RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Pick a date

  1. Sat 16 may
  2. Sun 17 may
  3. Mon 18 may
  4. Tue 19 may
  5. Wed 20 may
  6. Thu 21 may
  7. Sat 23 may
  8. Sun 24 may
  9. Mon 25 may
  10. Tue 26 may
  11. Wed 27 may
  12. Thu 28 may
  13. Fri 29 may
  14. Sat 30 may
  15. Sun 31 may
  16. Mon 1 jun
  17. Mon 8 jun
  18. Tue 9 jun
  19. Today 10 jun

The Wire · Showcase

SPRING INTEGRATION FIXES CORS DEFAULTS TO MATCH MVC, SPRING AI SHEDS CLOUD BINDINGS

By RepoJournal · Filed · About Spring

Spring Integration shipped a critical CORS alignment fix that brings HTTP and WebFlux modules into sync with Spring MVC's stricter defaults, while Spring AI removes a deprecated cloud bindings dependency in a significant API cleanup.

The CORS fix [1] addresses a security-relevant mismatch where Spring Integration was allowing origins and credentials that Spring MVC now blocks by default. This auto-cherrypicks to 7.0.x and 6.5.x branches, meaning your existing integrations may need configuration review if you rely on permissive CORS settings. Over in Spring AI, the removal of spring-ai-spring-cloud-bindings [2] signals a strategic move away from cloud-specific binding patterns; if you're using those bindings for Kubernetes or CloudFoundry deployments, migration planning starts now. Spring GraphQL also shipped a fix for a JSON syntax error in GraphiQL's XSRF support [4] that was silently breaking token injection on cookie presence. The rest of the briefing is maintenance work: Spring Integration adds message_store pattern support [3], Spring AMQP improves ack failure visibility with warn-level logging [5], and PostgreSQL driver gets bumped to 42.7.11 [6].

Action items

References

  1. [1] GH-10988: Align HTTP Cross-Origin with Spring MVC ↗ spring-projects/spring-integration
  2. [2] Remove spring-ai-spring-cloud-bindings spring-projects/spring-ai
  3. [3] Add message_store pattern in `IntegrationPatternType` ↗ spring-projects/spring-integration
  4. [4] Fix JSON syntax error in GraphiQL XSRF support spring-projects/spring-graphql
  5. [5] GH-3418: Warn on ack failure in the `AbstractAdaptableMessageListener` spring-projects/spring-amqp
  6. [6] Bump PostgreSQL version to `42.7.11` spring-projects/spring-integration-samples

FAQ

What changed in Spring on May 20, 2026?
Spring Integration shipped a critical CORS alignment fix that brings HTTP and WebFlux modules into sync with Spring MVC's stricter defaults, while Spring AI removes a deprecated cloud bindings dependency in a significant API cleanup.
What should Spring teams do about it?
Review CORS configuration in Spring Integration HTTP/WebFlux modules against new Spring MVC defaults • Plan migration away from spring-ai-spring-cloud-bindings if currently in use • Test GraphiQL XSRF token flow if you rely on cookie-based CSRF protection
Which Spring repositories shipped on May 20, 2026?
spring-projects/spring-integration, spring-projects/spring-ai, spring-projects/spring-graphql, spring-projects/spring-amqp, spring-projects/spring-integration-samples

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.