Who contributed to Spring on July 24, 2026?

4 developers shipped this update, including Stefano Cordio, Stéphane Nicoll, wantaek, and dependabot.

What were the notable Spring updates?

Adapt examples in the metadata section to new package structure, Merge pull request #51097 from scordio, and Fix package of AutoConfigureCache in caching documentation.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING BOOT DOCUMENTATION CLEANUP CONTINUES WHILE ECOSYSTEM UPGRADES LOGBACK

By RepoJournal · Filed 07:01 UTC on July 24, 2026 · About Spring

4 people shipped this

dependabot @dependabot 3 cited

Stefano Cordio @scordio 2 cited

Stéphane Nicoll @snicoll 2 cited

wantaek @wantaekchoi 1 cited

Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs.

Spring Boot merged fixes across two documentation pain points this cycle. First, metadata example sections got updated to reflect the new package structure [1], closing out a broader refactoring effort [2]. Separately, the caching documentation got a corrections pass on the AutoConfigureCache package reference [3][4]. Both changes signal the project is still housekeeping after earlier structural changes, which matters because outdated docs erode developer confidence. Meanwhile, the logging ecosystem moved forward: both Spring Session [5] and Spring Security [6] bumped Logback from 1.5.38 to 1.6.0, which "removed certain deprecated variables, methods, and classes" according to the release notes. This is a breaking change that lands before Spring Boot's next major release, so watch for compatibility notes. Spring Security also patched its checkout action [7], and Spring Batch Extensions upgraded Maven to 3.9.16 [8], routine hygiene work across the portfolio.

Action items

→ Review Spring Boot 6.0 migration docs for Logback 1.6.0 impact before upgrading spring-projects/spring-boot [plan]
→ Verify your caching configuration uses correct AutoConfigureCache package reference spring-projects/spring-boot [monitor]
→ Audit Logback dependency chains in Spring Security and Session projects spring-projects/spring-security [plan]

References

[1] Adapt examples in the metadata section to new package structure spring-projects/spring-boot
[2] Merge pull request #51097 from scordio spring-projects/spring-boot
[3] Fix package of AutoConfigureCache in caching documentation spring-projects/spring-boot
[4] Merge pull request #51111 from wantaekchoi spring-projects/spring-boot
[5] Bump ch.qos.logback:logback-core from 1.5.38 to 1.6.0 ↗ spring-projects/spring-session
[6] Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 ↗ spring-projects/spring-security
[7] Bump actions/checkout from 7.0.0 to 7.0.1 ↗ spring-projects/spring-security
[8] Upgrade Maven to 3.9.16 spring-projects/spring-batch-extensions

Quick answers

What shipped in Spring on July 24, 2026?: Spring Boot is methodically fixing its generated documentation examples as the broader ecosystem shifts to Logback 1.6.0, which removed deprecated APIs. In total, 27 commits and 8 pull requests landed.
Who contributed to Spring on July 24, 2026?: 4 developers shipped this update, including Stefano Cordio, Stéphane Nicoll, wantaek, and dependabot.
What were the notable Spring updates?: Adapt examples in the metadata section to new package structure, Merge pull request #51097 from scordio, and Fix package of AutoConfigureCache in caching documentation.

SPRING AI HARDENS ERROR HANDLING, REDIS VECTORSTORE SHEDS BANDWIDTH BLOAT

Spring AI is tightening its security posture on two fronts: MCP server transports now strip exception messages from error responses, while RedisVectorStore cuts network waste by 37 KB per embedding lookup.

java 12 shipped 2-min read

@spring-projects 2 days ago

SPRING BOOT TIGHTENS NULLABILITY CHECKS, FRAMEWORK CLEANS HOUSE

Spring Boot merged improvements to Nullaway 0.13.8 that correctly handle Map#remove nullability, while Spring Framework shipped targeted fixes for logging clarity and documentation.

java 17 shipped 1-min read

@spring-projects 3 days ago

SPRING INTEGRATION PATCHES CRITICAL CONCURRENCY BUG IN FILE FILTER

Spring Integration shipped fixes for race conditions that could corrupt internal data structures under concurrent load, with auto-cherry-picks queued for the 7.0.x branch.

java 61 shipped 1-min read

@spring-projects 5 days ago

SPRING INTEGRATION DEPENDENCY SWEEP: KOTLIN, JUNIT, MONGODB, AND GREENMAIL ALL PATCHED

Spring Integration is closing out routine maintenance across its test and database tooling, with Kotlin bumped two minor versions and MongoDB reactive streams bug fixed.

java 4 shipped 1-min read

Elsewhere on the wire

AI Agents about 1 hour ago

LANGCHAIN SHIPS COORDINATED PROVIDER UPDATES WITH LANGSMITH GATEWAY SUPPORT

All four core LangChain packages bumped to 1.5.1 overnight with unified LangSmith gateway routing and provider-specific fixes across OpenAI, Anthropic, and Fireworks.

ai-agents 62 shipped 1-min read

Local LLMs about 1 hour ago

LLAMA.CPP SHIPS FIVE RELEASES IN 24 HOURS, FIXES SPECULATIVE DECODING ACROSS THE STACK

The inference stack is consolidating around speculative decoding, and the bugs surfacing there are getting squashed across three major projects simultaneously.

llms 157 shipped 2-min read

@CachyOS about 1 hour ago

INSTALLER REFACTOR TAKES SHAPE, PACKAGE UPDATES ROLL STEADY

CachyOS is modernizing its CLI installer with a comprehensive typed partition system overhaul while maintaining smooth automation across the AUR-derived package repository.

infra 57 shipped 1-min read

Elixir & Phoenix about 1 hour ago

PHOENIX LIVE VIEW SEALS CRITICAL NODE NAME LEAK IN UPLOAD TOKENS

A reverted encryption fix exposes how Phoenix was leaking BEAM node identities through unencrypted upload tokens, and the core team is pivoting to a cleaner solution using term_to_binary.