Java
JDK 27 and 28 advance; WildFly 41 ships with JDK 25 support and new features
New early-access builds and multiple middleware and framework releases bring improvements to the Java ecosystem this week.
InfoQ
The Java ecosystem saw activity across multiple fronts this week, with new language proposals moving forward and several frameworks and tools releasing updates.
OpenJDK language improvements#
JEP 401, Value Objects (Preview), part of Project Valhalla, has moved to Candidate status, marking a significant step forward for a feature first drafted in 2020. Value objects represent a proposed language enhancement allowing developers to define objects that contain only final fields, have no identity semantics, and are distinguished purely by their data values. This differs from traditional Java classes where identity matters.
In parallel, the OpenJDK project continues its regular cadence of early-access releases. JDK 27 Build 31 and JDK 28 Build 7 both became available this week, each containing bug fixes and improvements to their respective versions.
Application servers and middleware#
WildFly 41 reached general availability with several notable enhancements. The release upgraded base container images from JDK 17 to JDK 25, affecting its Maven plugin, cloud container images, and source-to-image (S2I) builder images. Additionally, the release introduced bootable JARs to the wildfly-cloud-galleon-pack feature pack, and promoted several features from preview and community stability levels to default.
Open Liberty 26.0.0.7 delivered improvements centered on security and administration. The release now tracks logged-out Single Sign-On cookies by default to prevent replay attacks after logout, and allows operators to disable MicroProfile Health 4.0's /health endpoints when using file-based health checks. The release also patched eight CVEs affecting denial-of-service, HTTP request smuggling, and server-side request forgery vulnerabilities.
Apache TomEE 10.2.0 addressed notable issues including the improper logging of SSL truststore passwords and corrected exception handling that was losing underlying causes in JNDI authentication failures.
