JDK 27 Enters Rampdown Phase One
JDK 27 has officially entered Rampdown Phase One, with the main-line OpenJDK repository forked into a dedicated stabilization branch. From this point forward, no new features will be added to the release — the JEP set is locked at nine proposals, and the remaining work focuses exclusively on bug fixes and stabilization ahead of general availability. Build 25 of the JDK 27 early-access binaries was published this week, giving developers a chance to test the finalized feature set before the GA release arrives in March 2027.
For teams tracking the Java release cadence, Rampdown Phase One is the signal to start serious compatibility testing. The JEP list is now frozen, so any libraries or frameworks that need updates for JDK 27 compatibility can begin that work in earnest rather than chasing a moving target.
Read more — InfoQ
JDK 28 Expert Group Formally Established
Following JSR 403 approval, Java SE 28 now has a formally constituted four-member Expert Group: Simon Ritter (Azul Systems), Iris Clark (Oracle, serving as specification lead), Stephan Herrmann (Eclipse Foundation), and Christoph Langer (SAP SE). The group's composition reflects the now-standard mix of Oracle leadership alongside representatives from major OpenJDK contributors and downstream distribution vendors.
The JDK 28 timeline is already taking shape: general availability is targeted for March 2027, with a public review period scheduled to run from December 2026 through February 2027. This puts JDK 28 roughly six months behind JDK 27 in the usual twice-yearly release rhythm, giving the ecosystem a predictable window to plan upgrades and JEP proposals for the next cycle.
Read more — InfoQ
Framework and Runtime Releases: GlassFish, Kotlin, Infinispan, and More
Several Java ecosystem projects shipped notable point releases this week. GlassFish 8.0.3 delivers a faster embedded startup path, a two-fold performance improvement for Jakarta Faces, and a patch for CVE-2024-9342, a brute-force authentication vulnerability — teams running GlassFish in production should prioritize this update for the security fix alone.
Kotlin 2.4.0 adds full support for JDK 26, switches on incremental compilation by default for faster build times, and introduces support for the WebAssembly Component Model, continuing Kotlin's push into Wasm targets alongside its JVM and Native backends.
On the data-grid side, Infinispan 16.2.0 expands its Redis protocol command coverage with additions like BITFIELD, COPY, and DIGEST, and implements probabilistic data structures including Bloom filters and HyperLogLog — useful for teams using Infinispan as a drop-in Redis-compatible cache who need approximate counting or membership tests without a separate data structure library.
Rounding out the week, Open Liberty 26.0.0.6 arrived as a beta with a Netty-based HTTP transport that resolves prior timeout deadlock issues, and Micronaut 5.0.1/5.0.2 patched security vulnerabilities including infinite redirect loops and unintended forwarding of sensitive headers across cross-origin redirects — another update worth applying promptly if you're running Micronaut services that handle redirects.
Read more — InfoQ
