包阅导读总结
1.
关键词:Java、框架、版本发布、漏洞修复、功能改进
2.
总结:本文是 2024 年 8 月 12 日的 Java 新闻汇总,涵盖了 JDK 23 和 24 的早期访问版本,多个框架如 Spring、Project Loom 等的更新,以及 Payara、Helidon 等的新版本发布,包括众多功能改进、漏洞修复和新特性。
3.
主要内容:
– JDK 23
– 早期访问版本 Build 36 是当前版本。
– JDK 24
– 早期访问版本 Build 11 发布,包含各种更新。
– Project Loom
– 早期访问版本 Build 24-loom+4-42 基于 JDK 24 早期访问版本 Build 11 ,改进了 Java 监视器的实现。
– Spring Framework
– 6.2.0 第七个里程碑版本发布,包括错误修复、文档改进等。
– 6.1.12 等版本发布,解决漏洞和提供新功能。
– Payara
– 发布 2024 年 8 月版,解决了 REST 端点和域重启的相关问题。
– Open Liberty
– 发布 24.0.0.8 版本,引入了简化平台选择的版本无关特性等。
– Helidon
– 4.1.0 版本支持新 JDK ,有多项变更。
– Quarkus
– 3.13.2 版本提供依赖升级和更改。
– Micrometer
– 1.14.0 第二个里程碑版本有依赖升级和新功能。
– 1.13.3 和 1.12.9 版本有改进和问题解决。
– 1.4.0 第二个里程碑版本的 Tracing 提供依赖升级。
– 1.3.3 和 1.2.9 版本的 Tracing 提供依赖升级。
– Eclipse JKube
– 1.17.0 版本发布,具有新特性。
– Project Reactor
– 2024.0.0 第五个里程碑版本有依赖升级。
– 2023.0.9 第九个维护版本有依赖升级。
– 2022.0.22 第二十二个维护版本有依赖升级。
– 2020.0.47 版本有依赖升级,且 OSS 支持即将结束。
– Piranha Cloud
– 24.8.0 版本有显著变化。
– JHipster
– Lite 1.15.0 版本发布,有错误修复等。
– Gradle
– 8.10 版本解决众多问题,有显著变化。
思维导图:
文章来源:infoq.com
作者:Michael Redlich
发布时间:2024/8/19 0:00
语言:英文
总字数:1322字
预计阅读时间:6分钟
评分:90分
标签:Java,软件开发,Java 生态系统,JDK,Spring Framework
以下为原文内容
本内容来源于用户推荐转载,旨在分享知识与观点,如有侵权请联系删除 联系邮箱 media@ilingban.com
This week’s Java roundup for August 12th, 2024, features news highlighting: the release of Spring Framework 6.2.0-M7; Project Loom Build 24-loom+4-42, the August 2024 Payara Platform, Open Liberty and Piranha Cloud releases; Gradle 8.10.0; Helidon 4.1.0; and Eclipse JKube 1.17.0.
JDK 23
Build 36 remains the current build in the JDK 23 early-access builds. Further details on this release may be found in the release notes, and details on the new JDK 23 features may be found in this InfoQ news story.
JDK 24
Build 11 of the JDK 24 early-access builds was also made available this past week featuring updates from Build 10 that include fixes for various issues. More details on this release may be found in the release notes.
For JDK 23 and JDK 24, developers are encouraged to report bugs via the Java Bug Database.
Project Loom
Build 24-loom+4-42 of the Project Loom early-access builds was made available to the Java community this past week and is based on Build 11 of the JDK 24 early-access builds. This build improves the implementation of Java monitors (synchronized methods) for enhanced interoperability with virtual threads.
Spring Framework
The seventh milestone release of Spring Framework 6.2.0 delivers bug fixes, improvements in documentation, dependency upgrades and new features such as: improvements in the framework core that includes error handling in the cache abstraction; an option to ignore bean registration with ahead-of-time compilation due to limitations in the ApplicationContext
interface; and the HandlerMethodValidator
class now supports cross-parameter constraints. Further details on this release may be found in the release notes.
Similarly, versions 6.1.12, 6.0.23, 5.3.39 and 5.3.38 of Spring Framework have been released featuring bug fixes, improvements in documentation, dependency upgrades and a new feature that provides a more efficient handling of conditional HTTP requests. These versions also provide resolutions to CVE-2024-38809, a vulnerability, in which applications that parse ETags from “If-Match” or “If-None-Match” request headers are vulnerable to a denial-of-service (DoS), and CVE-2024-38808, a vulnerability where an attacker can provide a specially crafted Spring Expression Language (SpEL) expression that may also cause a DoS condition. More details on these releases may be found in the release notes for version 6.1.12, version 6.0.23, version 5.3.39 and version 5.3.38.
Payara
Payara has released their August 2024 edition of the Payara Platform that includes Community Edition 6.2024.8 and Enterprise Edition 6.17.0 and Enterprise Edition 5.66.0. These releases resolve notable issues related to REST endpoints and domain restarts that include: a typo in the /clear-cache
endpoint; method type and parameter fixes; and applications deployed to unintended instances during domain restarts. Further details on these releases may be found in the release notes for Community Edition 6.2024.8 and Enterprise Edition 6.17.0 and Enterprise Edition 5.66.0.
Open Liberty
IBM has released version 24.0.0.8 of Open Liberty that introduces: versionless features to simplify and streamline choosing compatible features for the MicroProfile, Jakarta EE and Java EE platforms; Audit 2.0, designed for users who are not using REST Handler applications, but does not generate records for REST Handler applications as with Audit 1.0; and a new guide for using the MicroProfile Config specification for externalizing environment-specific microservice configuration for CI/CD.
Helidon
The release of Helidon 4.1.0 features support for JDK 22 and JDK 23, MicroProfile 6.1 and a Helidon MP implementation of gRPC. Other notable changes include: remove the use of the Java ConcurrentHashMap
class in favor of the Java HashMap
class due to the former not providing service loading to the Java ReentrantReadWriteLock
class; and improved parsing of HTTP prologue and headers. More details on this release may be found in the release notes.
Quarkus
Quarkus 3.13.2, the second maintenance release in the 3.13 release train, provides dependency upgrades and notable changes such as: correctly honor the value assigned to the quarkus.http.root-path
property by not using an instance of the HttpRootPathBuildItem
class together with the build()
method, defined in the RouteBuildItem
class, in the WebSockets Next extension; and ensure that all binder implementations of the Java AutoCloseable
interface are actually closed. Further details on this release may be found in the changelog.
Micrometer
The second milestone release of Micrometer Metrics 1.14.0 delivers dependency upgrades and new features such as: the addition of history tracking to ObservationValidator
class; and a new JvmThreadDeadlockMetrics
class as a new metric to collect JVM deadlocked threads. More details on this release may be found in the release notes.
Similarly, versions 1.13.3 and 1.12.9 of Micrometer Metrics feature improvements in documentation, dependency upgrades and resolutions to notable issues such as: a Prometheus tag collision by adding a new factoryType
tag; and a conflict with the kotlinSourcesJar
and sourcesJar
folders by disabling the former. Further details on these releases may be found in the release notes for version 1.13.3 and version 1.12.9.
The second milestone release of Micrometer Tracing 1.4.0 provides dependency upgrades, most notably Micrometer Metrics 1.14.0-M2, with no new features as this is a pre-release intended for testing. More details on this release may be found in the release notes.
Similarly, versions 1.3.3 and 1.2.9 of Micrometer Tracing also provide dependency upgrades, most notably Micrometer Metrics 1.13.3 and 1.12.9, respectively. Further details on these releases may be found in the release notes for version 1.3.3 and version 1.2.9.
Eclipse JKube
The release of Eclipse JKube 1.17.0 ships with new features: the ability to build multi-platform container images using the Jib; and new capabilities in Helm, the package manager for Kubernetes, to both the Maven and Gradle plugins that allow developers to install JKube-generated Helm charts and update the dependencies. More details on this release may be found in the release notes and this YouTube video.
Project Reactor
The fifth milestone release of Project Reactor 2024.0.0 provides dependency upgrades to reactor-core 3.7.0-M5
, reactor-netty 1.2.0-M5
, reactor-pool 1.1.0-M4
, reactor-addons 3.6.0-M2
and reactor-kotlin-extensions 1.3.0-M2
. There was also a realignment to version 2024.0.0-M5 with the reactor-kafka 1.4.0-M1
artifacts that remain unchanged. Further details on this release may be found in the changelog.
Next, Project Reactor 2023.0.9, the ninth maintenance release, provides dependency upgrades to reactor-core 3.6.9
, reactor-netty 1.1.22
, reactor-pool 1.0.8
, reactor-addons 3.5.2
and reactor-kotlin-extensions 1.2.3
. There was also a realignment to version 2023.0.9 with the reactor-kafka 1.3.23
artifacts that remain unchanged. More details on this release may be found in the changelog.
Next, Project Reactor 2022.0.22, the twenty-second maintenance release, provides dependency upgrades to reactor-core 3.5.20
and reactor-netty 1.1.22
and reactor-pool 1.0.8
, reactor-addons 3.5.2
and reactor-kotlin-extensions 1.2.3
. There was also a realignment to version 2022.0.22 with the reactor-kafka 1.3.23
artifacts that remain unchanged. Further details on this release may be found in the changelog.
And finally, the release of Project Reactor 2020.0.47, codenamed Europium-SR47, provides dependency upgrades to reactor-core 3.4.41
and reactor-netty 1.0.48
, reactor-pool 0.2.13
, reactor-addons 3.4.11
and reactor-kotlin-extensions 1.1.11
. There was also a realignment to version 2020.0.47 with the reactor-kafka 1.3.23
and reactor-rabbitmq 1.5.6
artifacts that remain unchanged. More details on this release may be found in the changelog. This version is also the last in the 2020.0 release train as OSS support is scheduled to end on August 31, 2024.
Piranha Cloud
The release of Piranha 24.8.0 delivers notable changes such as: the removal of the SingleServlet
class; a code refactor to add the SingleMain
class as the base class for the Piranha Core Profile; and a new MultiPiranha
class for hosting multiple web applications. Further details on this release may be found in their documentation and issue tracker.
JHipster
The release of JHipster Lite 1.15.0 ships with bug fixes, improvements in documentation, dependency upgrades and a new feature that displays preset options in landscape mode. More details on this release may be found in the release notes.
Gradle
The release of Gradle 8.10 delivers resolutions to numerous issues and notable changes: support for JDK 23; improvements to the configuration cache, including a significant reduction in the cache file size and accelerated cache loading times; and improved behavior and callback execution for the GradleLifecycle
API. Further details on this release may be found in the release notes.