It was another relatively quiet week for the January 3rd, 2022 edition of the Java news roundup featuring build updates to JDK 18 and JDK 19, VMware publishing CVE-2021-22060 as a follow up to CVE-2021-22096, a new Groovy DSL for Spring Integration, Helidon 2.4.1, Hibernate Search versions 6.0.8 and 6.1.0.Beta2, JHipster 7.5.0, JReleaser 0.10.0 and Gradle having joined the Micronaut Foundation.
JDK 18
Build 30 of the JDK 18 early access builds was made available this past week, featuring updates from Build 29 that include fixes to various issues. More details may be found in the release notes.
JDK 19
Build 4 of the JDK 19 early-access builds was also made available this past week, featuring updates from Build 3 that include fixes to various issues.
For JDK 18 and JDK 19, developers are encouraged to report bugs via the Java Bug Database.
Spring Framework
VMware has published CVE-2021-22060, Additional Log Injection in Spring Framework, as a follow up to CVE-2021-22096, Log Injection in Spring Framework. The former was included in Spring Framework versions 5.3.14 and 5.2.19, released in mid-December 2021, to address additional types of potential malicious input related to Log4Shell vulnerability.
Artem Bilan, principal software engineer and Spring Integration lead at VMware, has introduced a new Groovy DSL for Spring Integration, a Groovy extension of Spring Integration Java DSL. Bilan explains that this concept was originally implemented almost ten years ago, writing:
You, perhaps, heard about our old attempt to make a Groovy DSL on top of Spring Integration XML support. But the solution was pretty cumbersome (especially for protocol-specific channel adapters) and the burden of support has grown tremendously. This latest implementation is fully based on already-mature Java DSL and its builder pattern support.
This Groovy DSL will complement the existing Kotlin extension of Java DSL, namely Kotlin DSL for Spring Integration.
Helidon
Oracle has released Helidon 2.4.1 that ships with bug fixes and optimizations to the various Helidon components such as WebServer, WebClient, Metrics, Health Checks and OpenAPI. More details may be found in the release notes.
Hibernate
Hibernate Search 6.0.8.Final was released to include fixes for: a use case of a cyclic dependency using the mass indexer; an occasional NullPointerException on shutdown; retrieving additional metadata for properties that are not used by Hibernate Search; and missing images and syntax highlighting with example code in the documentation.
On the road to Hibernate Search 6.1.0, the second beta release has been made available to include dependency upgrades of Hibernate ORM 5.6.2, Lucene 8.11.1, Jackson 2.13.1 and Elasticsearch Client 7.16.2. Version 6.1.0.Beta2 is also compatible with Elasticsearch versions 5.6, 6.8, 7.10 and 7.16, and OpenSearch servers versions 1.0 and 1.2.
JHipster
Version 7.5.0 of JHipster has been released to include new features such as: a dependency upgrade to Spring Boot 2.5.8; upgrades to Angular 13 and Keycloak 16; a migration to Cucumber JUnit 5; and adapting to the Neo4j-Migrations API. Further details may be found in the release notes.
JReleaser
JReleaser 0.10.0 has been released to include: improvements in the JPackage tool to assemble distributions of the Native Package type; support for additional archive extensions (.tar.xz, .txz, .tar.bz2 and .tbz2); adding the GoFish package manager to the list of supported package managers; and a new platform replacements utility to support additional platform-specific artifacts. This release contains breaking changes and is considered the last push to version 1.0. Further details may be found in the changelog.
Micronaut Foundation
As part of a new partnership program, the Micronaut Foundation has announced that Gradle Inc. has joined the foundation as the first Tools and Infrastructure Partner. Established in June 2020 as a non-for-profit organization, the Micronaut Foundation, supported by the Technology Advisory Board, advances innovation and adoption of the Micronaut framework.