--- title: Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java... description: Weekly Java ecosystem roundup covering: JEP 535 (Shenandoah GC Generational Mode by Default) targeted for JDK 28, with non-generational mode to be deprecated;... canonical: https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy | daily.dev og:description: Weekly Java ecosystem roundup covering: JEP 535 (Shenandoah GC Generational Mode by Default) targeted for JDK 28, with non-generational mode to be deprecated;... og:url: https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z og:image: https://api.daily.dev/og/posts/DnV2lTF4Z.png og:image:alt: Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy **[InfoQ](https://daily.dev/sources/infoq)** · 5 min read · 0 upvotes · 0 comments ## Summary Weekly Java ecosystem roundup covering: JEP 535 (Shenandoah GC Generational Mode by Default) targeted for JDK 28, with non-generational mode to be deprecated; JDK 27 Build 34 released with the initial RC date shifted to August 20, 2026; JDK 28 Build 10 available; GlassFish 8.0.4 with bug fixes and patches for three CVEs including a critical unauthenticated takeover vulnerability (CVE-2026-12605); A2A Java SDK 1.2.0 with new TaskStreamLifecycleHook interface; Apache Grails 8.0.0-M5; Apache Camel 4.22.0 introducing camel-ai-tool and camel-mcp-server for AI integration; Gradle 9.7.0 promoting Isolated Projects to incubating and improving Configuration Cache; and a follow-up on JetBrains TeamCity CVE-2026-63077 with active exploitations reported, urging upgrade to TeamCity 2025.11.7 or 2026.1.3. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does JEP 535 propose for the Shenandoah GC in JDK 28? JEP 535 proposes making Shenandoah GC's generational mode the default in JDK 28. The non-generational mode will be deprecated with the intent to remove it in a future release. The JEP has been elevated from Proposed to Target to Targeted status for JDK 28. _Java developers planning JDK 28 migrations track JEP progress like this on daily.dev._ ### What is the CVE-2026-63077 vulnerability in JetBrains TeamCity and how do I fix it? CVE-2026-63077 is a vulnerability that allows an attacker with HTTP(S) access to a TeamCity server to bypass authentication checks and execute arbitrary OS commands. Active exploitations of unpatched servers have been reported. The fix is to upgrade to TeamCity 2025.11.7 or 2026.1.3, or apply the security patch plugin ZIP for TeamCity 2017.1+. _Teams running TeamCity can follow active CVE disclosures and patch guidance on daily.dev._ ### What are the key changes in Gradle 9.7.0? Gradle 9.7.0 promotes the Isolated Projects performance feature from experimental to incubating, improves the Configuration Cache to cache the configuration phase result for faster subsequent builds, and enhances security infrastructure to make trusted PGP key documentation and signing-key rotation discovery easier. _Build engineers adopting Gradle 9.x features find release breakdowns like this on daily.dev._ ## Similar posts on daily.dev - [Java News Roundup: OpenJDK JEPs, GlassFish, Spring AI, JReleaser, A2A Java SDK, Google ADK, Gradle](https://daily.dev/posts/java-news-roundup-openjdk-jeps-glassfish-spring-ai-jreleaser-a2a-java-sdk-google-adk-gradle-bebowh5gg) · InfoQ · 7 upvotes · 0 comments - [Java Weekly, Issue 647](https://daily.dev/posts/java-weekly-issue-647-sxafsgauq) · Baeldung · 4 upvotes · 0 comments - [Java News Roundup: GraalVM, Spring AI, JobRunr, GlassFish, Grails, Groovy, Quarkus Agent MCP](https://daily.dev/posts/java-news-roundup-graalvm-spring-ai-jobrunr-glassfish-grails-groovy-quarkus-agent-mcp-slhikd0rf) · InfoQ · 8 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java), [#gradle](https://daily.dev/tags/gradle), [#apache-camel](https://daily.dev/tags/apache-camel) [View this post on daily.dev](https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy","url":"https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z"},"datePublished":"2026-08-10T12:49:12.107Z","dateModified":"2026-08-24T07:10:38.042Z","description":"Weekly Java ecosystem roundup covering: JEP 535 (Shenandoah GC Generational Mode by Default) targeted for JDK 28, with non-generational mode to be deprecated;...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9210af2dcc42c433547f9a16dd785a94?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9210af2dcc42c433547f9a16dd785a94?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoQ","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoQ","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/afc3bced3e1e4b188dd9127017a60e0c","url":"https://daily.dev/sources/infoq"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,java,gradle,apache-camel","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoQ","item":"https://daily.dev/sources/infoq"},{"@type":"ListItem","position":3,"name":"Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/java-news-roundup-shenandoah-gc-teamcity-cve-a2a-java-sdk-camel-gradle-glassfish-groovy-dnv2ltf4z#faq","mainEntity":[{"@type":"Question","name":"What does JEP 535 propose for the Shenandoah GC in JDK 28?","acceptedAnswer":{"@type":"Answer","text":"JEP 535 proposes making Shenandoah GC's generational mode the default in JDK 28. The non-generational mode will be deprecated with the intent to remove it in a future release. The JEP has been elevated from Proposed to Target to Targeted status for JDK 28. Java developers planning JDK 28 migrations track JEP progress like this on daily.dev."}},{"@type":"Question","name":"What is the CVE-2026-63077 vulnerability in JetBrains TeamCity and how do I fix it?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-63077 is a vulnerability that allows an attacker with HTTP(S) access to a TeamCity server to bypass authentication checks and execute arbitrary OS commands. Active exploitations of unpatched servers have been reported. The fix is to upgrade to TeamCity 2025.11.7 or 2026.1.3, or apply the security patch plugin ZIP for TeamCity 2017.1+. Teams running TeamCity can follow active CVE disclosures and patch guidance on daily.dev."}},{"@type":"Question","name":"What are the key changes in Gradle 9.7.0?","acceptedAnswer":{"@type":"Answer","text":"Gradle 9.7.0 promotes the Isolated Projects performance feature from experimental to incubating, improves the Configuration Cache to cache the configuration phase result for faster subsequent builds, and enhances security infrastructure to make trusted PGP key documentation and signing-key rotation discovery easier. Build engineers adopting Gradle 9.x features find release breakdowns like this on daily.dev."}}]} ```