Spring Cloud Gateway 3.1.10, 4.0.12, 4.1.8, 4.2.3, 4.3.0 Released, including fixes for CVE-2025-41235

Releases | Spencer Gibb | May 29, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Cloud Gateway 3.1.10, 4.0.12, 4.1.8, 4.2.3, 4.3.0 are available now which fix CVE-2025-41235. See the CVE report for breaking changes.

Spring Cloud Gateway 4.0.12 is a commercial-only release and is not available in Maven Central.

Please refer to the releases page for more detail on what is included in each release.

Spring Modulith 1.4 GA, 1.3.6, and 1.2.13 released

Releases | Oliver Drotbohm | May 28, 2025 | ...

On behalf of the community, I am delighted that after a half year's work we can announce Spring Modulith 1.4. The release is packed with new features, such as:

Core

  • Refinements in the core ApplicationModule(s) abstractions and documentation generation (GH-1150, GH-1152)
  • We introduced an SPI to detect NamedInterfaces programatically (GH-1009).
  • We fixed a performance regression in JavaPackage the erroneously repeatedly recomputed all sub packages. (also fixed in 1.3.4 and 1.2.10, GH-1098)

Testing

  • Integration tests using @ApplicationModuleTest can now consume bean instances of classes declared in test sources. (GH-202)
  • The global PublishedEvents instance registered in an ApplicationContext will now be an AssertablePublishedEvents if AssertJ is on the classpath. (GH-1110)

Spring Integration 6.5 GA Available

Releases | Artem Bilan | May 22, 2025 | ...

On behalf of the team and everyone who contributed, I am pleased to announce the General Avalilability of Spring Integration 6.5.0 generation.

In addition, the 6.3.10 and 6.4.5 versions with bug fixes and dependency upgrades have been released.

Some notable changes in 6.5.0 are:

  • The AbstractRecentFileListFilter - the FileListFilter to accept only files which are recent according to the provided age;
  • The AbstractMessageChannel now emits a special MessageDispatchingException for the situation when message production is initiated too early;
  • The PollerMetadata.sendTimeout option has been removed (deprecated before) since it is out of use;
  • The Hazelcast CP-subsystem based components in the spring-integration-hazelcast module have been deprecated due to commercial support of the Hazelcast features (stating with 5.5.0) we relied on;
  • The LockRequestHandlerAdvice

Spring Boot 3.5.0 available now

Releases | Stéphane Nicoll | May 22, 2025 | ...

On behalf of the Spring Boot team and everyone that has contributed, I am pleased to announce that Spring Boot 3.5.0 has been released and is available from Maven Central.

This release adds a significant number of new features and improvements. For full upgrade instructions and new and noteworthy features please see the release notes.

What's new in 3.5

The highlights of the 3.5 release include:

  • Structured Logging Improvements
  • SSL Support for Service Connections
  • Load Properties From Environment Variables
  • AsyncTaskExecutor with Custom Executor
  • Auto-configuration for Bean Background Initialization
  • Annotations to Register Filter and Servlet

Spring Boot 3.4.6 available now

Releases | Stéphane Nicoll | May 22, 2025 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.4.6 has been released and is now available from Maven Central.

This release includes 39 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag.

Project Page | GitHub | Issues | Documentation | Stack…

Spring Boot 3.3.12 available now

Releases | Stéphane Nicoll | May 22, 2025 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.3.12 has been released and is now available from Maven Central.

This release includes 33 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag.

Project Page | GitHub | Issues | Documentation | Stack…

Spring AI 1.0 GA Released

Releases | Mark Pollack | May 20, 2025 | ...

On behalf of the Spring AI engineering team and everyone who contributed to this release, I am very excited to announce the general availability of Spring AI 1.0. We have a great release blog lined up for you.

Getting Started

All the new bits are in maven central. Use the provided bom to import the dependencies.

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.ai</groupId>
            <artifactId>spring-ai-bom</artifactId>
            <version>1.0.0</version>
            <type>pom</type>
            <scope>import</scope…

Spring Authorization Server 1.5 goes GA

Releases | Joe Grandja | May 20, 2025 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.5.

The 1.5 release contains a few noteworthy new features:

  • Add support for OAuth 2.0 Pushed Authorization Requests (PAR) (gh-1925)
  • Support OAuth 2.0 Demonstrating Proof of Possession (DPoP) (gh-1813)
  • Support POST for authorization code request flow (gh-1874)

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues |

Spring for GraphQL 1.4.0 Released

Releases | Brian Clozel | May 20, 2025 | ...

On behalf of the Spring for GraphQL team, I am pleased to announce the availability of 1.4.0, the generally available release.

In case you missed those, the 1.4.0-M1 and 1.4.0-RC1 release blog posts described the new features for this generation. The Spring for GraphQL 1.4.0 wiki page should help you to upgrade your application. We will keep updating this page with the feedback we get from the community on our issue tracker and on StackOverflow.

GraphQL Java 24+ baseline

The GraphQL Java team recently released new major releases for the Java DataLoader and GraphQL Java projects. They immediately supersede the 23.x generation so Spring for GraphQL 1.4 will require GraphQL Java 24+ as a baseline. This last-minute change shouldn't affect much your…

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all