RepoJournal
Spring @spring-projects
107 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-05-31
stories 40
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SPRING STACK TIGHTENS SECURITY AND DEPRECATION CYCLE

By RepoJournal · Filed · About Spring · Composed from the cited sources · methodology

dependabot[bot] dlwldnjs1009 nicolaskrier
3 people shipped this
dependabot[bot] @dependabot[bot] 6 cited dlwldnjs1009 @dlwldnjs1009 1 cited nicolaskrier @nicolaskrier 1 cited

Spring Boot restores critical Spring Security integration with HtmlUnitDriver after a missed bean registration, while Spring AI begins retiring legacy Mistral models ahead of 2.0.0-RC1.

Spring Boot fixed a regression where securityDelegateMockMvcHtmlUnitDriverCustomizer lost its @Bean annotation, breaking Spring Security integration with HtmlUnitDriver [1]. This is the kind of subtle autowiring bug that ships silently and breaks tests downstream. In the same release cycle, Spring Boot addressed SSL enablement logic across Cassandra, Redis, and MongoDB [2], ensuring empty bundle overrides are treated as unset rather than enabled, matching RabbitMQ's existing behavior. Spring AI is actively managing its Mistral model portfolio ahead of 2.0.0-RC1, removing devstral-medium-latest and retiring devstral-small-latest while deprecating three additional models [9]. Dependency housekeeping continues across the ecosystem: Jackson 2.21.4 and 3.1.4 are rolling out across Spring Integration and Spring Kafka [3][4][5][6], while Kafka itself advances to 4.2.1 [7]. MongoDB driver bumps to 5.7.1 with improved OSGi support [8]. Spring Boot also removed stale gRPC 3rd party starter references from documentation [10].

Action items

References

  1. [1] Restore Spring Security integration with HtmlUnitDriver ↗ spring-projects/spring-boot
  2. [2] SSL should not be enabled when a SSL bundle is overridden to an empty string ↗ spring-projects/spring-boot
  3. [3] Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 ↗ spring-projects/spring-integration
  4. [4] Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 ↗ spring-projects/spring-integration
  5. [5] Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 ↗ spring-projects/spring-kafka
  6. [6] Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 ↗ spring-projects/spring-kafka
  7. [7] Bump kafkaVersion from 4.2.0 to 4.2.1 ↗ spring-projects/spring-kafka
  8. [8] Bump org.mongodb:mongodb-driver-bom from 5.7.0 to 5.7.1 ↗ spring-projects/spring-integration
  9. [9] Update Mistral AI chat models ↗ spring-projects/spring-ai
  10. [10] Remove gRPC 3rd party starter reference ↗ spring-projects/spring-boot

$ ls spring-projects/reviews/ # the step-back reads

the week in review Spring Kafka fixes multi-value JSON header loss the month in review Spring standardizes release trains while security patches and batch fixes surface
Full archive → Weekly reviews →

Quick answers

What shipped in Spring on May 31, 2026?
Spring Boot restores critical Spring Security integration with HtmlUnitDriver after a missed bean registration, while Spring AI begins retiring legacy Mistral models ahead of 2.0.0-RC1. In total, 29 commits and 11 pull requests landed.
Who contributed to Spring on May 31, 2026?
3 developers shipped this update, including dlwldnjs1009, dependabot[bot], and nicolaskrier.
What were the notable Spring updates?
Restore Spring Security integration with HtmlUnitDriver, SSL should not be enabled when a SSL bundle is overridden to an empty string, and Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4.
♥

$ log @spring-projects --recent

Kubernetes probe groups keep their defaults; multi-segment health paths land 90 shipped Kafka config building centralized, async listener results awaited on stop 52 shipped Spring Data moves to JSqlParser 5.4 and Hibernate 7.4.8.Final 11 shipped Spring Batch deprecates setters for required dependencies 5 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.