Messaging
Spring for Apache Pulsar1.1.18
The Spring for Apache Pulsar (spring-pulsar) project applies core Spring concepts to the development of Pulssar-based messaging solutions.
Changelog
What's Changed
🐞 Bug Fixes
- Fix CVE-2026-41732 - Default header mapper deserializes attacker-chosen classes (GHSA-wr37-jp45-fx44).
🔨 Dependency Upgrades
- Bump fast-xml-parser from 4.5.2 to 4.5.5
- Bump fast-xml-parser from 4.5.5 to 5.7.0
- Bump org.springframework:spring-framework-bom from 6.1.27 to 6.1.28
- Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.12.1
- Bump com.google.protobuf:protobuf-java from 3.25.8 to 3.25.9
- Bump org.projectlombok:lombok from 1.18.42 to 1.18.46
- Bump spring-boot from 3.3.13 to 3.3.19
Full Changelog: v1.1.17...v1.1.18
Get Started with Tanzu Spring today