Messaging

Spring for Apache Pulsar1.1.18

The Spring for Apache Pulsar (spring-pulsar) project applies core Spring concepts to the development of Pulssar-based messaging solutions.

Changelog

What's Changed

🐞 Bug Fixes

  • Fix CVE-2026-41732 - Default header mapper deserializes attacker-chosen classes (GHSA-wr37-jp45-fx44).

🔨 Dependency Upgrades

  • Bump fast-xml-parser from 4.5.2 to 4.5.5
  • Bump fast-xml-parser from 4.5.5 to 5.7.0
  • Bump org.springframework:spring-framework-bom from 6.1.27 to 6.1.28
  • Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.12.1
  • Bump com.google.protobuf:protobuf-java from 3.25.8 to 3.25.9
  • Bump org.projectlombok:lombok from 1.18.42 to 1.18.46
  • Bump spring-boot from 3.3.13 to 3.3.19

Full Changelog: v1.1.17...v1.1.18

Get Started with Tanzu Spring today