Blog Posts

Welcome to issue number two hundred and nine of Hashtag Jakarta EE! On the last day of the year, it is time to look back and forward. Last week, I looked back on conferences and events I participated in during 2023. The plans for 2024 are forming, so make sure...

A software provenance attestation is a signed document that associates metadata with an artifact, encompassing details like the artifact’s origin, build steps, and dependencies. This information is critical for verifying the artifact’s authenticity and integrity. Featuring a cryptographic signature, provenance attestation ensures the document remains unaltered, playing a vital role...

2023 was a good conference year! I spoke at more than thirty conferences and meetups across four continents. In addition to the more traditional developer conferences, I visited a lot of Java User Groups this year. This is something I will continue to do next year. I already have a...

In the ever-evolving landscape of open-source software development, the creation and distribution of artifacts—such as compiled binaries, libraries, and documentation—represent the tangible results of a multifaceted process. These artifacts are more than just a collection of code; they are the final product of myriad decisions, alterations, and contributions, each with...

Welcome to issue number two hundred and eight of Hashtag Jakarta EE! I don’t expect many readers on Christmas Eve, so I will keep this one very short. One of the last activities before the Holidays was to release a Milestone 1 release of Jakarta EE 11. You can find the...

As part of our ongoing commitment to fortifying the security of our software development processes, we’re excited to announce a significant enhancement for all Eclipse Foundation projects utilizing our Jenkins infrastructure. This advancement comes with the integration of Sigstore, a cutting-edge solution designed to bolster the security and integrity of...

TL;DR - We’re thrilled to announce Open Community Experience 2024, a new conference for our vibrant community of communities. 2023 has been a year of continued growth for Eclipse Foundation communities. New and existing industry collaborations including Software Defined Vehicle , Eclipse ThreadX , Adoptium , Eclipse IDE , and...

As the title says, there is good news to share on the progress of the European Union’s proposed Cyber Resilience Act (“CRA”) as the final revisions agreed to in the trilogue negotiations appear to largely exclude the open source community from its scope. I have written (here and here) and...

If you’ve read my two previous blog posts, you already have an understanding of how interest groups and working groups provide two different mechanisms for industry collaboration, how your organisation can get started on its own collaboration journey, and the numerous benefits that come from collaborating on open source software...

In the realm of open-source software, security of the supply chain is not just a concern—it’s a crucial battleground. The Eclipse Foundation, at the forefront of this fight, has taken a decisive step with its 2023 initiative to enforce two-factor authentication (2FA) across its platforms. This move is more than...