RepoJournal
Spring

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Fri 24 jul
  2. Sat 25 jul
  3. Sun 26 jul
  4. Mon 27 jul
  5. Tue 28 jul
  6. Wed 29 jul
  7. Thu 30 jul
  8. Fri 31 jul
  9. Sat 1 aug
  10. Sun 2 aug
  11. Mon 3 aug
  12. Tue 4 aug
  13. Wed 5 aug
  14. Thu 6 aug
  15. Fri 7 aug
  16. Sat 8 aug
  17. Sun 9 aug
  18. Mon 10 aug
  19. Tue 11 aug
  20. Wed 12 aug
  21. Thu 13 aug
  22. Fri 14 aug
  23. Sun 16 aug
  24. Mon 17 aug
  25. Tue 18 aug
  26. Wed 19 aug
  27. Thu 20 aug
  28. Fri 21 aug
  29. Sat 22 aug
  30. Today 23 aug
Topics: Java Full archive →

The Wire · Showcase

SPeL Configuration Gets a Builder, Deprecates 9 Constructors

By RepoJournal · Filed · About Spring

dependabot Sam Brannen sothawo
3 people shipped this
dependabot @dependabot 5 cited Sam Brannen @sbrannen 2 cited sothawo @sothawo 1 cited

Spring Framework is modernizing SpEL configuration and it's about time you stopped wrestling with those unlabeled boolean and int constructors.

Spring Framework is deprecating all nine overloaded SpelParserConfiguration constructors [1], steering everyone toward the new builder API [2]. The old design grew to an eight-parameter constructor as options piled up since 3.0, making call sites hard to read. Sam Brannen notes the plan was set when the builder landed in 7.0.10, and now it's the recommended path, with `withDefaults()` for the common case. Separately, dependabot is churning through Jackson BOM patches across the org, bumping tools.jackson to 3.2.2 [3] and com.fasterxml.jackson to 2.22.2 [4] in spring-integration, with matching updates in spring-kafka [5][6]. Spring Boot starter jumps from 4.0.3 to 4.0.7 in spring-kafka's development-dependencies group [7], and spring-data-elasticsearch fixed script handling when building an UpdateQuery [8]. All quiet otherwise, just housekeeping.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Deprecate SpelParserConfiguration constructors in favor of the builder API spring-projects/spring-framework
  2. [2] Introduce a builder for SpelParserConfiguration spring-projects/spring-framework
  3. [3] Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 ↗ spring-projects/spring-integration
  4. [4] Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 ↗ spring-projects/spring-integration
  5. [5] Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 ↗ spring-projects/spring-kafka
  6. [6] Bump com.fasterxml.jackson:jackson-bom from 2.21.5 to 2.21.6 ↗ spring-projects/spring-kafka
  7. [7] Bump org.springframework.boot:spring-boot-starter from 4.0.3 to 4.0.7 in the development-dependencies group ↗ spring-projects/spring-kafka
  8. [8] Fix script handling when building an UpdateQuery. ↗ spring-projects/spring-data-elasticsearch

Quick answers

What shipped in Spring on August 23, 2026?
Spring Framework is modernizing SpEL configuration and it's about time you stopped wrestling with those unlabeled boolean and int constructors. In total, 4 commits and 9 pull requests landed.
Who contributed to Spring on August 23, 2026?
3 developers shipped this update, including dependabot, sothawo, and Sam Brannen.
What were the notable Spring updates?
Deprecate SpelParserConfiguration constructors in favor of the builder API, Introduce a builder for SpelParserConfiguration, and Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2.

More from @spring-projects

Spring @spring-projects

Spring Kafka leaks serializer resources in a silent bug

Spring Kafka's DelegatingByTypeSerializer has been leaking delegates for years, and a fix just landed with a cherry-pick across 4.1.x and 4.0.x.

dependabot Martin Lippert dlwldn30 Josh Cummings
java 8 shipped
Spring @spring-projects

SPRING SECURITY SPLITS AES CRYPTO AS DEPRECATION LOOMS

Spring Security is tearing apart its default AES encryption, and you need to know what's changing before your next upgrade.

Oliver Drotbohm Gabriel Hall Dave Syer dimitarproynov +3
java 66 shipped
Spring @spring-projects

Spring Security Stops Thread Leaks

Spring Security's SecurityContextHolderThreadLocalAccessor is sharing mutable state across threads, and a fix is already in motion.

dependabot ttddyy Josh Cummings BoykoAlex +1
java 15 shipped
Spring @spring-projects

SPRING TOOLS AND SECURITY GET JOLTED AS DOCS GO STALE

A precision refactor in Spring Tools and a sharp security fix force a triple-check on your build.

BoykoAlex Martin Lippert Peter Phillips Joe Grandja +3
java 21 shipped

Daily updates, in your inbox

Follow Spring

Keep up with Spring in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

Cline hubs now drain without dropping work

Cline's new hub drain and upgrade flow means you can restart a hub mid-session and lose nothing, thanks to durable event replay.

ump45nose neubig Krishna github-actions[bot] +1
ai-agents 18 shipped
Local LLMs Local LLMs

SGLang Fixes Pixtral 500s as vLLM Cuts TTFT 25%

The biggest news overnight: SGLang is patching a production-breaking Pixtral bug, and vLLM engineers found a way to shave up to 25% off time-to-first-token on Mamba models.

CISC ngxson Kartik Sirohi superm1 +7
llms 134 shipped
CachyOS @CachyOS

AIRE: ANANICY RULES FIX SESSION LAUNCHER SCHEDULING

ly-dm was being pinned to the idle scheduler, killing your login session's responsiveness.

github-actions Matias alexsmolya Peter Jung +2
infra 74 shipped
Elixir & Phoenix Elixir & Phoenix

JOSE VALIM FIXES THE CLASUE BUG

Jose Valim shipped two refactors plus the actual fix for that `none` clause compiler issue, and a UTC fast path in DateTime could save you a TZ DB lookup.

josevalim reisub
elixir 6 shipped
Want every project, not just this one?