Who contributed to Spring on May 31, 2026?

3 developers shipped this update, including dlwldnjs1009, dependabot[bot], and nicolaskrier.

What were the notable Spring updates?

Restore Spring Security integration with HtmlUnitDriver, SSL should not be enabled when a SSL bundle is overridden to an empty string, and Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING STACK TIGHTENS SECURITY AND DEPRECATION CYCLE

By RepoJournal · Filed 06:03 UTC on May 31, 2026 · About Spring

3 people shipped this

dependabot[bot] @dependabot[bot] 6 cited

dlwldnjs1009 @dlwldnjs1009 1 cited

nicolaskrier @nicolaskrier 1 cited

Spring Boot restores critical Spring Security integration with HtmlUnitDriver after a missed bean registration, while Spring AI begins retiring legacy Mistral models ahead of 2.0.0-RC1.

Spring Boot fixed a regression where securityDelegateMockMvcHtmlUnitDriverCustomizer lost its @Bean annotation, breaking Spring Security integration with HtmlUnitDriver [1]. This is the kind of subtle autowiring bug that ships silently and breaks tests downstream. In the same release cycle, Spring Boot addressed SSL enablement logic across Cassandra, Redis, and MongoDB [2], ensuring empty bundle overrides are treated as unset rather than enabled, matching RabbitMQ's existing behavior. Spring AI is actively managing its Mistral model portfolio ahead of 2.0.0-RC1, removing devstral-medium-latest and retiring devstral-small-latest while deprecating three additional models [9]. Dependency housekeeping continues across the ecosystem: Jackson 2.21.4 and 3.1.4 are rolling out across Spring Integration and Spring Kafka [3][4][5][6], while Kafka itself advances to 4.2.1 [7]. MongoDB driver bumps to 5.7.1 with improved OSGi support [8]. Spring Boot also removed stale gRPC 3rd party starter references from documentation [10].

Action items

→ Test HtmlUnitDriver integration if using Spring Security mock MVC in your test suite spring-projects/spring-boot [plan]
→ Review SSL bundle configuration for Cassandra, Redis, and MongoDB if using empty string overrides spring-projects/spring-boot [monitor]
→ Update Mistral model references before Spring AI 2.0.0-RC1 if using deprecated models spring-projects/spring-ai [plan]
→ Pull Jackson 2.21.4 and 3.1.4 in your next dependency refresh spring-projects/spring-integration [monitor]

References

[1] Restore Spring Security integration with HtmlUnitDriver spring-projects/spring-boot
[2] SSL should not be enabled when a SSL bundle is overridden to an empty string ↗ spring-projects/spring-boot
[3] Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 ↗ spring-projects/spring-integration
[4] Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 ↗ spring-projects/spring-integration
[5] Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 ↗ spring-projects/spring-kafka
[6] Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 ↗ spring-projects/spring-kafka
[7] Bump kafkaVersion from 4.2.0 to 4.2.1 ↗ spring-projects/spring-kafka
[8] Bump org.mongodb:mongodb-driver-bom from 5.7.0 to 5.7.1 ↗ spring-projects/spring-integration
[9] Update Mistral AI chat models ↗ spring-projects/spring-ai
[10] Remove gRPC 3rd party starter reference spring-projects/spring-boot

Quick answers

What shipped in Spring on May 31, 2026?: Spring Boot restores critical Spring Security integration with HtmlUnitDriver after a missed bean registration, while Spring AI begins retiring legacy Mistral models ahead of 2.0.0-RC1. In total, 29 commits and 11 pull requests landed.
Who contributed to Spring on May 31, 2026?: 3 developers shipped this update, including dlwldnjs1009, dependabot[bot], and nicolaskrier.
What were the notable Spring updates?: Restore Spring Security integration with HtmlUnitDriver, SSL should not be enabled when a SSL bundle is overridden to an empty string, and Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4.

SPRING BOOT KILLS RESTTEMPLATE, SPRING AI GAINS IMAGE GEN

Spring Boot is deprecating RestTemplate across its entire ecosystem, forcing a migration to RestClient as the Framework itself moves on [ref:1].

java 20 shipped 1-min read

@spring-projects 1 day ago

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

java 35 shipped 1-min read

@spring-projects 2 days ago

SPRING AI HARDENS ERROR HANDLING, REDIS VECTORSTORE SHEDS BANDWIDTH BLOAT

Spring AI is tightening its security posture on two fronts: MCP server transports now strip exception messages from error responses, while RedisVectorStore cuts network waste by 37 KB per embedding lookup.

java 12 shipped 2-min read

@spring-projects 3 days ago

SPRING BOOT TIGHTENS NULLABILITY CHECKS, FRAMEWORK CLEANS HOUSE

Spring Boot merged improvements to Nullaway 0.13.8 that correctly handle Map#remove nullability, while Spring Framework shipped targeted fixes for logging clarity and documentation.

java 17 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.