Open Source Projects

Java Roundup: WildFly 40, Micronaut 5.0, Spring AI 2.0 & Mor

The Java ecosystem is humming with activity. Major releases this past week, including WildFly 40 and Micronaut 5.0, underscore a strong push for platform evolution and developer productivity.

Code snippets and logos representing various Java projects

Key Takeaways

  • Major GA releases in May 2026 include WildFly 40, Micronaut 5.0, Maven Embedded GlassFish Plugin 8.0, and Apache Fory 1.0.
  • Spring AI 2.0 milestone 7 introduces significant tooling enhancements for easier AI integration.
  • WildFly 40 and Open Liberty 26.0.0.5 now offer full support for Jakarta EE 11, keeping enterprise Java current.
  • Micronaut 5.0 focuses on core refactoring for enhanced performance and predictability, alongside new resilience features.

The Java landscape has just witnessed a significant flurry of activity as we round the corner of mid-May 2026. What’s particularly striking is the sheer volume of General Availability releases across key projects: WildFly 40, Micronaut 5.0, the Maven Embedded GlassFish Plugin 8.0, and Apache Fory 1.0 all landed, signaling major platform updates. This, coupled with the May edition of Open Liberty and milestone releases for Spring AI, paints a picture of a Java ecosystem that’s not just active, but is actively pushing boundaries.

OpenJDK’s Forward March

It was a busy week in the OpenJDK ecosystem during the week of May 18th, 2026 highlighting three JEPs elevated from Proposed to Target to Targeted and three JEPs elevated from Candidate to Proposed to Target for JDK 26. Further details may be found in this InfoQ news story.

For JDK 27, developers are encouraged to report bugs via the Java Bug Database.

GlassFish’s Embedded Evolution

Version 8.0.0 of the Maven Embedded GlassFish Plugin delivers dependency upgrades and two new features that streamline development workflows. First, it can now initiate GlassFish in a separate JVM, automatically including necessary module values for –add-opens and –add-exports by default. This is a significant quality-of-life improvement, reducing manual configuration headaches. Second, the ability to select an Embedded GlassFish version using a configuration property and dependency management offers more granular control over project setups.

Spring AI 2.0: The Tooling Takes Center Stage

The seventh milestone release of Spring AI 2.0.0 is here, and while it’s packed with bug fixes, documentation improvements, and dependency upgrades, the new features are what really grab attention. A new ToolSpec inner interface has been added to the ChatClient interface, acting as a single consumer for registering tool methods. This centralizes tool registration, making it easier to manage and discover. Furthermore, the use of the ChatClient class as the default for auto-registration of ToolCallAdvisor tools or tool callbacks simplifies the integration of AI-powered tools into applications.

WildFly 40: Embracing Jakarta EE 11

The GA release of WildFly 40 is a substantial update, bringing not only bug fixes and dependency upgrades but also key support for Jakarta EE 11. This includes the integration of implementations for Jakarta Pages 4.0, Jakarta WebSocket 2.2, and Jakarta Authorization 3.0 specifications, ensuring WildFly remains at the forefront of Java enterprise standards. Additionally, strong support for logging out of an application using RP-Initiated, front-channel logout, and back-channel protocols for OIDC adds critical security and authentication capabilities.

Micronaut 5.0: Refactoring for Performance and Predictability

After a rigorous cycle of three milestone releases and one release candidate, the Micronaut Foundation has finally delivered version 5.0.0 of the Micronaut Framework. This release is built on baselines of JDK 25, Groovy 5, and Kotlin 2.3. The core changes are significant, focusing on enhancing performance and developer predictability. A major refactoring of the IoC container and compile-time infrastructure—including bean resolution, qualifier handling, and annotation processing—aims to reduce runtime work. The introduction of nullability support via JSpecify and enhanced capabilities for resilience and context propagation with programmatic retry and circuit breaker APIs demonstrate Micronaut’s commitment to modern application development patterns.

Sergio Del Amo Caballero, Principal Member of the Technical Staff at Oracle and Committer to the Micronaut and Grails frameworks, described the significance of this release, writing:

Micronaut 4 was introduced almost three years ago, so Micronaut 5 is both a major framework release and a broad platform refresh across more than 70 Micronaut modules.

Open Liberty 26.0.0.5: Jakarta EE 11 and Security Patches

The GA release of Open Liberty 26.0.0.5 arrives with full support for the Jakarta EE 11 Platform, including Web Profile and Core Profile. This ensures developers can use the latest enterprise Java standards. Crucially, it also adds support for executing Spring Boot 4.0 applications on Open Liberty, broadening its appeal. On the security front, this release includes a resolution to CVE-2026-3621, a vulnerability where an attacker could spoof an identity under limited conditions on applications deployed without proper authentication and authorization configurations.

Gatherers4j 0.14.0: Enhanced Data Processing

The release of Gatherers4j 0.14.0 introduces several new gatherers focused on statistical calculations, namely movingGeometricMean(), movingGeometricMeanBy(), and runningGeometricMean(). This adds powerful new tools for time-series and financial data analysis. The runningGeometricMeanBy() gatherer, in particular, is enhanced to filter out null values from the input stream. Furthermore, annotations defined in JSpecify are now organized, and a refactor of CrossGatherer, FlattenSingleOrFail, and TypeFilteringGatherer classes to use greedy integrators suggests ongoing efforts to optimize data processing pipelines.

Apache Kafka 4.3.0: OAuth2 and Log Management Improvements

Apache Kafka 4.3.0 brings important enhancements, particularly in its authentication and internal management. The Kafka OAuth2 Authentication sees improvements with the addition of support for private_key_jwt client assertions. This offers enhanced security, greater flexibility, and better compatibility with modern authentication standards. Additionally, a cleanup of the mechanism that cordons off log directories in a Kafka topic aims to improve the reliability and manageability of data storage.

Apache Fory 1.0.0: Polyglot Serialization Arrives

The release of Apache Fory 1.0.0 marks the debut of a new polyglot serialization framework. While the provided snippet is brief, the mere existence of a new serialization framework entering the Apache ecosystem, especially one touting polyglot capabilities, is noteworthy. It suggests a growing demand for flexible and language-agnostic data interchange solutions.

Why Does This Matter for Developers?

This wave of releases underscores a fundamental truth in software development: stagnation is death. For developers, these updates offer immediate benefits. Micronaut’s performance optimizations and Spring AI’s enhanced tooling can lead to faster, more intelligent applications. WildFly and Open Liberty’s embrace of Jakarta EE 11 mean cleaner, more standards-compliant enterprise solutions. Kafka’s improved security features are vital for strong data pipelines. The message is clear: staying current with these frameworks isn’t just good practice; it’s increasingly essential for building competitive, secure, and performant software.


🧬 Related Insights

Frequently Asked Questions

What is the significance of WildFly 40’s Jakarta EE 11 support?

WildFly 40’s GA release now fully supports Jakarta EE 11, meaning it integrates implementations for the latest Jakarta specifications like Pages 4.0, WebSocket 2.2, and Authorization 3.0, keeping enterprise Java applications modern and compliant.

How does Micronaut 5.0 improve performance?

Micronaut 5.0 achieves performance improvements through a significant refactoring of its IoC container and compile-time infrastructure, aiming to reduce runtime overhead and increase predictability in bean resolution and annotation processing.

Are there security updates in Open Liberty 26.0.0.5?

Yes, Open Liberty 26.0.0.5 includes a fix for CVE-2026-3621, a vulnerability that could allow identity spoofing under certain conditions when authentication and authorization are not properly configured.

Sam O'Brien
Written by

Ecosystem and language reporter. Tracks package releases, runtime updates, and OSS maintainer news.

Frequently asked questions

What is the significance of WildFly 40's Jakarta EE 11 support?
WildFly 40's GA release now fully supports Jakarta EE 11, meaning it integrates implementations for the latest Jakarta specifications like Pages 4.0, WebSocket 2.2, and Authorization 3.0, keeping enterprise Java applications modern and compliant.
How does Micronaut 5.0 improve performance?
Micronaut 5.0 achieves performance improvements through a significant refactoring of its IoC container and compile-time infrastructure, aiming to reduce runtime overhead and increase predictability in bean resolution and annotation processing.
Are there security updates in Open Liberty 26.0.0.5?
Yes, Open Liberty 26.0.0.5 includes a fix for CVE-2026-3621, a vulnerability that could allow identity spoofing under certain conditions when authentication and authorization are not properly configured.

Worth sharing?

Get the best Open Source stories of the week in your inbox — no noise, no spam.

Originally reported by InfoQ

Stay in the loop

The week's most important stories from Open Source Beat, delivered once a week.