iiinova — where your digital self keeps evolving

BellSoft @bellsoft.bsky.social · 28/09/2026

Reposted by Catherine Edelveis

Planning your move to Spring Boot 4? Preview the work before you start. @edelveis.dev takes a demo app from 3.5 to 4.1, with practical fixes and before-and-after code to guide your upgrade. bell-sw.com/blog/how-to-...

How to Migrate to Spring Boot 4: Step-by-Step Guide

Learn how to migrate a Spring Boot 3.5 project to Spring Boot 4, including modular starters, Jackson 3, testing changes, deprecated APIs, and migration verification.

BellSoft @bellsoft.bsky.social · 25/09/2026

Reposted by Catherine Edelveis

One operation, 500 SQL queries. Would you spot it before production? @edelveis.dev shows how to catch N+1 queries in your logs and fix them without changing your service logic. Watch the Spring Data JPA crash course: youtu.be/jY0mmMcMwCA

032

Catherine Edelveis @edelveis.dev · 24/09/2026

👾Java NullPointerException: Why the Compiler Can't Stop It NPE, the most notorious exception in Java. How does null sneak into your Java code? Is it REALLY a billion-dollar mistake? And how can you prevent NPEs? Watch to find the answers: www.youtube.com/watch?v=dm_L...

Java NullPointerException: Why the Compiler Can't Stop It

BellSoft @bellsoft.bsky.social · 22/09/2026

Reposted by Catherine Edelveis

You added AI to move faster. So why are you spending your time fixing its code? @edelveis.dev introduces JRush Episode 8 and Simon Martinelli’s talk on AI-driven modernization in enterprise #Java projects. Full details and registration: jrush.bell-sw.com/episode8

BellSoft @bellsoft.bsky.social · 18/09/2026

Reposted by Catherine Edelveis

Rebase can save you from repeatedly pulling the same gigabytes. A base-image patch doesn't always need a full rebuild. Dmitry Chuyko and @edelveis.dev wrote up where Docker and Buildpacks stand on it: bell-sw.com/blog/rebuild...

Rebuild vs Rebase Container Images: Docker and Buildpacks

Learn when to rebuild or rebase container images, how Docker Buildx and Buildpacks handle cache and rebasing, and why unchanged layer digests can reduce Kubernetes image pulls.

Catherine Edelveis @edelveis.dev · 17/09/2026

👾 Spring Data JPA Crash Course!! So excited about this! I've tried to make the tutorial on Spring Data JPA with Spring Boot as complete as possible for newbies: entities, relations, repos, JPQL, N+1 solutions, and even new type-safe queries with Boot 4! www.youtube.com/watch?v=jY0m...

Spring Data JPA Crash Course: Entities to N+1 in 23 Minutes

Catherine Edelveis @edelveis.dev · 14/09/2026

000

📖 Neuer Beitrag: Die Jagd nach jedem einzelnen CVE ist sinnlos. Eine bessere Lösung ist ein Schwachstellenmanagementsystem aufzubauen, das sich auf Hardened Images, Build-Provenienz, und Richtlinien für die Behebung von Schwachstellen stützt. javapro.io/de/wie-man-c...

javapro.io

Hardened Images: CVEs in Containern besser verwalten

Erfahren Sie, wie Hardened Images, Provenienz, kontinuierliche Scans und automatisierte Rebuilds helfen, CVEs in Containern kontrolliert zu verwalten.

Frank Delporte @frankdelporte.be · 12/09/2026

Reposted by Catherine Edelveis

Season 6 of the @foojay.io #podcast kicks off with the launch of Java 27! @speakjava.bsky.social tells us what's new in this release and what is already known about what's coming in Java 28 from Project Valhalla. www.youtube.com/watch?v=k3aA...

Java 27 in Practice: Smaller Heaps, Smarter Defaults, and Valhalla on the Horizon (#101)

YouTube video by Frank Delporte

083

Catherine Edelveis @edelveis.dev · 11/09/2026

Marketing software in the EU? You might have a new strict deadline to meet! One word: CRA. Actually, three. Cyber Resilience Act. Its Article 14 comes into effect today. What are the new rules, who is concerned, and what needs to be done TODAY: youtu.be/IQkzg7quc58

youtu.be

Cyber Resilience Act for Software Vendors: What to Do Now

Catherine Edelveis @edelveis.dev · 02/09/2026

👾New on CyberJAR: Migration to Spring Boot 4 Guide Spring Boot 4 is in full bloom🌼 Migrate away from Boot 3 EOL and into the world of new exciting features! Here's how to migrate painlessly and what you and your agents should pay attention to: www.youtube.com/watch?v=qMQg...

Spring Boot 4 Migration Guide: What You Need to Know

Catherine Edelveis @edelveis.dev · 27/08/2026

100

🔖Rebuild or Rebase? What to Do When a Container Image Changes A CVE patch for your base lands - do you need to rebuild the whole image for that? Not necessarily. Me and Dmitry put our heads together and created a guide on efficient image updates: bell-sw.com/blog/rebuild...

Rebuild vs Rebase Container Images: Docker and Buildpacks

Learn when to rebuild or rebase container images, how Docker Buildx and Buildpacks handle cache and rebasing, and why unchanged layer digests can reduce Kubernetes image pulls.

Catherine Edelveis @edelveis.dev · 25/08/2026

Livestream alert! This Friday, I am joined by my fabulous friend @dashaun.com on CyberJAR to discuss how buildpacks promote best security practices and how you can build on that momentum with BellSoft's Hardened Builder for Paketo buildpacks youtube.com/live/3ElGTo5...

How Do You Know It’s Hardened? Anatomy of a Hardened Builder

Catherine Edelveis @edelveis.dev · 21/08/2026

👾New on CyberJAR: Implementing Zero Trust in CI/CD Follow a journey of an open source dependency to prod through five security gates, with 3 questions at each: what can go wrong, what evidence do we require, and should it be allowed to continue? www.youtube.com/watch?v=5CzD...

Why Your Pipeline Needs Zero Trust (And How to Build It)

Catherine Edelveis @edelveis.dev · 19/08/2026

Liberica JDK CSPU builds are out! CSPUs follow the new accelerated cadence of JDK updates. They are released in-between standard quarterly updates and contain patches for known CVEs and other important security fixes. Update your JDK and stay safe❤️ bell-sw.com/blog/liberic...

Liberica JDK CSPU builds are released

Download Liberica JDK CSPU versions 6, 7, 8, 11, 17, 21, 25 and 26 with improved security.

000

Catherine Edelveis @edelveis.dev · 18/08/2026

Did you know? Spring Boot 4.1 brings Spring Data 4.1's type-safe property paths enabling devs to use method references instead of strings in data access code: Sort.by("lastname") ➡️ Sort.by(Person::getLastName)

032

Catherine Edelveis @edelveis.dev · 12/08/2026

👾New on CyberJAR: Applying Zero Trust to Open Source 10K GitHub stars, zero known CVEs. If these are the only controls you have for OSS, you're inviting trouble. Here's what trust in dependencies SHOULD look like: www.youtube.com/watch?v=Z5jJ...

How to Apply Zero Trust to Open Source Dependencies

Catherine Edelveis @edelveis.dev · 11/08/2026

Did you know? No need to always rebuild a container image when the base changes. We can rebase it: replace the runtime base and keep the upper layers unchanged. Buildpacks make it a first-class operation with pack rebase. BuildKit can do smth similar with COPY --link and a cache.

Catherine Edelveis @edelveis.dev · 06/08/2026

👾New on CyberJAR: What Are Hardened Images? Hardened images are the new black of container security. But what are they? How do they differ from slim or distroless images? How to choose a vendor? And what do teams win by migrating? Find the answers here: www.youtube.com/watch?v=YYw8...

Hardened vs Distroless vs Slim: What's the Real Difference?

Catherine Edelveis @edelveis.dev · 31/07/2026

000

👾New on CyberJAR: Should you use Alpine? What makes Alpine a beloved base for container images? Should you consider it for production workloads, or the trade-offs are not wirth the deal? Find out in my newest video: www.youtube.com/watch?v=37tn...

Is Alpine Linux better? Trade-Offs, Alternatives, and Use Cases

BellSoft @bellsoft.bsky.social · 30/07/2026

Reposted by Catherine Edelveis

Buildpacks remove a lot of repetitive containerization work, but they also trade some control for automation. @edelveis.dev breaks down that trade-off in seven minutes, including where a Dockerfile still makes more sense: youtu.be/19ZDEvnjtDI

071

Catherine Edelveis @edelveis.dev · 28/07/2026

CyberJAR has been added to Foojay Java In Education Catalog! Thank you, @foojay.io and Igor Souza for recognition. This is an important milestone for CyberJAR, and I promise we will keep the momentum and deliver more content on all things Java☕️ education.foojay.social

education.foojay.social

Foojay Java in Education Catalog

A community-driven catalog of Java learning resources with websites, tutorials, videos, books, and tools for students, educators, coding clubs, and developers.

051

Reposted by Catherine Edelveis

BellSoft @bellsoft.bsky.social · 20/07/2026

Last week, @edelveis.dev and Mohammad-Ali A'râbi had a great conversation about Shai-Hulud, Miasma, Phantom Gyp worms - the latest wave of supply chain attacks. Missed the stream? The full recording is here: www.youtube.com/watch?v=SPly...

The Worms in Your Pipeline: Inside the New Supply Chain Attacks

BellSoft @bellsoft.bsky.social · 14/07/2026

051

Reposted by Catherine Edelveis

Dockerfiles are fine if they are written and maintained well. Then the base image gets old, the runtime needs a bump, and every repo has its own build ritual. @edelveis.dev gets into buildpacks: shared builders, rebasing, SBOMs, and when a Dockerfile still makes sense. bell-sw.com/blog/what-ar...

What Are Buildpacks? Buildpacks vs Dockerfiles Explained

Learn what Cloud Native Buildpacks do, how they compare with Dockerfiles, and how to use them with Java, Python, Go, and Node.js.

BellSoft @bellsoft.bsky.social · 07/07/2026

Reposted by Catherine Edelveis

A smaller image is not automatically a hardened image. @edelveis.dev breaks down slim, distroless, scratch, and hardened images, then shows the Java adoption path: multi-stage builds, SBOMs, signatures, CI/CD checks, and a practical checklist. bell-sw.com/blog/what-ar...

What Are Hardened Container Images? A Comprehensive Guide

Learn what hardened container images are, how they reduce attack surface and CVE noise, and how to adopt them in production.

BellSoft @bellsoft.bsky.social · 29/06/2026

Reposted by Catherine Edelveis

On July 1 at 5 PM CEST, @edelveis.dev is hosting Johannes Bossle for Spec driven design on team level. Prompts work well right up to the point where a whole team has to build and maintain the same system. This session is about what comes next. Set a reminder: www.youtube.com/watch?v=6UqE...

Spec Driven Design on Team Level

Official account of jfxcentral.com @jfxcentral.com · 26/06/2026

Reposted by Catherine Edelveis

Here is the new #JavaFX #LinksOfTheWeek on www.jfx-central.com/links. Thanks to Marius Hanl Oliver Kopp @ingstudios.dev Mechanical-pasta Marcus Hirt Michael Strauß Jonathan S. Fisher techsenger @frankdelporte.be @davidcalculin.bsky.social Happy reading, and have a lovely #Java weekend!

183

Catherine Edelveis @edelveis.dev · 25/06/2026

👾CyberJAR Livestream: Spec Driven Design on Team Level Scaling AI coding workflow across a team is hard. Join me an Johannes Bossle next Wednesday for a live demo on using visual specs, collaboration, and Git to give AI assistants the context teams need. www.youtube.com/watch?v=6UqE...

Spec Driven Design on Team Level

Frank Delporte @frankdelporte.be · 25/06/2026

020

Reposted by Catherine Edelveis

New JavaFX In Action 27 is live! 🎉 @davidcalculin.bsky.social built JMathAnim, a JavaFX library and UI for mathematical animations: LaTeX, fractals, geometrics, video export,... Built by a mathematician who "just needed the tool." 👉 webtechie.be/post/javafx-... #JavaFX #Java #OpenSource

webtechie.be

JavaFX In Action #27 with David Gutierrez about JMathAnim to Create Mathematical Animations · webtechie.be

JavaFX In Action with David Gutierrez about JMathAnim, a JavaFX-based library to create beautiful mathematical animations for education and beyond.

083

Reposted by Catherine Edelveis

BellSoft @bellsoft.bsky.social · 19/06/2026

Talk 3 of 3 at JRush Ep.7. 150 CVEs in the scan report. Most aren't exploitable in your runtime. @edelveis.dev covers this weekly on CyberJAR Youtube Channel. At JRush Ep.7 she builds the full triage-to-signed-image workflow live. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps

022

Catherine Edelveis @edelveis.dev · 17/06/2026

👾New on CyberJAR: Java 27 Features The next JDK 27 release includes 9 JEPs with new or improved features. Let's look at all of them! www.youtube.com/watch?v=VxN-...

Java 27: 9 New JEPs and What They Mean for You

BellSoft @bellsoft.bsky.social · 04/06/2026

061

Reposted by Catherine Edelveis

🎥 New video on the channel! You might be optimizing the wrong method. @edelveis.dev explains safepoint bias, how it can skew profiling results, and why Async Profiler has become a go-to tool for finding real Java performance bottlenecks. youtu.be/PcLZ6WPEcuw #Java #Async #OpenJDK #Profiling

youtu.be

Async Profiler for Java: Local and Container Profiling

BellSoft @bellsoft.bsky.social · 04/06/2026

063

Reposted by Catherine Edelveis

First time at #JSpring @nljug.bsky.social 🇳🇱 Great talks, great conversations, and a warm welcome from the Java community. Thanks to everyone who joined @edelveis.dev and @asm0dey.site's session today ❤️ #JSpring #Java #DeveloperCommunity

072

Reposted by Catherine Edelveis

Nikos Vaggalis @nikosvg.bsky.social · 31/05/2026

Spring I/O 2026 Sessions Now Available Online-we did a bit of digging to suggest the best to watch first. On IProgrammer: dub.sh/d3LX6lS @springio.net @edelveis.dev

BellSoft @bellsoft.bsky.social · 26/05/2026

Reposted by Catherine Edelveis

Our latest research found that 42% of Spring developers have never encountered hardened container images at all. That’s a major knowledge gap as supply chain security and CVE exposure become bigger concerns in production. So we made a quick guide: www.youtube.com/watch?v=Co16... #DevOps #Security

081

Catherine Edelveis @edelveis.dev · 22/05/2026

We had a great discussion with @mgrygles.bsky.social on the realities and prospects of event-driven systems powered by GenAI❤️‍🔥 The recording is available on YouTube: www.youtube.com/watch?v=WqT1...

From Event Streams to AI Agents: Building Real-Time GenAI Systems

Spring I/O @springio.net · 22/05/2026

Reposted by Catherine Edelveis

🍃 The Persistence Heavyweight Championship: JPA vs. jOOQ by @asm0dey.site/ @edelveis.dev @ Spring I/O 2026 ▶️ Video: youtu.be/yAish_3P3-I 🔗 Slides: speakerdeck.com/cat_edelveis... #springio26

youtu.be

The Persistence Heavyweight Championship: JPA vs. jOOQ by Pasha Finkelshteyn / Catherine Edelveis

YouTube video by Spring I/O

032

Reposted by Catherine Edelveis

BellSoft @bellsoft.bsky.social · 20/05/2026

Live data. #GenAI. The part where your architecture has opinions about both. Join @edelveis.dev and #Java Champion Mary Grygleski on Thursday, May 21 at 6:30 PM CET. 🔔 Hit the bell. Don't miss it. youtube.com/live/WqT1dN5...

From Event Streams to AI Agents: Building Real-Time GenAI Systems

Catherine Edelveis @edelveis.dev · 18/05/2026

052

👾Upcoming Livestream: From Event Streams to AI Agents: Building Real-Time GenAI Systems This Thursday, I'm joined by @mgrygles.bsky.social to discuss how event streams, real-time data, and GenAI fit together in modern software architecture. www.youtube.com/watch?v=WqT1...

From Event Streams to AI Agents: Building Real-Time GenAI Systems

Catherine Edelveis @edelveis.dev · 14/05/2026

👾Previously on CyberJAR: 10 Cool Git Commands for Safer Workflows Moving past git commit: these commands will help you make smaller commits, move faster, and recover fast when things go sideways: www.youtube.com/watch?v=Q4M_...

Advanced Git Commands Every Developer Needs

BellSoft @bellsoft.bsky.social · 08/05/2026

000

Reposted by Catherine Edelveis

CVE cleanup never really ends, and treating it like an endless patch queue gets old fast. In her piece for JavaPRO, @edelveis.dev writes about what scales better: hardened images, provenance, SBOMs, scanning, and patch workflows that hold up under constant pressure. javapro.io/2026/04/14/m...

Vaadin @vaadin.com · 11/05/2026

Reposted by Catherine Edelveis

Meet @edelveis.dev at #VaadinCreate 2026! Her session shows how to design Java container images based on real tradeoffs in startup time, memory, security, and scaling using @springboot + @vaadin. 📍 27–28 Oct | Barcelona 🎟️ Get your ticket: vaadin.com/vaadin-creat...

Catherine Edelveis @edelveis.dev · 30/04/2026

Almost forgot 😅 Here are the slides from my talk that I delivered at JCON, "Mussion Possible: A 45-Minute Path to Bullet-Proof Java Container Images": speakerdeck.com/cat_edelveis... So you can complete the mission anytime😎

speakerdeck.com

Mission Possible: The 45-Minute Path to Bullet-Proof Java Container Images

Your mission is to turn a bloated CVE-infested container image into a hardened low-noise image with low vulnerability exposure and clear operational pos…

Catherine Edelveis @edelveis.dev · 28/04/2026

Friends, the webinar starts in just one hour! We will learn how to build full-stack reactive apps in pure Java with the help of Vaadin. See you there!

Catherine Edelveis @edelveis.dev · 27/04/2026

🔊WEBINAR ALERT! Tomorrow at 18 CET, Leif Åstrand will show how to build reactive full-stack web apps in 100% Java using @vaadin.com - no JavaScript, no HTML, and no CSS. Just Java. Register here: bell-sw.com/webinars/rea...

Reactive Web Apps With 100% Java With Vaadin

Full-stack development can be intimidating, especially when going beyond the typical CRUD. A reactive application with real-time updates requires knowing things like WebSockets on top of the regular f...

Catherine Edelveis @edelveis.dev · 27/04/2026

👾New on CyberJAR: Dynamic SQL Queries with Spring Data JPA Learn how to create TYPE-SAFE (!) dynamic queries in Sprng Boot using Spring JPA's Specification, Hibernate Processor, and Criteria API: www.youtube.com/watch?v=py1d...

Dynamic SQL Queries with Spring Data JPA in 6 Minutes

BellSoft @bellsoft.bsky.social · 24/04/2026

Reposted by Catherine Edelveis

No single base image wins everywhere. In her new guide for DZone, @edelveis.dev looks at the perks and trade-offs behind lightweight Linux distros for containers and what teams should pay attention to in production: dzone.com/articles/top...

Catherine Edelveis @edelveis.dev · 24/04/2026

Yesterday was the last day of #JCON2026. On the plane back home, I was thinking what metaphor would best describe it. And then it clicked - a big family reunion! In a family where people like each other, of course😁 Thank you for having me ❤️