RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Thu 18 jun
  2. Sat 27 jun
  3. Sun 28 jun
  4. Mon 29 jun
  5. Tue 30 jun
  6. Wed 1 jul
  7. Thu 2 jul
  8. Fri 3 jul
  9. Sat 4 jul
  10. Sun 5 jul
  11. Mon 6 jul
  12. Tue 7 jul
  13. Wed 8 jul
  14. Thu 9 jul
  15. Fri 10 jul
  16. Sat 11 jul
  17. Sun 12 jul
  18. Mon 13 jul
  19. Tue 14 jul
  20. Wed 15 jul
  21. Thu 16 jul
  22. Sat 18 jul
  23. Sun 19 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: Java Full archive →

The Wire · Showcase

SPRING ECOSYSTEM TIGHTENS DEPENDENCY CHAIN WITH BUILD AND TEST FIXES

By RepoJournal · Filed · About Spring

dependabot[bot] quaff
2 people shipped this
dependabot[bot] @dependabot[bot] 7 cited quaff @quaff 1 cited

Gradle 9.6.1 rolls across Spring Boot, Security, and LDAP while Logback 1.5.37 lands critical vulnerability patches for conditional configuration processing.

The Spring projects are moving in lockstep on foundational tooling. Gradle 9.6.1 [1] [5] ships improved Configuration Cache hit rates and CLI rendering options, now deployed to spring-ldap, spring-security, and spring-boot build chains. Matching the cadence, JUnit 6.1.1 [2] [6] rolled into spring-ldap and spring-security test suites with platform, Jupiter, and Vintage updates. On the logging front, Logback 1.5.37 [3] [7] addresses vulnerabilities in conditional configuration processing based on Java expression evaluation, now patching both spring-session and spring-security. Spring Boot polished unnecessary `@Nullable` annotations from local variable declarations [8] [9] [10] [11], recognizing that nullability can be inferred from assignment patterns rather than explicit markup. Minor driver updates continue: DB2 jcc bumped to 12.1.5.0 [4] in spring-session without breaking changes flagged.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Bump gradle-wrapper from 9.6.0 to 9.6.1 ↗ spring-projects/spring-ldap
  2. [2] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 ↗ spring-projects/spring-ldap
  3. [3] Bump ch.qos.logback:logback-core from 1.5.36 to 1.5.37 ↗ spring-projects/spring-session
  4. [4] Bump com.ibm.db2:jcc from 12.1.4.0 to 12.1.5.0 ↗ spring-projects/spring-session
  5. [5] Bump gradle-wrapper from 9.6.0 to 9.6.1 ↗ spring-projects/spring-security
  6. [6] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 ↗ spring-projects/spring-security
  7. [7] Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 ↗ spring-projects/spring-security
  8. [8] Merge pull request #50866 from quaff spring-projects/spring-boot
  9. [9] Polish "Remove unnecessary `@Nullable`s from local variable declarations" spring-projects/spring-boot
  10. [10] Remove unnecessary `@Nullable`s from local variable declarations spring-projects/spring-boot
  11. [11] Remove @Nullable from local variable declarations ↗ spring-projects/spring-boot

Quick answers

What shipped in Spring on June 29, 2026?
Gradle 9.6.1 rolls across Spring Boot, Security, and LDAP while Logback 1.5.37 lands critical vulnerability patches for conditional configuration processing. In total, 7 commits and 8 pull requests landed.
Who contributed to Spring on June 29, 2026?
2 developers shipped this update, including dependabot[bot] and quaff.
What were the notable Spring updates?
Bump gradle-wrapper from 9.6.0 to 9.6.1, Bump org.junit:junit-bom from 6.1.0 to 6.1.1, and Bump ch.qos.logback:logback-core from 1.5.36 to 1.5.37.

More from @spring-projects

Spring @spring-projects

SPRING FIXES STALE PROPERTY ACCESS BUG, ELASTICSEARCH CUTS JSON OVERHEAD

Spring Framework plugged a SpEL evaluation context bug that could serve stale cached properties between expression evaluations, while Spring Data Elasticsearch eliminated wasteful intermediate JSON serialization in search hit field conversion.

014-code Sam Brannen Stéphane Nicoll Alexander Makarov
java 10 shipped 1-min read
Spring @spring-projects

SPRING DATA ELASTICSEARCH GOES SERVERLESS, BOOT FIXES OTLP TYPE BUG

Spring Data Elasticsearch now supports serverless deployments with a new ElasticsearchServerType enum, while Spring Boot patches a stale metadata reference that broke OTLP logging transport configuration.

dependabot Stéphane Nicoll wantaek Stexxen +5
java 19 shipped 1-min read
Spring @spring-projects

SPRING BOOT KILLS RESTTEMPLATE, SPRING AI GAINS IMAGE GEN

Spring Boot is deprecating RestTemplate across its entire ecosystem, forcing a migration to RestClient as the Framework itself moves on [ref:1].

Stéphane Nicoll dependabot Brian Clozel rstoyanchev +1
java 20 shipped 1-min read
Spring @spring-projects

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

Stefano Cordio Stéphane Nicoll wantaek dependabot
java 35 shipped 1-min read

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.