Spring AMQP 4.2.0-M1 Available Note
Spring

Spring AMQP 4.2.0-M1 Available

Spring AMQP 4.2's first milestone is now available on Maven Central. This release also includes bug and dependency fixes in versions 4.1.1 and 4.0.5. Several critical CVEs were addressed, including vulnerabilities related to message decompression, TLS hostname verification, remote JVM termination via deserialization, password disclosure, and link credit replenishment. Key changes in 4.2.0-M1 involve deprecating RestTemplateNodeLocator in favor of RestClientNodeLocator. The release introduces routing AmqpConnectionFactory support for enhanced flexibility. It now allows per-listener overrides for batch size and receive timeout properties in @RabbitListener. Hostname verification for SSL connections is now always enabled and the related enableHostnameVerification option has been deprecated. Further details on these changes can be found in the "What's New in 4.2" document. The team is actively planning future milestones and welcomes any feedback or suggestions.