OpenJDK

Canonical and Oracle link shorter security-update intervals to AI-assisted bug discovery; Debian's four kernel advisories since September 29 list 3 to 1,313 CVE IDs, and one CVE reached Ubuntu 25 days after Debian's advisory (Herald counts).

The Java language team says it has ceased development of Primitive Types in Patterns, instanceof, and switch after five previews; the feature will be removed from JDK 28, and Constant Patterns is planned.

Oracle's non-LTS Java 27 release makes G1 the universal default garbage collector, ships post-quantum TLS 1.3 key exchange, and finalizes compact object headers by default.

OpenJDK's interim policy bans AI-generated contributions on safety, security, and IP grounds, even as Oracle's CEO and CTO publicly celebrate AI coding productivity elsewhere in the company.

JEP 540 has reached Targeted status for JDK 28, adding a standard JSON API to the JDK itself, twelve years after a similar 2014 proposal was never delivered.

JDK 27's initial release candidate moves from August 6 to August 20 to align with Oracle's Critical Patch Update, shrinking the release's feedback window ahead of a nine-JEP September launch.

Java 26 ships 10 JEPs including HTTP/3, ahead-of-time caching for all garbage collectors, G1 throughput gains, and the final removal of the Applet API after a five-year deprecation.