Spring Cloud Config 3.1.10, 4.0.10, 4.1.6, 4.2.1, 4.3.0-M3 Released, including fixes for CVE-2025-22232
On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Cloud Config 3.1.10, 4.0.10, 4.1.6, 4.2.1, 4.3.0-M3 are available now which fix CVE-2025-22232.
Spring Cloud Config 4.0.10 is a commercial only release and is not available in Maven Central.
Please refer to the releases page for more detail on what is included in each release.
Spring gRPC 0.6.0 available now
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring gRPC 0.6.0
has been released and is now available from Maven Central.
The main change in this release was to rename the annotation for creating gRPC client beans to @ImportGrpcClients
, harmonizing with the work on HTTP interface clients in Spring Framework. This release includes features, bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.
How can you help?
If you're interested in helping out, check out the open issues.
If you have general questions, please ask on Stack Overflow using the spring-grpc
tag…
A Bootiful Podcast: AWS Developer Advocate and industry legend James Ward
Hi, Spring fans! In this installment I talk to AWS Developer Advocate and industry legend James Ward about AWS Bedrock, Amazon Cohere, Spring AI, MCP, and so much more!
Using Spring AI 1.0.0-SNAPSHOT: Part 2 - Important Changes and Updates
Using Spring AI 1.0.0-SNAPSHOT: Part 2 - Important Changes and Updates
This blog post is a continuation of our previous article Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates, where we introduced the significant changes to artifact IDs, dependency management, and autoconfiguration in Spring AI 1.0.0-SNAPSHOT.
Since publishing that article, the Spring team has released an updates to the snapshots, In this follow-up article, we'll explore the latest changes and provide additional guidance for developers working with the snapshot versions. For comprehensive details, refer to the Spring AI Upgrade Notes…
Securing Spring AI MCP servers with OAuth2
Spring AI offers support for Model Context Protocol, or MCP for short, which allows AI models to interact with and access external tools and resources in a structured way. With Spring AI, developers can create their own MCP Servers and expose capabilities to AI models in just a few lines of code.
Authorization and security in MCP
MCP Servers can run locally, using the STDIO transport. To expose an MCP server to the outside world, it must expose a few standard HTTP endpoints. While MCP Servers used privately might not require strict authentication, enterprise deployments need robust security and permission management for exposed endpoints. This challenge is addressed in the newest version of the MCP specification (2025-03-26), which was released last week. It lays the foundation for securing communications between Clients and Servers, leveraging the widespread OAuth2 framework…
This Week in Sprng - April 1st, 2025
Hi, Spring fans! Welcome to another exciting installment of This Week in Spring! It's April Fools day, so be wary of things you read on the internet, but it's also the 11th anniversary of Spring Boot 1.0, which was released this day in 2014! (that's not an April Fools). Happy birthday!
I'm in excellent Austin, TX, at Dr. Venkat Subramaniam's phenomenal Arc of AI show. I love this show! So many amazing people - many of whom also happen to be world-class speakers and engineers - converge in one place to synthesize their vantage point on "A.I." in one hour. Of course, I will be talking about…
A Bootiful Podcast: My friend Anthony Dahanne on Buildpacks, Production, Docker images, and more
Salut fans de Spring! In this installment I'm joined by the legendary Anthony Dahanne. If you've enjoyed success in production using Spring's built-in spring-boot:build-image capability, you've got today's guest Anthony to thank for it!
Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates
Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates
Spring AI 1.0.0-SNAPSHOT introduces several important changes to artifact IDs, dependency management, and autoconfiguration. This blog post outlines these changes and provides guidance on how to update your projects.
The most significant change is the naming pattern for Spring AI starter artifacts:
- Model starters:
spring-ai-{model}-spring-boot-starter
→spring-ai-starter-model-{model}
- Vector Store starters:
spring-ai-{store}-store-spring-boot-starter
→spring-ai-starter-vector-store-{store}
- MCP starters:
spring-ai-mcp-{type}-spring-boot-starter
→spring-ai-starter-mcp-{type}
…
This Week in Spring - March 25th, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I’m in Portland, OR, then I'm off to Austin, TX for the Arc of AI show, and then I'm off to Amsterdam for Voxxed Days Amsterdam! If you're around, be sure to say hi! There's a ton of cool stuff to look at, so without any further ado, let's dive right into it!
- There have been some huge changes to the organization and arrangement of Spring AI
- Spring Modulith 1.4 M3, 1.3.4, and 1.2.10 have been released
- Spring Boot 3.5 M3 is available now
- In last week's A Bootiful Podcast, I talked to fellow Java Champion Henri Tremblay
- Spring Boot 3.4.4 is available now
- Spring Boot 3.3.10 is available now
- Spring Batch 5.2.2 is available now
- Spring Cloud 2024.0.1 is available now
- Spring Framework 6.2.5 is available now
- Spring Security 6.5.0 M3 is available now
- Spring Security 6.3.8 and 6.4.4 are available now
- Spring AMQP 4.0.0 M2 is available now
- …