<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy" -->

---
title: Spring milestone releases for week of September 21,...
description: Multiple Spring projects released milestone builds during the week of September 21, 2026. Spring Boot 4.2.0.M2 adds a config property to switch observability...
canonical: https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Spring milestone releases for week of September 21, 2026: Boot, Framework, Data, Security, and more | daily.dev
og:description: Multiple Spring projects released milestone builds during the week of September 21, 2026. Spring Boot 4.2.0.M2 adds a config property to switch observability...
og:url: https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy
og:image: https://api.daily.dev/og/posts/7HHNDYmMy.png
og:image:alt: Spring milestone releases for week of September 21, 2026: Boot, Framework, Data, Security, and more
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Spring milestone releases for week of September 21, 2026: Boot, Framework, Data, Security, and more

**[Collections](https://daily.dev/sources/collections)** · 2 min read · 3 upvotes · 0 comments

## Summary

Multiple Spring projects released milestone builds during the week of September 21, 2026. Spring Boot 4.2.0.M2 adds a config property to switch observability conventions between Micrometer and OpenTelemetry. Spring Data 2026.1.0.M2 gains initial Hibernate ORM 8.0.0.Beta1 compatibility and a refactored Redis JSON API. First milestones include Spring Cloud 2026.0.0.M1 (Paddington), with Spring Cloud Gateway now able to deny requests from untrusted proxies, and Spring AI 2.1.0.M1, which introduces a MessagePart interface and an OpenAI Responses API integration.

## Content

A lot of Spring projects shipped milestone builds this week, and @starbuxman flagged the roundup as a busy one, with release practice updates alongside the new builds. (The Spring team's own "This Week in Spring" post for September 22nd, 2026 is worth a look too, though the version I could get was little more than a cookie consent notice, so I can't tell you what's in it.)

## Second milestones

These projects each reached their second milestone:

- Spring Boot 4.2.0
- Spring Framework 7.1.0
- Spring Data 2026.1.0
- Spring Security 7.2.0
- Spring Integration 7.2.0
- Spring Batch 6.1.0
- Spring AMQP 4.2.0
- Spring for Apache Kafka 4.2.0

## First milestones

These projects got their first milestone:

- Spring Cloud 2026.0.0 (Paddington)
- Spring for GraphQL 2.1.0
- Spring AI 2.1.0
- Spring LDAP 4.2.0
- Spring Web Services 5.1.0

## What stands out

**Spring Boot 4.2.0 M2** adds a configuration property that switches observability conventions between Micrometer and OpenTelemetry. If you've been waiting to see how Boot handles the two side by side, this is the first concrete answer.

**Spring Data 2026.1.0 M2** has initial compatibility with Hibernate ORM 8.0.0.Beta1, which is early enough that I'd treat it as a preview rather than something to build on. It also includes a refactored Redis JSON API.

**Spring Cloud Gateway** can now deny requests from untrusted proxies, a small change that matters if your gateway sits behind other proxies.

**Spring AI 2.1.0 M1** introduces a MessagePart interface for representing the content of model messages, and adds an integration with the OpenAI Responses API.

All of these are milestones, not GA releases, so expect rough edges and further changes before the final builds.

## Questions this post answers

### What does the observability config property in Spring Boot 4.2.0.M2 do?

Spring Boot 4.2.0.M2 adds a configuration property that lets you switch observability conventions between Micrometer and OpenTelemetry directly at the configuration level, instead of requiring code changes. This is useful for teams running mixed telemetry setups who need to align metric and trace naming conventions with either standard without rewriting instrumentation code.

_Teams standardizing telemetry conventions can follow milestone changes like this via daily.dev before upgrading._

### What new capability does Spring Cloud Gateway get in Spring Cloud 2026.0.0.M1?

Spring Cloud Gateway in Spring Cloud 2026.0.0.M1 (codenamed Paddington) gains the ability to deny requests from untrusted proxies. This gives gateway operators a built-in mechanism to reject traffic that arrives through proxies not explicitly trusted, tightening request validation at the edge of microservice architectures.

_Developers hardening gateway configurations can track Spring Cloud milestone notes like this on daily.dev._

### What is the MessagePart interface introduced in Spring AI 2.1.0.M1?

MessagePart is a new interface in Spring AI 2.1.0.M1 for representing model message content, part of an effort toward a cleaner abstraction for multimodal content as model APIs evolve. The same milestone also adds an OpenAI Responses API integration, expanding how Spring AI applications can interact with OpenAI's newer API surface.

_Developers building multimodal AI integrations can follow Spring AI's evolving abstractions on daily.dev._

## Similar posts on daily.dev

- [Spring News Roundup: Third Milestone Releases of Boot, Security, Integration, AI and AMQP](https://daily.dev/posts/spring-news-roundup-third-milestone-releases-of-boot-security-integration-ai-and-amqp-q85vfl82s) · InfoQ · 0 upvotes · 0 comments
- [Spring News Roundup: Point Releases of Boot, Security, Integration, Modulith and Spring AI 2.0](https://daily.dev/posts/spring-news-roundup-point-releases-of-boot-security-integration-modulith-and-spring-ai-2-0-bgkizfvpk) · InfoQ · 2 upvotes · 0 comments

---

Tags: [#java](https://daily.dev/tags/java), [#spring](https://daily.dev/tags/spring), [#spring-boot](https://daily.dev/tags/spring-boot), [#spring-security](https://daily.dev/tags/spring-security), [#spring-ai](https://daily.dev/tags/spring-ai)

[View this post on daily.dev](https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Spring milestone releases for week of September 21, 2026: Boot, Framework, Data, Security, and more","url":"https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy"},"datePublished":"2026-09-29T12:05:00.596Z","dateModified":"2026-09-29T21:18:21.683Z","description":"Multiple Spring projects released milestone builds during the week of September 21, 2026. Spring Boot 4.2.0.M2 adds a config property to switch observability...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e3bf0402850f2ca9a5e80a17cb0184bb?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e3bf0402850f2ca9a5e80a17cb0184bb?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"java,spring,spring-boot,spring-security,spring-ai","timeRequired":"PT2M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Spring milestone releases for week of September 21, 2026: Boot, Framework, Data, Security, and more"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/spring-milestone-releases-for-week-of-september-21-2026-boot-framework-data-security-and-more-7hhndymmy#faq","mainEntity":[{"@type":"Question","name":"What does the observability config property in Spring Boot 4.2.0.M2 do?","acceptedAnswer":{"@type":"Answer","text":"Spring Boot 4.2.0.M2 adds a configuration property that lets you switch observability conventions between Micrometer and OpenTelemetry directly at the configuration level, instead of requiring code changes. This is useful for teams running mixed telemetry setups who need to align metric and trace naming conventions with either standard without rewriting instrumentation code. Teams standardizing telemetry conventions can follow milestone changes like this via daily.dev before upgrading."}},{"@type":"Question","name":"What new capability does Spring Cloud Gateway get in Spring Cloud 2026.0.0.M1?","acceptedAnswer":{"@type":"Answer","text":"Spring Cloud Gateway in Spring Cloud 2026.0.0.M1 (codenamed Paddington) gains the ability to deny requests from untrusted proxies. This gives gateway operators a built-in mechanism to reject traffic that arrives through proxies not explicitly trusted, tightening request validation at the edge of microservice architectures. Developers hardening gateway configurations can track Spring Cloud milestone notes like this on daily.dev."}},{"@type":"Question","name":"What is the MessagePart interface introduced in Spring AI 2.1.0.M1?","acceptedAnswer":{"@type":"Answer","text":"MessagePart is a new interface in Spring AI 2.1.0.M1 for representing model message content, part of an effort toward a cleaner abstraction for multimodal content as model APIs evolve. The same milestone also adds an OpenAI Responses API integration, expanding how Spring AI applications can interact with OpenAI's newer API surface. Developers building multimodal AI integrations can follow Spring AI's evolving abstractions on daily.dev."}}]}
```

