We surveyed 250 Spring developers at @spring_io 2026 about container security.
The results exposed a major blind spot:
64% don’t realize #Dockerfiles can introduce security vulnerabilities.
Container security doesn’t start with scanning.
It starts with the image, the runtime, and the Dockerfile.
Download the Spring Container Security Report: https://t.co/l6Xc9f53ty
#Java #SpringBoot #Docker #ContainerSecurity #DevSecOps
Modernizing Production Containers to Resist the Constant CVE Flow
My new article on @JAVAPROmagazin lays out approaches to building a centralized vulnerability management system that enables controlled CVE identification and remediation:
https://t.co/mYY21knJto
JDK 26 is where some long-running #Java stories move forward: final fields get stricter, HTTP client gets HTTP/3, G1 gets faster, and applets finally leave for good.
@dchuyko put all JEPs into one readable overview: https://t.co/PwaF7KMONK
Compose Hot Reload is now stable and bundled with Compose Multiplatform since v.1.10.0!
This deep dive by @Sellmair and Azat Abdullin walks through the engineering behind Compose Hot Reload and how it works under the hood.
For the curious among you 👀
https://t.co/jwghQAyyDU
My new teammate who came on board in 2005 and was writing code very productively, demonstrated an amazing feature: his IDE displayed an error, and he pressed a button, sent his former colleagues a stack trace, and automatically opened a bug! to the best quality #IntelliJIDEA25
Introducing BellSoft Hardened Images, a new way to handle container security. OS, runtime, and CVE management all covered by one team under a single SLA. Up to 95% fewer CVEs and 30% less resource use for #Java workloads: https://t.co/wXqVlJa9ve
Day 2 of #JVMLS: Valhalla + Kotlin, operator overloading, vector API, and the main rule of benchmarking from Sergey Kuksenko. @dchuyko and @asm0di0 report from Santa Clara:
#Java slow? Maybe it’s not the code. Maybe it’s your containers, your base image… or your #JVM playing dumb. @dchuyko reveals simple changes that cut startup time and cloud bills—without touching a line of code.
Dive in now: https://t.co/KIIvjlloD3
#CloudCosts#Performance
Ever been annoyed with how complex it is to execute processes in Java and handle stdin, stdout and stderr?
Me too - so Introducing JBang Jash - https://t.co/vY5iMKnixs
🚀 Liberica JDK 24 is here! This release brings 2,597 fixes in JDK, 175 in FX, and 24 JEPs introducing performance improvements, memory optimizations, and security updates. If you're preparing for JDK 25, now’s the time to test the new features. Read the full release details: https://t.co/kYkKkfDVZK