diff --git a/.codex/config.toml b/.codex/config.toml new file mode 100644 index 00000000..4ef055eb --- /dev/null +++ b/.codex/config.toml @@ -0,0 +1,18 @@ +[mcp_servers.javadocs] +type = "http" +url = "https://www.javadocs.dev/mcp" + +[mcp_servers.serena] +command = "docker" +args = [ + "run", + "-i", + "--rm", + "-v", + ".:/workspaces/projects/repo", + "ghcr.io/oraios/serena:latest", + "serena", + "start-mcp-server", + "--project", + "/workspaces/projects/repo", +] diff --git a/.github/workflows/maven.yaml b/.github/workflows/maven.yaml index d37b7041..1f5252f2 100644 --- a/.github/workflows/maven.yaml +++ b/.github/workflows/maven.yaml @@ -30,7 +30,7 @@ jobs: submodules: true - uses: actions/setup-python@v6 with: - python-version: "3.x" + python-version: "3.12" - name: Validate SKILL.md files run: npx skill-check@latest skills --no-security-scan --format github env: @@ -39,6 +39,11 @@ jobs: run: python -m pip install --upgrade cisco-ai-skill-scanner - name: Scan generated skills in ./skills with Skill Scanner run: skill-scanner scan-all ./skills --recursive --use-behavioral --policy strict --fail-on-severity high + - name: Install SkillSpector + run: python -m pip install "git+https://github.com/NVIDIA/SkillSpector.git" + - name: Scan generated skills in ./skills with SkillSpector + continue-on-error: true + run: skillspector scan ./skills --no-llm pre-commit: name: Pre-commit diff --git a/docs/2/index.html b/docs/2/index.html index 960f74a0..0b60e420 100644 --- a/docs/2/index.html +++ b/docs/2/index.html @@ -114,6 +114,31 @@

Skills & Agents for Java

Latest Posts

+

What's new in Cursor rules for Java 0.11.0?

+ + + +
+
+ What are Cursor rules for Java? +The project provides a collection of System prompts for Java Enterprise development that help software engineers in their daily programming work & data pipelines. The available System prompts for Java cover areas such as Build system based on Maven, Design, Coding, Testing, Refactoring & JMH Benchmarking, Performance testing with JMeter, Profiling with async-... +

+ [Read More] +
+
+
+

Beyond Traditional Profiling: Mastering JFR for Modern Java Applications

T

-
-

What's new in Cursor rules for Java 0.8.0?

- -

- - 2025-07-12 -   - - Juan Antonio Breña Moral - -   - - blog - -

- -
-
- New interactive behaviors in the Cursor rules -In the previous release, the project added interactive behavior to a few complex rules to improve the developer experience, but in this release, new rules have evolved to add more interactive behavior regardless of complexity. The motivation behind this change: now the rules suggest alternatives to the software engineer to improve development at the pac... -

- [Read More] -
-
-
@@ -263,6 +263,9 @@

What's + diff --git a/docs/3/index.html b/docs/3/index.html new file mode 100644 index 00000000..17411f1e --- /dev/null +++ b/docs/3/index.html @@ -0,0 +1,215 @@ + + + + + + + + Skills & Agents for Java + + + + + + + + + + + + + + + + + + + + + + +
+ +
+ +
+
+
+
+
+

Skills & Agents for Java

+
+ A curated and opinionated collection of Skills and Agents to be used in modern SDLC workflows for Java Enterprise development with your favorite AI Agent harness. +
+
+
+
+ +
+ +
+
+
+
+
+

Skills & Agents for Java

+
+ A curated and opinionated collection of Skills and Agents to be used in modern SDLC workflows for Java Enterprise development with your favorite AI Agent harness. +
+
+
+
+
+
+ + +
+
+
+ +
+ + + +
+

Latest Posts

+
+

What's new in Cursor rules for Java 0.8.0?

+ + + +
+
+ New interactive behaviors in the Cursor rules +In the previous release, the project added interactive behavior to a few complex rules to improve the developer experience, but in this release, new rules have evolved to add more interactive behavior regardless of complexity. The motivation behind this change: now the rules suggest alternatives to the software engineer to improve development at the pac... +

+ [Read More] +
+
+
+
+ +
+ + + +
+
+
+ + + + + + + + + + + + + + + diff --git a/docs/archive.html b/docs/archive.html index 151c9cda..2b38c5ca 100644 --- a/docs/archive.html +++ b/docs/archive.html @@ -101,6 +101,10 @@

Archive

+

2026-06

+ + 01 - What's new in Cursor rules for Java 0.15.0? +

2026-04

13 - What's new in Cursor rules for Java 0.14.0? diff --git a/docs/blog/2026/03/release-0.13.0.html b/docs/blog/2026/03/release-0.13.0.html index e8652afa..153f6ed8 100644 --- a/docs/blog/2026/03/release-0.13.0.html +++ b/docs/blog/2026/03/release-0.13.0.html @@ -204,10 +204,10 @@

Skill inventory

What workflows were updated in this release?

Local workflows

Now, Product Owners and Business Analysts have new tools to improve thin, one-line user stories, and Architects can take part in development by adding ADRs asynchronously. With that context, you can validate those documents for inconsistencies using the new agent. When the documents are aligned, the Software Engineer can draft a plan and refine it with the Plan mode skill (@040-planning-plan-mode). After the plan is reviewed, you can hand it off to the new Coordinator Agent, which owns end-to-end development.

-

Take a look at the following Getting Started guide for further details.

+

Take a look at the following Getting Started guide for further details.

CI/CD Pipeline workflows

With the new improvements for architectural tasks, it is now easier to keep architecture diagrams current—including C4 views, data mapping, business glossary documentation, and database ER diagrams.

-

Take a look at the following Getting Started guide for further details.

+

Take a look at the following Getting Started guide for further details.


Drawing on ideas from others, it is impressive to see the new processes that Juan Macias is developing:

diff --git a/docs/blog/2026/04/release-0.14.0.html b/docs/blog/2026/04/release-0.14.0.html index 861dc24c..21c28da2 100644 --- a/docs/blog/2026/04/release-0.14.0.html +++ b/docs/blog/2026/04/release-0.14.0.html @@ -113,7 +113,7 @@

Rules support dropped in favor of Skills

On the main branch, a few resources about System-prompts/rules remain temporarily; we still see web traffic for them:

That usage is deprecated in favor of Skills and will be removed in the coming months; review the new documentation and adapt your process or pipelines.

Separately, you can still download the last generated System prompts/rules from release 0.13.0 if you need them, but development is frozen in favor of the Skill Standard.

diff --git a/docs/blog/2026/06/release-0.15.0.html b/docs/blog/2026/06/release-0.15.0.html new file mode 100644 index 00000000..a7f74d2e --- /dev/null +++ b/docs/blog/2026/06/release-0.15.0.html @@ -0,0 +1,262 @@ + + + + + + + + What's new in Cursor rules for Java 0.15.0? - Skills & Agents for Java + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+
+
+
+

What's new in Cursor rules for Java 0.15.0?

+ + +   + + blog + +
+
+
+
+
+
+ + +
+
+
+
+

What is the purpose?

+

An opinionated, AI-native workflow for evolving modern Java Enterprise SDLC practices through reusable Skills, Agents, and MCP servers.

+

It helps you answer the Five Whys when your team needs to evolve a Java-based product or service:

+

+

Once the idea is clear, you can implement it in a structured way:

+

+

Thanks to our community members in Singapore, Hanoi, Hong Kong, Milan, and New York. 👋👋👋

+

Note: If you love this project and use it, you can support it to help pay the token bills.

+

What's new in this release?

+

Improved security validation in the CI pipeline

+

All skills are validated on every commit using a multi-scanner workflow:

+
    +
  • Cisco AI Skill Scanner by Cisco AI Defense analyzes every generated skill recursively with behavioral scanning enabled. It runs as a required CI gate using the strict policy and fails the workflow on high severity findings.
  • +
  • SkillSpector by NVIDIA performs an additional static security review of the generated skills.
  • +
+

The main risks that can remain when generated skills are not scanned before publication are:

+
    +
  • Prompt injection: Hidden instructions can try to override the agent's normal behavior, ignore repository rules, or bypass review steps. Covered by Cisco AI Skill Scanner and SkillSpector.
  • +
  • Data exfiltration: A skill can include instructions or code paths that send source code, secrets, environment variables, or local files to an external service. Covered by Cisco AI Skill Scanner and SkillSpector.
  • +
  • Command injection: Shell commands can be built from untrusted input, allowing unexpected command execution when the skill runs. Covered by Cisco AI Skill Scanner and SkillSpector.
  • +
  • Obfuscation and hidden content: Base64 payloads, invisible Unicode characters, homoglyphs, or concealed scripts can hide malicious behavior from human reviewers. Covered by Cisco AI Skill Scanner and SkillSpector.
  • +
  • Supply-chain abuse: A skill can fetch and execute remote code, depend on unsafe packages, or introduce vulnerable dependencies. Covered by Cisco AI Skill Scanner and SkillSpector.
  • +
  • Excessive permissions or tool misuse: A skill can request broader file, shell, network, or MCP access than its stated purpose requires. Covered by SkillSpector and Cisco AI Skill Scanner.
  • +
  • Description-behavior mismatch: A skill can look harmless in its description while its scripts, references, or triggers perform a different action. Covered by SkillSpector and Cisco AI Skill Scanner.
  • +
  • Social engineering and trigger abuse: A skill can use misleading names, vague triggers, or urgent instructions to make agents or users invoke it in the wrong context. Covered by Cisco AI Skill Scanner and SkillSpector.
  • +
+

The project provides scanners, and when you use Skills.sh, a popular skills registry, every entry must pass three validations.

+

Example: https://www.skills.sh/jabrena/cursor-rules-java/110-java-maven-best-practices

+

Improvements in Java Enterprise frameworks

+

In this release, the project continues to add new features to improve support for Spring Boot, Quarkus & Micronaut. The new skills added for all frameworks cover the following aspects:

+ +

Improvements in observability

+

Observability is an essential aspect of any application:

+

+

In this release, we completed support for the main concepts related to observability: Logging, Metrics & Tracing:

+ +

Now, using any supported framework with OTEL, you can easily send continuous profiling data to Grafana:

+

+

https://grafana.com/oss/pyroscope/

+

Improvements in testing

+

In this release, fuzz testing was improved to make it easier to use: @703-technologies-fuzzing-testing.

+

+

https://github.com/Endava/cats

+

Better documentation

+

The project now provides documentation in three languages:

+ +

Evolution of this project in Vercel's Skills registry

+

The ecosystem is large, so you will need your own criteria beyond whether this project fits your preferences.

+

This project focuses mainly on the following categories, and that scope continues to evolve:

+ +

Using the project in IDEs

+

Codex

+

+

Recently, I tested Codex running in VS Code, and the experience was fantastic. Codex understands AGENTS.md and skills located in .agents/skills.

+

Using Codex, you can run the Agents provided by the project without any changes.

+

Magic Quadrant update

+

Recently, Gartner updated the Magic Quadrant.

+

+

https://cursor.com/lp/2026-gartner-mq

+

The project in events

+

The experience in Codemotion Madrid 2026

+

Last month, the project was presented and used at the tech conference Codemotion Madrid 2026. The workshop had sold out a few weeks before, and participants rated the session 4.5/5.

+

+

Slides: https://jabrena.github.io/cursor-rules-java/codemotion-madrid-2026/index.html

+

The experience in JMad 2026

+

Every year, MadridJUG organizes JMad, a Java tech event based on OpenSpace.

+

+

JMad is a nice opportunity to exchange ideas and have good debates about the topics Java developers want to discuss.

+

This year's agenda was:

+

+

This year, several AI topics were discussed, including AI Governance and how to manage Skills in your team, unit, or company.

+

Further information: https://jmad.madridjug.es/

+ +
+
+
+
+ + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/feed.xml b/docs/feed.xml index abc0c602..38de8660 100644 --- a/docs/feed.xml +++ b/docs/feed.xml @@ -2,9 +2,23 @@ https://jabrena.github.io/cursor-rules-java/ Skills & Agents for Java - 2026-05-24T22:46:39+0200 + 2026-05-31T17:44:31+0200 + + https://jabrena.github.io/cursor-rules-java//blog/2026/06/release-0.15.0.html + What's new in Cursor rules for Java 0.15.0? + + + 2026-06-01T00:00:00+0200 + What is the purpose? +An opinionated, AI-native workflow for evolving modern Java Enterprise SDLC practices through reusable Skills, Agents, and MCP servers. +It helps you answer the Five Whys when your team needs to evolve a Java-based product or service: + +Once the idea is clear, you can implement it in a structured way: + +Thanks to our community members in Singapore, Hanoi, Hong Kong, Milan, and New... + https://jabrena.github.io/cursor-rules-java//blog/2026/04/release-0.14.0.html What's new in Cursor rules for Java 0.14.0? diff --git a/docs/images/2026/6/IMG_2584.webp b/docs/images/2026/6/IMG_2584.webp new file mode 100644 index 00000000..89c132d9 Binary files /dev/null and b/docs/images/2026/6/IMG_2584.webp differ diff --git a/docs/images/2026/6/IMG_8268.jpg b/docs/images/2026/6/IMG_8268.jpg new file mode 100644 index 00000000..3151bab2 Binary files /dev/null and b/docs/images/2026/6/IMG_8268.jpg differ diff --git a/docs/images/2026/6/cats.png b/docs/images/2026/6/cats.png new file mode 100644 index 00000000..a99f89a0 Binary files /dev/null and b/docs/images/2026/6/cats.png differ diff --git a/docs/images/2026/6/codemotion-madrid-workshop.jpg b/docs/images/2026/6/codemotion-madrid-workshop.jpg new file mode 100644 index 00000000..b517d740 Binary files /dev/null and b/docs/images/2026/6/codemotion-madrid-workshop.jpg differ diff --git a/docs/images/2026/6/codex.png b/docs/images/2026/6/codex.png new file mode 100644 index 00000000..d3df57fb Binary files /dev/null and b/docs/images/2026/6/codex.png differ diff --git a/docs/images/2026/6/jmad-logo.png b/docs/images/2026/6/jmad-logo.png new file mode 100644 index 00000000..9d60490f Binary files /dev/null and b/docs/images/2026/6/jmad-logo.png differ diff --git a/docs/images/2026/6/magic-cuadrant-agents.jpg b/docs/images/2026/6/magic-cuadrant-agents.jpg new file mode 100644 index 00000000..4a9332e8 Binary files /dev/null and b/docs/images/2026/6/magic-cuadrant-agents.jpg differ diff --git a/docs/images/2026/6/ms-concerns.webp b/docs/images/2026/6/ms-concerns.webp new file mode 100644 index 00000000..7d46d0f5 Binary files /dev/null and b/docs/images/2026/6/ms-concerns.webp differ diff --git a/docs/images/2026/6/piroscope-demo.png b/docs/images/2026/6/piroscope-demo.png new file mode 100644 index 00000000..b0d9658e Binary files /dev/null and b/docs/images/2026/6/piroscope-demo.png differ diff --git a/docs/images/2026/6/scope.png b/docs/images/2026/6/scope.png new file mode 100644 index 00000000..e772c72a Binary files /dev/null and b/docs/images/2026/6/scope.png differ diff --git a/docs/images/2026/6/workflow.png b/docs/images/2026/6/workflow.png new file mode 100644 index 00000000..439f5765 Binary files /dev/null and b/docs/images/2026/6/workflow.png differ diff --git a/docs/index.html b/docs/index.html index 074974c2..ae873069 100644 --- a/docs/index.html +++ b/docs/index.html @@ -114,6 +114,36 @@

Skills & Agents for Java

Latest Posts

+

What's new in Cursor rules for Java 0.15.0?

+ + + +
+
+ What is the purpose? +An opinionated, AI-native workflow for evolving modern Java Enterprise SDLC practices through reusable Skills, Agents, and MCP servers. +It helps you answer the Five Whys when your team needs to evolve a Java-based product or service: + +Once the idea is clear, you can implement it in a structured way: + +Thanks to our community members in Singapore, Hanoi, Hong Kong, Milan, and New... +

+ [Read More] +
+
+
+

What's new in Cursor rules for Java 0.14.0?

-

What's new in Cursor rules for Java 0.11.0?

- - - -
-
- What are Cursor rules for Java? -The project provides a collection of System prompts for Java Enterprise development that help software engineers in their daily programming work & data pipelines. The available System prompts for Java cover areas such as Build system based on Maven, Design, Coding, Testing, Refactoring & JMH Benchmarking, Performance testing with JMeter, Profiling with async-... -

- [Read More] -
-
-

diff --git a/docs/tags/blog.html b/docs/tags/blog.html index fa21e92d..f7c1de46 100644 --- a/docs/tags/blog.html +++ b/docs/tags/blog.html @@ -84,6 +84,36 @@
+

What's new in Cursor rules for Java 0.15.0?

+ + + +
+
+ What is the purpose? +An opinionated, AI-native workflow for evolving modern Java Enterprise SDLC practices through reusable Skills, Agents, and MCP servers. +It helps you answer the Five Whys when your team needs to evolve a Java-based product or service: + +Once the idea is clear, you can implement it in a structured way: + +Thanks to our community members in Singapore, Hanoi, Hong Kong, Milan, and New... +

+ [Read More] +
+
+
+
-

Module 4: Real-World Applications - Production Patterns and Integration

- - - -
-
- 📖 Module Overview -Time to apply your generics mastery to real-world scenarios! This module bridges theory and practice, showing how generics integrate with modern Java features and solve actual production problems. You'll work with contemporary patterns used in enterprise applications. -🎯 Learning Objectives -By the end of this module, you will: - -Integrate generics with Records and sealed types -Han... -

- [Read More] -
-
-
-

Module 3: Advanced Patterns - Type Erasure and Complex Patterns

+

Module 4: Real-World Applications - Production Patterns and Integration

+ + + +
+
+ 📖 Module Overview +Time to apply your generics mastery to real-world scenarios! This module bridges theory and practice, showing how generics integrate with modern Java features and solve actual production problems. You'll work with contemporary patterns used in enterprise applications. +🎯 Learning Objectives +By the end of this module, you will: + +Integrate generics with Records and sealed types +Han... +

+ [Read More] +
+
+

diff --git a/docs/tags/java.html b/docs/tags/java.html index 758216bd..3bac5cfa 100644 --- a/docs/tags/java.html +++ b/docs/tags/java.html @@ -115,31 +115,6 @@

-

Mastering Java Enterprise Development with AI-Powered System Prompts

- - - -
-
- 🎯 Course Overview -Transform your Java development workflow by mastering 25+ AI-powered system prompts that automate code quality, testing, performance optimization, and documentation generation. This comprehensive course teaches you to leverage Cursor Rules for Java enterprise development through progressive, hands-on learning. -🎓 What You'll Learn -By the end of this course, you'll be able to: - -Au... -

- [Read More] -
-
-
-

Module 7: Advanced Patterns - System Prompt Creation & Progressive Learning

-

Mastering Java Generics - From Type Safety to Advanced Patterns

+

Mastering Java Enterprise Development with AI-Powered System Prompts

- Course Overview -Transform your Java development skills with this comprehensive course on generics - one of Java's most powerful yet misunderstood features. This course takes you from basic type safety concepts to advanced patterns used in production systems. -🎯 Learning Objectives -By the end of this course, you will be able to: + 🎯 Course Overview +Transform your Java development workflow by mastering 25+ AI-powered system prompts that automate code quality, testing, performance optimization, and documentation generation. This comprehensive course teaches you to leverage Cursor Rules for Java enterprise development through progressive, hands-on learning. +🎓 What You'll Learn +By the end of this course, you'll be able to: -Eliminate ClassCastException through proper generic type usage -Design ... +Au...

- [Read More] + [Read More]
-

Module 4: Real-World Applications - Production Patterns and Integration

+

Mastering Java Generics - From Type Safety to Advanced Patterns

- 📖 Module Overview -Time to apply your generics mastery to real-world scenarios! This module bridges theory and practice, showing how generics integrate with modern Java features and solve actual production problems. You'll work with contemporary patterns used in enterprise applications. + Course Overview +Transform your Java development skills with this comprehensive course on generics - one of Java's most powerful yet misunderstood features. This course takes you from basic type safety concepts to advanced patterns used in production systems. 🎯 Learning Objectives -By the end of this module, you will: +By the end of this course, you will be able to: -Integrate generics with Records and sealed types -Han... +Eliminate ClassCastException through proper generic type usage +Design ...

-
[Read More] + [Read More]

@@ -659,6 +633,32 @@

+

Module 4: Real-World Applications - Production Patterns and Integration

+ +

+ +   + + java + generics + +

+ +
+
+ 📖 Module Overview +Time to apply your generics mastery to real-world scenarios! This module bridges theory and practice, showing how generics integrate with modern Java features and solve actual production problems. You'll work with contemporary patterns used in enterprise applications. +🎯 Learning Objectives +By the end of this module, you will: + +Integrate generics with Records and sealed types +Han... +

+ [Read More] +
+
+ diff --git a/docs/tags/system-prompts.html b/docs/tags/system-prompts.html index 1121758b..bcde608d 100644 --- a/docs/tags/system-prompts.html +++ b/docs/tags/system-prompts.html @@ -84,31 +84,6 @@
-

Mastering Java Enterprise Development with AI-Powered System Prompts

- - - -
-
- 🎯 Course Overview -Transform your Java development workflow by mastering 25+ AI-powered system prompts that automate code quality, testing, performance optimization, and documentation generation. This comprehensive course teaches you to leverage Cursor Rules for Java enterprise development through progressive, hands-on learning. -🎓 What You'll Learn -By the end of this course, you'll be able to: - -Au... -

- [Read More] -
-
-
-

Module 7: Advanced Patterns - System Prompt Creation & Progressive Learning

+

Mastering Java Enterprise Development with AI-Powered System Prompts

+ + + +
+
+ 🎯 Course Overview +Transform your Java development workflow by mastering 25+ AI-powered system prompts that automate code quality, testing, performance optimization, and documentation generation. This comprehensive course teaches you to leverage Cursor Rules for Java enterprise development through progressive, hands-on learning. +🎓 What You'll Learn +By the end of this course, you'll be able to: + +Au... +

+ [Read More] +
+
+

diff --git a/site-generator/assets/images/2026/6/IMG_2584.webp b/site-generator/assets/images/2026/6/IMG_2584.webp new file mode 100644 index 00000000..89c132d9 Binary files /dev/null and b/site-generator/assets/images/2026/6/IMG_2584.webp differ diff --git a/site-generator/assets/images/2026/6/IMG_8268.jpg b/site-generator/assets/images/2026/6/IMG_8268.jpg new file mode 100644 index 00000000..3151bab2 Binary files /dev/null and b/site-generator/assets/images/2026/6/IMG_8268.jpg differ diff --git a/site-generator/assets/images/2026/6/cats.png b/site-generator/assets/images/2026/6/cats.png new file mode 100644 index 00000000..a99f89a0 Binary files /dev/null and b/site-generator/assets/images/2026/6/cats.png differ diff --git a/site-generator/assets/images/2026/6/codemotion-madrid-workshop.jpg b/site-generator/assets/images/2026/6/codemotion-madrid-workshop.jpg new file mode 100644 index 00000000..b517d740 Binary files /dev/null and b/site-generator/assets/images/2026/6/codemotion-madrid-workshop.jpg differ diff --git a/site-generator/assets/images/2026/6/codex.png b/site-generator/assets/images/2026/6/codex.png new file mode 100644 index 00000000..d3df57fb Binary files /dev/null and b/site-generator/assets/images/2026/6/codex.png differ diff --git a/site-generator/assets/images/2026/6/jmad-logo.png b/site-generator/assets/images/2026/6/jmad-logo.png new file mode 100644 index 00000000..9d60490f Binary files /dev/null and b/site-generator/assets/images/2026/6/jmad-logo.png differ diff --git a/site-generator/assets/images/2026/6/magic-cuadrant-agents.jpg b/site-generator/assets/images/2026/6/magic-cuadrant-agents.jpg new file mode 100644 index 00000000..4a9332e8 Binary files /dev/null and b/site-generator/assets/images/2026/6/magic-cuadrant-agents.jpg differ diff --git a/site-generator/assets/images/2026/6/ms-concerns.webp b/site-generator/assets/images/2026/6/ms-concerns.webp new file mode 100644 index 00000000..7d46d0f5 Binary files /dev/null and b/site-generator/assets/images/2026/6/ms-concerns.webp differ diff --git a/site-generator/assets/images/2026/6/piroscope-demo.png b/site-generator/assets/images/2026/6/piroscope-demo.png new file mode 100644 index 00000000..b0d9658e Binary files /dev/null and b/site-generator/assets/images/2026/6/piroscope-demo.png differ diff --git a/site-generator/assets/images/2026/6/scope.png b/site-generator/assets/images/2026/6/scope.png new file mode 100644 index 00000000..e772c72a Binary files /dev/null and b/site-generator/assets/images/2026/6/scope.png differ diff --git a/site-generator/assets/images/2026/6/workflow.png b/site-generator/assets/images/2026/6/workflow.png new file mode 100644 index 00000000..439f5765 Binary files /dev/null and b/site-generator/assets/images/2026/6/workflow.png differ diff --git a/site-generator/content/blog/2026/06/release-0.15.0.md b/site-generator/content/blog/2026/06/release-0.15.0.md new file mode 100644 index 00000000..7188f909 --- /dev/null +++ b/site-generator/content/blog/2026/06/release-0.15.0.md @@ -0,0 +1,147 @@ +title=What's new in Cursor rules for Java 0.15.0? +date=2026-06-01 +type=post +tags=blog +author=Juan Antonio Breña Moral +status=published +~~~~~~ + +## What is the purpose? + +An opinionated, AI-native workflow for evolving modern Java Enterprise `SDLC` practices through reusable `Skills`, `Agents`, and `MCP servers`. + +It helps you answer the `Five Whys` when your team needs to evolve a Java-based product or service: + +![](/cursor-rules-java/images/2026/6/scope.png) + +Once the idea is clear, you can implement it in a structured way: + +![](/cursor-rules-java/images/2026/6/workflow.png) + +Thanks to our community members in `Singapore`, `Hanoi`, `Hong Kong`, `Milan`, and `New York`. 👋👋👋 + +**Note:** [If you love this project and use it, you can support it to help pay the token bills.](https://github.com/sponsors/jabrena) + +## What's new in this release? + +### Improved security validation in the CI pipeline + +All skills are validated on every commit using a multi-scanner workflow: + +- **[`Cisco AI Skill Scanner`](https://github.com/cisco-ai-defense/skill-scanner) by Cisco AI Defense** analyzes every generated skill recursively with behavioral scanning enabled. It runs as a required CI gate using the `strict` policy and fails the workflow on `high` severity findings. +- **[`SkillSpector`](https://github.com/NVIDIA/SkillSpector) by NVIDIA** performs an additional static security review of the generated skills. + +The main risks that can remain when generated skills are not scanned before publication are: + +- **Prompt injection:** Hidden instructions can try to override the agent's normal behavior, ignore repository rules, or bypass review steps. Covered by `Cisco AI Skill Scanner` and `SkillSpector`. +- **Data exfiltration:** A skill can include instructions or code paths that send source code, secrets, environment variables, or local files to an external service. Covered by `Cisco AI Skill Scanner` and `SkillSpector`. +- **Command injection:** Shell commands can be built from untrusted input, allowing unexpected command execution when the skill runs. Covered by `Cisco AI Skill Scanner` and `SkillSpector`. +- **Obfuscation and hidden content:** Base64 payloads, invisible Unicode characters, homoglyphs, or concealed scripts can hide malicious behavior from human reviewers. Covered by `Cisco AI Skill Scanner` and `SkillSpector`. +- **Supply-chain abuse:** A skill can fetch and execute remote code, depend on unsafe packages, or introduce vulnerable dependencies. Covered by `Cisco AI Skill Scanner` and `SkillSpector`. +- **Excessive permissions or tool misuse:** A skill can request broader file, shell, network, or MCP access than its stated purpose requires. Covered by `SkillSpector` and `Cisco AI Skill Scanner`. +- **Description-behavior mismatch:** A skill can look harmless in its description while its scripts, references, or triggers perform a different action. Covered by `SkillSpector` and `Cisco AI Skill Scanner`. +- **Social engineering and trigger abuse:** A skill can use misleading names, vague triggers, or urgent instructions to make agents or users invoke it in the wrong context. Covered by `Cisco AI Skill Scanner` and `SkillSpector`. + +The project provides scanners, and when you use `Skills.sh`, a popular skills registry, every entry must pass three validations. + +**Example:** https://www.skills.sh/jabrena/cursor-rules-java/110-java-maven-best-practices + +### Improvements in Java Enterprise frameworks + +In this release, the project continues to add new features to improve support for `Spring Boot`, `Quarkus` & `Micronaut`. The new skills added for all frameworks cover the following aspects: + +- **Data Validation:** [`@303-frameworks-spring-boot-validation`](https://www.skills.sh/jabrena/cursor-rules-java/303-frameworks-spring-boot-validation), [`@403-frameworks-quarkus-validation`](https://www.skills.sh/jabrena/cursor-rules-java/403-frameworks-quarkus-validation) & [`@503-frameworks-micronaut-validation`](https://www.skills.sh/jabrena/cursor-rules-java/503-frameworks-micronaut-validation) +- **Security:** [`@304-frameworks-spring-boot-security`](https://www.skills.sh/jabrena/cursor-rules-java/304-frameworks-spring-boot-security), [`@404-frameworks-quarkus-security`](https://www.skills.sh/jabrena/cursor-rules-java/404-frameworks-quarkus-security) & [`@504-frameworks-micronaut-security`](https://www.skills.sh/jabrena/cursor-rules-java/504-frameworks-micronaut-security) +- **Kafka:** [`@314-frameworks-spring-kafka`](https://www.skills.sh/jabrena/cursor-rules-java/314-frameworks-spring-kafka), [`@414-frameworks-quarkus-kafka`](https://www.skills.sh/jabrena/cursor-rules-java/414-frameworks-quarkus-kafka) & [`@514-frameworks-micronaut-kafka`](https://www.skills.sh/jabrena/cursor-rules-java/514-frameworks-micronaut-kafka) +- **MongoDB:** [`@315-frameworks-spring-mongodb`](https://www.skills.sh/jabrena/cursor-rules-java/315-frameworks-spring-mongodb), [`@415-frameworks-quarkus-mongodb`](https://www.skills.sh/jabrena/cursor-rules-java/415-frameworks-quarkus-mongodb) & [`@515-frameworks-micronaut-mongodb`](https://www.skills.sh/jabrena/cursor-rules-java/515-frameworks-micronaut-mongodb) + +### Improvements in observability + +Observability is an essential aspect of any application: + +[![](/cursor-rules-java/images/2026/6/ms-concerns.webp)](https://developers.redhat.com/blog/2016/12/09/spring-cloud-for-microservices-compared-to-kubernetes) + +In this release, we completed support for the main concepts related to observability: `Logging`, `Metrics` & `Tracing`: + +- **Logging:** [`@181-java-observability-logging`](https://www.skills.sh/jabrena/cursor-rules-java/181-java-observability-logging) +- **Metrics:** [`@182-java-observability-metrics-micrometer`](https://www.skills.sh/jabrena/cursor-rules-java/182-java-observability-metrics-micrometer) +- **Tracing:** [`@183-java-observability-tracing-opentelemetry`](https://www.skills.sh/jabrena/cursor-rules-java/183-java-observability-tracing-opentelemetry) + +Now, using any supported framework with OTEL, you can easily send continuous profiling data to Grafana: + +![](/cursor-rules-java/images/2026/6/piroscope-demo.png) + +https://grafana.com/oss/pyroscope/ + +### Improvements in testing + +In this release, fuzz testing was improved to make it easier to use: `@703-technologies-fuzzing-testing`. + +![](/cursor-rules-java/images/2026/6/cats.png) + +https://github.com/Endava/cats + +### Better documentation + +The project now provides documentation in three languages: + +- [`English`](https://github.com/jabrena/cursor-rules-java/blob/main/README.md) +- [`Chinese`](https://github.com/jabrena/cursor-rules-java/blob/main/README_CN.md) +- [`Spanish`](https://github.com/jabrena/cursor-rules-java/blob/main/README_ES.md) + +## Evolution of this project in Vercel's Skills registry + +The ecosystem is large, so you will need your own criteria beyond whether this project fits your preferences. + +This project focuses mainly on the following categories, and that scope continues to evolve: + +- Maven, https://skills.sh/?q=maven +- Architecture ADR, https://skills.sh/?q=architecture+adr +- Java, https://skills.sh/?q=java +- Spring Boot, https://skills.sh/?q=spring-boot +- Quarkus, https://skills.sh/?q=quarkus +- Micronaut, https://skills.sh/?q=micronaut + +## Using the project in IDEs + +### Codex + +![](/cursor-rules-java/images/2026/6/codex.png) + +Recently, I tested Codex running in `VS Code`, and the experience was fantastic. Codex understands `AGENTS.md` and skills located in `.agents/skills`. + +Using Codex, you can run the `Agents` provided by the project without any changes. + +### Magic Quadrant update + +Recently, Gartner updated the Magic Quadrant. + +![](/cursor-rules-java/images/2026/6/magic-cuadrant-agents.jpg) + +https://cursor.com/lp/2026-gartner-mq + +## The project in events + +### The experience in Codemotion Madrid 2026 + +Last month, the project was presented and used at the tech conference `Codemotion Madrid 2026`. The workshop had sold out a few weeks before, and participants rated the session 4.5/5. + +[![](/cursor-rules-java/images/2026/6/codemotion-madrid-workshop.jpg)](https://conferences.codemotion.com/madrid/) + +**Slides:** https://jabrena.github.io/cursor-rules-java/codemotion-madrid-2026/index.html + +### The experience in JMad 2026 + +Every year, `MadridJUG` organizes `JMad`, a Java tech event based on `OpenSpace`. + +[![](/cursor-rules-java/images/2026/6/IMG_8268.jpg)](https://jmad.madridjug.es/) + +`JMad` is a nice opportunity to exchange ideas and have good debates about the topics Java developers want to discuss. + +This year's agenda was: + +![](/cursor-rules-java/images/2026/6/IMG_2584.webp) + +This year, several AI topics were discussed, including `AI Governance` and how to manage `Skills` in your team, unit, or company. + +Further information: https://jmad.madridjug.es/