Migrating towards securely developed open source solutions

The deprecation of the SecurityManager in Java 24 doesn't mean the end of sandboxing. In today's complex cloud-native Java ecosystem, where open source can no longer be trusted unconditionally -- illustrated by recent vulnerabilities such as those found in zx-utils -- securing the Java software supply chain is more critical than ever. This talk introduces a practical approach to building a more secure Java software supply chain using cloud-native sandboxing with seccomp and AppArmor. We'll demonstrate how these technologies can be used to create a secure environment for Java applications running in containers, effectively mitigating risks associated with untrusted dependencies and vulnerabilities. You will learn how to leverage these techniques with OpenJDK and Adoptium technologies to build a more resilient and trustworthy Java ecosystem.

Leveraging the rapid advancements in Large Language Models (LLMs), EMT4J plans to evolve into an AI Agent designed to automate Java migration further.

Adoptium’s New Contributors Program helped us grow from complete beginners to confident open source developers — and eventually into paid roles. As contributors from the Global South, we’ll share how mentorship and community helped us overcome historical barriers, proving that location is no longer a limitation in today’s inclusive open source world.

One break and community video Tentatives session title: Semester of Code Experience or Sustainer Program?+ Sustainer promotion new video

This talk presents Eclipse Tradista, an open source modular front-office platform for capital markets, built with Jakarta EE technologies. It showcases a real-world use of Eclipse Temurin as the default Java runtime for a production-grade financial application. The presentation will briefly cover the motivations behind choosing Temurin, such as reliability, compatibility, and open licensing, and demonstrate how it is used to ensure runtime consistency across environments. The application is packaged using install4j, embedding Temurin to simplify distribution and deployment.

In today's rapidly evolving technological landscape, ensuring efficiency, quality, and reliability is essential for successful project development. This session explores the innovative intersection of AI with the Adoptium AQAvit and OpenJ9 projects with Semesters of Code and Google Summer of Code projects (PerfSavvy: Smart Adaptive Performance Testing Framework, CommitHunter: AI-Powered Commit Debugger, and GlitchWitcher: AI-assisted Bug Prediction). Attendees will discover our story of transforming traditional workflows by accelerating testing and release cycles, enhancing fault detection, and significantly reducing manual effort. Through practical case studies and real-world applications, this talk will demonstrate the benefits and limitations of AI in improving product quality, test robustness and operational efficiency. Join us to gain actionable insights into how AI can elevate software testing and triaging, enabling more resilient and forward-thinking development practices.

May 23rd, 1995, saw the launch of not just a new programming language but an entire development and deployment platform. Initially targeted at the brand-new world of browsers and the World Wide Web, it quickly became the de facto standard for internet-scale enterprise applications.

Remarkably, thirty years later, it is still always in the top three most popular languages in use by developers.

How did this happen?

In this session, we’ll take a whirlwind tour of the history of Java, recalling many of the milestones along the way.

I started working for Sun Microsystems in February 1996, roughly the same week as JDK 1.0 was launched. Through fourteen years at Sun, five at Oracle and nearly ten at Azul, I’ll bring plenty of anecdotes about Java’s history. Be prepared for some serious developer nostalgia!