Eclipse Announcements

We all depend on open source. One country should not hold the keys to defending it

Natalia Loungou — Wed, 15 Jul 2026 09:06:11 +0000

We all depend on open source. One country should not hold the keys to defending it Natalia Loungou Wed, 2026-07-15 05:06

A coordinated effort to secure open source is overdue. But routing the world’s most sensitive security data through a single jurisdiction recreates the very weakness it sets out to fix. In an immediate response, a new initiative has been announced to coordinate the full vulnerability remediation lifecycle.

URL

https://blogs.eclipse.org/post/catharina-maracke/we-all-depend-open-source-one-…

Tags

open source

The Eclipse Foundation and the ORC Working Group launch ORC Learning Hub to help open source developers, maintainers, and software teams prepare for the Cyber Resilience Act

Natalia Loungou — Tue, 30 Jun 2026 10:03:00 +0000

The Eclipse Foundation and the ORC Working Group launch ORC Learning Hub to help open source developers, maintainers, and software teams prepare for the Cyber Resilience Act Natalia Loungou Tue, 2026-06-30 06:03

BRUSSELS – 30 JUNE 2026 – The Eclipse Foundation, one of the world’s largest open source software foundations, in collaboration with the Open Regulatory Compliance (ORC) Working Group, today announced the launch of the ORC Learning Hub, a free global education initiative designed to help the people responsible for building, maintaining, securing, and governing open source software prepare for the European Union’s Cyber Resilience Act (CRA). The program provides practical, role-specific training for open source developers, maintainers, contributors, project stewards, product teams, security and compliance professionals, OSPO leaders, and legal teams.

While the CRA is a European regulation, its impact is global. Any organisation that distributes or commercialises software-enabled products in the EU market, including those built on open source, must comply with its requirements. Open source is now nearly universal in modern software, with more than 96% of commercial codebases containing open source (OpenLogic 2026 State of Open Source Report). As a result, the need for clear, actionable guidance is urgent across the global software industry.

The CRA changes the rules for how software is developed and delivered globally,” said Mike Milinkovich, executive director of the Eclipse Foundation. “Because open source is part of almost every modern application and system, CRA readiness has to happen where software is actually built. The ORC Learning Hub helps developers, maintainers, project stewards, and software teams understand what the CRA requires and put that knowledge into practice.

Developed by the ORC Working Group and hosted by the Eclipse Foundation, the ORC Learning Hub brings together expertise from across the open source ecosystem, industry, and regulatory domains. It delivers open source–focused training to help organisations understand how the CRA applies in real-world scenarios and what actions they need to take.

With the first CRA obligations set to take effect in September 2026, organisations face a narrowing window to prepare. Until now, guidance has been fragmented and largely high-level, particularly when it comes to open source software. The ORC Learning Hub addresses this gap by delivering clear, actionable, and role-specific education aligned with modern, open source–driven software development practices.

The Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold in the EU, including those built with or dependent on open source software. It places new responsibilities on manufacturers and distributors of such products in the European market. The CRA also introduces a new actor, the open source software stewards, which must adopt secure development practices, ensure transparency, and manage vulnerabilities across the entire software supply chain.

At the core of the ORC Learning Hub is a modular training program designed to guide organisations through CRA readiness step by step. The full program includes:

Module 1: Introduction to the CRA for Open Source Software
Module 2: Introduction to the CRA for Manufacturers
Module 3: SBOMs and Vulnerability Management in Open Source
Module 4: CRA Due Diligence and Open Source Usage
Module 5: Vulnerability Management in Practice

The Learning Hub launches with Modules 1 and 2 available today, providing tailored entry points for:

Open source developers, maintainers, contributors, and project stewards
Product teams, security and compliance professionals, OSPO leaders, and legal teams

Additional modules covering SBOMs, due diligence, and vulnerability management will soon be released.

The ORC Learning Hub is designed to:

Help developers, maintainers, project stewards, and software teams understand what the CRA means for their work
Clarify how CRA obligations apply to open source software, communities, and downstream product development
Provide role-specific guidance for manufacturers, developers, maintainers, OSPOs, security teams, and legal/compliance professionals
Help organisations operationalise CRA readiness across modern, open source-based software supply chains
Support global collaboration on emerging regulatory best practices

The ORC Learning Hub is free and available globally. Organisations and open source stakeholders are encouraged to begin preparing now, ahead of the September 2026 deadline, and to stay engaged as new modules and guidance are released. The program is available at https://orcwg.org/training/

About the ORC Working Group

The Open Regulatory Compliance Working Group (ORC WG) brings together open source foundations, global enterprises, and industry stakeholders to address the growing impact of software regulations on open source. With more than 60 members, ORC develops best practices, specifications, and practical resources to help organisations navigate evolving regulatory requirements. Its initial focus is the European Cyber Resilience Act (CRA), while supporting the long-term security, sustainability, and adoption of open source innovation worldwide.

About the Eclipse Foundation

The Eclipse Foundation provides a global community of individuals and organisations with a vendor-neutral, business-friendly environment for open source collaboration and innovation. We host Adoptium, the Eclipse IDE, Jakarta EE, Open VSX, Software Defined Vehicle, and more than 400 high-impact open source projects. Headquartered in Brussels, Belgium, we are an international non-profit association supported by over 300 members. Our events, including Open Community Experience (OCX), bring together developers, industry leaders, and researchers from around the world. To learn more, follow us on X and LinkedIn, or visit eclipse.org.

Media contacts:

Schwartz Public Relations

Julia Rauch/Luca Myska

Sendlinger Straße 42A

80331 München

EclipseFoundation@schwartzpr.de

+49 (89) 211 871 -43/ -52

514 Media Ltd (France, Italy, Spain)

Benoit Simoneau

benoit@514-media.com

M: +44 (0) 7891 920 370

Nichols Communications (Global Press Contact)

Jay Nichols

jay@nicholscomm.com

+1 408-772-1551

Tags

compliance

Eclipse Open VSX graduates to mature phase, marking a major milestone for open developer tooling

Lemmy Nwadishi — Mon, 29 Jun 2026 16:16:38 +0000

Eclipse Open VSX graduates to mature phase, marking a major milestone for open developer tooling Lemmy Nwadishi Mon, 2026-06-29 12:16

Eclipse Open VSX has reached an important milestone in its evolution as open source infrastructure for developer tooling. The project now serves millions of developers worldwide through AI-native IDEs, cloud development environments, and VS Code-compatible platforms, delivering more than 600 million extension downloads every month.

Reflecting this growth and impact, Eclipse Open VSX has officially transitioned from the incubation phase to the mature phase of the Eclipse Foundation development process. This achievement recognises the project's technical maturity, strong community, and long term commitment to open, vendor-neutral governance.

Image

URL

https://blogs.eclipse.org/post/lemmy-nwadishi/eclipse-open-vsx-graduates-mature…

Eclipse Theia: News from the Next-Gen Tools Platform

Jonas Helming — Fri, 26 Jun 2026 08:01:44 +0000

Eclipse Theia: News from the Next-Gen Tools Platform Jonas Helming Fri, 2026-06-26 04:01

Eclipse Theia’s OCX26 project update highlights a year of strong momentum across the platform, Theia AI, and the Theia IDE, including around 1,200 merged PRs, close to 80 contributors, and a Codie 2025 Award. Watch the recap to learn how Theia is evolving for custom tools, AI-native IDEs, and Eclipse RCP modernization.

Image

URL

https://eclipsesource.com/blogs/2026/06/25/eclipse-theia-news-from-the-next-gen…

Tags

theia

Eclipse Theia

theia ide

open source cloud development

Open VSX 1.0.0: Celebrating a milestone and the community behind it

Natalia Loungou — Thu, 18 Jun 2026 13:21:29 +0000

Open VSX 1.0.0: Celebrating a milestone and the community behind it Natalia Loungou Thu, 2026-06-18 09:21

Reaching version 1.0.0 is a special moment for any open source project. It marks more than a collection of features or bug fixes. It reflects years of collaboration, thousands of commits, countless discussions, and a shared belief that an idea is worth building together.

Today, we are pleased to celebrate the release of Eclipse Open VSX 1.0.0

URL

https://blogs.eclipse.org/post/thomas-froment/open-vsx-100-celebrating-mileston…

Infosys Joins Eclipse Foundation’s Software Defined Vehicle Working Group to Advance Open, Secure, Scalable, and Future-Ready Software Foundations

Amin Rasti — Tue, 09 Jun 2026 19:41:40 +0000

Infosys Joins Eclipse Foundation’s Software Defined Vehicle Working Group to Advance Open, Secure, Scalable, and Future-Ready Software Foundations Amin Rasti Tue, 2026-06-09 15:41

Infosys has joined the Eclipse Software Defined Vehicle (SDV) Working Group, a global open-source consortium under the Eclipse Foundation focussed on accelerating software-defined vehicle innovation. Infosys is contributing to Eclipse openDuT, Eclipse S-CORE (Eclipse Safe Open Vehicle Core), and other work groups focussed on development of open, standardized, and interoperable software foundations for in-vehicle embedded systems. The Eclipse SDV Working Group brings together global automakers, tier-1 suppliers, cloud providers, and technology leaders to build automotive-grade software platforms governed by the community.

Infosys brings over 25 years of experience in vehicle R&D and automotive engineering for global OEMs and tier-1 suppliers to the Eclipse SDV ecosystem. Applying its AI-first value framework, Infosys is advancing the Physical AI value pool by embedding intelligence directly into vehicles and edge systems – enabling real-time capture of sensor data, contextual interpretation of signals, and autonomous decision-making. By integrating digital twins, robotics, autonomous systems, and edge intelligence, Infosys is helping enterprises unlock AI value at scale - reimagining products, engineering processes, and in-vehicle experiences where digital and physical systems seamlessly converge.

This capability is underpinned by Infosys’ acquisition of in-tech, expanding its depth in automotive engineering and embedded software. Infosys will leverage its strong AI-first capabilities under Infosys Topaz across vehicle Electrical/Electronic (E/E) architectures, infotainment, connected vehicles, user-experience, and full-vehicle validation to enable more secure and faster deployment of SDV software.

As the automotive industry transitions to software-defined vehicles, OEMs are navigating fragmented software stacks, long development cycles, talent disruption, and increasing integration complexity. The Eclipse SDV community addresses these challenges by enabling open, reusable software components, shared testbeds, and strong engineering governance. Through its involvement, Infosys supports standard SDV platform development, access to pre-integrated open-source building blocks, production-grade software accelerators, and strong engineering governance. Together, these efforts help streamline SDV development, improve software quality, shorten time to production, and reduce overall costs.

URL

https://www.infosys.com/newsroom/features/2026/joins-advance-future-ready-softw…

AI in Action: The Ultimate Live Demo with Theia AI

Jonas Helming — Tue, 02 Jun 2026 11:16:04 +0000

AI in Action: The Ultimate Live Demo with Theia AI Jonas Helming Tue, 2026-06-02 07:16

See Theia AI and Theia IDE in a 40-minute all-live OCX26 demo featuring agents, capabilities, MCP, sub-agents, skills, custom workflows, AI-assisted code review, and more. The recording is a practical look at how AI-native features can be integrated into custom tools and domain-specific IDEs.

Image

URL

https://eclipsesource.com/blogs/2026/06/02/02/

Tags

Jakarta EE 11 from Newbie to Pro with Open Liberty

Emily Jiang — Thu, 28 May 2026 14:17:14 +0000

Jakarta EE 11 from Newbie to Pro with Open Liberty Emily Jiang Thu, 2026-05-28 10:17

URL

https://openliberty.io/blog/2026/05/27/Jakarta-EE-11-in-Open-Liberty.html

Tags

#JakartaEE

Optional Identity Verification for Eclipse Foundation Committers Launches June 2

Natalia Loungou — Thu, 28 May 2026 08:01:45 +0000

Optional Identity Verification for Eclipse Foundation Committers Launches June 2 Natalia Loungou Thu, 2026-05-28 04:01

On June 2, the Eclipse Foundation will make optional identity verification generally available for Eclipse Foundation committers.

URL

https://blogs.eclipse.org/post/mika%C3%ABl-barbero/optional-identity-verificati…

Tags

Security

committer

GlassFish 8.0.2 Released: With important security fixes and other improvements

Ondro Mihalyi — Thu, 21 May 2026 11:43:45 +0000

GlassFish 8.0.2 Released: With important security fixes and other improvements Ondro Mihalyi Thu, 2026-05-21 07:43

The latest version of Eclipse GlassFish 8.0.2 was released on May 5, 2026, with fixes for several critical vulnerabilities.

It builds on top of a lot of subtle work and improvements in GlassFish components like the Eclipse Grizzly HTTP framework, or in related components like Eclipse OpenMQ message broker and Eclipse ORB (CORBA) for remote EJB calls.

The release of GlassFish 8.0.2 serves as further evidence that GlassFish remains an actively evolving platform, backed by the dedicated maintenance and support of the OmniFish team.

As the primary drivers of this effort, we’d like to share a deeper look into the technical advancements within this new version. More in the linked article...

Image

URL

https://omnifish.ee/glassfish-8-0-2-released-with-important-security-fixes-and-…

Tags

GlassFish

OmniFish

supply chain security