September 2026 is almost here, and Oracle JDK 21 users have a decision to make. Updates released after that point are planned to move from NFTC to OTN. Your applications will keep running, but keeping them securely updated may no longer be free. 🧵
BellSoft
@bellsoft.bsky.social
Delivering #LibericaJDK: supported, #Java standard compatible binaries. Among Top-5 #OpenJDK contributors.
Alpine or not? Small size is the easy part of the answer. This video gets into everything that can change it once the image meets a real workload. youtu.be/37tnF-THIkE
Hardened images remove the package manager, curl, and other handy tools. Great for the attack surface. Less great when production breaks. JRush Episode 7 gets into that trade-off and plenty more around signing, SBOMs, provenance, buildpacks, and CVE response: www.youtube.com/live/AsGmInC...
Buildpacks remove a lot of repetitive containerization work, but they also trade some control for automation. @edelveis.dev breaks down that trade-off in seven minutes, including where a Dockerfile still makes more sense: youtu.be/19ZDEvnjtDI
JEP 532 in #Java27 brings exact conversion checks to primitive patterns in switch and instanceof. A pattern matches only when the value can be converted without losing information. No manual range checks or lossy casts. Fifth preview.
CyberJAR is now in the Foojay Java in Education Catalog. A useful collection of Java courses, videos, books, and tools, now including our channel: education.foojay.social
Foojay Java in Education Catalog
A community-driven catalog of Java learning resources with websites, tutorials, videos, books, and tools for students, educators, coding clubs, and developers.
education.foojay.social
There is no Ubuntu OS inside an Ubuntu container. A container is an isolated process running on the host kernel, where memory, CPU, PIDs, mounts, and permissions are enforced. @edelveis.dev breaks it down: bell-sw.com/blog/linux-i...
Linux in Containers vs. Linux OS
Learn why a Linux container is not a full Linux operating system. Understand how Docker containers share the host kernel, use OS libraries, and where compatibility problems arise.
bell-sw.com
Built on BellSoft Hardened Images, our hardened builder for Paketo gives Java, Native Image, Python, Go, Node.js, and Ruby teams secure-by-design low-to-zero-CVE base images at release time. The new guide covers adoption from buildpacks or Dockerfiles: bell-sw.com/blog/bellsof...
How to Improve the Security of container Images with BellSoft's Hardened Builder for Paketo Buildpacks
BellSoft released a Hardened Builder for Paketo Buildpacks. Find out how it can help you improve the security of your containerized workloads.
bell-sw.com
The July Liberica NIK CPU builds are now available: 23.0.13 for JDK 17 23.1.12 for JDK 21 25.0.4 for JDK 25 The release includes security and bug fixes, along with the latest Liberica JDK updates. Details: bell-sw.com/blog/liberic...
The builds of Liberica NIK 23.0.13, 23.1.12, and 25.0.4 are generally available
New Liberica NIK versions 23.0.13, 23.1.12, and 25.0.4 include several important fixes in the JDK
bell-sw.com
Java security updates are moving beyond the familiar quarterly cycle. The industry is shifting toward a faster cadence, and BellSoft intends to follow with Liberica JDK and Liberica NIK, starting with an additional August security release between the usual July and October updates.
Liberica JDK and Liberica NIK Are Moving Toward Monthly Security Updates
The pace of Java security updates is set to increase. The industry is moving from the long-standing quarterly rhythm of January, April, July, and October toward more frequent, monthly security release...
bell-sw.com
The July Liberica JDK CPU and PSU builds are now available. The release addresses 18 CVEs and includes 1,252 fixes and backports across Liberica JDK 6, 7, 8, 11, 17, 21, 25, and 26. Download the builds and review the security summary: bell-sw.com/blog/liberic...
Liberica JDK builds are released
Download Liberica JDK CPU versions 8, 11, 17, 21, 25, and 26 with improved security.
bell-sw.com
New from BellSoft: a hardened builder for Paketo Buildpacks. Built on BellSoft Hardened Images, it gives teams a secure-by-design baseline with low-to-zero-CVE base images at release time, with continuous patching under SLA. No application code changes: bell-sw.com/news/bellsof...
BellSoft Announces Hardened Builder for Paketo Buildpacks™, Bringing Zero-CVE Container Images to Buildpacks® Users
San Jose, California (July 21, 2026) BellSoft, a leading OpenJDK vendor, announces the general availability of a new hardened builder image for Paketo Buildpacks™. Built entirely on BellSoft Hardened ...
bell-sw.com
Last week, @edelveis.dev and Mohammad-Ali A'râbi had a great conversation about Shai-Hulud, Miasma, Phantom Gyp worms - the latest wave of supply chain attacks. Missed the stream? The full recording is here: www.youtube.com/watch?v=SPly...
The Worms in Your Pipeline: Inside the New Supply Chain Attacks
YouTube video by CyberJAR
youtube.com
JEP 531 in #Java27 adds Set.ofLazy(...): define every candidate up front, then resolve membership only when contains(...) first asks for it. Each candidate is evaluated at most once and the result is reused, even with concurrent access. Preview API, run with --enable-preview.
BellSoft container images are now available on Google Cloud Marketplace. Minimized, signed, SBOM-backed images for Java and other production workloads, ready to use as a secure base on Google Cloud. Find them here: console.cloud.google.com/marketplace/...
Google Cloud console
Spend smart, procure faster and retire committed Google Cloud spend with Google Cloud Marketplace. Browse the catalog of over 2000 SaaS, VMs, development stacks, and Kubernetes apps optimized to run on Google Cloud.
console.cloud.google.com
We are live now! 🔥 @edelveis.dev and Mohammad-Ali A'râbi are getting into how supply chain worms spread through the systems teams normally trust. Join the conversation: www.youtube.com/watch?v=SPly...
The Worms in Your Pipeline: Inside the New Supply Chain Attacks
YouTube video by CyberJAR
youtube.com
Dockerfiles are fine if they are written and maintained well. Then the base image gets old, the runtime needs a bump, and every repo has its own build ritual. @edelveis.dev gets into buildpacks: shared builders, rebasing, SBOMs, and when a Dockerfile still makes sense. bell-sw.com/blog/what-ar...
What Are Buildpacks? Buildpacks vs Dockerfiles Explained
Learn what Cloud Native Buildpacks do, how they compare with Dockerfiles, and how to use them with Java, Python, Go, and Node.js.
bell-sw.com
Tomorrow at 6 PM CEST, Mohammad-Ali A'râbi joins @edelveis.dev for The Worms Are in Your Pipeline. Shai-Hulud, Miasma, Phantom Gyp, how they spread through developer machines, CI caches, credentials, release pipelines, and how teams can contain them. Set a reminder: www.youtube.com/watch?v=SPly...
The Worms in Your Pipeline: Inside the New Supply Chain Attacks
YouTube video by CyberJAR
youtube.com
Last week, @edelveis.dev and Johannes Bossle looked at AI-assisted development at team scale: shared specs, visual models, Git-based versioning, and keeping design and implementation aligned. If you missed it, now’s a great time to catch up: www.youtube.com/watch?v=6UqE...
Spec Driven Design on Team Level
YouTube video by CyberJAR
youtube.com
You can write perfectly valid Java code and still choose the wrong data structure. @asm0dey.site goes through Big O, sorting, ArrayList growth, LinkedList trade-offs, ArrayDeque, and what happens inside HashMap. Watch here: youtu.be/hY5A7kKQTKw
Data Structures and Algorithms Explained with Java
YouTube video by CyberJAR
youtu.be
A smaller image is not automatically a hardened image. @edelveis.dev breaks down slim, distroless, scratch, and hardened images, then shows the Java adoption path: multi-stage builds, SBOMs, signatures, CI/CD checks, and a practical checklist. bell-sw.com/blog/what-ar...
What Are Hardened Container Images? A Comprehensive Guide
Learn what hardened container images are, how they reduce attack surface and CVE noise, and how to adopt them in production.
bell-sw.com
Early start, practical topic. ☕️️️️️️ This Thursday at 8:45, Dmitry Chuyko takes the stage at Java Forum Stuttgart with From Kitchen to Table: A Safe Software Journey with SBOMs. SBOMs, CI/CD policies, hardened container images, SPDX vs CycloneDX, registry quirks, OPA and Ratify.
From Kitchen to Table - Java Forum Stuttgart
Think of your containerized Java application as a complex dish served to production. Your software supply chain is a kitchen. Would you trust a kitchen with hidden ingredients? SBOMs are the ingredien...
java-forum-stuttgart.de
Finding CVEs is usually not the hard part. The hard part is patch ownership, rebuilds, rollout timing, and the base image mess that keeps repeating. BellSoft Hardened Images are built to deal with exactly that: bell-sw.com/bellsoft-har...
We have started ⚡ @edelveis.dev and Johannes Bossle are live now with Spec driven design on team level. This stream is about what happens when AI coding moves beyond solo experimentation and a whole team has to build and maintain the same system. Join here: www.youtube.com/watch?v=6UqE...
Spec Driven Design on Team Level
YouTube video by CyberJAR
youtube.com
On July 7, @asm0dey.site is hosting the next Spring User Group Berlin meetup at JetBrains. Dmitry Chuyko will speak on From Kitchen to Table: A Safe Software Journey with SBOMs. Details: www.meetup.com/spring-user-...
Designing Spring Modulith Applications with Dmitry Chuyko and Alexei Zinoviev, Tue, Jul 7, 2026, 6:00 PM | Meetup
And the new, right-before-holidays, edition of our meetup! **JetBrains** as a company deeply invested into Java and Spring ecosystem, is hosting us! **Alexei Zinoviev — S
meetup.com
Teams often start testing the next JDK too late. The JDK 27 Quality Outreach heads-up is a good reminder that early testing is not bureaucracy. It is how you catch awkward changes while they are still cheap to deal with.
On July 1 at 5 PM CEST, @edelveis.dev is hosting Johannes Bossle for Spec driven design on team level. Prompts work well right up to the point where a whole team has to build and maintain the same system. This session is about what comes next. Set a reminder: www.youtube.com/watch?v=6UqE...
Spec Driven Design on Team Level
YouTube video by CyberJAR
youtube.com
Still in the container security headspace after JRush? Three follow-ups to open: Docker Container Image Security: 13 Best Practices www.youtube.com/watch?v=TyNG... Hardened Container Images 101 www.youtube.com/watch?v=Co16... Your Scanner Found 200 CVEs. Now What? www.youtube.com/shorts/ESAlg...
Docker Container Image Security: 13 Best Practices
YouTube video by CyberJAR
youtube.com
Missed JRush yesterday? Two links worth opening: Recording: www.youtube.com/live/AsGmInC... Container security checklist: jrush.bell-sw.com/container-se...
We are live now 😎 JRush Episode 7 is on. Signed pipelines, buildpacks, hardened images, SBOMs, provenance, and a CVE workflow your team can actually use. Join here: www.youtube.com/live/AsGmInC...
JRush Ep 7 - Container Supply Chain Security
YouTube video by CyberJAR
youtube.com