It would be nice if DefaultAuthorizationManagerFactory could apply authorization rules automatically, like for certain a...

Expected BehaviorIf one of multiple UserDetailsService beans is primary, then it should be configured.Current BehaviorWa...

When navigating to /login, by default a page displays all user-facing factors available. It would be nice to be able to ...

Forward port of https://github.com/spring-projects/spring-security/issues/17898Comment From: jzheauxCompleted in d0f93fa...

Related to https://github.com/spring-projects/spring-framework/issues/35342Comment From: jzheauxThe earlier commit was t...

spring-security-oauth2-jose 6.5.3 depends on com.nimbusds:nimbus-jose-jwt 9.37.3, which is vulnerable to CVE-2025-53864 ...

Bug descriptionWhen implementing an MCP server using Spring AI 1.1.0-M1 and annotating beans with @McpTool, the tools ar...

Well done on all the work for the google-genai library. It would be great if we could specify custom HTTP headers for th...

Bug descriptionWhen providing model file that is 2GB+ weight I get Caused by: ai.onnxruntime.OrtException: Error code - ...

Following on from https://github.com/spring-projects/spring-boot/issues/47043, we should apply similar naming to auto-co...

Upgrade to Spring Integration 6.5.2.Comment From: builtDifferentCoderbro assign this task to me?

Upgrade to Spring Pulsar 1.2.10.Comment From: builtDifferentCodercan i be assigned this task please

We do have several modules with a json package that contains a shaded version of the basic JSON library: spring-boot-cli...

While TomcatEmbeddedContext has a TomcatStarter field, it's only ever non-null when the context has been created by Tomc...

Upgrade to Spring AMQP 4.0.0-M5.Comment From: snicollMoving to snapshot will not be smooth due to Spring AMQP moving awa...

Framework's PersistenceExceptionTranslationPostProcessor is in its spring-tx module in the org.springframework.dao.annot...

Hey!Spring Boot 4.0.0-SNAPSHOTInterface WebClient.Builder has method apply(). It would be fine, to see it also for Clien...

ProblemLiquibase has an expanding set of global configuration options (e.g. duplicateFileMode, logLevel). Currently, the...

I think the new reachability JSON files means that we'll need to raise the baseline for native image generation. We'll a...

Our initial cut of HTTP Service clients doesn't support automatic classpath scanning and as such @ImportHttpServices is ...