SSM (Spring + Spring MVC + MyBatis) — briefings & field notes

Five dated news digests and five engineering Q&A entries. Each item cites primary documentation or release artifacts (not generic placeholders).

Latest news

News

Spring Framework 6.2 ships @Fallback beans, background init, and WebMvc refinements

Spring Framework 6.2.0 introduces complementary @Fallback beans, background initialization hooks, and improved testing utilities such as AssertJ-style MvcTester.

SSM apps should upgrade Spring, Spring MVC, and transaction modules together.

News

Spring Framework 6.2 release notes list baseline bumps (Hibernate, HtmlUnit, Protobuf)

The GitHub wiki release notes enumerate minimum dependency versions that may force coordinated bumps in legacy SSM deployments.

Check Hibernate integration tests after upgrading.

News

MyBatis 3.5.16 tightens security around Invocation proxies and improves virtual-thread compatibility

The MyBatis team published 3.5.16 with a security hardening note for Invocation misuse plus performance fixes for constructor automapping.

Pair ORM upgrades with JDBC driver updates.

News

Spring MVC reference documents functional handler APIs alongside classic controllers

Teams mixing @Controller annotations with router functions should consult the Spring Framework reference to understand handler mapping precedence.

Document conventions in your SSM style guide.

News

MyBatis mapper scanning changes should be validated against Spring 6 component scanning rules

When moving packages, ensure @MapperScan base packages align with Spring’s classpath scanning filters to avoid silent mapper omissions.

Add integration tests that assert mapper beans exist.

Questions & answers

Q&A

How do I sequence upgrades across Spring Framework, Spring MVC, and MyBatis?

Adopt the Spring BOM first, run the test suite, then bump MyBatis patch versions while watching SQL log diffs for mapping regressions.

Never upgrade only one layer in isolation on large monoliths.

Q&A

Why are lazy-loaded associations throwing after MyBatis 3.5.16?

Read the GitHub release notes for constructor automapping and proxy changes; some edge cases around databaseId resolution were fixed and may expose latent config bugs.

Enable SQL logging temporarily to compare mapped statements.

Q&A

Where is the supported configuration for Spring-managed SqlSessionFactory?

MyBatis-Spring documents bean wiring patterns for SqlSessionFactoryBean and transaction synchronization—follow them instead of ad-hoc singletons.

Validate transaction boundaries with integration tests.

Q&A

How should SSM apps expose Actuator endpoints safely behind Spring MVC?

Use Spring Security’s request matchers to limit actuator exposure and disable sensitive endpoints in production profiles.

Cross-check Spring Boot actuator hardening guides.

Q&A

What is the recommended replacement for XmlWebApplicationContext-heavy SSM apps?

Migrate toward Java configuration and Spring’s @Configuration model supported in Framework 6.2 while retiring giant XML graphs incrementally.

Use compatibility tests to ensure URL mappings remain stable.