⭐ New Features Align DispatcherServlet bean detection logs #37296 Extract bean property path support into PropertyPath #37275 Expose matched PathPattern as MVC request attribute #37272 Add a configurable limit for maximum nesting depth in property paths #37252 Enforce "data: " (with space) prefix for outgoing SSE data payloads #37242 Parse RFC 9651-like date headers #37224 Polish ScheduledAnnotati…
⚠️ Attention Required In Spring Framework 7.0.9, ForwardedHeaderFilter (Spring MVC) and ForwardedHeaderTransformer (WebFlux) each provide a boolean constructor argument whether to use the standard "Forwarded" header or the "X-Forwarded" alternative headers. A separate property turns on and off use of "X-Forwarded-Prefix". While the default constructor preserves the existing behavior, we recommend…
⚠️ Attention Required starting in Spring Framework 7.1, ForwardedHeaderFilter (Spring MVC) and ForwardedHeaderTransformer (WebFlux) each require a boolean argument whether to use the standard "Forwarded" header or the "X-Forwarded" alternative headers. A separate property enables use of "X-Forwarded-Prefix" if needed. The default constructor with the existing behaviour of checking both types of he…
⚠️ Security Fixes This maintenance release fixes a high number of CVEs. You can learn more about this in the "Spring and Security In The Times Of AI" blog post. Here is the full list of 16 CVEs: CVE-2026-41838 "Spring Framework Predictable Session ID in WebSocket Module" CVE-2026-41839 "Spring Framework Escalation via Session Fixation in WebFlux" CVE-2026-41840 "Spring Framework Denial of Service…
⚠️ Security Fixes This maintenance release fixes a high number of CVEs. You can learn more about this in the "Spring and Security In The Times Of AI" blog post. Here is the full list of 16 CVEs: CVE-2026-41838 "Spring Framework Predictable Session ID in WebSocket Module" CVE-2026-41839 "Spring Framework Escalation via Session Fixation in WebFlux" CVE-2026-41840 "Spring Framework Denial of Service…
⭐ New Features Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621 Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597 Deprecate methodIdentification() in CacheAspectSupport for removal #36575 Add MockRestServiceServer#createServer variant for RestClient #36572 Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566 Improve…
⭐ New Features Improve SpringValidatorAdapter and MethodValidationAdapter performance #36624 Add missing @Deprecated(forRemoval = true) for deleted in 7.0 #36591 Deprecate methodIdentification() in CacheAspectSupport for removal #36576 Improve error handling in multipart codecs #36564 LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36529 MySQL Er…
⚠️ Attention Required Log warning when default context configuration is ignored within test class hierarchies #36390 Ignore flush calls on ServletServerHttpResponse body outputstream #36385 ⭐ New Features Leverage ResourceHandlerUtils in ScriptTemplateView #36458 Restore ScriptTemplateViewTests #36456 Fix log message in ConfigurationClassBeanDefinitionReader #36453 DefaultResponseErrorHandler - se…
⭐ New Features Leverage ResourceHandlerUtils in ScriptTemplateView #36459 Restore ScriptTemplateViewTests #36457 Fix log message in ConfigurationClassBeanDefinitionReader #36454 Resolve context initializers only once in AbstractTestContextBootstrapper #36431 Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412 Optimize MediaType(MediaType, Ch…
⚠️ Attention Required Optimize request and response header handling in Spring MVC #36334 ⭐ New Features Consistent adaptation of HTTP headers on Servlet responses #36343 Copy methodAnnotations in MethodParameter copy constructor #36342 Improve performance of validation groups determination in WebFlux #36336 Reuse AnnotatedMethod annotation cache in derived instances #36322 Optimize the addition of…
⭐ New Features Cache method annotations in MethodParameter and AnnotatedMethod #36307 Consistently support @Lazy as a meta-annotation at arbitrary depths #36306 Consistently support @Validated as a meta-annotation at arbitrary depths #36305 Let developers disable default registrations in HttpMessageConverters #36303 Log which HandlerInterceptor threw the exception #36281 Improve performance of has…
⭐ New Features Improve performance of hashcode calculations for request mappings #36297 Improve performance of HandlerMethod bean lookup #36296 Improve performance of validation groups determination #36295 Improve performance of single pattern request mappings #36294 Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232 Consistently close streams through try-with-reso…
⚠️ Attention Required Introduce Spring property to disable context pausing for tests #36117 Avoid unnecessary pausing of application contexts in the TestContext framework #36044 ⭐ New Features DisconnectedClientHelper should detect presence of RestClientException and WebClientException separately #36141 Deprecate PagedListHolder and PropertyComparator for removal #36139 Add DataAccessException and…