Spring AI 1.1.2 Release Notes

🎯 Highlights

This patch release focuses on bug fixes, security improvements and dependency management. It includes a bug fix to make Spring AI 1.1.x still compatible with Kotlin 1.9.x, a security fix for the Milvus vector store addressing CVE-2024-7254, updates to MCP (Model Context Protocol) dependencies, and a new hook in the ToolCallAdvisor for enhanced tool calling workflows.

⭐ New Features

• Introduces a new hook method in ToolCallAdvisor that allows customization of the finalization loop in tool call workflows, providing better extensibility for advanced tool calling scenarios 05254e7

🪲 Bug Fixes

• Cleaned up duplicate dependency declaration for Azure Identity library, improving build consistency db7d44d

🔨 Dependency Upgrades

• Upgraded Model Context Protocol (MCP) JDK and MCP annotations from snapshot versions to stable releases, improving stability and compatibility 4cfe9fa

🔩 Build Updates

• Updated build configuration to require exact Java 21 version for the 1.1.x release branch, ensuring consistent build environment d563007

🔐 Security

• Overrode protobuf-java version in milvus-store dependency to address security vulnerability CVE-2024-7254 65b6c7d

🙏 Contributors

Thanks to all contributors who made this release possible:

• Christian Tzolov (@tzolov)
• Eric Bottard (@ericbottard)
• Ilayaperumal Gopinathan (@ilayaperumalg)
• Julien Dubois (@jdubois)
• Rory Preddy (@roryp)