Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy

Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy - InfoQ

InfoQ Homepage News Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy

Java

Below the Framework: Why Agent Context Is an Infrastructure Problem (Webinar Aug 27th)

Java News Roundup: Shenandoah GC, TeamCity CVE, A2A Java SDK, Camel, Gradle, GlassFish, Groovy

Aug 10, 2026 4 min read

by

• Michael Redlich

#### Follow us on

Youtube

232K Followers

Linkedin

26K Followers

Instagram

New

RSS

19K Readers

X

57.1k Followers

Facebook

21K Likes

Bluesky

Listen to this article -

0:00

Audio ready to play

Your browser does not support the audio element.

Normal

1.25x

1.5x

Like

new dropdown rading list

• Reading list

This week's Java roundup for August 3rd, 2026, features news highlighting: JEP 535, Shenandoah GC: Generational Mode by Default, targeted for JDK 28; point releases of A2A Java SDK, Apache Camel and Gradle; a maintenance release of GlassFish; the fifth milestone release of Groovy 8.0; and a follow-up of the JetBrains TeamCity CVE.

#### OpenJDK

JEP 535, Shenandoah GC: Generational Mode by Default , has been elevated from Proposed to Target to Targeted for JDK 28. This JEP proposes to designate the Shenandoah Garbage Collector to generational mode by default. The non-generational mode will be deprecated with the intent to remove it in a future release.

#### JDK 27

Build 34 of the JDK 27 early-access builds was made available this past week featuring updates from Build 33 that include fixes for various issues . Further details on this release may be found in the release notes .

Mark Reinhold , Chief Architect, Java Platform Group at Oracle, has announced that, due to increase in frequency of Critical Patch Updates (CPUs), the date for the initial release candidate of JDK 27, originally scheduled for August 6, 2026 will now be August 20, 2026. This aligns with the August 18, 2026 release of the next available CPU. Describing the risks for this change, Reinhold stated:

This reduces the time available for feedback on RC builds by two weeks, from five weeks and four days to three weeks and four days. That does, at least theoretically, increase risk. Historically, however, since we switched to the six-month cadence in JDK 10 we have needed a second RC build for fewer than half of our releases, and none of the bugs that triggered those builds was reported by an end user . This suggests that the risk is tolerable.

Build 34 of JDK 27, released this past week, was originally intended to serve as the build for the initial release candidate.

#### JDK 28

Build 10 of the JDK 28 early-access builds was also made available this past week featuring updates from Build 9 that include fixes for various issues . More details on this release may be found in the release notes .

#### GlassFish

The release of GlassFish 8.0.4 delivers bug fixes, documentation improvements, dependency upgrades and new features such as: improvements to the AutoDeployer and FileArchive classes that add protection against files escaping the archive file; and improved diagnostics for unresolved JNDI lookups with the <ejb-ref> deployment descriptor element.

This release also provides resolutions to CVE-2026-59889 and CVE-2026-54515 , both related to deserialization with Jackson Databind and a more critical CVE-2026-12605 , a vulnerability where an attacker can gain full unauthenticated takeover of the GlassFish domain until the token expires due to a leaked gfresttoken from the DownloadServlet class if the attacker is authenticated in the Admin Console. Further details on this release may be found in the release notes .

#### A2A Java SDK

The release of A2A Java SDK 1.2.0, a Java library that implements the Agent2Agent Protocol (A2A) for running agentic applications as A2AServers, ships with bug fixes, dependency upgrades and new features such as: the ability for non-CDI integrations to reuse existing authorization flows; and a new TaskStreamLifecycleHook interface that allows developers to observe task stream lifecycle events and close all instance of the ChildQueue inner class, defined in the EventQueue class, for a task on demand via the StreamCloseHandle interface. More details on this release may be found in the release notes .

#### Apache Grails

The fifth milestone release of Apache Grails 8.0.0 provides bug fixes, dependency upgrades and new features such as: a refactor of the GlobalGrailsClassInjectorTransformation class that extracts the helpers, provides a clearer flow, an expanded handling of the plugin.xml file and an isolated-build behavior; and the deepSanitize() method, defined in the GrailsUtil class, now recognizes the values provided in the grails.logging.stackTraceFiltererClass and grails.exceptionresolver.logFullStackTraceOnFilter properties. Further details on this release may be found in the release notes .

#### Apache Camel

The release of Apache Camel 4.22.0 introduces two new features that improve integration of AI into Camel: the camel-ai-tool tool that allows for every AI framework to discover this tool; and the camel-mcp-server that allows developers to create Camel routes to become an MCP tool that any MCP-compatible client can discover and call. More details on this release may be found in this blog post .

#### JetBrains

The TeamCity team has provided additional guidance on the recent disclosure of CVE-2026-63077 , a vulnerability that allows an attacker, with HTTP(S) access to a TeamCity server, to bypass authentication checks and execute arbitrary operating system commands. Since the original disclosure, there have been reports of active exploitations, as well as attempted exploitations, that have targeted unpatched TeamCity servers. Developers are highly encouraged to upgrade to TeamCity 2025.11.7 and 2026.1.3 or, if unable to upgrade, apply this security patch plugin , a ZIP file download, for TeamCity 2017.1+.

#### Gradle

The release of Gradle 9.7.0 delivers notable changes such as: the Isolated Projects performance feature has been elevated from experimental to incubating; improvements to the Configuration Cache for improved build times by " caching the result of the configuration phase and reusing it for subsequent builds ;" and improvements to the security and infrastructure that make trusted PGP keys easier to document and signing-key rotations easier to discover. Further details on this release may be found in the release notes .

main wrapper for authors section

About the Author

section title

main wrapper for each author

#### Michael Redlich

Show more

Show less

#### This content is in the Java topic

##### Related Topics:

• Development

• Architecture & Design

• Glassfish

• Java

• JDK 28

• Grails

• Agent2Agent

• JetBrains

• Gradle

• JDK 27

• Open JDK

• Apache Camel

• Related Editorial

• Related Sponsors

• Related Sponsor August 27, 2026, 1 PM EDT Below the Framework: Why Agent Context Is an Infrastructure Problem Presented by: Boyd Stowe - Founding Solutions Architect at Tacnode

The InfoQ Newsletter

A round-up of last week’s content on InfoQ sent out every Tuesday. Join a community of over 250,000 senior developers. View an example

We protect your privacy.