Who contributed to Spring on June 16, 2026?

1 developer shipped this update, including dependabot[bot].

What were the notable Spring updates?

(4.0.x): Bump org.springframework.boot from 4.0.6 to 4.0.7, Restore PDF media mapping in `OpenAiChatModel`, and Fix MCP integration tests flakiness.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING BOOT FIXES MAIL SECURITY GAP, SPRING AI RESTORES PDF HANDLING

By RepoJournal · Filed 06:07 UTC on June 16, 2026 · About Spring

1 person shipped this

dependabot[bot] @dependabot[bot] 1 cited

Spring Boot 4.0.7 patches a hostname verification bypass in MailSender auto-configuration while Spring AI closes a critical regression that broke PDF document parsing in Claude and GPT models.

Spring Boot 4.0.7 landed overnight with a security fix for MailSender auto-configuration that was silently disabling hostname verification [1]. This is the kind of silent-fail security issue that ships undetected in production. Spring AI simultaneously shipped a fix restoring PDF media mapping in OpenAiChatModel [2], which broke in the 2.0 rewrite onto the official OpenAI SDK. PDFs were falling through to base64 text instead of parsed documents. Spring AI also fixed MCP integration test flakiness [3] by gracefully closing servers, tuning timeouts to 60s, and standardizing container images. Across the stack, Spring Integration hardened two critical bugs: a multibyte character offset issue in DatagramPacketMessageMapper [4] that corrupted UDP messages with non-ASCII headers, and a Math.abs() overflow in PartitionedDispatcher [5] that crashed with Integer.MIN_VALUE. Spring Boot dependency management got realigned [7], removing Protobuf Common Protos management to let gRPC Java control the version transitively. Spring AI replaced deprecated Jackson methods [6], migrating from asText() to asString() and switching to jspecify annotations for null safety.

Action items

→ Upgrade Spring Boot to 4.0.7 immediately if using MailSender auto-configuration spring-projects/spring-boot [immediate]
→ Update Spring AI to latest if handling PDF documents in chat models spring-projects/spring-ai [immediate]
→ Patch Spring Integration 7.x for UDP multibyte and partition dispatcher fixes spring-projects/spring-integration [plan]
→ Monitor Spring Boot gRPC alignment; verify Protobuf version consistency in your builds spring-projects/spring-boot [monitor]

References

[1] (4.0.x): Bump org.springframework.boot from 4.0.6 to 4.0.7 ↗ spring-projects/spring-credhub
[2] Restore PDF media mapping in `OpenAiChatModel` spring-projects/spring-ai
[3] Fix MCP integration tests flakiness spring-projects/spring-ai
[4] GH-11115: Fix multibyte ack-header offset in DatagramPacketMessageMapper spring-projects/spring-integration
[5] GH-11114: Fix `PartitionedDispatcher` for `Integer.MIN_VALUE` spring-projects/spring-integration
[6] Replace deprecated JsonNode methods and null-safe annotations spring-projects/spring-ai
[7] Remove dependency management for Protobuf Common Protos spring-projects/spring-boot

Quick answers

What shipped in Spring on June 16, 2026?: Spring Boot 4.0.7 patches a hostname verification bypass in MailSender auto-configuration while Spring AI closes a critical regression that broke PDF document parsing in Claude and GPT models. In total, 21 commits and 6 pull requests landed.
Who contributed to Spring on June 16, 2026?: 1 developer shipped this update, including dependabot[bot].
What were the notable Spring updates?: (4.0.x): Bump org.springframework.boot from 4.0.6 to 4.0.7, Restore PDF media mapping in `OpenAiChatModel`, and Fix MCP integration tests flakiness.

SPRING FIXES STALE PROPERTY ACCESS BUG, ELASTICSEARCH CUTS JSON OVERHEAD

Spring Framework plugged a SpEL evaluation context bug that could serve stale cached properties between expression evaluations, while Spring Data Elasticsearch eliminated wasteful intermediate JSON serialization in search hit field conversion.

java 10 shipped 1-min read

@spring-projects 2 days ago

SPRING DATA ELASTICSEARCH GOES SERVERLESS, BOOT FIXES OTLP TYPE BUG

Spring Data Elasticsearch now supports serverless deployments with a new ElasticsearchServerType enum, while Spring Boot patches a stale metadata reference that broke OTLP logging transport configuration.

java 19 shipped 1-min read

@spring-projects 3 days ago

SPRING BOOT KILLS RESTTEMPLATE, SPRING AI GAINS IMAGE GEN

Spring Boot is deprecating RestTemplate across its entire ecosystem, forcing a migration to RestClient as the Framework itself moves on [ref:1].

java 20 shipped 1-min read

@spring-projects 4 days ago

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

java 35 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.