Spring Boot changelog

:hammer: Dependency Upgrades Upgrade to Spring AMQP 3.2.12 #50818 Upgrade to Spring Data Bom 2025.0.13 #50819 Upgrade to Spring Integration 6.5.10 #50820

:lady_beetle: Bug Fixes Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743 MailSender auto-configuration does not enable hostname verification #50742 SSL should not be enabled when a SSL bun

:lady_beetle: Bug Fixes ApplicationPidFileWriter does not handle symlinks correctly #50173 RandomValuePropertySource is not suitable for secrets #50172 Cassandra auto-configuration misconfigures CqlSessionBuilder #50171 ApplicationTemp does

:warning: Attention Required Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365 :lady_beetle: Bug Fixes WebSocket messaging's task executors are only auto-configured and

:lady_beetle: Bug Fixes EndpointRequest request matcher for health groups is too complex #49648 "/cloudfoundryapplication" web path is not limited to Actuator #49645 RSocket exposes duplicate endpoint for websocket setups #49592 Fix Endpoin

:lady_beetle: Bug Fixes Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #49039 server.jetty.threads.max is ignored when using virtual threads #48982 Docker credential helpers with fi

:lady_beetle: Bug Fixes Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48836 When a bean condition references a type that is not present, it appears as ? in the condition evaluation repo

:lady_beetle: Bug Fixes RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48486 Profiles retained during AOT processing are not configured in a native image #48475 NullPointerException i

:lady_beetle: Bug Fixes RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48484 NullPointerException in UndertowWebServer.destroy() when using @DirtiesContext and Citrus Spring Boot Simu

:warning: Noteworthy changes This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change. :lady_be

:warning: Noteworthy changes This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change. :lady_be

:star: New Features Add TWENTY_FIVE to JavaVersion enum #47609 :lady_beetle: Bug Fixes Signed jar verification fails when nested in an uber war running on an Oracle JVM #47771 In an uber war, value of the Sbom-Location manifest attribute do

:lady_beetle: Bug Fixes In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47735 Homebrew formula for the CLI should use libexec #47696 When virtual threads are enabled, embedded Jetty d

:lady_beetle: Bug Fixes Quoted -D arguments break system property resolution on Linux with Spring AOT #47166 Groovy Templates fails with an NPE when rendering an auto new line #47139 available() does not behave correctly when reading stored

:lady_beetle: Bug Fixes available() does not behave correctly when reading stored entries from a NestedJarFile #47056 Flyway Ignore Migration Patterns setting can't be set to an empty string #46984 spring-boot-docker-compose doesn't create

:lady_beetle: Bug Fixes Hazelcast health indicator reports the wrong status when Hazelcast has shut down due to an out-of-memory error #46909 Performance critical tracing code has high overhead due to the use of the Stream API #46844 Spring

:lady_beetle: Bug Fixes Hazelcast health indicator reports the wrong status when Hazelcast has shut down due to an out-of-memory error #46877 Performance critical tracing code has high overhead due to the use of the Stream API #46838 Spring

:lady_beetle: Bug Fixes LambdaSafe.withFilter is not public #46474 Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402 Runtime dependencies are missing from aotCompileClass

:lady_beetle: Bug Fixes LambdaSafe.withFilter is not public #46472 Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46401 Runtime dependencies are missing from aotCompileClass

:lady_beetle: Bug Fixes Binder context does not restore previous source causing missing data on Spring Boot 3.5 or above #46040

:lady_beetle: Bug Fixes IllegalArgumentException: 'name' must not be null thrown when property source filtering applied twice #46032

:warning: Noteworthy Changes This release upgrades to Tomcat 10.1.42 which has introduced limits for part count and header size in multipart/form-data requests. These limits can be customized using server.tomcat.max-part-count and server.to

:warning: Noteworthy Changes This release upgrades to Tomcat 10.1.42 which has introduced limits for part count and header size in multipart/form-data requests. These limits can be customized using server.tomcat.max-part-count and server.to

:warning: Noteworthy Changes This release upgrades to Tomcat 10.1.42 which has introduced limits for part count and header size in multipart/form-data requests. These limits can be customized using server.tomcat.max-part-count and server.to

Full release notes for Spring Boot 3.5 are available on the wiki. :star: New Features Make heapdump endpoint restricted by default #45624 Remove SSL status tag from metrics #45602 Remove 'spring.http.client' deprecation and change 'spring.h

:lady_beetle: Bug Fixes Micrometer "enable" annotations property does not cover observed aspect #45616 SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45548 IllegalStateException when extracting using

:lady_beetle: Bug Fixes Micrometer "enable" annotations property does not cover observed aspect #45601 SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45387 IllegalStateException when extracting using

:lady_beetle: Bug Fixes Spring Boot with native image container image build fails on podman due to directory permissions #45256 Neo4jReactiveDataAutoConfiguration assumes that certain beans are available #45235 Wrong jOOQ exception translat

:lady_beetle: Bug Fixes Spring Boot with native image container image build fails on podman due to directory permissions #45233 MessageSourceMessageInterpolator does not replace a parameter when the message matches its code #45212 Integrati

❗ Noteworthy Changes Tomcat APR support is now disabled by default if you are using Java 24 or higher. This change has been made to prevent JDK from issuing warnings. Please see the updated release notes for details. :lady_beetle: Bug Fixes

:lady_beetle: Bug Fixes Docker API error message is missing in some cases #44628 When loading configuration from a Resource, Log4J2LoggingSystem may not close the InputStream #44467 DefaultJmsListenerContainerFactoryConfigurer#setObservatio

:warning: Noteworthy Due to the upgrade to Prometheus Client 1.3.6, dependency management for Guava is no longer provided. If you are affected by this change, configure your build with a version of Guava that meets your application's needs.

:lady_beetle: Bug Fixes Reactive Jetty web server does not fail fast when configured to use a server name bundle which Jetty does not support #44316 When web server application context refresh fails, the original failure is lost if stopping

:lady_beetle: Bug Fixes Property metadata for "logging.structured.json.customizer" has incorrect type #43916 GraylogExtendedLogFormatProperties throws NullPointerException when only 'logging.structured.gelf.host' is specified #43863 Structu

:lady_beetle: Bug Fixes POSTGRESQL_USERNAME and POSTGRESQL_DATABASE are ignored when using the Bitnami PostgreSQL image with Docker Compose #43787 docker compose ps now fails due to unknown --orphans flag with 2.23 or earlier #43710 Build i

:lady_beetle: Bug Fixes KafkaProperties fail to build SSL properties when the bundle name is an empty string #43563 Diagnostics are poor when property resolution throws a ConversionFailedException #43559 SpringApplicationShutdownHandlers do

:lady_beetle: Bug Fixes KafkaProperties fail to build SSL properties when the bundle name is an empty string #43561 With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used #43494 Kafka dependency m

:star: New Features Add withDefaultRequestConfigCustomizer method to HttpComponentsClientHttpRequestFactoryBuilder #43139 Fail JsonWriter if duplicate names are detected #43041 Add JsonObjectDeserializer.nullSafeValue method that accepts a

:warning: Noteworthy This release upgrades to OpenTelemetry 1.38.0, see this issue comment for more details. :lady_beetle: Bug Fixes Spring Boot 3.3.x dependencies do not converge for Micrometer Tracing and OpenTelemetry #43200 Cannot packa

:lady_beetle: Bug Fixes Cannot package OCI image when 'docker.io/paketobuildpacks/new-relic' is provided as a buildpack #43126 WebServerPortFileWriter fails when using a portfile without extension #43115 SslOptions.isSpecified() only return

:lady_beetle: Bug Fixes Running mvn spring-boot:run with classpaths that exceeds Windows' length limits leaves temporary files #42841 Report produced by ConditionReportApplicationContextFailureProcessor is always empty in a failed test #427

:lady_beetle: Bug Fixes Case-insensitive comparisons may be adversely affected by the user's locale #42719 DataSourceProperties#driverClassIsLoadable should not print a stacktrace to the error stream when it fails #42681 Auto-configuration

:lady_beetle: Bug Fixes management.health.db.ignore-routing-datasources=true has no effect when an AbstractRoutingDataSource has been wrapped #42322 Missing details in OAuth2ClientProperties validation error message #42279 FileNotFoundExcep

:lady_beetle: Bug Fixes management.health.db.ignore-routing-datasources=true has no effect when an AbstractRoutingDataSource has been wrapped #42313 Missing details in OAuth2ClientProperties validation error message #42278 FileNotFoundExcep

:star: New Features Add TWENTY_THREE to JavaVersion enum #41716 :lady_beetle: Bug Fixes Extending DefaultErrorAttributes and overriding getErrorAttributes() gets called twice #41995 When using WebFlux, server.error.include-binding-errors=AL

:star: New Features Add TWENTY_THREE to JavaVersion enum #41710 :lady_beetle: Bug Fixes When using WebFlux, server.error.include-binding-errors=ALWAYS no longer has an effect when the BindingResult exception is the cause of a ResponseStatus

:lady_beetle: Bug Fixes No configuration property for defaultTimeout setting that was introduced in Spring Integration 6.2 #41521 NPE during auto-configuration in OnClassCondition.resolveOutcomesThreaded because firstHalf is null #41504 Spr

:lady_beetle: Bug Fixes NPE during auto-configuration in OnClassCondition.resolveOutcomesThreaded because firstHalf is null #41492 No configuration property for defaultTimeout setting that was introduced in Spring Integration 6.2 #41477 NoS

:lady_beetle: Bug Fixes SQL Server JDBC URL is malformed after adding org.springframework.boot.jdbc.parameters label #41169 Git instant properties cannot be coerced following git-commit-id Maven plugin upgrade #41152 Excluding status code f