Spring AI 1.1.5 Release Notes

🎯 Highlights

This release includes 9 bug fixes, 3 documentation improvements, 11 other improvements.

The Pixtral 12B model has been removed and Pixtral Large is deprecated. Update your model configuration to use the currently recommended Pixtral models to avoid issues in future releases. 447d2a4

The Pixtral 12B model has been removed and the Pixtral Large model is now deprecated. Integration tests have been updated to use the recommended replacement models. Users relying on these models should migrate to the recommended alternatives. 447d2a4

Fixed the CosmosDB vector store's doDelete method to properly parameterize queries, preventing potential SQL injection vulnerabilities and improving correctness. 6039e57
Fixed an issue where conversationId was not correctly applied in the VectorStoreChatMemoryAdvisor filter, which could cause incorrect memory retrieval across conversations. 3cccfdf
Corrected key handling in the vector store filter expression converter to ensure filter expressions are properly evaluated. 01386e2
Resolved test non-determinism in the BedrockConverse streaming token usage tests, improving test reliability. 4747a3c
Corrected the test class naming to properly apply the integration test suffix, ensuring proper test categorization and execution. #5853
Corrected string parsing logic for the toolChoice field in OpenAiSdkChatModel to ensure proper handling of tool choice configurations. aeb33b0 via #5735
Fixed an issue where the extra_body parameter was incorrectly included in outgoing OpenAI API requests, which could cause unexpected behavior. 4c0120c
Resolved issues with Javadoc generation and configuration to ensure API documentation is correctly produced. 0a71804
Corrected the test bypass condition so integration tests are properly skipped when required API keys are not configured in the environment. bc26dc1

Updated the README to include a note about CPU architecture requirements or compatibility information. a21e988
Added documentation explaining how MCP servers can re-publish tools from MCP clients, clarifying the tool propagation model in multi-server setups. #5778
Improved documentation to clarify the intended usage and behavior of the extra_body parameter in OpenAI API requests. 3d4d75b

Updated the Spring Boot dependency to version 3.5.14, incorporating the latest bug fixes and improvements from the Spring Boot team. eb4c9a5
Updated the Spring Boot dependency to version 3.5.13 as an intermediate upgrade. 9b902f8
Updated document parsing dependencies: Apache Tika upgraded to 3.3.0, jsoup to 1.22.1, and Apache PDFBox to 3.0.7 for improved document processing capabilities and bug fixes. f25fc52

Updated GitHub Actions workflow dependencies to their latest versions to improve CI/CD reliability and security. 9b70b38
Changed the PR check workflow to use mvn package instead of mvn test for more efficient pull request validation. 7d2e455
Integration tests are now skipped in the CI pipeline to improve build performance, and the release notes generation workflow has been removed. #5688
The project has been bumped to the next development version 1.1.5-SNAPSHOT following the release. 400dc42

Hardened the default cache directory used for transformer models to prevent unauthorized access or tampering with cached model files. aac6b80
Fixed a potential denial-of-service vulnerability where a malformed PDF could cause excessive memory allocation during document parsing. b61ac6a

Thanks to all contributors who made this release possible: