Java Ecosystem Advances: OpenJDK JEPs, Jakarta EE 12 Progress, and Major Framework Updates

This week's Java ecosystem update brings substantial developments across multiple fronts, from OpenJDK proposals to framework releases and specification progress. Here's a comprehensive look at the most significant Java-related news from April 13th, 2026.

OpenJDK JEPs Advance to Candidate Status

Two important Java Enhancement Proposals have progressed to candidate status, signaling their potential inclusion in upcoming JDK releases.

JEP 534: Compact Object Headers by Default proposes making JEP 519's compact object headers the default object header layout in the HotSpot JVM. This change, originally delivered in JDK 25, aims to reduce memory overhead and improve performance for Java applications. The compact headers feature has been available as an option since JDK 25, and this JEP would make it the standard behavior.

JEP 533: Structured Concurrency (Seventh Preview) continues the evolution of structured concurrency in Java. After six preview rounds in JDK 21 through JDK 26 and two incubator rounds in JDK 19 and 20, this seventh preview introduces minor refinements to the feature. Structured concurrency simplifies concurrent programming by treating groups of related tasks running in different threads as a single unit of work, streamlining error handling and cancellation while improving reliability and observability.

Additionally, JDK 27 Build 18 has been released as part of the early-access program, featuring various bug fixes and improvements. Developers are encouraged to report issues through the Java Bug Database as the JDK 27 release approaches.

Jakarta EE 12 Development Timeline

Ivar Grimstad, Jakarta EE Developer Advocate at the Eclipse Foundation, provided an update on the Jakarta EE 12 release schedule. The release will consist of multiple milestones, with the platform project establishing expectations for each phase.

Key milestones include:

• Milestone 4 (April 1 - May 15, 2026): Focus on Jakarta EE Core Profile specifications, including RESTful Web Services 5.0-M1, Contexts and Dependency Injection 5.0 Beta, JSON Processing 2.2-M1, and JSON Binding 3.1-M1
• Milestone 5 (May 16 - June 30, 2026): Content to be defined
• Milestone 6 (July 1 - August 15, 2026): Content to be defined
• Milestone 7 (August 15 - September 30, 2026): Target for Core Profile release
• Milestone 8 (October 1 - November 15, 2026): Content to be defined
• Milestone 9 (January 1 - February 15, 2027): Finalize remaining specifications
• Milestone 10 (February 16 - March 31, 2027): Release Platform TCK with ratifying implementation

The timeline suggests Jakarta EE Core Profile could ship in Q4 2026, with Web Profile and Platform releases following in Q1 or Q2 2027, maintaining the pattern established with Jakarta EE 11.

Several specifications are progressing toward milestone 2 releases, including Jakarta Connectors 3.0, Jakarta Faces 5.0, Jakarta Transactions 2.1, and Jakarta JSON Processing 2.2.

Spring Framework Security Updates

Spring Framework 7.0.7 and 6.2.18 have been released, addressing critical security vulnerabilities alongside bug fixes and new features. These releases resolve three CVEs related to Spring MVC and WebFlux:

• CVE-2026-22740: Denial of Service vulnerability with multipart temporary files in WebFlux that could allow attackers to consume disk space through undeleted temporary files
• CVE-2026-22741: Static resource cache poisoning vulnerability that could allow malicious requests to poison resource caches with incorrectly encoded resources, potentially causing front-end application failures
• CVE-2026-22745: Denial of Service vulnerability in static resource handling on Windows platforms, where slow-to-resolve requests could keep HTTP connections occupied

Beyond security fixes, these releases include performance improvements to SpringValidatorAdapter and MethodValidatorAdapter classes through pre-identification of binding failures, and introduce a new RestClientXhrTransport class as a RestClient-based variant of RestTemplateXhrTransport.

Spring Data and Micrometer Release Candidates

The first release candidate of Spring Data 2026.0.0 introduces several new features, including a RedisMessageSendingTemplate class that provides message sending capabilities based on Spring Framework's MessageSendingOperations interface with configurable MessageConverter support. The release also adds a ResetStrategy interface to support cache resets and optimizations when using Redis.

Micrometer Metrics 1.17.0 release candidate brings metrics aligned with recent JDK enhancements. A new gauge metric, executor.delayed, has been added for the getDelayedTaskCount() method introduced in JDK 25's Java ForkJoinPool class, complementing the existing metric for getQueuedTaskCount(). Additionally, a new function counter metric tracks the getTotalGcCpuTime() method added to Java's MemoryMXBean interface in JDK 26, counting cumulative CPU time spent on garbage collection activity.

Apache Projects Updates

Apache Grails 7.1.0 introduces several notable improvements, including a new <g:flashMessages /> tag that renders flash messages as dismissible Bootstrap alert <div> tags with appropriate styling. The release also adds support for context paths in Geb integration, improving test writing capabilities in multiproject environments.

Apache Camel 4.19.0 delivers bug fixes, dependency upgrades, and new components. Notable additions include Azure Functions, Groovy JSON, and Spring AI Image components. The PQC Algorithms component has been enhanced to support hybrid cryptography, key lifecycle management, and platform-wide quantum-safe TLS readiness. The release also adds support for Spring Boot 4.0 in Camel Spring Boot.

JBang 0.138.0 enables execution of WAR files with the same capabilities as JAR files, expanding the tool's versatility for Java development. The release maintains backwards compatibility by preserving the deprecated isJar() method in the Project class.

Eclipse Store and Serializer Beta Releases

Eclipse Store and Eclipse Serializer have reached their first beta releases (4.1.0-beta1), introducing several enhancements. A new BatchStorer interface has been added to efficiently manage batched persistence operations. The root() and setRoot() methods defined in the StorageManager interface now support generic typing, improving type safety and developer experience.

Looking Ahead

The Java ecosystem continues to evolve rapidly, with significant progress across specifications, frameworks, and tools. The advancement of OpenJDK JEPs to candidate status suggests these features may soon become standard parts of the Java platform. Jakarta EE 12's structured milestone approach provides clear visibility into the specification's development progress.

Security remains a top priority, as evidenced by Spring Framework's prompt response to identified vulnerabilities. Meanwhile, projects like Micrometer demonstrate the ecosystem's ability to quickly adapt to new JDK features by providing appropriate monitoring and observability capabilities.

As JDK 27 development progresses and Jakarta EE 12 milestones unfold, developers can expect continued innovation and improvement across the Java landscape throughout 2026 and into 2027.