Spring Security 2025-10 Releases

Releases | Rob Winch | October 20, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Security 7.0.0-RC1, 6.4.12 and 6.5.6.

The highlights of 7.0.0-RC1 include:

For a complete list of changes, refer to the changelogs:

Project Page | GitHub | Issues | Documentation

Spring Cloud Stream Applications 2025.0.1 is now available

Releases | Chris Bono | October 18, 2025 | ...

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Cloud Stream Applications 2025.0.1 has been released and is now available from Maven Central.

The releases include dependency upgrades.

The 2025.0.1 release updates to Spring Boot 3.4.10, Spring Framework 6.2.11, and Spring Cloud 2024.0.2.

Please see the release notes 2025.0.1) for more details.

Stay in touch...

Please continue to engage with us by creating bug reports and feature requests on Github and asking questions on StackOverflow using the spring-cloud-stream or spring-cloud-dataflow tags.

Spring Cloud 2025.1.0-M4 (aka Oakwood) has been released

Releases | Ryan Baxter | October 17, 2025 | ...

On behalf of the community, I am pleased to announce that Milestone 4 (M4) of the Spring Cloud 2025.1.0 Release Train is available today. The release can be found in Spring Milestone repository. You can check out the 2025.1.0 release notes for more information.

Notable Changes in the 2025.1.0 Release Train

Spring Cloud 2025.1.0-M4 depends on Spring Boot 4.0.0-M3. See all issues and pull requests that are part of the release here.

Spring Cloud Kubernetes

  • Deprecated classes and methods have been removed, and numerous other improvements to public classes have been made. See the milestone for a complete list of changes

Spring Data 2025.0.5 and 2024.1.11 released

Releases | Christoph Strobl | October 17, 2025 | ...

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2025.0.5 and 2024.1.11 service releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

The upcoming Spring Boot releases will pick up the above releases by next week.

2025.0.5

Spring Data 2025.1.0-RC1 released

Releases | Christoph Strobl | October 17, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce the first release candidate (RC) for the next Spring Data generation.

The RC ships with mainly refinements around the various new features as well as bug fixes and dependency upgrades.

If you haven't done so already we'd kindly ask you to try out the new features and provide feedback to help us iron out the last rough edges.

2025.1.0-RC1

Spring Framework 7.0.0-RC1 available now

Releases | Brian Clozel | October 16, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce our first release candidate for Spring Framework 7.0. There is another release candidate scheduled by the end of the month, before our GA version in November. We have compiled all the upgrade information, new features and deprecations on the Spring Framework 7.0 release notes preview page.

Resiliency refinements

The new Resiliency feature got a few more refinements in this release. You can now match against exception causes in @Retryable or RetryPolicy, and even include/exclude specific exception types. We also added a new @ConcurrencyLimit programmatic variant for more flexible setups; the @ConcurrencyLimit

Spring Framework 6.2.12 fixes CVE-2025-41254

Releases | Brian Clozel | October 16, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.12 is available now.

Spring Framework 6.2.12 ships with 39 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.11 and 3.5.7.

CVE-2025-41254:

This release addresses CVE-2025-41254 for "Spring Framework STOMP CSRF Vulnerability".

Open source support for Spring Framework 5.3.x and 6.1.x generations has ended, see our support page for more information. This fix has been applied to the 5.3.46 and 6.1.24 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience. Commercial customers using Spring Boot 2.7, 3.1, or 3.2 can make use of Spring Boot Hotfix releases 2.7.29.2, 3.2.18.2 and 3.3.15.2. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription

Spring Cloud Gateway 4.3.2, 4.2.5, 4.1.12, and 3.1.12 are now available

Releases | Ryan Baxter | October 15, 2025 | ...

On behalf of the Spring Cloud and everyone who has contributed, I am pleased to announce that Spring Cloud Gateway 4.3.2, 4.2.5, 4.1.12, and 3.1.12 are out! In all cases, the releases are mostly composed of bug fixes, dependency upgrades.

Importantly, these releases address CVE-2025-41253.

Commercial customers will be able to update to Spring Cloud Gateway 4.1.12, and 3.1.12. These commercial versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription.

Spring Batch 6.0.0-M4 released

Releases | Mahmoud Ben Hassine | October 09, 2025 | ...

I am pleased to announce that Spring Batch 6.0.0-M4 is now available from Maven Central!

The main changes in this milestone release are the following:

  • Migration to nullability checks with jSpecify
  • Improved domain model design

For the complete list of changes, please check the release notes here.

Null safety with JSpecify

Spring Batch 6.0 APIs are now annotated with JSpecify annotations to provide better null-safety guarantees and improve code quality. This change helps developers catch potential null-related issues at compile time, leading to more robust and reliable applications.

Improved…

Spring AI 1.1.0-M3 Available Now

Releases | Mark Pollack | October 06, 2025 | ...

On behalf of the Spring AI engineering team and everyone who has contributed, I'm happy to announce that Spring AI 1.1.0-M3 has been released and is now available from Maven Central.

This milestone release focuses primarily on Model Context Protocol (MCP) enhancements, incorporating the MCP Java SDK v0.14.0 upgrade along with new resource template capabilities and security documentation.

Release Summary

This release includes 46 improvements, bug fixes, and documentation updates. Key focus areas include:

  • Model Context Protocol: Upgraded to MCP Java SDK 0.14.0 with resource template support and security best practices
  • New Features: 7 capabilities including Azure Cosmos DB chat memory and GemFire metadata filtering
  • Stability: 11 bug fixes addressing community-reported issues
  • Documentation: 9 improvements including MCP security guidance
  • Dependency Upgrades: 3 updates including security fixes (CVE-2025-54988)

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all