From 6426c13c1d0138e544bd8762b09e46853687254a Mon Sep 17 00:00:00 2001 From: Adam Rauch Date: Mon, 27 Apr 2026 13:32:08 -0700 Subject: [PATCH 1/2] Upgrade to Spring AI 2.0.0-M5 --- build.gradle | 3 --- gradle.properties | 5 +---- 2 files changed, 1 insertion(+), 7 deletions(-) diff --git a/build.gradle b/build.gradle index a5224c25f8..43d3040ee6 100644 --- a/build.gradle +++ b/build.gradle @@ -352,9 +352,6 @@ allprojects { force "org.springframework:spring-messaging:${springVersion}" force "org.springframework:spring-webflux:${springVersion}" - // spring-ai dependency. Force to mitigate a CVE. - force "io.modelcontextprotocol.sdk:mcp:${modelContextProtocolVersion}" - // Force consistency between pipeline's ActiveMQ and cloud's jClouds dependencies force "javax.annotation:javax.annotation-api:${javaxAnnotationVersion}" diff --git a/gradle.properties b/gradle.properties index 4c59a7fa57..69e7554358 100644 --- a/gradle.properties +++ b/gradle.properties @@ -252,9 +252,6 @@ lombokVersion=1.18.42 luceneVersion=10.3.2 -# Spring-AI dependency that's showing a CVE -modelContextProtocolVersion=1.1.1 - mssqlJdbcVersion=13.2.1.jre11 objenesisVersion=1.0 @@ -297,7 +294,7 @@ snappyJavaVersion=1.1.10.8 springBootVersion=4.0.5 # This usually matches the Spring Framework version dictated by springBootVersion springVersion=7.0.6 -springAiVersion=2.0.0-M4 +springAiVersion=2.0.0-M5 sqliteJdbcVersion=3.51.1.0 From b813d8d5be9e939a66de6f00eafb0c9ce3dc7cb6 Mon Sep 17 00:00:00 2001 From: Adam Rauch Date: Mon, 27 Apr 2026 15:54:35 -0700 Subject: [PATCH 2/2] Bump Spring Framework and Spring Boot as well --- gradle.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle.properties b/gradle.properties index 69e7554358..badca1e35f 100644 --- a/gradle.properties +++ b/gradle.properties @@ -291,9 +291,9 @@ slf4jLog4jApiVersion=2.0.17 snappyJavaVersion=1.1.10.8 # Also, update apacheTomcatVersion above to match Spring Boot's Tomcat dependency version -springBootVersion=4.0.5 +springBootVersion=4.0.6 # This usually matches the Spring Framework version dictated by springBootVersion -springVersion=7.0.6 +springVersion=7.0.7 springAiVersion=2.0.0-M5 sqliteJdbcVersion=3.51.1.0