1. Spring and Java
>> Enhanced Vulnerable API Detection in JetBrains IDEs and Qodana [blog.jetbrains.com]
With enhanced vulnerable API detection in JetBrains IDEs and Qodana, you can now catch security vulnerabilities as you code. The functionality highlights vulnerable methods from open-source libraries and helps you quickly navigate to update to a secure version. Good stuff.
Also worth reading:
- >> All New Java Language Features Since Java 21 [inside.java]
- >> ShuffleGatherer [javaspecialists.eu]
Webinars and presentations:
- >> Solving Java’s 1 Billion Row Challenge [youtube.com/@MarcoCodes]
- >> Spring Cloud lead and friend Spencer Gibb, live from SpringOne 2025 [youtube.com/@coffeesoftware]
- >> Podcast: Observability in Java with Micrometer – a Conversation with Marcin Grzejszczak [infoq.com]
- >> Backend Developer’s Guide to Frontend Deployment Using Amazon Q CLI [youtube.com/@awsdevelopers]
- >> Ahead-of-Time Computation [inside.java]
- >> A Bootiful Podcast: JobRunr founder Ronald Dehuysser on what’s new in version 8 [spring.io]
- >> Boosting Kafka Latency Performance by 3x with Zing JVM and AutoMQ [foojay.io]
Time to upgrade:
- >> The Java Platform Extension is now also available on open-vsx.org [inside.java]
- >> Hibernate Validator 9.1.0.Alpha1 is out [in.relation.to]
- >> Quarkus 3.26.1, 3.20.2.2 and 3.15.6.2 – Emergency releases [quarkus.io]
- >> Vert.x 4.5.20 [github.com/eclipse-vertx]
- >> Elasticsearch 8.19.3 [github.com/elastic]
2. Technical & Musings
>> Passkeys and Modern Authentication [lucumr.pocoo.org]
While the convenience of passkeys is appealing, they do introduce significant risks of vendor lock-in, ultimately trading password friction for a loss of user agency and control over digital identity.
Also worth reading:
- >> From Black Box to Blueprint [martinfowler.com]
- >> Some thoughts on LLMs and Software Development [martinfowler.com]
- >> Moving Faster by Not Breaking Things: Initial investments allow for a fearless approach to pushing changes [queue.acm.org]
- >> Git default options [foojay.io]
- >> Research, Review, Rebuild: Intelligent Modernisation with MCP and Strategic Prompting [martinfowler.com]
- >> Why a holistic approach is the key to a successful legacy modernisation project [blog.scottlogic.com]
3. Pick of the Week
>> Maker’s Schedule, Manager’s Schedule [paulgraham.com]
« Previous
Java Weekly, Issue 609