(Updated on: February 25, 2025)
Today, we are announcing the general availability of Graal Development Kit for Micronaut 4.7.3 containing Micronaut framework 4.7.3, software supply chain security enhancements, new hands-on labs, and more.
Graal Development Kit for Micronaut (GDK) is an Oracle build of a curated set of open source Micronaut® framework modules and their dependencies, focused on developer productivity and multicloud portability. The GDK simplifies cloud application development, is designed to compile ahead of time with GraalVM Native Image, and is fully supported on Oracle Cloud Infrastructure. It provides VS Code and IntelliJ extensions as well as a CLI and a web-based Launcher for faster application development and deployment. The GDK enables you to easily build portable cloud native Java microservices that start instantly and use fewer resources to reduce your compute costs.
Let us look at some of the notable changes in this release.
New Bill of Materials with Micronaut Framework 4.7.3
In this release, we have updated the Micronaut framework version from 4.6.0 to 4.7.3 which includes updates to many Micronaut modules. See Micronaut Framework Releases for more information. To upgrade, simply update your Maven pom.xml or Gradle build file to use the new GDK 4.7.3 bill of materials (BOM):
Gradle
dependencies {
...
micronautBoms(platform("cloud.graal.gdk:gdk-bom:4.7.3.2"))
...
}
Maven
<parent> <groupId>cloud.graal.gdk</groupId> <artifactId>gdk-parent</artifactId> <version>4.7.3.2</version> </parent>
Software Supply Chain Security Enhancements
As highlighted by SLSA, OWASP, NIST, and other publications, build and dependency threats such as using software from unverified and untrusted sources, using artifacts built in compromised build environments, using tampered libraries that contain malicious code, and using outdated library versions can have disastrous consequences for your business including reputational damage and financial loss. Keeping these in mind, we continue to enhance the supply chain security of the GDK and ensure that the Micronaut community can trust and confidently use our artifacts.
Since inception, we have built all the GDK Micronaut modules from source code, and hosted the built artifacts on Oracle Maven. In the GDK 4.6 release, we added build provenance and attestation for these artifacts. With today’s release, we now build all compile-time and runtime dependencies of the GDK Micronaut modules for Oracle Cloud Infrastructure integration from source code. This includes both direct and transitive dependencies. Oracle-built artifacts have a suffix of “-oracle-<PATCH>” e.g., “-oracle-00001” and are available from Oracle Maven. See the GDK BOM for a list of all artifacts – Micronaut and dependencies – built from source code.
We have also validated the artifacts built from source code against their equivalent versions on Maven Central using several methods, including a novel technique developed through the collaboration between Victoria University of Wellington and the Macaron project at Oracle Labs. This validation process ensures that artifacts built from source code maintain equivalent functionality and performance, while potentially offering enhanced security features. This crucial step provides confidence in the artifacts’ reliability, enabling them to safely substitute the dependent JARs published by their respective projects. The process not only verifies behavioral consistency but also creates an opportunity to implement additional security measures, thereby potentially improving upon the original versions.
Hands-on Labs for Oracle Cloud Infrastructure
We have added three new Live Labs workshops for integration with OCI MySQL HeatWave, OCI APM Tracing, and OCI Monitoring that users can now run in their own OCI tenancies.
Updated Launcher and CLI
The GDK Launcher, and GDK CLI have been updated with support for GDK 4.7.3. You can use the GDK Launcher to generate application starter templates for your preferred public cloud from a web browser. If you prefer command-line tools instead, use the GDK CLI.
GDK Tools
The latest release of the GDK tools brings a cool new feature called the Multicloud Tester. See the GDK Tools release 4.7.3 blog post to learn more.
Next Steps
- If you are running GDK 4.6.0 or earlier versions, you should update to GDK 4.7.3.
- If you are new to the GDK, try the Get Started guide or one of our Hands-on Labs or Guides.
Micronaut® is a registered trademark of Object Computing, Inc. Use is for referential purposes and does not imply any endorsement or affiliation with any third-party product.