Spring Data 2025.1.0-RC1 released

Releases | Christoph Strobl | October 17, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce the first release candidate (RC) for the next Spring Data generation.

The RC ships with mainly refinements around the various new features as well as bug fixes and dependency upgrades.

If you haven't done so already we'd kindly ask you to try out the new features and provide feedback to help us iron out the last rough edges.

2025.1.0-RC1

Spring Framework 7.0.0-RC1 available now

Releases | Brian Clozel | October 16, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce our first release candidate for Spring Framework 7.0. There is another release candidate scheduled by the end of the month, before our GA version in November. We have compiled all the upgrade information, new features and deprecations on the Spring Framework 7.0 release notes preview page.

Resiliency refinements

The new Resiliency feature got a few more refinements in this release. You can now match against exception causes in @Retryable or RetryPolicy, and even include/exclude specific exception types. We also added a new @ConcurrencyLimit programmatic variant for more flexible setups; the @ConcurrencyLimit

Spring Framework 6.2.12 fixes CVE-2025-41254

Releases | Brian Clozel | October 16, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.12 is available now.

Spring Framework 6.2.12 ships with 39 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.11 and 3.5.7.

CVE-2025-41254:

This release addresses CVE-2025-41254 for "Spring Framework STOMP CSRF Vulnerability".

Open source support for Spring Framework 5.3.x and 6.1.x generations has ended, see our support page for more information. This fix has been applied to the 5.3.46 and 6.1.24 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience. Commercial customers using Spring Boot 2.7, 3.1, or 3.2 can make use of Spring Boot Hotfix releases 2.7.29.2, 3.2.18.2 and 3.3.15.2. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription

Spring Cloud Gateway 4.3.2, 4.2.5, 4.1.12, and 3.1.12 are now available

Releases | Ryan Baxter | October 15, 2025 | ...

On behalf of the Spring Cloud and everyone who has contributed, I am pleased to announce that Spring Cloud Gateway 4.3.2, 4.2.5, 4.1.12, and 3.1.12 are out! In all cases, the releases are mostly composed of bug fixes, dependency upgrades.

Importantly, these releases address CVE-2025-41253.

Commercial customers will be able to update to Spring Cloud Gateway 4.1.12, and 3.1.12. These commercial versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription.

Introducing Share Consumer Support (Kafka Queues) in Spring for Apache Kafka

Engineering | Soby Chacko | October 14, 2025 | ...

Continuing our Road to GA series, this week we're exploring Share Groups in Apache Kafka 4.0.0 and their integration in Spring for Apache Kafka 4.0.0 - a feature that fundamentally expands how we can consume messages from Kafka topics.

When we first start working with Kafka, the mental model is straightforward: topics hold messages, consumers read them, and processing happens in order within partitions. This partition-based model has served countless applications well, providing ordered processing with strong guarantees. However, certain use cases involve creating topics with hundreds of…

Spring Session Hazelcast: Now Led by Hazelcast Team

Engineering | Rob Winch | October 14, 2025 | ...

It gives me great pleasure to announce that the Spring Session Hazelcast project will now be led by the Hazelcast Team.

NOTE: This announcement is in alignment with our announcement Spring Session MongoDB: Now Led by MongoDB Team.

For ten years Spring Session has provided the infrastructure for transparently replacing session stores in a vendor independent manner. With that infrastructure in place, it is just a matter of implementing SessionRepository javadoc in order to support storing session information in a new datastore.

I cannot think of a team who has more Hazelcast experience than the Hazelcast team themselves and so it gives me great pleasure to announce the Hazelcast team will be leading the next generation of Spring Session Hazelcast! To best enable this transition, the next generation of releases will be in a new GitHub repository and have new Maven coordinates. Support for existing generations of Spring Session Hazelcast will continue to be maintained by the Spring Session team as described by the Spring Support Policy

Spring Session MongoDB: Now Led by MongoDB Team

Engineering | Rob Winch | October 14, 2025 | ...

It gives me great pleasure to announce that the Spring Session MongoDB project will now be led by the MongoDB Team.

NOTE: This announcement is in alignment with our announcement Spring Session Hazelcast: Now Led by Hazelcast Team.

For ten years Spring Session has provided the infrastructure for transparently replacing session stores in a vendor independent manner. With that infrastructure in place, it is just a matter of implementing SessionRepository javadoc in order to support storing session information in a new datastore.

I cannot think of a team who has more MongoDB experience than the MongoDB team themselves and so it gives me great pleasure to announce that the MongoDB team will be leading the next generation of Spring Session MongoDB! To best enable this transition, the next generation of code will be hosted in a new GitHub repository and have new Maven coordinates, both available in November. Support for existing generations of Spring Session MongoDB will continue to be maintained by the Spring Session team as described by the Spring Support Policy

This Week in Spring - October 14th, 2025

Engineering | Josh Long | October 14, 2025 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in Boston and New York city and Bulgaria and Poland this week, but I'm still hyped about last week's amazing Devoxx Belgium event! There are a ton of videos to look at, and I'll include just some of them here.

So, without further ado, let's dive into it!

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all