"Organization","name":"Java Digest","logo":"https://media.daily.dev/image/upload/s---g5D7hJ2--/f_auto,q_auto/v1773839415/logos/java_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/java_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/java_digest","name":"Java Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Java Digest","item":"https://daily.dev/sources/java_digest"},{"@type":"ListItem","position":3,"name":"Java 26 ships, Spring Boot 4.1 and Spring AI 2.0 hit milestone 3"}]} ```