Who contributed to Spring on August 27, 2026?

10 developers shipped this update, including github-actions, Sanghyuk Jung, Josh Cummings, cppwfs, MacAlsandair, Artem Bilan, renechoi, and dhruv9b, and 2 more.

What were the notable Spring updates?

Add SSL bundle support to LDAP auto-configuration, Polish "Add SSL bundle support to LDAP auto-configuration", and Add SSL support for LDAP in Docker Compose.

@spring-projects

Spring Framework, Spring Boot, and the JVM enterprise layer

github ↗

Pick a date

Topics: Java Full archive →

The Wire · Showcase

SPRING BOOT LDAP GETS SSL BUNDLES

By RepoJournal · Filed 07:00 UTC on August 27, 2026 · About Spring

10 people shipped this

Josh Cummings @jzheaux 2 cited

Moritz Halbritter @mhalbritter 2 cited

cppwfs @cppwfs 1 cited

MacAlsandair @MacAlsandair 1 cited

renechoi @renechoi 1 cited

dhruv9b @dhruv9b 1 cited

github-actions @github-actions

Sanghyuk Jung @benelog

Artem Bilan @artembilan

Phillip Webb @philwebb

Spring Boot's LDAP auto-configuration now honors named SSL bundles, closing a gap that silently shipped plaintext trust material.

Spring Boot merged SSL bundle support into LDAP auto-configuration [1], letting you point `spring.ldap.ssl.bundle` at a named bundle. The polish commit [2] matters more than it looks: it routes the bundle through the context source's base environment because the old strategy hook was skipped for anonymous read-only ops, meaning LDAPS previously fell back to JVM defaults. Docker Compose LDAP config gets the same treatment [3]. Meanwhile, spring-integration is chasing breaking changes in Spring Framework 7.1.0-SNAPSHOT [4], forcing `MessageConversionException` instead of silently dropping null converter results across JMS paths. On the equality front, `AdviceMessage` gets a fixed `equals()` contract [5]; four of six new tests fail against the old code, so this is a real hash/equals violation. spring-kafka fixes a resource leak where `DelegatingByTopicSerialization.close()` never closed its default delegate [6], and spring-ldap gardens its tooling with an automated dependabot updater [7] and a CheckstyleAll task [8]. All told, 28 commits and 10 PRs across four repos. The 7.1.0 snapshot churn is the thing to watch; if you track Spring Framework milestones, plan for those JMS behavior changes.

Action items

→ Review spring-integration JMS null-converter changes before touching 7.1.0 snapshots spring-projects/spring-integration [plan]
→ Pull in spring-kafka fix for DelegatingByTopicSerialization close() leak spring-projects/spring-kafka [monitor]
→ Try spring.ldap.ssl.bundle in Spring Boot LDAP auto-config if you use LDAPS spring-projects/spring-boot [plan]

References

[1] Add SSL bundle support to LDAP auto-configuration ↗ spring-projects/spring-boot
[2] Polish "Add SSL bundle support to LDAP auto-configuration" spring-projects/spring-boot
[3] Add SSL support for LDAP in Docker Compose spring-projects/spring-boot
[4] Use latest Spring Framework 7.1.0-SNAPSHOT ↗ spring-projects/spring-integration
[5] GH-11377: Fix `equals()` contract in the `AdviceMessage` ↗ spring-projects/spring-integration
[6] Close the default delegate in DelegatingByTopicSerialization ↗ spring-projects/spring-kafka
[7] Use spring-io/github-actions/update-dependabot spring-projects/spring-ldap
[8] Add CheckstyleAll Task spring-projects/spring-ldap

Quick answers

What shipped in Spring on August 27, 2026?: Spring Boot's LDAP auto-configuration now honors named SSL bundles, closing a gap that silently shipped plaintext trust material. In total, 28 commits and 10 pull requests landed.
Who contributed to Spring on August 27, 2026?: 10 developers shipped this update, including github-actions, Sanghyuk Jung, Josh Cummings, cppwfs, MacAlsandair, Artem Bilan, renechoi, and dhruv9b, and 2 more.
What were the notable Spring updates?: Add SSL bundle support to LDAP auto-configuration, Polish "Add SSL bundle support to LDAP auto-configuration", and Add SSL support for LDAP in Docker Compose.

Spring Boot SSL Reload Bug Exposed

If you reload an SSL bundle on Tomcat, you are silently dropping custom host configuration.

java 66 shipped

@spring-projects Aug 25

Spring Boot fixes OTLP fallback and DataSource unwrap bugs

Spring Boot shipped two behavioral fixes overnight that will change how your OTLP config and DataSource unwrapping resolve at runtime.

java 56 shipped

@spring-projects Aug 24

SPRING BOOT DOCS POINT TO DEAD WEB SECURITY CLASS

A merged PR fixes docs that referenced a SpringBootWebSecurityConfiguration class that no longer exists, and it's the closest thing to a story across an otherwise quiet Spring ecosystem in the last day.