Spring Framework 6.1.20 and 6.2.7 releases fix CVE-2025-22233

Releases | Brian Clozel | May 15, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.20 and 6.2.7 are available now.

Spring Framework 6.1.20 ships with 4 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.3.12.

Spring Framework 6.2.7 ships with 25 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.6 and 3.5.0.

CVE-2025-22233:

The releases address CVE-2025-22233 for Spring Framework DataBinder Case Sensitive Match Exception (2nd update).

Open source support for Spring Framework 5.3.x and 6.0.x generations has ended and will expire for the 6.1.x generation next month, see our support page for more information

Spring AI 1.0.0 RC1 Released

Releases | Mark Pollack | May 13, 2025 | ...

We're excited to announce Spring AI 1.0.0 RC1, marking the final set of breaking changes, bug fixes, and new functionality before the stable release! The GA version is scheduled for May 20th, 2025 - just one week away. During this time, we'll be focusing on improving documentation and addressing any reported bugs.

To celebrate this release, we have added a new song to our AI-generated music playlist Check out the latest track to enhance your blog reading and coding experience.

  • Upgrade Notes
  • You can automate the upgrade process to 1.0.0-RC1 using an OpenRewrite recipe. This recipe helps apply many of the necessary code changes for this version. Find the recipe and usage instructions at Arconia Spring AI Migrations.

Spring gRPC Promoted!

Engineering | Dave Syer | May 13, 2025 | ...

It's a few months since we had a blog about Spring gRPC that wasn't just a release announcement. This one marks the first release since the project was promoted from experimental to a full member of the Spring Portfolio. This doesn't change the way you consume the project, but it has some implications for support and symbolically for what the project now means to the portfolio.

The latest release is 0.8.0, and it has been available for a couple of weeks now in Maven Central. The main reason for that release was to bump the dependencies to their latest versions, bringing Spring gRPC up to version 4 of the protobuf-java libraries. The easiest way to get started is to download a project with "gRPC" checked on the Spring Initializr. There are separate "starters" for Spring Boot applications gRPC that want to be "servers" or "clients", or you can get both at once from the plain spring-grpc-spring-boot-starter

This Week in Spring - May 13th, 2025

Engineering | Josh Long | May 13, 2025 | ...

Hi, Spring fans! As I write this, I'm at the amazing Code Remix event in Miami (well, technically Tampa), Florida. I'll also be speaking at the Tampa JUG while I'm there, so look out! After that, I'll be headed back to Europe—a wee bit further north this time—to Stockholm for the amazing JForum event, where I'll be doing a much deeper dive into all things Spring.

You know what I'm most excited about? You don't have to look far to figure it out—just check out the ol' Spring Calendar. Spring AI releases on May 20th! And then, a few short and sweet days later—which, by the way, I'll be…

This Week in Spring - May 6th, 2025

Engineering | Josh Long | May 06, 2025 | ...

Hi, Spring fans! As I write this, I'm winging my way to lovely London, UK, for the amazing Devoxx UK event! I'll be looking at the wide and wonderful world of Springdom. Then, from there, it's off to Code Remix in Miami. I'll also be speaking at the Tampa JUG while I'm there, so look out! After that, I'll be headed back to Europe—a wee bit further north this time—to Stockholm for the amazing JForum event, where I'll be doing a much deeper dive into all things Spring.

You know what I'm most excited about? You don't have to look far to figure it out—just check out the ol' Spring Calendar. Spring…

Dynamic Tool Updates in Spring AI's Model Context Protocol

Engineering | Christian Tzolov | May 04, 2025 | ...

The Model Context Protocol (MCP) is a powerful feature in Spring AI that enables AI models to access external tools and resources through a standardized interface. One interesting capabilities of MCP is its ability to dynamically update available tools at runtime.

This blog post explores how Spring AI implements dynamic tool updates in MCP, providing flexibility and extensibility to AI-powered applications.

The related example code is available here: Dynamic Tool Update Example

Understanding the Model Context Protocol

Before diving into dynamic tool updates, let's understand what MCP is and…

Spring Cloud 2025.0.0-RC1 (aka Northfields) has been released

Releases | Ryan Baxter | May 01, 2025 | ...

On behalf of the community, I am pleased to announce that the Release Candidate 1 (RC1) of the Spring Cloud 2025.0.0 Release Train is available today. The release can be found in Spring Milestone repository. You can check out the 2025.0 release notes for more information.

Notable Changes in the 2025.0.0 Release Train

This release is based on Spring Boot 3.5.0-RC1.

For a complete list of changes made in this release see this project on GitHub.

Spring Cloud Config

  • Support YAML specific profile documents in AWS S3 buckets (#2825)

Spring Cloud Gateway

  • Allow registering custom filters and predicates as beans (#3250)
  • Support setting Spring.webflux.base-path and supporting it in path predicate (#2984)
  • Add Permissions-Policy as configurable option to SecureHeaders GatewayFilter (#2975)
  • Support for reloading httpClient connectTimeout Configuration (#3679)

Spring AI 1.0.0 M8 Released

Releases | Mark Pollack | April 30, 2025 | ...

After reviewing our API design and deprecations post M7, we determined that several significant changes would become breaking changes in an RC1 release. Therefore, we've introduced this additional milestone to provide developers with a transitional release where deprecated APIs coexist alongside their replacements, enabling a smoother upgrade experience before RC1.

Here are the key changes in this release.

  • Upgrade Notes
  • You can automate the upgrade process to 1.0.0-M8 using an OpenRewrite recipe. This recipe helps apply many of the necessary code changes for this version. Find the recipe and usage instructions at Arconia Spring AI Migrations.

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all