- Java 27 is now generally available with nine JEPs, including post-quantum TLS and G1 as the default garbage collector.
- Compact object headers become the standard, significantly reducing memory overhead for large Java estates.
- Oracle also ships aligned updates for Helidon 27, JavaFX 27, and Jipher 20, plus an early look at Project Valhalla.
Oracle has officially released Java 27, the latest version of the long-running programming language and development platform, marking another step in the platform’s evolution beyond the traditional LTS cycle. The update, which reached general availability on September 15, brings a mix of production-ready features and previews that aim to make Java more efficient, more secure, and better prepared for the coming era of quantum computing. This release is the second non-LTS version since JDK 25, and it packs nine JDK Enhancement Proposals (JEPs) into a package that Oracle describes as a stable foundation for both current enterprise workloads and future AI-driven systems.
For developers, the headline changes are about defaults: the G1 garbage collector is now used in all environments, compact object headers are on by default, and a new post-quantum key exchange mechanism has been added to TLS 1.3. These aren’t flashy new APIs but rather under-the-hood improvements that reduce memory footprint, simplify configuration, and harden encryption against future threats. The release also includes previews of features like structured concurrency and lazy constants, signaling where the platform is headed in the next few cycles.
Nine JEPs: What’s Actually in the Box
Java 27 brings a total of nine JEPs, four of which are considered ready for production use. The other five are still in preview or incubation stages, giving developers an early look at upcoming capabilities without committing to them in production. Among the production-ready items, JEP 523 makes the Garbage-First (G1) collector the default everywhere, replacing the Serial collector in constrained environments. According to the OpenJDK team, G1 has improved enough in throughput, latency, and memory usage to handle even small heap sizes, eliminating the need for developers to manually select a different collector on low-memory devices.
Another key change is JEP 534, which enables compact object headers by default. This reduces the memory overhead of each Java object from 96 bits to 64 bits, a change that can deliver meaningful savings across millions of live objects. In SPECjbb2015 benchmarks, the switch led to a 22% reduction in heap usage and an 8% drop in CPU time, according to reports. Amazon and SAP have already adopted the feature in their own Java distributions, showing that it is stable enough for real-world use.
Post-Quantum Cryptography Takes Center Stage
Security is arguably the biggest theme of Java 27. JEP 527 introduces post-quantum hybrid key exchange for TLS 1.3, combining the existing ECDHE algorithm with the NIST-standardized ML-KEM post-quantum method. This addresses the “harvest now, decrypt later” threat model, where attackers store encrypted traffic today in hopes of breaking it once quantum computers become powerful enough. The hybrid approach means no code changes are required for standard TLS clients and servers, making it a relatively painless upgrade for organizations concerned about long-term data confidentiality.
Oracle is also pushing forward on the cryptographic front with JEP 538, the third preview of PEM encodings for cryptographic objects, and JEP 536, which adds in-process data redaction to the Java Flight Recorder. The latter is particularly useful for production troubleshooting, as it strips sensitive information from diagnostics before they are written to disk, helping companies meet compliance requirements.
Ecosystem Updates: Helidon, JavaFX, and Jipher
Alongside the core Java runtime, Oracle has announced aligned updates to several key components of its Java Verified Portfolio (JVP). Helidon 27, the microservices framework, now follows the same versioning scheme as OpenJDK and introduces support for virtual threads and Scoped Values, making it easier to write highly concurrent cloud-native services. JavaFX 27 delivers a new Metal rendering pipeline on macOS for smoother performance on Apple silicon, as well as improved JavaFX image handling and accessibility features. Oracle Jipher 20, a FIPS 140-3 validated cryptographic provider, is now included in JVP and adds support for ML-KEM and ML-DSA post-quantum algorithms.
These updates are part of a broader strategy to keep the Java ecosystem cohesive, especially as enterprises adopt AI and cloud technologies. The release also includes a preview of Project Valhalla through JDK 28 early access, which aims to bridge the gap between objects and primitives with value classes—a feature that could significantly improve data density for analytics and AI workloads.
What This Means for Developers
For teams running Java in production, the upgrade path is relatively straightforward. Oracle describes Java 27 as a drop-in replacement for existing applications unless they rely on preview features. The new default garbage collector and compact headers are designed to work without flag changes, which means most applications should see improved performance and reduced memory usage after upgrading. However, the post-quantum key exchange is only enabled for TLS 1.3 connections, so older protocols won’t benefit without configuration changes.
Oracle has also signaled plans to move to a monthly cadence for critical security patches, with the first such update expected later this year. That shift would give organizations faster access to fixes for vulnerabilities, but it also means more frequent maintenance windows. For now, Java 27 offers a solid mix of improvements that should appeal to both enterprises and individual developers, even if the most exciting features are still a couple of releases away.
All of this comes as Oracle continues to push Java toward a future dominated by AI and quantum threats. The combination of post-quantum cryptography, better defaults, and ecosystem alignment shows that the platform is evolving to meet the demands of modern infrastructure. While Java 27 might not be the release that revolutionizes everyday coding, it lays the groundwork for the more ambitious changes arriving with JDK 28 and beyond.
