Spring Ecosystem Releases First Milestones for Boot 4.2.0, Framework 7.1.0, and Other Projects

Spring Ecosystem Milestone Releases

After a ten-week period without major updates, the Spring ecosystem saw a series of first milestone releases during the week of August 17, 2026. Key projects receiving updates include Spring Boot, Spring Framework, Spring Data, Spring Security, Spring Integration, Spring HATEOAS, Spring Modulith, Spring Batch, Spring AMQP, and Spring for Apache Kafka. These releases bring new functionalities, bug fixes, and dependency upgrades to the respective components.

Spring Boot and Framework Updates

Spring Boot 4.2.0-M1 introduces support for the AMQP 1.0 specification, including features from RabbitMQ, and utilizes Eclipse Jetty's GracefulHandler for coordinating graceful shutdowns. Spring Framework 7.1.0-M1 adds a new forParameter() method to the ResolvableType class and supports custom parameter names in the ParameterResolutionDelegate class. Both releases also include bug fixes and dependency upgrades.

Spring Data and Security Enhancements

Spring Data 2026.1.0-M1 features a new RedisJsonTemplate class, providing initial support for Redis JSON. This release also includes upgrades to sub-projects such as Spring Data Commons 4.2.0-M1, Spring Data MongoDB 5.2.0-M1, Spring Data Elasticsearch 6.2.0-M1, and Spring Data Neo4j 8.2.0-M1. Spring Security 7.2.0-M1 adds implicit detection of Spring Framework's CorsConfigurationSource and PreFlightRequestHandler interfaces for consistency with the <cors> XML namespace and includes a preauthentication check in the OneTimeTokenAuthenticationProvider class.

Security Vulnerabilities Addressed

Over 90 CVEs were addressed across various Spring projects in these releases. Detailed information regarding these security advisories is available on the Spring Security Advisories page. These updates are important for maintaining the security posture of applications built with the Spring framework.