On behalf of the team and everyone who contributed, I am pleased to announce the General Availability of the Spring Integration 7.1.0 generation.

In addition, the 7.0.5 and 6.5.9 versions with bug & CVE fixes and dependency upgrades have been released.

CVEs fixed in this release

This release fixes the following CVEs:

• CVE-2026-40987: Remote-file synchronizer writes server-supplied filename under localDirectory without canonicalization

Some notable changes in 7.1.0:

• The new spring-integration-cloudevents module has been added to support CloudEvents transformations;
• The new spring-integration-grpc module has been added to communicate with gRPC protocol;
• The TestUtils.getPropertyValue() is now generic arguement based for easier adoption in the tests code;
• Resolved more deprecations from Spring AMQP in spring-integration-amqp module and made bytecode compatible with previous version;
• The RedisMessageStore now supports GETDEL command from Redis 6.2.+;
• Allow skipping messaging annotation post processor registration in pure DSL scenarios;
• MQTTv5 message-driven channel adapter now supports alternative shared subscription topic patterns (such as $SharedSubscription/), ensuring compatibility with a wider range of MQTT brokers;
• Improve Nullability support in the HeaderEnricher API;
• Disable allowCredentials in the CrossOrigin and introduce originPatterns;
• AllowListMessageHeaderSelector has been introduced for any scenario where the message's metadata should be trusted before it is used in the downstream flow.

See What's New in 7.1 for more details.

Also, a Migration Guide contains some breaking changes in this new version.

Cheers, 
Glenn

Project Page | GitHub Issues | Contributing | Help