Who contributed to Spring on July 19, 2026?

1 developer shipped this update, including dependabot.

What were the notable Spring updates?

Bump kotlinVersion from 2.4.0 to 2.4.10, Bump org.junit:junit-bom from 6.1.1 to 6.1.2, and Bump org.mongodb:mongodb-driver-bom from 5.8.0 to 5.8.1.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING INTEGRATION DEPENDENCY SWEEP: KOTLIN, JUNIT, MONGODB, AND GREENMAIL ALL PATCHED

By RepoJournal · Filed 06:59 UTC on July 19, 2026 · About Spring

1 person shipped this

dependabot @dependabot 4 cited

Spring Integration is closing out routine maintenance across its test and database tooling, with Kotlin bumped two minor versions and MongoDB reactive streams bug fixed.

In brief

Kotlin 2.4.0 → 2.4.10 in Spring Integration. That's a jump. Probably worth running your test suite if you're on the older patch.
JUnit 6.1.1 → 6.1.2. Tiny bump, but JUnit bumps rarely happen for nothing. Check the release notes if you run bleeding-edge test deps.
MongoDB driver 5.8.0 → 5.8.1. Minor patch version, which usually means bug fixes or stability hardening under load.
Greenmail 2.1.9 → 2.1.11. Test email library, two patch versions at once. Could be a security thing. Worth checking the changelog.

Spring Integration merged four dependency updates overnight that touch core testing and messaging infrastructure. Kotlin jumped from 2.4.0 to 2.4.10 [1], picking up Wasm backend fixes and compiler improvements that matter if you're building hybrid JVM/Wasm integrations. JUnit moved to 6.1.2 [2], a minor stability release across Platform, Jupiter, and Vintage runners. More critically, MongoDB driver 5.8.1 [3] landed a fix for the reactive streams MongoClient.getTimeout method that was always returning null, addressing a real pain point for async deployments. GreenMail test fixture jumped to 2.1.11 [4], patching IMAP STORE and EXPUNGE handling that could corrupt test mail scenarios. None of these are emergency patches, but they're all solid upgrades that reduce technical debt across the board.

Action items

→ Merge Kotlin 2.4.10 into your build on next integration cycle spring-projects/spring-integration [plan]
→ If you test MongoDB reactively, validate MongoDB driver 5.8.1 fixes your timeout assertions spring-projects/spring-integration [monitor]
→ Regenerate any GreenMail-dependent mail tests to catch edge cases from 2.1.11 fixes spring-projects/spring-integration [plan]

References

[1] Bump kotlinVersion from 2.4.0 to 2.4.10 ↗ spring-projects/spring-integration
[2] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 ↗ spring-projects/spring-integration
[3] Bump org.mongodb:mongodb-driver-bom from 5.8.0 to 5.8.1 ↗ spring-projects/spring-integration
[4] Bump com.icegreen:greenmail from 2.1.9 to 2.1.11 in the development-dependencies group ↗ spring-projects/spring-integration

Quick answers

What shipped in Spring on July 19, 2026?: Spring Integration is closing out routine maintenance across its test and database tooling, with Kotlin bumped two minor versions and MongoDB reactive streams bug fixed. In total, 4 pull requests landed.
Who contributed to Spring on July 19, 2026?: 1 developer shipped this update, including dependabot.
What were the notable Spring updates?: Bump kotlinVersion from 2.4.0 to 2.4.10, Bump org.junit:junit-bom from 6.1.1 to 6.1.2, and Bump org.mongodb:mongodb-driver-bom from 5.8.0 to 5.8.1.

SPRING FRAMEWORK TIGHTENS RESOURCE SECURITY, NEO4J FIXES CONVERSION LOGIC

Spring Framework reinstated critical resource location validation checks that prevent unauthorized static resource resolution in sensitive directories.

java 4 shipped 1-min read

@spring-projects 3 days ago

SPRING BOOT CLEANS HOUSE WHILE INTEGRATION FIXES KAFKA BATCH MODE

Spring Boot is removing deprecated code and exposing critical NIO APIs, while Spring Integration ships a fix for Kafka batch processing that was breaking downstream splitters.

java 37 shipped 1-min read

@spring-projects 4 days ago

SPRING BOOT FIXES LAZY INITIALIZATION TRAP THAT BREAKS JPA APPS

Spring Boot patched a critical dependency loop where JPA configuration was forcing early instantiation of every AsyncTaskExecutor bean in your app, even when background bootstrapping wasn't enabled.

java 33 shipped 1-min read

@spring-projects 5 days ago

SPRING BOOT PLUGS FILE HANDLE LEAK IN IMAGE BUILDPACK

Spring Boot's image buildpack was leaking file handles and orphaning temp files when resolving missing builder images, but a fix just landed to clean up both the streams and the intermediate artifacts.

java 16 shipped 1-min read

— or follow the whole beat:

Elsewhere on the wire

@cachyos about 10 hours ago

CACHYOS LINUX 7.1.4 SHIPS WITH SCHEDULER REVERT AND AMD AUDIO FIXES

The kernel bumped to 7.1.4 overnight with a critical scheduler revert and targeted audio driver fixes for AMD systems.

infra 57 shipped 1-min read

Elixir & Phoenix about 10 hours ago

ECTO FIXES SILENT DATA CORRUPTION IN MAP UPDATES AND BELONGS_TO LOOKUPS

Two critical Ecto bugs that silently corrupt changeset data are now fixed, and you should merge these immediately if you're using map or association updates.

elixir 10 shipped 1-min read

Mobile platforms about 10 hours ago

SWIFT COMPILER DROPS DECADE-OLD INTEROP WORKAROUND, REIMPLEMENTS CORE OPTIMIZER IN PURE SWIFT

Swift's ClangImporter finally stopped stripping type aliases that have been unnecessary since 2014, while the compiler's foundational SSAUpdater moved entirely off C++ dependencies.

mobile 28 shipped 1-min read

@dotnet about 10 hours ago

SOURCE.DOT.NET PROXY LAYER BROKEN, SOURCEBROWSER GETS MAJOR OVERHAUL

source.dot.net is serving HTTP 500s and stale assets because the proxy layer exposes bugs that local-disk deployments never catch, and SourceBrowser just got a significant upgrade that's likely its last.

dotnet 12 shipped 1-min read