Friends of OpenJDK (Foojay.io)

Foojay wouldn't exist without its community. Every month we're highlighting two Featured Authors, writers who share their Java knowledge through a single deep-dive post or an ongoing stream of articles. For July we featured Igor Souza and Steve Poole, and for August we selected Cris Escobar H. and Shai Almog. In this summary you can find a link to their Foojay author pages with an overview of their posts: https://lnkd.in/d_WPK2im #Java #OpenJDK #Foojay

Oracle is changing how Java security patches ship. Starting August 18, 2026, JDK security fixes can arrive via a new Critical Security Patch Update (CSPU), outside the usual quarterly CPU cycle (Jan/Apr/Jul/Oct). The quarterly cadence stays, but urgent fixes can now land in between. Why: AI has sped up both vulnerability discovery and exploitation, so a 90-day wait is riskier than it used to be. What to do: treat a CSPU like a regular CPU (same testing, same pipeline), but make sure your patch-monitoring and release process can handle an irregular, sometimes-monthly trigger instead of a fixed quarterly one. Frank Delporte breaks down what's changing, why now, and the concrete steps to prep your pipeline: https://lnkd.in/eZcAwKNB #Java #OpenJDK #Security #DevOps

AI Found the Bugs. Who's Patching Your EOL Java Code? AI tools are getting better at finding security vulnerabilities in Java applications. That's good news, right? Well, here's the problem: discovering bugs is only half the battle. If you're running end-of-life Java versions, you're stuck with known vulnerabilities and no official patches coming your way. This article by Steve Poole looks at the growing gap between AI-powered vulnerability detection and the reality of maintaining legacy Java systems. What are your options when the bugs are found but Oracle stopped supporting your Java version years ago? https://lnkd.in/evMZDaVn #Java #ApplicationSecurity #LegacyCode #DevOps

New on Foojay: Azul has released its July 2026 quarterly update for Zulu, bringing the latest improvements and security patches to its OpenJDK distribution. Frank Delporte covers what's included in this update and what developers need to know about the latest builds across multiple Java versions. Read the full article here: https://lnkd.in/eczsGrkU #Java #OpenJDK #AzulZulu #Foojay

New on Foojay: What's New In The July 2026 Azul Payara Release? Luqman Saeed walks through the latest updates in the July 2026 release of Azul Payara, covering new features, improvements, and what developers need to know about this version. If you're working with Payara or considering it for your Jakarta EE applications, this overview will help you understand what's changed and how it might benefit your projects. Read the full article here: https://lnkd.in/eEw_Ac8s #Java #Payara #JakartaEE #Foojay

🔐 New BoxLang Module for Cloud Secrets Management. BoxLang now supports AWS, Azure, and Google Cloud secrets managers through a unified module. This integration gives developers a consistent way to handle sensitive data across major cloud platforms. The module simplifies secret management in BoxLang applications by providing a single interface for all three providers. No more juggling different APIs or writing custom code for each cloud service. Cris Escobar H. breaks down the implementation details and shows how to get started with each platform. Read the full article: https://lnkd.in/eTE3U_ZJ #BoxLang #CloudSecurity #DevOps #SecretsManagement

Java isn't just for servers and enterprise applications. Frank Delporte shows us how it runs on Banana Pi boards with both ARM and RISC-V processors. In this hands-on article, Frank tests Java's performance on different architectures and demonstrates GPIO control using Pi4J to blink an LED. The results might surprise you, especially when comparing ARM versus RISC-V performance. If you're interested in IoT, embedded systems, or just want to see Java working outside its typical environment, this is worth reading. https://lnkd.in/ec8E8Far #Java #IoT #RaspberryPi #EmbeddedSystems #Pi4J

Toward a Durable Spring PetClinic: Geertjan Wielenga takes a closer look at how to make the popular Spring PetClinic application more resilient and production-ready using modern approaches. The article walks through practical steps to enhance the demo application's durability, covering persistence strategies, error handling, and architectural improvements that matter in real-world scenarios. If you're working with Spring Boot or are interested in building more robust Java applications, this is worth your time. Read the full article here: https://lnkd.in/ed2R-BEE #Java #SpringBoot #SoftwareArchitecture #Foojay

In "How We Beat HotSpot Performance (By Cheating, But Not Like That)", Shai Almog shares an interesting look at performance optimization in Java, where sometimes unconventional approaches can lead to surprising results. The article breaks down how creative solutions can outperform standard JVM optimizations. It's a good reminder that understanding the fundamentals and thinking outside the box can make a real difference in application performance. Worth a read if you're working on performance-critical Java applications or just curious about JVM internals. https://lnkd.in/epnz2e_8 #Java #Performance #JVM #HotSpot

Java applications on Kubernetes often face a trade-off between fast startup times and optimal runtime performance. But what if you could have both? Jiří Holuša and Zbyněk Roubalík show how combining Azul Prime with Kedify's vertical scaling capabilities changes the game. Their approach uses ReadinessObserver to dynamically adjust pod resources based on the actual JVM warmup phases, ensuring you're neither over-provisioning during startup nor under-provisioning at runtime. The results speak for themselves: faster warmup, lower resource waste, and better cost efficiency for your Java workloads. Read the full technical breakdown here: https://lnkd.in/dX657JMU #Java #Kubernetes #CloudNative #Performance #DevOps