RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING AI STREAMING FIX PATCHES SILENT DATA LOSS, SECURITY PROJECTS PIN NODE 24.15

By RepoJournal · Filed · About Spring

1 person shipped this

Spring AI 2.0.0-M7 ships a critical reactive streaming fix that was dropping response chunks in production, while security teams across the stack locked Node to 24.15 after Node 24.16 broke docs builds.

The Spring AI team patched a nasty bug in ChatModel streaming where the reactive switchMap operator was silently discarding parts of streamed responses when downstream processing stalled [1]. This is the kind of bug that ships to production unnoticed, so if you're on Spring AI 2.x and streaming, pull this immediately [2]. The fix is already backported. Spring AI also shipped M7 with the ToolSpec fluent API and CosmosDB components removed, plus a breaking change to MCP SDK 2.0.0-M3 where `model` and `maxTokens` are now mandatory at construction time [3], [4]. Meanwhile, Spring Security, Spring Session, and Spring LDAP all pinned Node 24.15 after upgrading to 24.16 broke Antora docs builds overnight [5], [6], [7]. Spring Tools merged a fix for version validation to respect commercial repository configuration in the build file [8], and Spring Security applied a breaking change restricting the PathPatternRequestMatcher.Builder bean to application endpoints only [9].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] fix: Avoid switchMap in ChatModel streaming ↗ spring-projects/spring-ai
  2. [2] fix: Avoid switchMap in ChatModel streaming (#6124) spring-projects/spring-ai
  3. [3] Spring AI 2.0.0-M7 ↗ spring-projects/spring-ai
  4. [4] Update tests and docs for MCP SDK 2.0.0-M3 breaking API changes spring-projects/spring-ai
  5. [5] Update NodeJS to 24.15 spring-projects/spring-security
  6. [6] Update NodeJS to 24.15 spring-projects/spring-session
  7. [7] Update NodeJS to 24.15 spring-projects/spring-ldap
  8. [8] Version validation based on repos setup in build file and commercial repo in settings (#1893) spring-projects/spring-tools
  9. [9] Apply Builder Bean Only to Application Endpoints spring-projects/spring-security

Quick answers

What shipped in Spring on May 23, 2026?
Spring AI 2.0.0-M7 ships a critical reactive streaming fix that was dropping response chunks in production, while security teams across the stack locked Node to 24.15 after Node 24.16 broke docs builds. In total, 24 commits, 3 pull requests, and 3 releases landed.
Who contributed to Spring on May 23, 2026?
1 developer shipped this update, including chemicL.
What were the notable Spring updates?
fix: Avoid switchMap in ChatModel streaming, fix: Avoid switchMap in ChatModel streaming (#6124), and Spring AI 2.0.0-M7.

More from @spring-projects

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?