Spencer Gibb

Corretto 8, 11, 17, 21, 25, and 27 have all been released with the latest security improvements, including the removal of eMudhra root certificates. (Third time is the charm. Go hug your friendly JDK vendor!)

Liberica JDK updates addressing compromised eMudhra certificate chains are now available. Fixed builds: 8u513+9, 11.0.33.0.3+7, 17.0.21.0.3+5, 21.0.13.0.3+5, 25.0.5.0.3+5, and 27.0.1.0.3+5. Download: bell-sw.com/pages/downlo...

CFP for @arcofai.bsky.social is open! Main website: www.arcofai.com CFP link: www.arcofai.com/cfp

Recent conversations made me realize that POC ends up being different things for various teams: Proof of Concept Product of Cramming Pile of Cr@p It has been each of the above for me as well at different times, but the key has been to learn and improve towards the better.

Spring AI 2.1.0-RC1 and 2.0.2 are available now. Spring AI 2.1.0-RC1 includes session memory, tool call confirmation, Qxotic jinfer support , enhancements and bug fixes. More on this here: spring.io/blog/2026/10...

My latest blog: The Escape of Java Stream anyMatch If you're at JCon USA on Tuesday, October 27, be sure to stop by and find out a lot more at the "Who moved my (Java) heap?" talk with @cguntur.bsky.social and myself at 10:30am. Hope to see you there! donraab.medium.com/the-escape-o...

"This Security Alert addresses CVE-2026-91403 by providing Java updates which distrusts the set of impacted intermediate CA certificates related to eMudhra. ...update to the latest Java version or apply the recommended mitigations." https://www.oracle.com/security-alerts/alert-cve-2026-91403.html

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 4.2.0-RC1 has been released and is now available from Maven Central. spring.io/blog/2026/10... #java #spring #springboot

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 4.1.2 has been released and is now available from Maven Central. spring.io/blog/2026/10... #java #spring #springboot

New Claude API version: 2026-10-21. temperature, top_p and top_k are gone. Send them and you get a 400, even at default values. If you set temperature in Spring AI options, check this before you upgrade. https://platform.claude.com/docs/en/api/migration-2026-10-21

The Spring Cloud team is pleased to announce the release of Spring Cloud 2025.1.4 and 2026.0.0-RC1. 2026.0.0-RC1 contains a number of features to try out and 2025.1.4 contains several important fixes. spring.io/blog/2026/10... spring.io/blog/2026/10...

As Elon Musk considers merging Tesla and SpaceX, tech journalist Kara Swisher examines his business strategy, growing political influence and power over the war in Ukraine. n.pr/4Bg8lp3

Next up on our new weekly Spaces blog series, we've got an intro to Atmospheric Groups! Featuring Moleman, @grain.social, and @pds.ls: atproto.com/blog/atmosph...

Using Spring Modulith? There is a new validation that spots the classic Async + Transactional + TransactionalEventListener combination and includes a quick fix that turns it into a single ApplicationModuleListener annotation - less boilerplate, same behavior 🥳 🚀

🪐 spaces alpha release 🪐 folks, this is the big one! lots of updates across pretty core protocol mechanisms. hopefully the last/only of it's kind (tho we are planning another release next Thurs)

If you need help patching ANYTHING today, if you need to vent, or you want to be distracted for a minute, you can reach out to me! My DMs are open!

It's been a lot of fun trying the Duo out for a week, but it feels like I've gotten to use an extraordinarily polished prototype -- not a finished product that I'd want to buy and carry.

Vulnerability xkcd.com/3314/

I've seen a lot of "AI helped me draft this issue". Yeah, well, it's not any clearer what the problem is. It's fine to use AI as a tool, but you still need to make sure that what you are posting makes any sense at all.

There’s a weird arrogance around the idea that everyone who went to school, studied and specialized in something knows less than you do, given your “research.” social.tinyview.com/gnwQaEbpq7b

When people claim there is a high demand for AI, remember: … we were not given a choice. AI was pushed into products we already use. It’s like claiming there’s a high demand for high fructose corn syrup….. or advertisements.

The eMudhra intermediate CA compromise broadly impacts the atproto ecosystem. At this point lots of software has been patched, and we recommend upgrading if you run a distribution of the relay, pds, jetstream, or use the goat CLI. For general information see the site linked below, otherwise read on.

Note to self: you will always lose an argument against security theatre because the whole point of security theatre is how secure it sounds

This Week in Spring is out! MCP services w/ Spring & JBang, fact-checking claims, Java vs Rust, SSRF protection in Spring Boot 4.1, .env files, and more. A packed roundup for Spring fans. #Spring #Java #SpringBoot https://spring.io/blog/2026/10/20/this-week-in-spring-october-20th-2026

We all know the "Viggo broke his toe" story but what's another movie fact you're personally compelled to bring up every time without prompting? For me, it's the fact that Robin Tunney is wearing a wig in The Craft because of having just shaved her head to save her job filming Empire Records.

The #IBMTechXchange 2026 starts next Monday in Atlanta and #JCONUSA26 is bringing the #Java #community with it. Java sessions. Hands-on learning. Community. Plenty of conversations in between. See you there? 👉 2026.usa.jcon.one

I don't know exactly how these things work, but BYU won the football game Saturday and now Mormons are the top-ranked religion?

Josh Long & Cora Iberkleid: rule-based and predictable? Don't use AI. AI needs human judgment. Guarantee the outcome in code. Full episode: www.youtube.com/live/34kWNy0... #AI #Java

Jackson 3 rejected a null that my Boot 3 app had quietly turned into zero. I can see the case for the stricter default. But existing clients may rely on the old behavior. Would you preserve that contract or ask clients to change? https://youtu.be/HiPkoGTeNJc

AI-generated pull request descriptions, implementations, and tests can agree with each other without establishing that they solve the original problem Deception and DDoS at the expense of project maintainers.

Happy 100th birthday, Winnie-the-Pooh! Did you know that Winnie was based on a real Canadian-British bear—and that his full name was WINNIPEG?

Fetching JSON from an API and mapping it to records in plain Java. No Jackson. No Gson. No dependencies. Just HttpClient and the new JSON API coming in JDK 28 (JEP 540). 👀 https://github.com/danvega/native-json-demo

I'll be at JCON USA this October, sharing live my experience with using agentic coding tools, and building custom platforms on top of Kubernetes. Come join us on Oct 26-29 for great content, brought to you by IBM, @richardfichtner.bsky.social and the JCON team!

☕ actions/setup-java v6.1.0 is out! Eclipse Temurin on Linux RISC-V, improved Java version matching, Maven server credential origins & plugin repositories, plus GPG cleanup fixes. github.com/actions/setu...

Sweety717 explains building CodeGuard AI, a self-hosted GitHub PR reviewer with Java and Spring Boot. The LLM call is the easy part. The real work is the context and findings around it. https://foojay.io/today/what-i-learned-building-an-ai-code-reviewer-with-java-spring-boot/ #Java #SpringBoot

New on Foojay: Somil Garg adds semantic search to a Spring Boot job portal and tests whether two embeddings per job beat one. His eval harness produced one surprising number. https://foojay.io/today/embedding-strategies-job-search/ #Java #SpringBoot

Couldn’t join #IntelliJIDEAConf 2026 live? Watch From Chat to Goals by Mark Pollack and see how autonomous agents can work in real Java projects. 👉 Watch the recording on YouTube: youtu.be/Ko9VEOHhzoE

A connect timeout alone is not enough to bound an HTTP request. Java's HttpClient has a client-level timeout for establishing new connections, and HttpRequest can set a per-request timeout for receiving the response. Set connectTimeout() on the client and timeout() on the request. Java 11+. #Java

When you ask ChatGPT for an image, behind the scenes that entire process runs on Temporal. About a billion images a week. Full episode with Cornelia Davis on Coffee+Software. #Temporal #AI #Workflow youtu.be/RWVRzYJ9kCs

In fairness, this actually happened to me a good while ago 😳. All-new super-secret bonus panel here: social.tinyview.com/OdbndNNpd7b

My apologies to Koko. Super-secret bonus panel: social.tinyview.com/cgSGLSCJb7b

Missed this session? Get practical tips for working with IntelliJ IDEA and Spring Boot in “Bootiful IntelliJ IDEA” by @starbuxman.joshlong.com. Watch the recording on YouTube: youtu.be/Ijdk06qjtdo #IntelliJIDEAConf

Taste is what differentiates us from machines and from each other. That's why humans stay in the loop: somebody has to know what good looks like. #Taste #AICoding #DevExperience

I'm going to be LIVE with Cat Edelveis discussing hardened buildpacks and other trusted artifacts! We need to be protecting both apps and infrastructure, quickly and safely! www.youtube.com/watch?v=xqbM...

Let's talk a little more about Margaret Hamilton because she deserves it In 1961, Margaret Hamilton was tackling massive systems, having previously wrangled room-sized computers that blared like a foghorn whenever they crashed.

Learning Vim. Again.

I'm so excited to see Steve Riesenberg at KCJUG tonight! My former teammate on the Spring team, now doing amazing things at Netflix. Steve is also an incredible presenter! Don't meet me there, beat me there! www.meetup.com/kansascityju...

“Intelligence must draw on memory. The mind must not simply compile data — as an algorithm now does more quickly than we can — but recall lived experiences, which contain depths of meaning that only the human soul can recognize.” — Pope Leo XIV