Java News Roundup: Simple JSON API, GlassFish, Jakarta EE, JNoSQL, Open

Open the source listing →

The Java ecosystem recorded several platform updates for the week of August 10th, 2026, featuring proposals for JDK 28, milestone releases across Jakarta EE specifications, and security fixes for enterprise runtimes. Highlights include new Java Enhancement Proposals, progress on the upcoming Jakarta EE 12 specification, and updates to frameworks supporting AI integration, native compilation, and NoSQL databases, as outlined in InfoQ's report.

This roundup detail updates across OpenJDK early-access builds, GlassFish 9.0.0, GraalVM Native Build Tools, Open Liberty, Eclipse JNoSQL, LangChain4j, and Apache Groovy. It provides Java developers, software architects, and enterprise system administrators with a comprehensive overview of recent technical developments, version upgrades, security vulnerabilities, and upcoming specification changes across the Java platform.

The offer: Java News Roundup

OpenJDK announced that JEP 541, Deprecate the macOS/x64 Port for Removal, and JEP 540, Simple JSON API (Incubator), have both been elevated from Candidate to Proposed to Target for JDK 28. JEP 541 proposes deprecating the macOS/x64 port due to Apple ending support for the architecture, with the review concluding on Friday, August 21, 2026. JEP 540 defines a standard API for parsing and generating JSON documents implementing RFC 8259, superseding the withdrawn JEP 198, with its review concluding on Monday, August 17, 2026. Early-access availability continued with JDK 27 Build 34 and JDK 28 Build 11.

Jakarta EE 12 specification work progressed, with Jakarta CDI 5.0 up for release review, Jakarta JSON Binding 3.1 shaping an M2 release, and Jakarta JSON Processing 2.2 planning an M1 release. The Jakarta RESTful Web Services 5.0 team is awaiting required reviews on PR #1340, while Jakarta Agentic AI 1.0 delivered an M1 release and website. Concurrently, GlassFish 9.0.0 M3 delivered full implementations of Jakarta Security 5.0-M2, Jakarta Faces 5.0-M5, and CDI 5.0-RC1, alongside initial support for Jakarta Annotations @RolesAllowed in RESTful Web Services endpoint integrations.

How to get Java News Roundup

Accessing these updates involves fetching the latest software builds and dependencies from their respective project distribution channels. Developers evaluating JDK 28 can download Build 11 of the early-access release, while JDK 27 testing remains on Build 34. Enterprise developers using Open Liberty can update their runtime configuration to version 26.0.0.8, which resolves critical denial-of-service vulnerabilities including CVE-2026-50645, CVE-2026-9171, and CVE-2026-15057 associated with Apache CXF deserialization, memory consumption, and heap resource allocation.

Framework dependencies have also published updated artifacts across Maven Central and repository mirrors. Developers using LangChain4j can upgrade to version 1.19.0 to access the new AnthropicBatchChatModel class and MCP server meta mapping capabilities. GraalVM Native Build Tools 1.1.9 is available via Gradle and Maven plugins, offering shared model support for Native Image layers. Eclipse JNoSQL 1.1.16 can be fetched to incorporate Valkey datastore support, while Apache Groovy 6.0.0-beta-2 is distributed for environments testing JDK 15 Hidden Classes support.

How Java Java News Roundup compares

The current development cycle demonstrates a clear structural shift toward native cloud capabilities and simplified core platform features. JEP 540 introduces built-in JSON parsing directly into the standard JDK library, removing the historical reliance on third-party libraries like Jackson or Gson for basic JSON operations. Meanwhile, GraalVM Native Build Tools 1.1.9 elevates Native Image layers from an experimental Gradle-only feature to a first-class shared model across both Gradle and Maven, streamlining native executable compilation pipelines.

Across enterprise frameworks, Eclipse JNoSQL 1.1.16 expands its datastore integrations by adding native support for Valkey, an open-source key/value store, alongside drivers for Oracle NoSQL, MongoDB, DynamoDB, Couchbase, OrientDB, and Elasticsearch. LangChain4j 1.19.0 advances AI integration standards by adding support for the Anthropic Message Batches API and Model Context Protocol attributes mapping. Apache Groovy 6.0.0-beta-2 introduces JEP 371 Hidden Classes support to optimize short-lived synthetic class generation at runtime compared to legacy compilation targets.

Who should buy Java News Roundup

Enterprise development teams targeting JDK 28 should evaluate JEP 540's JSON API to prepare for standard library data interchange routines, while organizations running macOS on Intel hardware must plan for the eventual deprecation of the macOS/x64 port described in JEP 541. System administrators operating Open Liberty servers should immediately prioritize upgrading to release 26.0.0.8 to mitigate active denial-of-service vulnerabilities tied to Apache CXF resource allocation and memory consumption issues.

Java AI engineers building LLM-powered applications will benefit from adopting LangChain4j 1.19.0 to utilize batch chat models and structured MCP metadata extraction. Teams leveraging Jakarta EE technologies should review GlassFish 9.0.0 M3 to test early implementations of Jakarta Security 5.0-M2 and CDI 5.0-RC1. Additionally, database engineers using NoSQL architectures can leverage Eclipse JNoSQL 1.1.16 to integrate Valkey datastores alongside existing enterprise data stores like DynamoDB and Oracle NoSQL.

The catch with Java News Roundup

Upgrading to these new releases requires attention to platform deprecations and early-stage specification stability. Deprecation of the macOS/x64 port in JEP 541 means infrastructure relying on legacy x86 Apple hardware will need migration plans toward AArch64 (Apple Silicon) architectures. Furthermore, several highlighted releases, including GlassFish 9.0.0 M3 and Apache Groovy 6.0.0-beta-2, represent milestone and beta builds intended for evaluation rather than immediate production deployments.

Jakarta RESTful Web Services 5.0 progress remains gated on code reviews, requiring committer approval on PR #1340 before an M1 release can ship. Security maintenance in Open Liberty 26.0.0.8 addresses severe denial-of-service risks caused by unconstrained message attachment headers in Apache CXF, underscoring potential resource allocation vulnerabilities in unpatched legacy runtimes. Teams adopting LangChain4j 1.19.0 must also update their mapping implementations to leverage the updated ToolExecutionResult channels properly.