Java Ecosystem Roundup: Atmosphere 4.0, Quarkus 3.39.0, and Jakarta Milestones
The InfoQ Java News Roundup for the week of August 24 covers a dense set of enterprise Java releases. Atmosphere 4.0 reached general availability, adding portable AI agent components and workspace configuration enhancements to the real-time messaging framework that underpins WebSocket support in several Java web frameworks. Quarkus 3.39.0 landed with post-quantum cryptography support and reversed its earlier move toward reflection-free Jackson defaults after community feedback, while the companion Quarkus Flow 1.0.0 project shipped with a Java DSL and LangChain4j integration for building agentic workflows directly in Quarkus applications.
On the application server side, Open Liberty 26.0.0.9 beta introduced MCP Java API support via its new mcpServer-1.0 feature, letting Liberty-hosted applications expose Model Context Protocol tools natively. WildFly 41.0.1 delivered serialization filtering updates and an Apache CXF upgrade to mitigate SSRF risks, and Azul Payara 7.3.0 added gRPC 1.83.1 support alongside an initial implementation of Jakarta's emerging Agentic AI specification. On the Jakarta EE and NoSQL front, Jakarta Data 1.1.0 reached its fourth milestone with new null-handling annotations and sorting improvements, and Eclipse JNoSQL 1.2.0 hit its second milestone with AutoApplyConverters and CDI interceptor support. Separately, JEP 542 (PEM Encodings of Cryptographic Objects) progressed to Targeted status for JDK 28, aiming to finalize the API after three preview rounds spanning JDK 25 through JDK 27.
Read more — InfoQ
GraalVM 25.2 Introduces Graal Script Agent for Sandboxed AI-Generated Extensions
GraalVM 25.2 ships a new component called Graal Script Agent, a Java library that turns natural-language requests into sandboxed application plugins running entirely on the local machine. Rather than modifying an application's source repository, the agent produces reusable JavaScript or Python extensions scoped to bounded behaviors — searches, reports, routing rules, validation logic, and previewable workflows — that a host application can load and execute without needing to rebuild or redeploy.
The design is aimed squarely at applications like dashboards, reporting tools, and data-exploration UIs, where end users frequently want small customizations that today require a developer to write and ship code. Because the generated extensions run inside GraalVM's sandboxed polyglot execution environment rather than as native code, a misbehaving or malicious AI-generated extension is contained to the sandbox rather than gaining direct access to the host JVM. The same release also brings G1 garbage collection support to Native Image across all platforms, including Windows, and enables the Vector API by default — continuing GraalVM's recent shift to an accelerated monthly release cadence for shipping compiler and native-image improvements faster.
Read more — GraalVM Team (Medium)