On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Cloud Gateway 3.1.10, 4.0.12, 4.1.8, 4.2.3, 4.3.0 are available now which fix CVE-2025-41235. See the CVE report for breaking changes.

Spring Cloud Gateway 4.0.12 is a commercial-only release and is not available in Maven Central.

Please refer to the releases page for more detail on what is included in each release.

Hi, Spring fans! In this installment we talk to the legendary Victor Rentea. This episode was recorded live at Devoxx UK 2025.

On behalf of the community, I am delighted that after a half year's work we can announce Spring Modulith 1.4. The release is packed with new features, such as:

Core

• Refinements in the core ApplicationModule(s) abstractions and documentation generation (GH-1150, GH-1152)
• We introduced an SPI to detect NamedInterfaces programatically (GH-1009).
• We fixed a performance regression in JavaPackage the erroneously repeatedly recomputed all sub packages. (also fixed in 1.3.4 and 1.2.10, GH-1098)

Testing

• Integration tests using @ApplicationModuleTest can now consume bean instances of classes declared in test sources. (GH-202)
• The global PublishedEvents instance registered in an ApplicationContext will now be an AssertablePublishedEvents if AssertJ is on the classpath. (GH-1110)
…

Hi, Spring fans! Welcome to another installment of This Week in Spring! This time, I'm talking to you after an insane week behind me. Last week I flew from San Francisco to Stockholm, Sweden where I was the speaker for the JForum event, a monthly meetup. Spring drew the largest audience to JForum since before the pandemic! Then, it was off to beautiful Barcelona for the fantastic Spring I/O event, where I did a keynote with Dr Mark Pollack on Spring AI, then hosted a joint talk with Spring cofounders Rod Johnson and Juergen Hoeller. Then, I did a joint talk with GraalVM found and Oracle vice…

The emergence of Large Language Models (LLM) has propelled Generative AI and surfaced one of its key components to a broad audience: Embeddings.

Embeddings are a vector representation of data in a high-dimensional space capturing their semantic meaning. Vector representations allow for more efficient and effective search (Vector Search) of similar items. Vector search is typically used to build Retrieval-augmented generation (RAG) systems and so there is demand for vector databases.

While new vector databases are on the rise, existing database engines are gradually incorporating vector search…

Hi, Spring and Spring I/O fans! In this installment we have the privilege of chatting with friend of the community and legend Sergi Almar about the amazing Spring IO 2025, where this episode was published, and a lot more.

In the past couple of years we have seen heavy investment throughout the Java ecosystem to reduce application startup times. The main focus gravitates around Ahead-of-Time optimizations. May it be condensing code into a GraalVM native executable, capturing already optimized bytecode with Coordinated Restore at Checkpoint (CRaC), Class Data Sharing (CDS) or its more recent successor AOT cache (part of project Leyden). While barriers to entry vary between the different approaches, all of them move performance optimizations away from runtime into an earlier phase, such as build time or a separate…

On behalf of the team and everyone who contributed, I am pleased to announce the General Avalilability of Spring Integration 6.5.0 generation.

In addition, the 6.3.10 and 6.4.5 versions with bug fixes and dependency upgrades have been released.

Some notable changes in 6.5.0 are:

• The AbstractRecentFileListFilter - the FileListFilter to accept only files which are recent according to the provided age;
• The AbstractMessageChannel now emits a special MessageDispatchingException for the situation when message production is initiated too early;
• The PollerMetadata.sendTimeout option has been removed (deprecated before) since it is out of use;
• The Hazelcast CP-subsystem based components in the spring-integration-hazelcast module have been deprecated due to commercial support of the Hazelcast features (stating with 5.5.0) we relied on;
• The LockRequestHandlerAdvice…