Who contributed to Spring on June 11, 2026?

1 developer shipped this update, including dependabot[bot].

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING BOOT 4.1.0 SHIPS WITH SECURITY HARDENING, SPRING TOOLS ADDS CLAUDE CODE PLUGIN

By RepoJournal · Filed 06:05 UTC on June 11, 2026 · About Spring

1 person shipped this

dependabot[bot] @dependabot[bot] 1 cited

Spring Boot 4.1.0 is live with reduced memory overhead and critical mail/Artemis security fixes that shipped backports across three maintenance branches in the same window.

Spring Boot 4.1.0 [1] landed with memory improvements to WritableJson.toByteArray and a new public constructor for InvalidConfigurationPropertyValueException, but the real news is what came with it. The Boot team simultaneously released v3.5.15 [2] and v4.0.7 [3], and both patch two critical security gaps: hostname verification is now enabled by default in Mail auto-configuration [4], and Artemis embedded brokers no longer use predictable temp directories [5]. This coordinated push signals these weren't edge cases. Meanwhile, Spring Tools hit 5.2.0 [7] with an experimental Claude Code Plugin that runs an embedded MCP server to surface Spring Boot-specific tools to the LLM without conflicting with your Java Language Server. Spring AI cleaned house overnight [8][9][10][11], stripping out orphaned documentation sections, obsolete example classes, and deprecated property references that were cluttering the codebase. Spring Session bumped to Boot 4.1.0 [6], and Spring Statemachine docs are now aligned for the v4 release cycle [12].

Action items

→ Upgrade Spring Boot to 4.1.0 (or 3.5.15/4.0.7 if you're on earlier lines) before next prod deploy spring-projects/spring-boot [immediate]
→ Verify Mail hostname verification is working in your environment (it's on by default now) spring-projects/spring-boot [plan]
→ Review Spring AI docs after the pruning - some property references were removed spring-projects/spring-ai [monitor]
→ Test Claude Code Plugin in non-prod if you're using Spring Tools with LLM workflows spring-projects/spring-tools [monitor]

References

[1] v4.1.0 ↗ spring-projects/spring-boot
[2] v3.5.15 ↗ spring-projects/spring-boot
[3] v4.0.7 ↗ spring-projects/spring-boot
[4] Enable hostname verification by default in Mail auto-config spring-projects/spring-boot
[5] Fix predictable temp directory in Artemis embedded configuration spring-projects/spring-boot
[6] Bump org.springframework.boot:spring-boot-gradle-plugin from 4.1.0-SNAPSHOT to 4.1.0 ↗ spring-projects/spring-session
[7] 5.2.0.RELEASE ↗ spring-projects/spring-tools
[8] Remove unrelated sections from imageclient.adoc spring-projects/spring-ai
[9] fix (docs): Fix removed model enable/disable property references in docs spring-projects/spring-ai
[10] Remove remaining System.out in tests spring-projects/spring-ai
[11] Remove `internal-tool-execution-enabled` property references from docs spring-projects/spring-ai
[12] Update whatsnew.adoc for v4 spring-projects/spring-statemachine

Quick answers

What shipped in Spring on June 11, 2026?: Spring Boot 4.1.0 is live with reduced memory overhead and critical mail/Artemis security fixes that shipped backports across three maintenance branches in the same window. In total, 57 commits, 6 pull requests, and 4 releases landed.
Who contributed to Spring on June 11, 2026?: 1 developer shipped this update, including dependabot[bot].
What were the notable Spring updates?: v4.1.0, v3.5.15, and v4.0.7.

SPRING FIXES STALE PROPERTY ACCESS BUG, ELASTICSEARCH CUTS JSON OVERHEAD

Spring Framework plugged a SpEL evaluation context bug that could serve stale cached properties between expression evaluations, while Spring Data Elasticsearch eliminated wasteful intermediate JSON serialization in search hit field conversion.

java 10 shipped 1-min read

@spring-projects 2 days ago

SPRING DATA ELASTICSEARCH GOES SERVERLESS, BOOT FIXES OTLP TYPE BUG

Spring Data Elasticsearch now supports serverless deployments with a new ElasticsearchServerType enum, while Spring Boot patches a stale metadata reference that broke OTLP logging transport configuration.

java 19 shipped 1-min read

@spring-projects 3 days ago

SPRING BOOT KILLS RESTTEMPLATE, SPRING AI GAINS IMAGE GEN

Spring Boot is deprecating RestTemplate across its entire ecosystem, forcing a migration to RestClient as the Framework itself moves on [ref:1].

java 20 shipped 1-min read

@spring-projects 4 days ago

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

java 35 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.