Catalog / Spring Boot

Spring Boot 3 to 4

Every Spring Boot 4.x release the archive holds, 11 of them, starting at 4.0.0 and running to 4.0.8. The publisher writes these one at a time and its documentation describes the version you are on, so the run between two majors is not laid out anywhere as a list.

Releases
1111 carry notes
Opened
20 Nov 202510 months ago
Span
9 monthsto 21 Aug 2026
Breaking
0none tagged

The turn

The last 3.x release the archive holds before the turn is 3.5.8, on 20 Nov 2025. 4.0.0 followed the same day. 3.x did not stop there. 9 more 3.x releases shipped after 4.0.0 opened, the last of them on 25 Jun 2026, so both lines were being maintained at once.

Every 4.x release

All Spring Boot releases
4.0.8securityfixedchanged

:lady_beetle: Bug Fixes Kafka consumer-specific security protocol is not taken into account #51365 Temporary file is not deleted when ExportedImageTar construction fails #51117 spring-boot-h2-console pulls servlet-api as transitive dependen

4.1.1securityaddedfixed

:warning: Attention Required Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRP

4.1.0securityaddedfixed

Full release notes for Spring Boot 4.1 are available on the wiki. :star: New Features Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211 Reduce memory consumption when repeatedly calling Writabl

4.0.7securityaddedfixed

:lady_beetle: Bug Fixes MailSender auto-configuration does not enable hostname verification #50746 Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744 NullPointerException in reactor-netty Sn

4.0.6securityfixedchanged

:lady_beetle: Bug Fixes Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #50188 Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #50187 Appli

4.0.5addedfixed

:lady_beetle: Bug Fixes Test starter for Spring Integration does not include Spring Integration test module #49784 Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49

4.0.4securityfixedchanged

:warning: Attention Required OpenTelemetry's ZipkinSpanExporter has been deprecated and its support will be removed in Spring Boot 4.2. #49453 Jackson 2 has been upgraded to 2.21.1 in response to the Jackson team ending support for Jackson

4.0.3securityaddedfixed

:star: New Features Add TWENTY_SIX to JavaVersion enum #49193 :lady_beetle: Bug Fixes Jackson properties may not be applied correctly to RestClients #49223 ClassNotFoundException when using Actuator without spring-boot-health #49196 Using t

4.0.2securityaddedfixed

:warning: Noteworthy Changes The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declar

4.0.1securityaddedfixed

:warning: Noteworthy Changes Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json an

4.0.0securityaddedfixed

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5. :star: New Features Change tomcat and jetty runtime modules to starters #48175 Rename spring-boot-ko