This week’s Java roundup for August 11th, 2025, features news highlighting: the eighth milestone release of Spring Framework 7.0; the fifth milestone release of Spring Data 2025.1.0; the August 2025 edition of Open Liberty; Hibernate Reactive 4.1; and the first release candidates of Quarkus 3.26 and Gradle 9.1.
JDK 25
Build 36 of the JDK 25 early-access builds was made available this past week featuring updates from Build 35 that include fixes for various issues. Further details on this release may be found in the release notes.
JDK 26
Build 11 of the JDK 26 early-access builds was also made available this past week featuring updates from Build 10 that include fixes for various issues. More details on this release may be found in the release notes.
Spring Framework
The eighth milestone release of Spring Framework 7.0.0 delivers bug fixes, improvements in documentation, dependency upgrades and new features such as: a new @HttpServiceClient annotation that marks an HTTP service interface as a candidate to create a client proxy; and a new RestTestClient interface that can test live servers and mock setups. Further details on this release may be found in the release notes.
The release of Spring Framework 6.2.10 provides a resolution to CVE-2025-41242, a path traversal vulnerability, also known as directory traversal or dot-dot-slash attack, that, under certain conditions, affects Spring Framework MVC applications running on non-compliant servlet containers. This vulnerability allows an attacker to access files and directories outside of the server root by “manipulating input parameters, often file paths, to navigate up the directory structure using sequences like ../ or URL encoded equivalents” that may lead to disclosure of sensitive information and remote code execution. This CVE affects the Spring Framework 5.3, 6.0 and 6.1 release trains along with versions 6.2.0 through 6.2.9. More details on this release may be found in the release notes.
The fifth milestone release of Spring Data 2025.1.0 features support for: Spring Framework 7; Jakarta Persistence 3.2 and Jakarta Servlet 6.1 under Jakarta EE 11; Kotlin 2.2; and the recent release of Jackson 3.0. Other new features include: an increased use of the Jakarta Persistence Query Language (JPQL) to ultimately replace use of the QueryCriteria interface; and support for composite IDs (or composite keys) in the Spring Data JDBC and Spring Data R2DBC sub-projects for improved mapping of an entity with an attribute for each column in the composite ID. Breaking changes include: removal of deprecated items such as: the Spring Framework ListenableFuture interface, the @PersistenceConstructor annotation in favor of @PersistenceCreator, and the hasSpelExpression() method in favor of the hasValueExpression() defined in the Parameter class. Further details on this release may be found in the release notes.
Open Liberty
The release of Open Liberty 25.0.0.8 delivers support for MicroProfile 7.1 that features updates to MicroProfile Telemetry 2.1 and MicroProfile OpenAPI 4.1; and resolutions to CVE-2024-56339, a vulnerability that allows an attacker to bypass security restrictions due to a failure to honor security configuration, and CVE-2025-36097, a vulnerability that allows an attacker to send a specially crafted request that causes the server to consume excessive memory resources resulting in a stack overflow and a subsequent denial of service.
Hibernate
The release of Hibernate Reactive 4.1.0 features many dependency upgrades and notable changes such as: a new ReactiveEmbeddableAssembler class that eliminates a ClassCastException when using entities annotated with the Jakarta Persistence @EmebedddedId and @OneToOne annotations; and a resolution improper chaining by replacing the call to the thenAccept() method with the thenCompose() method, both defined in the Java CompletionStage interface, in the reactiveResolveInstance() method defined in the ReactiveEmbeddableInitializerImpl class. This release is also compatible with Hibernate ORM 7.1.0.Final and Vert.x SQL Client 5.0. More details on this release may be found in the release notes.
Quarkus
In conjunction with Quarkus 3.25.3, the first release candidate of Quarkus 3.26.0 features notable changes such as: support for named persistence units and data sources in Hibernate Reactive; and the ability to expose capabilities of the DevUI as Model Context Protocol (MCP) tools that allows a Quarkus application running in Dev Mode to be a MCP server. This first release candidate updates to Gradle 9.0.0, Hibernate ORM 7.1.0.Final, Hibernate Search 8.1.0.Final and Hibernate Reactive 3.1.0.Final. Further details on this release may be found in the release notes.
Micrometer
The second milestone release of Micrometer Metrics 1.16.0 delivers dependency upgrades and new features such as: a new forMeters() method, defined in the MeterFilter interface, to configure an instance of a MeterFilter for a selection of meters with a given prefix; and the addition of the @Contract annotation on the gauge() method, defined in the MeterRegistry class, for improved nullability. More details on this release may be found in the release notes.
The second milestone release of Micrometer Tracing 1.6.0 features an alignment with Micrometer Metrics 1.16.0-M2. Further details on this release may be found in the release notes.
Project Reactor
The sixth milestone release of Project Reactor 2025.0.0 provides dependency upgrades to reactor-core 3.8.0-M6, reactor-netty 1.3.0-M6, reactor-pool 1.2.0-M6, reactor-addons 3.6.0-RC4 and reactor-kotlin-extensions 1.3.0-RC3. More details on this release may be found in the release notes.
Similarly, Project Reactor 2024.0.9, the ninth maintenance release, provides dependency upgrades to reactor-core 3.7.9 and reactor-netty 1.2.9. There was also a realignment to version 2024.0.9 with the reactor-pool 1.1.3, reactor-addons 3.5.2, reactor-kotlin-extensions 1.2.3 and reactor-kafka 1.3.23 artifacts that remain unchanged. Further details on this release may be found in the release notes.
Gradle
The first release candidate of Gradle 9.1.0 featuring: support for the upcoming GA release of JDK 25; improvements to their diagnostics and preview tools that includes a new task graph to visualize dependencies without having to build the application and enhanced project reporting; and an enhanced command-line interface for improved usability and feedback in the terminal. More details on this release may be found in the release notes.
