RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Pick a date

  1. Sat 16 may
  2. Sun 17 may
  3. Mon 18 may
  4. Tue 19 may
  5. Wed 20 may
  6. Thu 21 may
  7. Sat 23 may
  8. Sun 24 may
  9. Mon 25 may
  10. Tue 26 may
  11. Wed 27 may
  12. Thu 28 may
  13. Fri 29 may
  14. Sat 30 may
  15. Sun 31 may
  16. Mon 1 jun
  17. Mon 8 jun
  18. Tue 9 jun
  19. Today 10 jun

The Wire · Showcase

SPRING STACK TIGHTENS SECURITY AND DEPRECATION CYCLE

By RepoJournal · Filed · About Spring

Spring Boot restores critical Spring Security integration with HtmlUnitDriver after a missed bean registration, while Spring AI begins retiring legacy Mistral models ahead of 2.0.0-RC1.

Spring Boot fixed a regression where securityDelegateMockMvcHtmlUnitDriverCustomizer lost its @Bean annotation, breaking Spring Security integration with HtmlUnitDriver [1]. This is the kind of subtle autowiring bug that ships silently and breaks tests downstream. In the same release cycle, Spring Boot addressed SSL enablement logic across Cassandra, Redis, and MongoDB [2], ensuring empty bundle overrides are treated as unset rather than enabled, matching RabbitMQ's existing behavior. Spring AI is actively managing its Mistral model portfolio ahead of 2.0.0-RC1, removing devstral-medium-latest and retiring devstral-small-latest while deprecating three additional models [9]. Dependency housekeeping continues across the ecosystem: Jackson 2.21.4 and 3.1.4 are rolling out across Spring Integration and Spring Kafka [3][4][5][6], while Kafka itself advances to 4.2.1 [7]. MongoDB driver bumps to 5.7.1 with improved OSGi support [8]. Spring Boot also removed stale gRPC 3rd party starter references from documentation [10].

Action items

References

  1. [1] Restore Spring Security integration with HtmlUnitDriver spring-projects/spring-boot
  2. [2] SSL should not be enabled when a SSL bundle is overridden to an empty string ↗ spring-projects/spring-boot
  3. [3] Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 ↗ spring-projects/spring-integration
  4. [4] Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 ↗ spring-projects/spring-integration
  5. [5] Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 ↗ spring-projects/spring-kafka
  6. [6] Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 ↗ spring-projects/spring-kafka
  7. [7] Bump kafkaVersion from 4.2.0 to 4.2.1 ↗ spring-projects/spring-kafka
  8. [8] Bump org.mongodb:mongodb-driver-bom from 5.7.0 to 5.7.1 ↗ spring-projects/spring-integration
  9. [9] Update Mistral AI chat models ↗ spring-projects/spring-ai
  10. [10] Remove gRPC 3rd party starter reference spring-projects/spring-boot

FAQ

What changed in Spring on May 31, 2026?
Spring Boot restores critical Spring Security integration with HtmlUnitDriver after a missed bean registration, while Spring AI begins retiring legacy Mistral models ahead of 2.0.0-RC1.
What should Spring teams do about it?
Test HtmlUnitDriver integration if using Spring Security mock MVC in your test suite • Review SSL bundle configuration for Cassandra, Redis, and MongoDB if using empty string overrides • Update Mistral model references before Spring AI 2.0.0-RC1 if using deprecated models
Which Spring repositories shipped on May 31, 2026?
spring-projects/spring-boot, spring-projects/spring-integration, spring-projects/spring-kafka, spring-projects/spring-ai

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.