On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.12 is available now.

Spring Framework 6.2.12 ships with 39 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.11 and 3.5.7.

CVE-2025-41254:

This release addresses CVE-2025-41254 for "Spring Framework STOMP CSRF Vulnerability".

Open source support for Spring Framework 5.3.x and 6.1.x generations has ended, see our support page for more information. This fix has been applied to the 5.3.46 and 6.1.24 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience. Commercial customers using Spring Boot 2.7, 3.1, or 3.2 can make use of Spring Boot Hotfix releases 2.7.29.2, 3.2.18.2 and 3.3.15.2. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the Spring Cloud and everyone who has contributed, I am pleased to announce that Spring Cloud Gateway 4.3.2, 4.2.5, 4.1.12, and 3.1.12 are out! In all cases, the releases are mostly composed of bug fixes, dependency upgrades.

Importantly, these releases address CVE-2025-41253.

Commercial customers will be able to update to Spring Cloud Gateway 4.1.12, and 3.1.12. These commercial versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription.

Continuing our Road to GA series, this week we're exploring Share Groups in Apache Kafka 4.0.0 and their integration in Spring for Apache Kafka 4.0.0 - a feature that fundamentally expands how we can consume messages from Kafka topics.

When we first start working with Kafka, the mental model is straightforward: topics hold messages, consumers read them, and processing happens in order within partitions. This partition-based model has served countless applications well, providing ordered processing with strong guarantees. However, certain use cases involve creating topics with hundreds of…

It gives me great pleasure to announce that the Spring Session MongoDB project will now be led by the MongoDB Team.

NOTE: This announcement is in alignment with our announcement Spring Session Hazelcast: Now Led by Hazelcast Team.

For ten years Spring Session has provided the infrastructure for transparently replacing session stores in a vendor independent manner. With that infrastructure in place, it is just a matter of implementing SessionRepository javadoc in order to support storing session information in a new datastore.

I cannot think of a team who has more MongoDB experience than the MongoDB team themselves and so it gives me great pleasure to announce that the MongoDB team will be leading the next generation of Spring Session MongoDB! To best enable this transition, the next generation of code will be hosted in a new GitHub repository and have new Maven coordinates, both available in November. Support for existing generations of Spring Session MongoDB will continue to be maintained by the Spring Session team as described by the Spring Support Policy…

It gives me great pleasure to announce that the Spring Session Hazelcast project will now be led by the Hazelcast Team.

NOTE: This announcement is in alignment with our announcement Spring Session MongoDB: Now Led by MongoDB Team.

For ten years Spring Session has provided the infrastructure for transparently replacing session stores in a vendor independent manner. With that infrastructure in place, it is just a matter of implementing SessionRepository javadoc in order to support storing session information in a new datastore.

I cannot think of a team who has more Hazelcast experience than the Hazelcast team themselves and so it gives me great pleasure to announce the Hazelcast team will be leading the next generation of Spring Session Hazelcast! To best enable this transition, the next generation of releases will be in a new GitHub repository and have new Maven coordinates. Support for existing generations of Spring Session Hazelcast will continue to be maintained by the Spring Session team as described by the Spring Support Policy…

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in Boston and New York city and Bulgaria and Poland this week, but I'm still hyped about last week's amazing Devoxx Belgium event! There are a ton of videos to look at, and I'll include just some of them here.

So, without further ado, let's dive into it!

• Nice! Micrometer releases: 1.14.12, 1.15.5, 1.16.0-RC1
• And ... Micrometer Tracing releases: 1.4.11, 1.5.5, 1.6.0-RC1
• the road to GA is long and amazing, and this newest post by Soby Chacko looks at the new shared consumer support in Spring for Apache Kafka
• good news everybody! Spring Session Hazelcast is now being led by the Hazelcast team
• and in the same vein, Spring Session MongoDB is now led by the MongoDB team!
• Spring Batch 6.0.0 M4 has been released
• in last week's installment of A Bootiful Podcast, I talked to Spring Security legend Josh Cummings
• I loved this post from Sebastien Deleuze that looks at the brand …

Hi, Spring fans! In this installment we talk to Spring Security contributor and legend Josh Cummings

I am pleased to announce that Spring Batch 6.0.0-M4 is now available from Maven Central!

The main changes in this milestone release are the following:

• Migration to nullability checks with jSpecify
• Improved domain model design

For the complete list of changes, please check the release notes here.

Null safety with JSpecify

Spring Batch 6.0 APIs are now annotated with JSpecify annotations to provide better null-safety guarantees and improve code quality. This change helps developers catch potential null-related issues at compile time, leading to more robust and reliable applications.

Improved…

This is a new blog post in the Road to GA series, this time sharing more details on the new Jackson 3 support, just a few days after Jackson 3.0.0 GA release, about to be introduced in Spring Boot 4 and related Spring portfolio projects.

Jackson is by far the most used JSON library on the JVM, and the introduction of the Jackson 3 support in Spring is the opportunity for us to provide additional enhancements, as a follow-up of the popular Jackson integration improvements in Spring that I announced more than 10 years ago!

Close collaboration between Spring and Jackson teams

When the Spring team…