RepoJournal
Spring @spring-projects
107 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-05-20
stories 18
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SPRING INTEGRATION FIXES CORS DEFAULTS TO MATCH MVC, SPRING AI SHEDS CLOUD BINDINGS

By RepoJournal · Filed · About Spring · Composed from the cited sources · methodology

artembilan mjd507
2 people shipped this
artembilan @artembilan 1 cited mjd507 @mjd507 1 cited

Spring Integration shipped a critical CORS alignment fix that brings HTTP and WebFlux modules into sync with Spring MVC's stricter defaults, while Spring AI removes a deprecated cloud bindings dependency in a significant API cleanup.

The CORS fix [1] addresses a security-relevant mismatch where Spring Integration was allowing origins and credentials that Spring MVC now blocks by default. This auto-cherrypicks to 7.0.x and 6.5.x branches, meaning your existing integrations may need configuration review if you rely on permissive CORS settings. Over in Spring AI, the removal of spring-ai-spring-cloud-bindings [2] signals a strategic move away from cloud-specific binding patterns; if you're using those bindings for Kubernetes or CloudFoundry deployments, migration planning starts now. Spring GraphQL also shipped a fix for a JSON syntax error in GraphiQL's XSRF support [4] that was silently breaking token injection on cookie presence. The rest of the briefing is maintenance work: Spring Integration adds message_store pattern support [3], Spring AMQP improves ack failure visibility with warn-level logging [5], and PostgreSQL driver gets bumped to 42.7.11 [6].

Action items

References

  1. [1] GH-10988: Align HTTP Cross-Origin with Spring MVC ↗ spring-projects/spring-integration
  2. [2] Remove spring-ai-spring-cloud-bindings ↗ spring-projects/spring-ai
  3. [3] Add message_store pattern in `IntegrationPatternType` ↗ spring-projects/spring-integration
  4. [4] Fix JSON syntax error in GraphiQL XSRF support ↗ spring-projects/spring-graphql
  5. [5] GH-3418: Warn on ack failure in the `AbstractAdaptableMessageListener` ↗ spring-projects/spring-amqp
  6. [6] Bump PostgreSQL version to `42.7.11` ↗ spring-projects/spring-integration-samples

$ ls spring-projects/reviews/ # the step-back reads

the week in review Spring Kafka fixes multi-value JSON header loss the month in review Spring standardizes release trains while security patches and batch fixes surface
Full archive → Weekly reviews →

Quick answers

What shipped in Spring on May 20, 2026?
Spring Integration shipped a critical CORS alignment fix that brings HTTP and WebFlux modules into sync with Spring MVC's stricter defaults, while Spring AI removes a deprecated cloud bindings dependency in a significant API cleanup. In total, 15 commits and 3 pull requests landed.
Who contributed to Spring on May 20, 2026?
2 developers shipped this update, including artembilan and mjd507.
What were the notable Spring updates?
GH-10988: Align HTTP Cross-Origin with Spring MVC, Remove spring-ai-spring-cloud-bindings, and Add message_store pattern in `IntegrationPatternType`.
♥

$ log @spring-projects --recent

Kubernetes probe groups keep their defaults; multi-segment health paths land 90 shipped Kafka config building centralized, async listener results awaited on stop 52 shipped Spring Data moves to JSqlParser 5.4 and Hibernate 7.4.8.Final 11 shipped Spring Batch deprecates setters for required dependencies 5 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.