RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Mon 6 jul
  2. Tue 7 jul
  3. Wed 8 jul
  4. Thu 9 jul
  5. Fri 10 jul
  6. Sat 11 jul
  7. Sun 12 jul
  8. Mon 13 jul
  9. Tue 14 jul
  10. Wed 15 jul
  11. Thu 16 jul
  12. Sat 18 jul
  13. Sun 19 jul
  14. Tue 21 jul
  15. Wed 22 jul
  16. Thu 23 jul
  17. Fri 24 jul
  18. Sat 25 jul
  19. Sun 26 jul
  20. Mon 27 jul
  21. Tue 28 jul
  22. Wed 29 jul
  23. Thu 30 jul
  24. Fri 31 jul
  25. Sat 1 aug
  26. Sun 2 aug
  27. Mon 3 aug
  28. Tue 4 aug
  29. Wed 5 aug
  30. Today 6 aug
Topics: Java Full archive →

The Wire · Showcase

SPRING ALIGNMENT: FIVE PROJECTS SYNC BUILD SYSTEMS WITH COMMERCIAL REPOS

By RepoJournal · Filed · About Spring

Artem Bilan ziplla jyx-07 sobychacko Martin Lippert BoykoAlex Glenn Renfro
8 people shipped this
Artem Bilan @artembilan 4 cited ziplla @ziplla 1 cited jyx-07 @jyx-07 1 cited sobychacko @sobychacko 1 cited Martin Lippert @martinlippert BoykoAlex @BoykoAlex Glenn Renfro @cppwfs Josh Cummings @jzheaux

Spring Integration, Kafka, and AMQP are restructuring their Gradle builds to run identically in both open-source and commercial repositories, a significant operational shift across the portfolio.

The alignment spans three core projects. Spring Integration [1], Spring Kafka [3], and Spring AMQP [4] have all relocated their Maven publishing configuration to the repository root and wrapped it in `allprojects`, collapsing multiple build.gradle apply statements into a single call that matches the commercial repo layout. This move eliminates friction when the same workflow files and scripts need to run unmodified across both repositories, a pattern that signals tighter integration between open-source and commercial builds going forward. Spring Security is tightening its own error handling: the framework now fails fast with a clear IllegalStateException when spring-security-access is missing from the classpath [2], rather than throwing a cryptic NoClassDefFoundError at startup. The change stems from refactoring work that moved MethodSecurityMetadataSourceAdvisor and MethodSecurityInterceptor into the optional spring-security-access module, exposing a gap when legacy method-security support runs without it. Spring Integration 7.2.0 is underway with upgrades across Gradle 9.6.1, Checkstyle 13.8.0, Jackson 3.2.1, gRPC 1.83.1, MongoDB driver 5.9.1, and others [6]. AMQP is launching 4.2.0 with parallel dependency bumps including Kotlin 2.4.10, Checkstyle 13.8.0, Jackson 2.22.1 and 3.2.1, RabbitMQ client 1.2.0, and stream client 1.8.0 [7]. Spring Tools fixed a logging regression where intentional cache cancellation was being wrapped in CompletionException and logged as an error [5]; the fix unwraps only that exception before checking for cancellation, preserving error logging for real failures.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Align with commercial build support spring-projects/spring-integration
  2. [2] Fail fast when spring-security-access is missing ↗ spring-projects/spring-security
  3. [3] Align with commercial build support ↗ spring-projects/spring-kafka
  4. [4] Align with commercial build support ↗ spring-projects/spring-amqp
  5. [5] Avoid logging expected cache cancellation (#1953) spring-projects/spring-tools
  6. [6] Start `7.2.0` version spring-projects/spring-integration
  7. [7] Start `4.2.0` in `main` spring-projects/spring-amqp

Quick answers

What shipped in Spring on August 1, 2026?
Spring Integration, Kafka, and AMQP are restructuring their Gradle builds to run identically in both open-source and commercial repositories, a significant operational shift across the portfolio. In total, 25 commits and 8 pull requests landed.
Who contributed to Spring on August 1, 2026?
8 developers shipped this update, including ziplla, Martin Lippert, BoykoAlex, Artem Bilan, Glenn Renfro, Josh Cummings, jyx-07, and sobychacko.
What were the notable Spring updates?
Align with commercial build support, Fail fast when spring-security-access is missing, and Align with commercial build support.

More from @spring-projects

Spring @spring-projects

SPRING-AI FIXES AZURE AUTHENTICATION MESS, KAFKA CONSOLIDATES BUILD

Spring AI patched a critical Azure OpenAI credential bug that was forcing unnecessary example.com requests through corporate proxies, while Spring Kafka overhauled its dependency management to centralize version control.

jewoodev Dimitar Proynov Sébastien Deleuze subhash polisetti +3
java 23 shipped
Spring @spring-projects

SPRING INTEGRATION UPGRADES TO CAMEL 4.21.0 AS RELEASE TRAIN AUTOMATION LANDS ACROSS ECOSYSTEM

Apache Camel 4.21.0 arrives in Spring Integration with nullability fixes, while release train automation rolls out to consolidate version management across Spring Data, AMQP, and Integration.

Mark Paluch dependabot Glenn Renfro Artem Bilan +1
java 10 shipped
Spring @spring-projects

Spring stacks release train automation across 5 repos, JWT decoder timeouts jump 60x

Spring Data and Security are automating their release cycles while Spring Boot consolidates snapshots from four major dependencies, marking the start of coordinated platform rollout across the ecosystem.

Mark Paluch Stéphane Nicoll Josh Cummings Sumit Kumar Das +2
java 62 shipped
Spring @spring-projects

SPRING BOOT SCRUBS OBSOLETE INFLUXDB DOCS AHEAD OF 4.0 RELEASE

Spring Boot cleaned up stale InfluxDB auto-configuration references that have been dead code since 3.4.0, ensuring the 4.0 release docs match reality.

Stéphane Nicoll Alexander Makarov dependabot sothawo
java 10 shipped

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

langchain-oss-model-profiles[bot] Mason Daugherty John Kennedy ccurme +7
ai-agents 54 shipped
Local LLMs Local LLMs

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.

jessegross Daniel Hiltgen Xuan-Son Nguyen Niklas Wenzel +10
llms 240 shipped
CachyOS @CachyOS

WIKI TRANSLATION ROLLBACK CHAOS, MIRROR STACK HOLDING STEADY

CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.

Jinra Aarrayy buster-biopsys
infra 57 shipped
Elixir & Phoenix Elixir & Phoenix

ELIXIR BUMPS ZIZMOR SECURITY SCANNER TO 1.28.0

The Elixir repo updated its CI security action overnight, pulling in the latest zizmor static analysis tooling.

dependabot
elixir 1 shipped
Want every project, not just this one?