Who contributed to Spring on June 9, 2026?

1 developer shipped this update, including dependabot[bot].

What were the notable Spring updates?

Upgrade to Spring Framework 7.0.8, Upgrade to Spring Framework 7.0.8, and Upgrade to Spring Framework 6.2.19.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING FRAMEWORK 7.0.8 ROLLS ACROSS THE STACK WITH SECURITY FIXES

By RepoJournal · Filed 06:04 UTC on June 9, 2026 · About Spring

1 person shipped this

dependabot[bot] @dependabot[bot] 3 cited

Spring Framework 7.0.8 landed overnight with high-severity CVE patches, and the entire ecosystem is pulling it in across WebFlow, Boot, WS, LDAP, and Security.

Spring Framework 7.0.8 hit the wire as a maintenance release packed with security fixes [1][2][7], and every major project is already syncing. Spring WebFlow upgraded first [1], followed by Spring WS on both the 7.0.x and 6.2.x tracks [2][3]. Spring LDAP shipped 4.1.0 pulling in the framework bump plus Micrometer 1.17.0 [4], with maintenance releases for 4.0.4 and 3.3.8 following suit [5][6]. Spring Security bumped the framework to 7.0.8 [7], Micrometer to 1.17.0 [8], and Jackson to 3.2.0 in the same window [9]. Spring Boot continues its release coordination work, merging 4.0.x and 3.5.x branches and optimizing Docker test performance [10][11][12]. The pattern here matters: this is coordinated patching across the dependency tree, with no breaking changes flagged but multiple migration guides available for the Micrometer 1.17.0 jump. Skip nothing in this batch. All of it ships together.

Action items

→ Upgrade to Spring Framework 7.0.8 immediately - high-severity CVEs patched spring-projects/spring-framework [immediate]
→ Pull Spring LDAP 4.1.0 if on 4.0.x line, audit empty password handling in LDAP auth spring-projects/spring-ldap [plan]
→ Review Micrometer 1.17.0 migration guide before bumping observability stack spring-projects/spring-security [plan]

References

[1] Upgrade to Spring Framework 7.0.8 spring-projects/spring-webflow
[2] Upgrade to Spring Framework 7.0.8 spring-projects/spring-ws
[3] Upgrade to Spring Framework 6.2.19 spring-projects/spring-ws
[4] 4.1.0 ↗ spring-projects/spring-ldap
[5] 4.0.4 ↗ spring-projects/spring-ldap
[6] 3.3.8 ↗ spring-projects/spring-ldap
[7] Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 ↗ spring-projects/spring-security
[8] Bump io-micrometer from 1.16.5 to 1.17.0 ↗ spring-projects/spring-security
[9] Bump tools.jackson:jackson-bom from 3.1.4 to 3.2.0 ↗ spring-projects/spring-security
[10] Merge branch '4.0.x' spring-projects/spring-boot
[11] Merge branch '3.5.x' into 4.0.x spring-projects/spring-boot
[12] Only sync JDK download when Docker tests that need it will run spring-projects/spring-boot

Quick answers

What shipped in Spring on June 9, 2026?: Spring Framework 7.0.8 landed overnight with high-severity CVE patches, and the entire ecosystem is pulling it in across WebFlow, Boot, WS, LDAP, and Security. In total, 9 commits, 9 pull requests, and 3 releases landed.
Who contributed to Spring on June 9, 2026?: 1 developer shipped this update, including dependabot[bot].
What were the notable Spring updates?: Upgrade to Spring Framework 7.0.8, Upgrade to Spring Framework 7.0.8, and Upgrade to Spring Framework 6.2.19.

SPRING BOOT KILLS RESTTEMPLATE, SPRING AI GAINS IMAGE GEN

Spring Boot is deprecating RestTemplate across its entire ecosystem, forcing a migration to RestClient as the Framework itself moves on [ref:1].

java 20 shipped 1-min read

@spring-projects 1 day ago

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

java 35 shipped 1-min read

@spring-projects 2 days ago

SPRING AI HARDENS ERROR HANDLING, REDIS VECTORSTORE SHEDS BANDWIDTH BLOAT

Spring AI is tightening its security posture on two fronts: MCP server transports now strip exception messages from error responses, while RedisVectorStore cuts network waste by 37 KB per embedding lookup.

java 12 shipped 2-min read

@spring-projects 3 days ago

SPRING BOOT TIGHTENS NULLABILITY CHECKS, FRAMEWORK CLEANS HOUSE

Spring Boot merged improvements to Nullaway 0.13.8 that correctly handle Map#remove nullability, while Spring Framework shipped targeted fixes for logging clarity and documentation.

java 17 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.