Spring Cloud Config 3.1.10, 4.0.10, 4.1.6, 4.2.1, 4.3.0-M3 Released, including fixes for CVE-2025-22232

Releases | Ryan Baxter | April 07, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Cloud Config 3.1.10, 4.0.10, 4.1.6, 4.2.1, 4.3.0-M3 are available now which fix CVE-2025-22232.

Spring Cloud Config 4.0.10 is a commercial only release and is not available in Maven Central.

Please refer to the releases page for more detail on what is included in each release.

Spring gRPC 0.6.0 available now

Releases | Dave Syer | April 05, 2025 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring gRPC 0.6.0 has been released and is now available from Maven Central.

The main change in this release was to rename the annotation for creating gRPC client beans to @ImportGrpcClients, harmonizing with the work on HTTP interface clients in Spring Framework. This release includes features, bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the open issues. If you have general questions, please ask on Stack Overflow using the spring-grpc tag

Using Spring AI 1.0.0-SNAPSHOT: Part 2 - Important Changes and Updates

Engineering | Mark Pollack | April 04, 2025 | ...

Using Spring AI 1.0.0-SNAPSHOT: Part 2 - Important Changes and Updates

This blog post is a continuation of our previous article Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates, where we introduced the significant changes to artifact IDs, dependency management, and autoconfiguration in Spring AI 1.0.0-SNAPSHOT.

Since publishing that article, the Spring team has released an updates to the snapshots, In this follow-up article, we'll explore the latest changes and provide additional guidance for developers working with the snapshot versions. For comprehensive details, refer to the Spring AI Upgrade Notes

Securing Spring AI MCP servers with OAuth2

Spring AI offers support for Model Context Protocol, or MCP for short, which allows AI models to interact with and access external tools and resources in a structured way. With Spring AI, developers can create their own MCP Servers and expose capabilities to AI models in just a few lines of code.

Authorization and security in MCP

MCP Servers can run locally, using the STDIO transport. To expose an MCP server to the outside world, it must expose a few standard HTTP endpoints. While MCP Servers used privately might not require strict authentication, enterprise deployments need robust security and permission management for exposed endpoints. This challenge is addressed in the newest version of the MCP specification (2025-03-26), which was released last week. It lays the foundation for securing communications between Clients and Servers, leveraging the widespread OAuth2 framework

This Week in Sprng - April 1st, 2025

Engineering | Josh Long | April 01, 2025 | ...

Hi, Spring fans! Welcome to another exciting installment of This Week in Spring! It's April Fools day, so be wary of things you read on the internet, but it's also the 11th anniversary of Spring Boot 1.0, which was released this day in 2014! (that's not an April Fools). Happy birthday!

I'm in excellent Austin, TX, at Dr. Venkat Subramaniam's phenomenal Arc of AI show. I love this show! So many amazing people - many of whom also happen to be world-class speakers and engineers - converge in one place to synthesize their vantage point on "A.I." in one hour. Of course, I will be talking about…

Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates

Engineering | Mark Pollack | March 25, 2025 | ...

Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates

Spring AI 1.0.0-SNAPSHOT introduces several important changes to artifact IDs, dependency management, and autoconfiguration. This blog post outlines these changes and provides guidance on how to update your projects.

The most significant change is the naming pattern for Spring AI starter artifacts:

  • Model starters: spring-ai-{model}-spring-boot-starterspring-ai-starter-model-{model}
  • Vector Store starters: spring-ai-{store}-store-spring-boot-starterspring-ai-starter-vector-store-{store}
  • MCP starters: spring-ai-mcp-{type}-spring-boot-starterspring-ai-starter-mcp-{type}

This Week in Spring - March 25th, 2025

Engineering | Josh Long | March 25, 2025 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I’m in Portland, OR, then I'm off to Austin, TX for the Arc of AI show, and then I'm off to Amsterdam for Voxxed Days Amsterdam! If you're around, be sure to say hi! There's a ton of cool stuff to look at, so without any further ado, let's dive right into it!

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all