Sourced from org.springframework.cloud:spring-cloud-dependencies's releases.

2025.0.0

Breaking Changes

Spring Cloud Gateway

• New Module and Starter names have been created, and the old names are deprecated. The new and deprecated artifacts are listed in the table below #3645. These new names clarify the two styles of gateway (server or proxy exchange) as well as the two web stacks from Spring Framework (Web MCV and WebFlux). Use of the deprecated artifacts will add a warning message in the logs.

Deprecated Artifact	New Artifact
spring-cloud-gateway-server	spring-cloud-gateway-server-webflux
spring-cloud-gateway-server-mvc	spring-cloud-gateway-server-webmvc
spring-cloud-starter-gateway-server	spring-cloud-starter-gateway-server-webflux
spring-cloud-starter-gateway-server-mvc	spring-cloud-starter-gateway-server-webmvc
spring-cloud-gateway-mvc	spring-cloud-gateway-proxyexchange-webmvc
spring-cloud-gateway-webflux	spring-cloud-gateway-proxyexchange-webflux

• Migration to new property prefixes to match the new module names: #3361, #3362, #3363, #3647. Use spring-boot-properties-migrator to support the deprecated prefixes. The table below lists the module or starter, its old prefix, and the new replacement prefix.

Module/Starter	Deprecated prefix	New prefix
spring-cloud-starter-gateway-server-webflux	spring.cloud.gateway.*	spring.cloud.gateway.server.webflux.*
spring-cloud-starter-gateway-server-webmvc	spring.cloud.gateway.mvc.*	spring.cloud.gateway.server.webmvc.*
spring-cloud-gateway-proxyexchange-webflux	spring.cloud.gateway.proxy.*	spring.cloud.gateway.proxy-exchange.webflux.*
spring-cloud-gateway-proxyexchange-webmvc	spring.cloud.gateway.proxy.*	spring.cloud.gateway.proxy-exchange.webmvc.*

• The X-Forwarded-* and Forwarded header functionality will be disabled by default with the fix versions. If you require X-Forwarded-* or Forwarded header functionality, set spring.cloud.gateway.server.webflux.trusted-proxies to a Java Regular Expression that specifies the proxies whose headers you trust. If you are using Spring Cloud Gateway Server MVC (only available from 4.1.x onward) set spring.cloud.gateway.mvc.trusted-proxies. For example for Spring Cloud Gateway Server:

spring.cloud.gateway.server.webflux.trusted-proxies=10\.0\.0\..*

For example, for Spring Cloud Gateway Server WebMVC:

spring.cloud.gateway.server.webmvc.trusted-proxies=10\.0\.0\..*

Spring Cloud Kubernetes

• Upgrade To Fabric8 7.3.1 from 6.13.x. This is necessary due to the use of Jackson 2.19.x in Spring Boot 3.5.0. There is precedence in upgrading a major dependency in a minor with Spring Data and database drivers. #1923.

2025-05-29

• Spring Cloud Starter Build 2025.0.0 (issues)
• Spring Cloud Vault 4.3.0 (issues)
• Spring Cloud Bus 4.3.0 (issues)
• Spring Cloud Task 3.3.0 (issues)
• Spring Cloud Zookeeper 4.3.0 (issues)
• Spring Cloud Kubernetes 3.3.0 (issues)

... (truncated)

• 1fb147c Update SNAPSHOT to 2025.0.0
• 22ac7d8 Bumping dependency versions after release
• 3d46501 Bumping versions to 2025.0.1-SNAPSHOT after release
• bf966cd Going back to snapshots
• fd4fc1f Update SNAPSHOT to 2025.0.0
• 68b15eb Bumping versions
• 4d19a8e Updates boot version to 3.5.0
• 943bf02 Bumping versions
• 3087b08 Updates boot version to 3.5.0-SNAPSHOT
• eb88060 Going back to snapshots
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)