There was a flurry of activity in the Spring ecosystem during the week of June 8th, 2026, highlighting point releases of: Spring Boot, Spring Security, Spring Session, Spring Integration, Spring Modulith, Spring AMQP and Spring Vault; and GA releases of Spring AI 2.0 and Spring Data 2026.0.0.<\/p>\n
Spring Boot<\/p>\n
The release<\/a> of Spring Boot<\/a> 4.1.0 delivers bug fixes, documentation improvements, dependency upgrades and new features such as: support for Spring gRPC<\/a>; the addition of a public constructor to the InvalidConfigurationPropertyValueException<\/a><\/strong> class that accepts a string to describe the cause of the exception; and a reduction in memory consumption upon repeated calls the toByteArray()<\/strong> method defined in the WritableJson<\/a><\/strong> interface. More details on this release may be found in the release notes<\/a> and this InfoQ news story<\/a>.<\/p>\n Spring Data<\/p>\n The release<\/a> of Spring Data<\/a> 2026.0.0 ships with new features such as: compatibility with Kotlin<\/a> 2.3.20 and Vavr<\/a> 0.11.0; new annotated Redis publish\/subscribe<\/a> message listeners; and type-safe property paths. Further details on this release may be found in the wiki<\/a> page.<\/p>\n Spring Security<\/p>\n The release<\/a> of Spring Security<\/a> 7.1.0 provides bug fixes, dependency upgrades and new features such as: a new InetAddressMatcher<\/a><\/strong> functional interface that may be used as an assignment target for a lambda expression or method reference; and a new anyOf()<\/strong> method, added to the AllRequiredFactorsAuthorizationManager<\/a><\/strong> class, that returns an instance of the AuthorizationManager<\/a><\/strong> interface to grant access to a user who satisfies one of several different combinations of authentication factors. More details on this release may be found in the release notes<\/a> and this what’s new<\/a> page.<\/p>\n Spring Session<\/p>\n The release<\/a> of Spring Session<\/a> 4.1.0 delivers bug fixes and notable dependency upgrades such as: Spring Boot 4.1.0; Spring Security 7.1.0; Spring Framework 7.0.8; Spring Data 2025.1.6; Project Reactor 2025.0.6; Jackson 3.1.4; and Testcontainers 2.0.5. Further details on this release may be found in the release notes<\/a>.<\/p>\n Spring Integration<\/p>\n The release<\/a> of Spring Integration<\/a> 7.1.0 ships with bug fixes, documentation improvements, dependency upgrades and new features such as: disable the allowCredentials<\/strong> element in the Spring Framework @CrossOrigin<\/a><\/strong> annotation in favor of the originPatterns<\/strong> element to align with Spring MVC<\/a>; and improvements in the constructors for the ExpressionEvaluatingMessageProcessor<\/a><\/strong> class that removes the exception handling in favor of the the Spring Framework Assert<\/a><\/strong> class. More details on this release may be found in the release notes<\/a> and this what’s new<\/a> page.<\/p>\n Spring HATEOAS<\/p>\n The release<\/a> of Spring HATEOAS<\/a> 3.1.0 provides bug fixes, dependency upgrades and new features such as: improved caching in the StringLinkRelation<\/a><\/strong> class such that the cache does not grow beyond 256 entries; and changes to the canWrite()<\/strong> method, defined in the TypeConstrainedJacksonJsonHttpMessageConverter<\/a><\/strong> class, that aligns with the same method name defined in the Spring Framework AbstractSmartHttpMessageConverter<\/a><\/strong> class.<\/p>\n This releases also addresses two CVEs:<\/p>\n
<\/p>\n
\n<\/ul>\n Further details on this release may be found in the release notes<\/a>.<\/p>\n Spring Modulith<\/p>\n The release<\/a> of Spring Modulith<\/a> 2.1.0 delivers bug fixes, dependency upgrades and new features such as: a new set of classes, like NamastackOutboxEventRecorder<\/a><\/strong>, to support event outbox engine with Namastack<\/a>; a new JobRunrEventExternalizer<\/a><\/strong> class to support event externalization with JobRunr<\/a>; and a new @ModuleSlicing<\/a><\/strong> annotation that allows for application module slicing in combination with the Spring Boot slice test annotations. More details on this release may be found in the release notes<\/a>.<\/p>\n Spring AI<\/p>\n The release<\/a> of Spring AI<\/a> 2.0.0 ships with bug fixes, documentation improvements, dependency upgrades and new features such as: updates in the Google GenAI models, defined in the GoogleGenAiChatModel.ChatModel<\/a><\/strong> enum class, that include deprecations of the GEMINI_2_0_FLASH<\/strong>, GEMINI_2_0_FLASH_LIGHT<\/strong> and GEMINI_3_PRO_PREVIEW<\/strong> enumerations in favor of a new GEMINI_3_1_PRO_PREVIEW<\/strong> enumeration; and improved null safety in the org.springframework.ai.image.observation<\/a><\/strong> package by replacing the deprecated methods defined in the Jackson Databind JsonNode<\/a><\/strong> abstract class. Further details on this release may be found in the release notes<\/a>.<\/p>\n Spring AMQP<\/p>\n The release<\/a> of Spring AMQP<\/a> 4.1.0 provides bug fixes, dependency upgrades and new features such as: compatibility with RabbitMQ<\/a> 4.3.0; a removal of the wildcard character from all Jackson message converters to “trust no one” by default; and a new spring-amqp-client<\/strong> module that supports interaction with the generic AMQP 1.0<\/a> protocol. More details on this release may be found in the release notes<\/a> and this what’s new<\/a> page.<\/p>\n Spring for Apache Kafka<\/p>\n The release<\/a> of Spring for Apache Kafka<\/a> 4.1.0 delivers bug fixes, documentation improvements, dependency upgrades and a new feature that adapts the setBackOffFunction()<\/strong>, defined in the FailedRecordProcessor<\/a><\/strong> class, to process messages in batches.<\/p>\n This release also addresses three CVEs:<\/p>\n
<\/p>\n
<\/p>\n
\n<\/ul>\n Further details on this release may be found in the release notes<\/a>.<\/p>\n Spring LDAP<\/p>\n The release<\/a> of Spring LDAP<\/a> 4.1.0 ships with many dependency upgrades and a new feature that deprecates methods, toEntry()<\/strong>, toObject()<\/strong>, toList()<\/strong> and toStream()<\/strong>, in favor of new methods, map()<\/strong>, single()<\/strong>, optional()<\/strong>, list()<\/strong> and stream()<\/strong>, added to the LdapClient<\/a><\/strong> interface.<\/p>\n This release also addresses CVE-2026-41720<\/a>, a vulnerability that allows an attacker, with a valid username, to gain authorization by providing an empty or null password due to an implementation of the DirContextAuthenticationStrategy<\/a><\/strong> interface that does not reject such passwords.<\/p>\n More details on this release may be found in the release notes<\/a> and this what’s new<\/a> page.<\/p>\n Spring Vault<\/p>\n The release<\/a> of Spring Vault<\/a> 4.1.0 provides bug fixes, documentation improvements, dependency upgrades and new features such as: new interfaces, VaultClient<\/a><\/strong> and ReactiveVaultClient<\/a><\/strong>, designed to provide an “intermediate abstraction layer enforcing relative path handling at its core, preventing unintended absolute path usage” when configured with an instance of the VaultEndpoint<\/a><\/strong> class; and a new ManagedSecret<\/a><\/strong> class to simplify consumption of managed secrets. Further details on this release may be found in the release notes<\/a> and this wiki<\/a> page.<\/p>\n Spring gRPC<\/p>\n The release<\/a> of Spring gRPC<\/a> 1.1.0 delivers bug fixes and notable changes such as: the ability to configure in-process channels by name within an application properties file; and the addition of annotation-based exception handling for gRPC services. More details on this release may be found in the release notes<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"There was a flurry of activity in the Spring ecosystem during the week of June 8th, 2026, highlighting…\n","protected":false},"author":2,"featured_media":537266,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[267],"tags":[181335,1708,1705,365,362,363,364,366,7266,18,117,119354,19,17,18297,200592,119348,181334,181333,18300,230906,18301],"class_list":["post-537265","post","type-post","status-publish","format-standard","has-post-thumbnail","category-arts-and-design","tag-amqp","tag-apache-kafka","tag-architecture-design","tag-arts","tag-arts-and-design","tag-artsanddesign","tag-artsdesign","tag-design","tag-development","tag-eire","tag-entertainment","tag-grpc","tag-ie","tag-ireland","tag-java","tag-ldap","tag-spring-ai","tag-spring-boot","tag-spring-data","tag-spring-integration","tag-spring-news-roundup-jun08-2026","tag-spring-security"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@ie\/116757505180071041","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/posts\/537265","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/comments?post=537265"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/posts\/537265\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/media\/537266"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/media?parent=537265"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/categories?post=537265"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/tags?post=537265"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/p>\n
<\/p>\n