JDK 28 proposes a JavaDoc tag for notes and warnings
The OpenJDK Quality Group is asking projects to test @note, an inline and block tag that renders tips and warnings with their own heading and CSS class.
Victoria Shinder
Contributing writer
Writes for Dev News Daily on the parts of software work that are not code: process, release discipline and what teams actually do with a change.
Signed pieces
MCP dropped its session handshake and sticky sessions with it
The 28 July revision of the Model Context Protocol makes every request self-contained: protocol version, client identity and capabilities move into a _meta field and matching headers. Quarkus MCP Server 2.0.x already speaks it.
CloudWatch Omni leaves the AWS console and ships an IDE extension
AWS made Omni generally available in three regions: a standalone web app with its own SSO, spaces spanning accounts and other clouds including Azure, and a free VS Code extension that needs no AWS account.
Radicle published two critical flaws before it had a fix, on purpose
The peer-to-peer code-collaboration project disclosed that its wire protocol gives no confidentiality and that peer authentication can be spoofed. Combined, an observer on the path can read private repositories.
Rust funds a full-time Cargo maintainer after the team lost capacity
Scott Schafer becomes Maintainer in Residence for Cargo for at least twelve months, paid from the Rust Foundation Maintainers Fund with additional money from the Leadership Council and AWS.
Copilot CLI indexes whole C++ codebases instead of rediscovering them
Whole codebase indexing builds a persistent symbol index across a C++ project, including unopened files; it is on by default and costs time and memory on the first build.
Django approves DEP 19 and rewrites its technical governance
Both the Steering Council and the DSF Board have approved DEP 19, simplifying Django technical governance and widening Steering Council eligibility.
Ubuntu patches libssh2 across five LTS releases including ESM lines
USN-8799-1 fixes several security issues in libssh2 for 22.04, 20.04, 18.04, 16.04 and 14.04 LTS.
Amazon EVS enters FedRAMP Class C scope across the US Regions
AWS says Elastic VMware Service is now in scope for FedRAMP Class C, the baseline formerly called Moderate, in all US Regions.
Three OpenJDK 17 authentication flaws get Ubuntu fixes across five LTS lines
USN-8795-1 patches CVE-2026-61308, CVE-2026-70907 and CVE-2026-60589 in the Networking, JSSE and Security components — all incorrect authentication handling, remotely triggerable.