JEP 538 brings the PEM API back for a third preview in #Java27.
PEMEncoder encodes keys, certificates, and CRLs as PEM. PEMDecoder reads them back into typed Java objects, without manual Base64 handling, header parsing, or KeyFactory setup.
Delivering #LibericaJDK: supported, @Java standard compatible binaries. Among Top-5 @OpenJDK contributors.
- September 2026 is almost here, and Oracle JDK 21 users have a decision to make. Updates released after that point are planned to move from NFTC to OTN. Your applications will keep running, but keeping them securely updated may no longer be free. 🧵
- Alpine or not? Small size is the easy part of the answer. This video gets into everything that can change it once the image meets a real workload. youtu.be/37tnF-THIkE
- Hardened images remove the package manager, curl, and other handy tools. Great for the attack surface. Less great when production breaks. JRush Episode 7 gets into that trade-off and plenty more around signing, SBOMs, provenance, buildpacks, and CVE response:
- Buildpacks remove a lot of repetitive containerization work, but they also trade some control for automation. @cat_edelveis breaks down that trade-off in seven minutes, including where a Dockerfile still makes more sense: youtu.be/19ZDEvnjtDI

