Java News Roundup: Spring Cloud, Quarkus, Hibernate ORM, JobRunr, LangChain4j, Java Operator SDK
Java Weekly Roundup – November 24th, 2025
Welcome to this week’s Java Weekly Roundup for November 24th, 2025, featuring major framework updates, early-access builds, and key tooling releases.
---
📌 Highlights
- Point releases for: Spring Cloud, Quarkus, Hibernate ORM, JobRunr, LangChain4j, Java Operator SDK
- Release candidates for: Hibernate Reactive, Gradle
- Security fixes in: Keycloak
---
OpenJDK Updates
Project Jextract (Build 25-jextract+2-4)
- Early-access build available: Download here
- Based on JDK 25 (Project Panama)
- macOS Catalina or later tip: Remove the quarantine attribute from downloaded bits before using `jextract` binaries.
---
JDK 26 Progress
- Build 26 released → GitHub Release
- Contains fixes & updates from Build 25
- Bug list: View resolved issues
- Full release notes available
- Report bugs: Java Bug Database
---
Spring Cloud – Oakwood Release
Version: 2025.1.0
Key Updates
- Major updates to:
- Spring Cloud Kubernetes 5.0.0
- Spring Cloud Function 5.0.0
- Spring Cloud Stream 5.0.0
- Spring Cloud Circuit Breaker 5.0.0
- Breaking change: Removal of deprecated `spring-cloud-starter-parent`
- Compatible with Spring Framework 7.0 & Spring Boot 4.0
- Full release notes
---
Quarkus 3.30
New Features
- Jackson `@JsonView` support for REST clients
- `Decrypt` CLI command for AES/GCM/NoPadding secrets
- Control OIDC token propagation for specific REST client methods
---
Hibernate ORM 7.2.0.CR3
Key Changes
- `@EmbeddedTable` annotation — replaces multiple `@AttributeOverride` / `@AssociationOverride`
- `FindMultipleOption` interface — optimized multi-ID loading
---
Hibernate Reactive RC1
- Versions: 4.2.0 & 3.2.0
- Fixes & upgrades:
- Hibernate ORM → 7.2.0.CR3
- Gradle → 9.1.0
- Issues list: View on GitHub
---
JobRunr 8.3.0
Highlights
- Spring Boot 4 & Jackson 3 support (still compatible with Boot 3 & Jackson 2)
- Dashboard revamp: dark mode + control center
- Error Prone integration for better compile-time checks
---
LangChain4j 1.9.x Series
1.9.0
- New `Planner` interface for flexible subagent coordination
- WebSocket Transport integration for MCP
1.9.1 fixes
- Prevent NullPointerException when agent has no output
- `GlobalTestRetryExtension` disabled by default
- Removed `junit-platform.properties` to avoid interference in custom JUnit setups
---
Java Operator SDK 5.2.0
Changes
- `ResourceIDMapper` & `ResourceIDProvider` interfaces for consistent ID handling
- New execution mode: Trigger reconciliation on all events → set `triggerReconcilerOnAllEvent()` to `true` in `@ControllerConfiguration`
---
Keycloak 26.4.6
Security Update
- Fix for CVE-2025-13467
- Vulnerability: Potential deserialization of untrusted Java objects via malicious LDAP server configuration
- Affects LDAP User Federation provider
---
Gradle 9.3.0-RC1
Improvements
- Test reporting enhancements: Better HTML report for nested, parameterized, and suite tests
- Problems API improvements: More descriptive console output with `--warning-mode=all`
- Build authoring: New `named()` method in `AttributeContainer` for attribute creation without `ObjectFactory`
---
✅ Summary
The ecosystem saw critical security patches, new annotation conveniences, test reporting improvements, and stronger multi-platform compatibility.
If you’re working across these frameworks, stay updated and test compatibility early — especially on RC builds.
---
Would you like me to also add a "Developer Action Checklist" section to this roundup so readers know exactly what to do next? That could make your weekly updates more actionable.
