RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Wed 15 jul
  2. Thu 16 jul
  3. Sat 18 jul
  4. Sun 19 jul
  5. Tue 21 jul
  6. Wed 22 jul
  7. Thu 23 jul
  8. Fri 24 jul
  9. Sat 25 jul
  10. Sun 26 jul
  11. Mon 27 jul
  12. Tue 28 jul
  13. Wed 29 jul
  14. Thu 30 jul
  15. Fri 31 jul
  16. Sat 1 aug
  17. Sun 2 aug
  18. Mon 3 aug
  19. Tue 4 aug
  20. Wed 5 aug
  21. Thu 6 aug
  22. Fri 7 aug
  23. Sat 8 aug
  24. Sun 9 aug
  25. Mon 10 aug
  26. Tue 11 aug
  27. Wed 12 aug
  28. Thu 13 aug
  29. Fri 14 aug
  30. Today 16 aug
Topics: Java Full archive →

The Wire · Showcase

SPRING FRAMEWORK 7.1 FORCES RECKONING ACROSS SECURITY, AMQP, AND BOOT

By RepoJournal · Filed · About Spring

dependabot Josh Cummings Soby Chacko Stéphane Nicoll Jonatan Ivanov Rene Choi ngocnhan-tran1996
8 people shipped this
dependabot @dependabot 3 cited Josh Cummings @jzheaux 2 cited Soby Chacko @sobychacko 2 cited Stéphane Nicoll @snicoll 1 cited Jonatan Ivanov @jonatan-ivanov 1 cited Rene Choi @renechoi 1 cited ngocnhan-tran1996 @ngocnhan-tran1996 Spring Builds @spring-builds

Spring Security and Spring AMQP are shipping deprecation fixes ahead of Framework 7.1's removal of RestTemplate and HandlerMappingIntrospector, while Boot adapts to upstream dependency shifts.

Spring Security is systematically addressing Spring Framework 7.1 breaking changes in two commits: suppressing warnings on internal RestTemplate usage [1] until migration to RestClient completes, and disabling CORS tests that relied on HandlerMappingIntrospector's implicit behavior [2], which the framework no longer provides. Spring AMQP moved faster, deprecating RestTemplateNodeLocator entirely [3] and shipping a RestClientNodeLocator replacement to keep LocalizedQueueConnectionFactory functional. On the dependency front, Boot upgraded MongoDB to 5.9.2 [5], while both Boot and AMQP adapted to Micrometer's snapshot API changes [4]. Spring Kafka streamlined its CI matrix by removing Windows runners [6] and is rolling out an update-release-train-versions workflow [7] for cleaner release automation. JUnit 6.1.3 landed across the ecosystem [ref:10, ref:14], and HttpClient 5 bumped to 5.6.4 [10].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Suppress Removal Warnings on RestOperations Usage spring-projects/spring-security
  2. [2] Disable CORS Tests Relying on HandlerMappingIntrospector spring-projects/spring-security
  3. [3] GH-3540: Deprecate `RestTemplateNodeLocator` spring-projects/spring-amqp
  4. [4] Adapt to changes in micrometer snapshots spring-projects/spring-boot
  5. [5] Upgrade to MongoDB 5.9.2 spring-projects/spring-boot
  6. [6] Remove Windows runners from CI matrix spring-projects/spring-kafka
  7. [7] Add update-release-train-versions workflow spring-projects/spring-kafka
  8. [8] Bump org.junit:junit-bom from 6.1.2 to 6.1.3 ↗ spring-projects/spring-kafka
  9. [9] Bump org.junit:junit-bom from 6.1.2 to 6.1.3 ↗ spring-projects/spring-amqp
  10. [10] Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 in the development-dependencies group ↗ spring-projects/spring-amqp

Quick answers

What shipped in Spring on August 14, 2026?
Spring Security and Spring AMQP are shipping deprecation fixes ahead of Framework 7.1's removal of RestTemplate and HandlerMappingIntrospector, while Boot adapts to upstream dependency shifts. In total, 22 commits and 6 pull requests landed.
Who contributed to Spring on August 14, 2026?
8 developers shipped this update, including Stéphane Nicoll, Jonatan Ivanov, Josh Cummings, ngocnhan-tran1996, Soby Chacko, dependabot, Spring Builds, and Rene Choi.
What were the notable Spring updates?
Suppress Removal Warnings on RestOperations Usage, Disable CORS Tests Relying on HandlerMappingIntrospector, and GH-3540: Deprecate `RestTemplateNodeLocator`.

More from @spring-projects

Spring @spring-projects

SPRING TOOLS MAINTENANCE SWEEP LANDS SYMBOL NAVIGATION FIX

Martin Lippert shipped two commits to Spring Tools overnight, including a fix for the goto symbol popup that now remembers your dialog preferences.

Martin Lippert
java 2 shipped
Spring @spring-projects

SPRING KAFKA FIXES BATCH LISTENER STATE CORRUPTION ACROSS PARTITIONS

Spring Kafka shipped a critical fix for batch listener backoff state that was being wiped across all partitions in multi-partition containers, causing failed messages to lose their retry count mid-cycle.

dependabot Soby Chacko 29shivam Martin Lippert +2
java 19 shipped
Spring @spring-projects

SPRING SECURITY TIGHTENS AUTH CHECKS WHILE BOOT HARDENS PROTOCOL STANCE

Spring Security is cleaning house with breaking changes around null checks and account validation, while Spring Boot locks down consumer security protocols and aligns on Security 7.2 milestones.

Christoph Strobl Stéphane Nicoll Tran Ngoc Nhan Oliver Drotbohm +4
java 88 shipped
Spring @spring-projects

SPRING SECURITY MOVES TO RELEASE TRAIN, SPRING INTEGRATION CRUSHES FLAKY TESTS

Spring Security removed its custom release workflows in favor of release train support, a structural shift that simplifies the entire project's delivery cadence [ref:13].

Mark Paluch Stéphane Nicoll dependabot Josh Cummings +3
java 61 shipped

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

OPENHANDS PINS CLIENT DEPENDENCY, ADDS STRUCTURED ERROR HANDLING

OpenHands locked its TypeScript client to exact version 1.37.0 and merged canvas error outcome improvements in a single commit cycle.

neubig
ai-agents 2 shipped
Local LLMs Local LLMs

LLAMA.CPP OVERHAULS INFERENCE FLAGS, VLLM PATCHES DEEPSEEK SPARSE MLA

llama.cpp deprecates mmap flags in favor of unified load-mode, while vllm fixes critical issues blocking DeepSeek-V4-Flash across all decode paths.

github-actions[bot] dhiltgen Fathi Boudra Eric Zhang +11
llms 136 shipped
CachyOS @CachyOS

DASHBOARD SEO OVERHAUL SHIPS AS PACKAGE TRAIN ROLLS FORWARD

CachyOS public-dashboard refactored routes with canonical metadata and improved crawler visibility [ref:18] while 61 commits across five repos kept the AUR pipeline humming.

github-actions witchlliee Jinra azdanov +1
infra 72 shipped
Elixir & Phoenix Elixir & Phoenix

ELIXIR CORE CUTS ALLOCATIONS ACROSS STRING AND AST OPERATIONS

Thomas Cioppettini landed four performance wins overnight that eliminate unnecessary allocations in List.myers_difference, String case conversion, and Macro tree walkers.

Thomas Cioppettini LostKobrakai
elixir 17 shipped
Want every project, not just this one?