Who contributed to Spring on August 11, 2026?

7 developers shipped this update, including Mark Paluch, Stéphane Nicoll, dependabot, Josh Cummings, xxxxxxjun, Artem Bilan, and tknall.

What were the notable Spring updates?

Remove Release Workflows, Add Release Train Integration, and Upgrade to MySql R2DBC Driver 1.4.3.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING SECURITY MOVES TO RELEASE TRAIN, SPRING INTEGRATION CRUSHES FLAKY TESTS

By RepoJournal · Filed 07:00 UTC on August 11, 2026 · About Spring

7 people shipped this

Mark Paluch @mp911de 4 cited

Stéphane Nicoll @snicoll 2 cited

Josh Cummings @jzheaux 2 cited

Artem Bilan @artembilan 2 cited

xxxxxxjun @xxxxxxjun 1 cited

tknall @tknall 1 cited

dependabot @dependabot

Spring Security removed its custom release workflows in favor of release train support, a structural shift that simplifies the entire project's delivery cadence [ref:13].

The security team's move to release train participation [2] marks a significant change in how Spring handles coordinated releases across its ecosystem. Simultaneously, Spring Integration landed three critical test stability fixes: a flaky Redis concurrency bug that could silently drop messages [10], a Windows file deletion race condition [11], and a directory-creation race in FileWritingMessageHandler that left concurrent messages stranded [12]. On the AMQP front, Spring Integration fixed a long-standing issue where waitForConfirm was ignored for simple confirms without correlation data [9], bringing single-message behavior into line with the batched path. Across relational data access, Spring Data upgraded all R2DBC drivers to their latest patch releases: MySQL 1.4.3 [3], SQL Server 1.0.5.RELEASE [4], and Postgres 1.1.2.RELEASE [5], while also disabling flaky Oracle integration tests [6]. Spring Boot locked in Gradle 9.7.0 [7] and fixed a hostname verification failure in Elasticsearch smoke tests by regenerating self-signed certificates with RFC 6125 compliance [8]. Across 5 repos, the team shipped 54 commits and 7 PRs in this cycle.

Action items

→ Update Spring Security builds to integrate with release train tooling spring-projects/spring-security [plan]
→ Upgrade Spring Data R2DBC drivers to latest patch releases before next build spring-projects/spring-data-relational [plan]
→ Cherry-pick Spring Integration test fixes to 7.0.x and 7.1.x branches spring-projects/spring-integration [immediate]
→ Lock Gradle to 9.7.0 across dependent projects spring-projects/spring-boot [plan]

References

[1] Remove Release Workflows spring-projects/spring-security
[2] Add Release Train Integration spring-projects/spring-security
[3] Upgrade to MySql R2DBC Driver 1.4.3. spring-projects/spring-data-relational
[4] Upgrade to Microsoft SqlServer R2DBC Driver 1.0.5.RELEASE. spring-projects/spring-data-relational
[5] Upgrade to Postgres R2DBC Driver 1.1.2.RELEASE. spring-projects/spring-data-relational
[6] Disable `JdbcAggregateTemplateSchemaIntegrationTests` for Oracle. spring-projects/spring-data-relational
[7] Upgrade to Gradle 9.7.0 spring-projects/spring-boot
[8] Fix hostname verification failure in Elasticsearc smoke test spring-projects/spring-boot
[9] GH-11194: Use simple confirms in `AmqpOutboundEndpoint` ↗ spring-projects/spring-integration
[10] Fix flaky RedisTests.testOutboundChannelAdapterFlow() spring-projects/spring-integration
[11] Fix flaky FileToChannelIntegrationTests.fileMessageToChannel() spring-projects/spring-integration
[12] GH-11253: Fix directory-creation race in `FileWritingMessageHandler` ↗ spring-projects/spring-integration

Quick answers

What shipped in Spring on August 11, 2026?: Spring Security removed its custom release workflows in favor of release train support, a structural shift that simplifies the entire project's delivery cadence [ref:13]. In total, 54 commits and 7 pull requests landed.
Who contributed to Spring on August 11, 2026?: 7 developers shipped this update, including Mark Paluch, Stéphane Nicoll, dependabot, Josh Cummings, xxxxxxjun, Artem Bilan, and tknall.
What were the notable Spring updates?: Remove Release Workflows, Add Release Train Integration, and Upgrade to MySql R2DBC Driver 1.4.3.

SPRING SECURITY TIGHTENS AUTH CHECKS WHILE BOOT HARDENS PROTOCOL STANCE

Spring Security is cleaning house with breaking changes around null checks and account validation, while Spring Boot locks down consumer security protocols and aligns on Security 7.2 milestones.

java 88 shipped

@spring-projects Aug 10

SPRING DATA STANDARDIZES RELEASE AUTOMATION ACROSS THREE MAJOR PROJECTS

Spring Data is rolling out unified release train automation to Couchbase, Elasticsearch, and Redis, centralizing how three of its heaviest-traffic projects ship.

java 3 shipped

@spring-projects Aug 9

SPRING-NET ESCAPES LOGGING BREAKAGE, SPRING-BOOT SWEEPS DEPENDENCY UPGRADES

Spring.NET fixes a critical configuration regression from its logging migration while Spring Boot ships five coordinated dependency upgrades across the messaging and caching stack.

java 25 shipped

@spring-projects Aug 8

SPRING-PULSAR AND SPRING-INTEGRATION FIX CI HANGS THAT STALLED BUILDS

Soby Chacko deployed four commits across Spring Pulsar to kill memory-starved test timeouts, while Artem Bilan fixed an interrupt-handling bug in ZookeeperLockRegistry that left six tests blocked forever.

java 8 shipped

Elsewhere on the wire

AI Agents Aug 12

LANGCHAIN SHIPS THREE CRITICAL RELEASES IN 12 HOURS, CLOSES SETUPTOOLS VULNERABILITY

LangChain pushed langchain-core 1.5.4, langchain 1.3.15, and langchain-anthropic 1.5.5 overnight while patching a setuptools supply-chain risk that gated the Hugging Face integration.

ai-agents 59 shipped

Local LLMs Aug 12

OLLAMA CUTS REPEAT PENALTY BLOAT, LLAMA.CPP SHIPS POCKET-TTS SUPPORT

Ollama kills a decade of default penalty cruft that was drowning every model, while llama.cpp gains multimodal audio chops and vLLM fixes ROCm speculative decoding corruption.