This week's Java roundup for January 12th, 2026, features news highlighting: the GA release of WildFly 39; point releases of JobRunr and Gradle; maintenance releases of Spring Framework and Micronaut; milestone releases of Micrometer Metrics and Micrometer Tracing; and a beta release of Open Liberty 26.0.0.1.
OpenJDK
JEP 527, Post-Quantum Hybrid Key Exchange for TLS 1.3, has been elevated from Candidate to Proposed to Target for JDK 27. This JEP proposes to enhance the implementation of RFC 8446, Transport Layer Security (TLS) Protocol Version 1.3, using the Hybrid Key Exchange in TLS 1.3 specification, currently being drafted by the Internet Engineering Task Force (IETF) in conjunction with JEP 496, Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism, delivered in JDK 24. The review is expected to conclude on Monday, January 19, 2026.
JDK 26
Build 31 of the JDK 26 early-access builds was made available this past week featuring updates from Build 30 that include fixes for various issues. More details on this release may be found in the release notes.
As per the JDK 26 release schedule, Mark Reinhold, Chief Architect, Java Platform Group at Oracle, formally declared that JDK 26 has entered Rampdown Phase Two. This means that: no additional JEPs will be added for JDK 26; and there will be a focus on the P1 and P2 bugs which can be fixed via the Fix-Request Process. Late enhancements are still possible, with the Late-Enhancement Request Process, but Reinhold states that "the bar is now extraordinarily high." Therefore, the final set of 10 features for the GA release in March 2026 will include:
- JEP 500: Prepare to Make Final Mean Final
- JEP 504: Remove the Applet API
- JEP 516: Ahead-of-Time Object Caching with Any GC
- JEP 517: HTTP/3 for the HTTP Client API
- JEP 522: G1 GC: Improve Throughput by Reducing Synchronization
- JEP 524: PEM Encodings of Cryptographic Objects (Second Preview)
- JEP 525: Structured Concurrency (Sixth Preview)
- JEP 526: Lazy Constants (Second Preview)
- JEP 529: Vector API (Eleventh Incubator)
- JEP 530: Primitive Types in Patterns, instanceof, and switch (Fourth Preview)
JDK 27
Build 5 of the JDK 27 early-access builds was also made available this past week featuring updates from Build 4 that include fixes for various issues. Further details on this release may be found in the release notes.
For JDK 26 and JDK 27, developers are encouraged to report bugs via the Java Bug Database.
Spring Framework
Spring Framework 7.0.3, the third maintenance release, delivers bug fixes, documentation improvements, dependency upgrades and new features such as: an instance of the DisconnectedClientHelper should separately detect the presence of the RestClientException and WebClientException classes as the latter was ignored if the former was not present; and a new InvocationRejectedException class that complements a new option for the @ConcurrencyLimit annotation to configure the throttle policy. More details on this release may be found in the release notes.
The Spring team has disclosed CVE-2026-22718, Command Injection on User Machine using VSCode Extension for Spring CLI, a vulnerability affecting Spring CLI VSCode Extension, versions 0.9.0 and older, that allows an attacker to use command injection to remotely execute commands on a user's machine. This extension has reached end-of-life in May 2025 and developers should remove this extension from their coding environments.
WildFly
The GA release of WildFly 39 provides bug fixes, dependency upgrades and new features such as: support for TLS configuration in JGroups TCP-based transport protocols; a new attribute, resteasy-original-webapplicationexception-behavior, added to the WildFly jaxrs subsystem for improved deployments; and updated implementations of the Jakarta Authentication, Jakarta Concurrency, Jakarta Security, Jakarta Servlet, and Jakarta WebSocket specifications. Further details on this release may be found in the release notes and InfoQ will follow up with a more detailed news story.
Open Liberty
The beta release of Open Liberty 26.0.0.1 features: a new log throttling mechanism, enabled by default, for preventing excessive log output when the same log events repeatedly occur within a short period of time; and updates to the Model Context Protocol (MCP) Server (mcpServer-1.0) feature that include bug fixes, asynchronous tool support and support for stateless mode.
Micronaut
The Micronaut Foundation has released version 4.10.7 of the Micronaut Framework, based on Micronaut Core 4.10.13, features bug fixes and patch updates to modules: Micronaut Maven Plugin, Micronaut SourceGen, and Micronaut JSON Schema, More details on this release may be found in the release notes.
The Micronaut team has also announced that they have applied to join the Commonhaus Foundation, a non-profit organization dedicated to the sustainability of open source libraries and frameworks. Sergio Del Amo Caballero, Principal Member of Technical Staff at Oracle and Micronaut Committer, stated that "Our intention is that this move will empower even more individuals and organizations to join the Micronaut project and be actively involved in steering its future."
JobRunr
The release of JobRunr 8.4.0 delivers bug fixes, dependency upgrades and three new features: support for converting Kotlin class-based Single Abstract Method (SAM) interfaces using the Bazel rules_kotlin module; automatic detection of the KotlinxSerializationJsonMapper class when using the fluent API; and the ability to configure polymorphic type validators with an instance of the Jackson3JsonMapper class for improved security. Further details on this release may be found in the release notes.
Micrometer
The first milestone release of Micrometer Metrics 1.17.0 provides bug fixes, dependency upgrades and new features such as: applying the AssertJ @CheckReturnValue annotation to all implementations of the Assert interface; and increased efficiency of the getMeters() method, defined in the MeterRegistry class, by replacing the toArray() method with the asList() method, defined in the ArrayList and Arrays classes, respectively. More details on this release may be found in the release notes.
The first and second milestone releases of Micrometer Tracing 1.7.0 ships with dependency upgrades and adds JSpecify as a dependency. Further details on these releases may be found in the release notes for version 1.7.0-M1 and version 1.7.0-M2.
Gradle
The GA release of Gradle 9.3.0 delivers improvements in test reporting that includes an enhanced HTML Test Report for nested, parameterized, and suite-based tests, with better aggregate reporting; improvements in error and warning reporting with the Problems API that are now rendered in the console when using --warning-mode=all and clearer explanations for some exit codes; and enhancements in build authoring with a new method, named(), defined in the AttributeContainer interface, that can create attribute values directly from the container without requiring the use of the ObjectFactory interface. More details on this release may be found in the release notes.