RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Mon 6 jul
  2. Tue 7 jul
  3. Wed 8 jul
  4. Thu 9 jul
  5. Fri 10 jul
  6. Sat 11 jul
  7. Sun 12 jul
  8. Mon 13 jul
  9. Tue 14 jul
  10. Wed 15 jul
  11. Thu 16 jul
  12. Sat 18 jul
  13. Sun 19 jul
  14. Tue 21 jul
  15. Wed 22 jul
  16. Thu 23 jul
  17. Fri 24 jul
  18. Sat 25 jul
  19. Sun 26 jul
  20. Mon 27 jul
  21. Tue 28 jul
  22. Wed 29 jul
  23. Thu 30 jul
  24. Fri 31 jul
  25. Sat 1 aug
  26. Sun 2 aug
  27. Mon 3 aug
  28. Tue 4 aug
  29. Wed 5 aug
  30. Today 6 aug
Topics: Java Full archive →

The Wire · Showcase

SPRING BOOT LOCKS DOWN TEST REGISTRY BEHAVIOR, SPRING TOOLS 5.3 SHIPS WITH STABILITY FIX

By RepoJournal · Filed · About Spring

BoykoAlex dependabot Sam Brannen LordKay-sudo Mark Paluch github-actions[bot] rstoyanchev
12 people shipped this
BoykoAlex @BoykoAlex 2 cited dependabot @dependabot 2 cited Sam Brannen @sbrannen 2 cited LordKay-sudo @LordKay-sudo 1 cited Mark Paluch @mp911de 1 cited github-actions[bot] @github-actions[bot] 1 cited rstoyanchev @rstoyanchev 1 cited jhan0121 @jhan0121 1 cited Stéphane Nicoll @snicoll vvzvvv @vvzvvv Brian Clozel @bclozel MacAlsandair @MacAlsandair

Spring Boot adds automatic test isolation for Micrometer's global registry, while Spring Tools 5.3 lands critical fixes for boot MCP crashes and Eclipse AOT errors.

Spring Boot merged a follow-up to an earlier request that disables the global Micrometer registry in tests by default [1]. The change introduces a new `DisableGlobalMeterRegistryContextCustomizerFactory` that mirrors the existing Reactor pattern, leaving explicit configuration values untouched. This surfaces test isolation as a first-class concern without breaking existing setups.

Spring Tools shipped 5.3.0.RELEASE with three major improvement buckets [2]. The Boot validation layer now catches false positives, inner record bean misdetection, and native query checks. The team modernized from RestTemplate to RestClient and scrubbed legacy dependencies. Most critically, the release resolves Boot MCP startup crashes, Eclipse AOT errors, and JMX connection bugs that were blocking adoption.

Spring Framework continues its security hardening and API cleanup work [3] [4]. HandlerMappingIntrospector is now removed as promised, and DataBinder's `setDisallowedFields` method is deprecated in favor of safer alternatives [5]. Documentation on SpEL lifecycle and the security implications of untrusted expression evaluation landed to prevent production surprises [11].

Spring Data Redis and Spring Session absorbed routine maintenance: a parser-bound deserialization context fix for type hints [6] and MariaDB connector bumps to 3.5.10 across two session branches [7] [8]. Spring Tools itself merged stream consumption fixes for build commands to prevent process hangs [9] and added YAML alias/anchor cycle support [10].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Disable Micrometer global registry in tests by default ↗ spring-projects/spring-boot
  2. [2] 5.3.0.RELEASE ↗ spring-projects/spring-tools
  3. [3] Remove HandlerMappingIntrospector spring-projects/spring-framework
  4. [4] Deprecate setDisallowedFields in DataBinder spring-projects/spring-framework
  5. [5] Document security implications of evaluating untrusted SpEL expressions spring-projects/spring-framework
  6. [6] Use Parser-bound `DeserializationContext` for parsing type hints in `TypeResolver`. spring-projects/spring-data-redis
  7. [7] Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10 ↗ spring-projects/spring-session
  8. [8] Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10 ↗ spring-projects/spring-session
  9. [9] Consume output and error streams for build command process (#1952) spring-projects/spring-tools
  10. [10] Support cycles in YAML AST via aliases/anchors (#57) spring-projects/spring-tools
  11. [11] Document lifecycle and reuse contract for SpEL expressions and contexts spring-projects/spring-framework

Quick answers

What shipped in Spring on July 30, 2026?
Spring Boot adds automatic test isolation for Micrometer's global registry, while Spring Tools 5.3 lands critical fixes for boot MCP crashes and Eclipse AOT errors. In total, 34 commits, 7 pull requests, and 1 releases landed.
Who contributed to Spring on July 30, 2026?
12 developers shipped this update, including LordKay-sudo, Stéphane Nicoll, vvzvvv, Brian Clozel, MacAlsandair, Mark Paluch, github-actions[bot], and BoykoAlex, and 4 more.
What were the notable Spring updates?
Disable Micrometer global registry in tests by default, 5.3.0.RELEASE, and Remove HandlerMappingIntrospector.

More from @spring-projects

Spring @spring-projects

SPRING-AI FIXES AZURE AUTHENTICATION MESS, KAFKA CONSOLIDATES BUILD

Spring AI patched a critical Azure OpenAI credential bug that was forcing unnecessary example.com requests through corporate proxies, while Spring Kafka overhauled its dependency management to centralize version control.

jewoodev Dimitar Proynov Sébastien Deleuze subhash polisetti +3
java 23 shipped
Spring @spring-projects

SPRING INTEGRATION UPGRADES TO CAMEL 4.21.0 AS RELEASE TRAIN AUTOMATION LANDS ACROSS ECOSYSTEM

Apache Camel 4.21.0 arrives in Spring Integration with nullability fixes, while release train automation rolls out to consolidate version management across Spring Data, AMQP, and Integration.

Mark Paluch dependabot Glenn Renfro Artem Bilan +1
java 10 shipped
Spring @spring-projects

Spring stacks release train automation across 5 repos, JWT decoder timeouts jump 60x

Spring Data and Security are automating their release cycles while Spring Boot consolidates snapshots from four major dependencies, marking the start of coordinated platform rollout across the ecosystem.

Mark Paluch Stéphane Nicoll Josh Cummings Sumit Kumar Das +2
java 62 shipped
Spring @spring-projects

SPRING BOOT SCRUBS OBSOLETE INFLUXDB DOCS AHEAD OF 4.0 RELEASE

Spring Boot cleaned up stale InfluxDB auto-configuration references that have been dead code since 3.4.0, ensuring the 4.0 release docs match reality.

Stéphane Nicoll Alexander Makarov dependabot sothawo
java 10 shipped

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

langchain-oss-model-profiles[bot] Mason Daugherty John Kennedy ccurme +7
ai-agents 54 shipped
Local LLMs Local LLMs

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.

jessegross Daniel Hiltgen Xuan-Son Nguyen Niklas Wenzel +10
llms 240 shipped
CachyOS @CachyOS

WIKI TRANSLATION ROLLBACK CHAOS, MIRROR STACK HOLDING STEADY

CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.

Jinra Aarrayy buster-biopsys
infra 57 shipped
Elixir & Phoenix Elixir & Phoenix

ELIXIR BUMPS ZIZMOR SECURITY SCANNER TO 1.28.0

The Elixir repo updated its CI security action overnight, pulling in the latest zizmor static analysis tooling.

dependabot
elixir 1 shipped
Want every project, not just this one?