RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING ECOSYSTEM CLOSES COMMONS LOGGING GAP ACROSS THREE PROJECTS

By RepoJournal · Filed · About Spring

Spring LDAP, Spring Session, and Spring Data Rest are all pulling the same commons-logging 1.4.0 upgrade overnight, closing a dependency consistency gap across the stack.

Both spring-ldap [1] and spring-session [2] bumped commons-logging from 1.3.6 to 1.4.0 in coordinated moves that suggest this was flagged as a priority across the dependency graph. Spring Tools landed a critical fix for bean method validation [3], stopping false positives when public @Bean methods override inherited methods from superclasses or interfaces, a real pain point for WebMvcConfigurer implementations. The tools team also pinned esbuild to 0.28.1 [4] and updated Spring Boot, Spring AI, and JDT Core dependencies [5]. Spring Data Rest shipped a fix ensuring link-save events now capture the value being saved rather than the previously linked value [6], which matters for PUT operations on collections and maps. Spring Kafka fixed a POM leak where spotbugs was incorrectly marked runtimeOnly instead of compileOnly [7], which was leaking into final artifacts.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Bump commons-logging:commons-logging from 1.3.6 to 1.4.0 ↗ spring-projects/spring-ldap
  2. [2] Bump commons-logging:commons-logging from 1.3.6 to 1.4.0 ↗ spring-projects/spring-session
  3. [3] Do not flag overridden bean methods ↗ spring-projects/spring-tools
  4. [4] Ensure esbuild is at 0.28.1 spring-projects/spring-tools
  5. [5] dependency updates (spring boot, spring ai, jdt core) spring-projects/spring-tools
  6. [6] Publish link-save events with the value being saved. spring-projects/spring-data-rest
  7. [7] Make `spotbugs` as `compileOnly` spring-projects/spring-kafka

Quick answers

What shipped in Spring on June 18, 2026?
Spring LDAP, Spring Session, and Spring Data Rest are all pulling the same commons-logging 1.4.0 upgrade overnight, closing a dependency consistency gap across the stack. In total, 6 commits and 3 pull requests landed.
Who contributed to Spring on June 18, 2026?
2 developers shipped this update, including dependabot[bot] and goutamadwant.
What were the notable Spring updates?
Bump commons-logging:commons-logging from 1.3.6 to 1.4.0, Bump commons-logging:commons-logging from 1.3.6 to 1.4.0, and Do not flag overridden bean methods.

More from @spring-projects

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.