Spring

Evidence (8)

• 4InfoQ·9/29/2026framework_update
  Spring Project Second Milestone Releases Roundup

  InfoQ reported a busy week for the Spring ecosystem, including second milestone releases across Spring Boot, Spring Framework, Spring Data, Spring Security, Spring Integration, Spring Batch, Spring AMQP, Spring for GraphQL, and Spring for Apache Kafka. The roundup also noted first milestone releases of Spring AI, Spring Cloud, Spring Web Services, and Spring LDAP.

• 7InfoQ·8/28/2026security
  Four Post-Quantum Cryptography Patterns for Spring Boot

  The article outlines four ways to introduce post-quantum cryptography into a Spring Boot environment: service-to-service payload encryption, database field protection, long-term document signing, and replacing RS256 for service tokens. It also notes that harvest-now-decrypt-later threats are already relevant, and that production deployment should rely on KMS or Vault.

• 6InfoQ·8/27/2026framework_update
  Spring Ecosystem Sees First Milestone Releases After Hiatus

  InfoQ reports a burst of first milestone releases across the Spring ecosystem during the week of August 17, 2026, following a 10-week pause. The releases include Spring Boot, Spring Framework, Spring Data, Spring Security, Spring Integration, Spring HATEOAS, Spring Modulith, Spring Batch, Spring AMQP, and Spring for Apache Kafka.

• 5InfoQ·8/3/2026framework_update
  Embabel Agent Framework Reaches 1.0

  Embabel has released version 1.0 of its Java-based agent framework. Built on Spring AI, it lets Java and Kotlin developers define agents as typed domain objects and combine model-driven planning with predefined state machines for workflow control.

• 7The New Stack·7/28/2026security
  AI is reshaping open source security and maintainer support

  Frontier AI models are increasing the volume of security findings in open source software, creating a backlog that maintainers and enterprises must triage and fix faster. The article argues that first-party support from project maintainers is becoming a more important part of enterprise risk management because AI has made vulnerability discovery far faster than traditional workflows.

• 5InfoQ·7/27/2026framework_update
  Clean Architecture for Portable Serverless Apps

  Elena van Engelen explains how to reduce serverless vendor lock-in while keeping native cloud capabilities. She demonstrates structuring FaaS applications with Clean Architecture, Spring Cloud Function, and Gradle modules, then shows Kotlin services deployed across AWS and Azure using Terraform CDK.

• 7Hugging Face Blog·6/30/2026research
  ScarfBench Benchmarks AI Agents for Java Framework Migration

  Hugging Face Blog introduces ScarfBench, an open benchmark for evaluating AI agents on enterprise Java framework migration across Spring, Jakarta EE, and Quarkus. The benchmark measures whether migrated applications can build, deploy, and preserve behavior, and reports that current frontier agents still achieve less than 10% behavioral success.

• 7The New Stack·6/24/2026security
  Chainguard launches remediated Java libraries for unpatched CVEs

  Chainguard has generally released Chainguard Libraries for Java, a drop-in replacement approach that backports security fixes for critical and high-severity CVEs. The initial coverage focuses on Spring Boot, Spring Framework, Spring Security, and h2database, aiming to help teams stay on older versions while reducing vulnerability and audit friction.