Spring compresses its release train from two weeks to one day after a surge in CVE reports
- Sources: primary
- Summary: A Spring post dated 2026-09-21 states that the project is compressing its release train from two weeks to one day, and gives a surge in CVE reports as the reason. This entry carries the stated change and the stated reason and no figures beyond them.
- Why it matters: A shorter train narrows the gap between a Spring fix being ready and being published, and it shortens how long a pinned version stays current for teams that track releases.