Who contributed to Spring on June 27, 2026?

2 developers shipped this update, including dependabot[bot] and ilayaperumalg.

What were the notable Spring updates?

Fix off-by-one error in MimeTypeUtils.parseMimeType(), Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.37, and Bump actions/cache from 5 to 6.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING FRAMEWORK FIXES MIME TYPE PARSER REGRESSION, AMQP CLOSES LOGBACK VULNERABILITY WINDOW

By RepoJournal · Filed 06:04 UTC on June 27, 2026 · About Spring

2 people shipped this

dependabot[bot] @dependabot[bot] 2 cited

ilayaperumalg @ilayaperumalg 1 cited

Spring Framework patched a critical off-by-one error in MimeTypeUtils that was throwing the wrong exception on malformed input, while Spring AMQP moved aggressively to lock down conditional configuration processing in Logback.

Spring Framework addressed a regression introduced in recent changes to MimeTypeUtils.parseMimeType() [1] that exposed a StringIndexOutOfBoundsException instead of the expected InvalidMimeTypeException when parsing certain invalid MIME types, particularly quoted strings without semicolons. The fix is surgical: replacing the bounds check with a proper index validation to prevent array access violations. In parallel, Spring AMQP bumped Logback to 1.5.37 [2], which hardens conditional configuration processing and closes multiple vulnerability vectors related to unsafe Java expression evaluation in config files. Spring Session updated its CI infrastructure to actions/cache v6 [3], migrating to ESM and picking up performance improvements for workflow caching. Spring AI completed a workflow infrastructure refactor for its integration test suite [4], consolidating test execution paths. Spring Framework also merged maintenance branch updates [ref:7, ref:8] to keep version lines in sync.

Action items

→ Upgrade Spring AMQP to latest with Logback 1.5.37 in your next dependency refresh cycle spring-projects/spring-amqp [plan]
→ Update Spring Framework to pick up MimeTypeUtils fix if you parse user-supplied MIME types spring-projects/spring-framework [monitor]
→ Verify Spring Session builds complete successfully with actions/cache v6 spring-projects/spring-session [plan]

References

[1] Fix off-by-one error in MimeTypeUtils.parseMimeType() spring-projects/spring-framework
[2] Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.37 ↗ spring-projects/spring-amqp
[3] Bump actions/cache from 5 to 6 ↗ spring-projects/spring-session
[4] Move Spring AI integration tests' workflow ↗ spring-projects/spring-ai
[5] Merge branch '7.0.x' spring-projects/spring-framework
[6] Merge branch '7.0.x' spring-projects/spring-framework

Quick answers

What shipped in Spring on June 27, 2026?: Spring Framework patched a critical off-by-one error in MimeTypeUtils that was throwing the wrong exception on malformed input, while Spring AMQP moved aggressively to lock down conditional configuration processing in Logback. In total, 5 commits and 3 pull requests landed.
Who contributed to Spring on June 27, 2026?: 2 developers shipped this update, including dependabot[bot] and ilayaperumalg.
What were the notable Spring updates?: Fix off-by-one error in MimeTypeUtils.parseMimeType(), Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.37, and Bump actions/cache from 5 to 6.

SPRING FIXES STALE PROPERTY ACCESS BUG, ELASTICSEARCH CUTS JSON OVERHEAD

Spring Framework plugged a SpEL evaluation context bug that could serve stale cached properties between expression evaluations, while Spring Data Elasticsearch eliminated wasteful intermediate JSON serialization in search hit field conversion.

java 10 shipped 1-min read

@spring-projects 2 days ago

SPRING DATA ELASTICSEARCH GOES SERVERLESS, BOOT FIXES OTLP TYPE BUG

Spring Data Elasticsearch now supports serverless deployments with a new ElasticsearchServerType enum, while Spring Boot patches a stale metadata reference that broke OTLP logging transport configuration.

java 19 shipped 1-min read

@spring-projects 3 days ago

SPRING BOOT KILLS RESTTEMPLATE, SPRING AI GAINS IMAGE GEN

Spring Boot is deprecating RestTemplate across its entire ecosystem, forcing a migration to RestClient as the Framework itself moves on [ref:1].

java 20 shipped 1-min read

@spring-projects 4 days ago

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

java 35 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.