BellSoft

@bellsoft.bsky.social

Delivering #LibericaJDK: supported, #Java standard compatible binaries. Among Top-5 #OpenJDK contributors.

September 2026 is almost here, and Oracle JDK 21 users have a decision to make. Updates released after that point are planned to move from NFTC to OTN. Your applications will keep running, but keeping them securely updated may no longer be free. 🧵

Bild

JEP 532 in #Java27 brings exact conversion checks to primitive patterns in switch and instanceof. A pattern matches only when the value can be converted without losing information. No manual range checks or lossy casts. Fifth preview.

Bild

Built on BellSoft Hardened Images, our hardened builder for Paketo gives Java, Native Image, Python, Go, Node.js, and Ruby teams secure-by-design low-to-zero-CVE base images at release time. The new guide covers adoption from buildpacks or Dockerfiles: bell-sw.com/blog/bellsof...

How to Improve the Security of container Images with BellSoft's Hardened Builder for Paketo Buildpacks

BellSoft released a Hardened Builder for Paketo Buildpacks. Find out how it can help you improve the security of your containerized workloads.

bell-sw.com

Java security updates are moving beyond the familiar quarterly cycle. The industry is shifting toward a faster cadence, and BellSoft intends to follow with Liberica JDK and Liberica NIK, starting with an additional August security release between the usual July and October updates.

Liberica JDK and Liberica NIK Are Moving Toward Monthly Security Updates

The pace of Java security updates is set to increase. The industry is moving from the long-standing quarterly rhythm of January, April, July, and October toward more frequent, monthly security release...

bell-sw.com

JEP 531 in #Java27 adds Set.ofLazy(...): define every candidate up front, then resolve membership only when contains(...) first asks for it. Each candidate is evaluated at most once and the result is reused, even with concurrent access. Preview API, run with --enable-preview.

Bild

Dockerfiles are fine if they are written and maintained well. Then the base image gets old, the runtime needs a bump, and every repo has its own build ritual. @edelveis.dev gets into buildpacks: shared builders, rebasing, SBOMs, and when a Dockerfile still makes sense. bell-sw.com/blog/what-ar...

What Are Buildpacks? Buildpacks vs Dockerfiles Explained

Learn what Cloud Native Buildpacks do, how they compare with Dockerfiles, and how to use them with Java, Python, Go, and Node.js.

bell-sw.com

A smaller image is not automatically a hardened image. @edelveis.dev breaks down slim, distroless, scratch, and hardened images, then shows the Java adoption path: multi-stage builds, SBOMs, signatures, CI/CD checks, and a practical checklist. bell-sw.com/blog/what-ar...

What Are Hardened Container Images? A Comprehensive Guide

Learn what hardened container images are, how they reduce attack surface and CVE noise, and how to adopt them in production.

bell-sw.com

Early start, practical topic. ☕️️️️️️ This Thursday at 8:45, Dmitry Chuyko takes the stage at Java Forum Stuttgart with From Kitchen to Table: A Safe Software Journey with SBOMs. SBOMs, CI/CD policies, hardened container images, SPDX vs CycloneDX, registry quirks, OPA and Ratify.

From Kitchen to Table - Java Forum Stuttgart

Think of your containerized Java application as a complex dish served to production. Your software supply chain is a kitchen. Would you trust a kitchen with hidden ingredients? SBOMs are the ingredien...

java-forum-stuttgart.de

Teams often start testing the next JDK too late. The JDK 27 Quality Outreach heads-up is a good reminder that early testing is not bureaucracy. It is how you catch awkward changes while they are still cheap to deal with.

Bild