vaadin/platform 25.1.2

Vaadin 25.1.2

on GitHub

This is a maintenance release for Vaadin 25.1. See 25.1.0 release notes for details and resources.

Changelogs

• Flow (25.1.2) and Hilla (25.1.2)
• Design System
  • Web Components (25.1.1)
  • Flow Components (25.1.2)
• TestBench (10.1.0)
• Browserless Test(1.0.0)
• Feature Pack(25.0.0)
• Modernization Toolkit (Documentation)
  • Feature Pack (Documentation)
  • Dragonfly (Documentation)
  • Modernization Toolkit Analyzer (Analyzer for Eclipse, Analyzer for Maven)
• Multiplatform Runtime (MPR) (8.0.1)
• Router (2.0.1)
• Vaadin Kits
  • AppSec Kit (4.0.2)
  • Azure Kit (1.0.0)
  • Collaboration Engine (7.0.0)
  • Copilot (25.1.2)
  • Kubernetes Kit (3.1.0)
  • Observability Kit (4.1.0)
  • SSO Kit (4.1.0)
  • Swing Kit (3.0.1)

Official add-ons and plugins:

• Spring add-on (25.1.2)
• CDI add-on (16.0.0)
• Maven plugin (25.1.2)
• Gradle plugin (25.1.2)
• Quarkus plugin (3.1.1)

Note:

We are aware of the following CVEs (CVE-2026-34500, CVE-2026-34483, CVE-2026-34487, CVE-2026-34486) from Tomcat, which is a transitive dependency from SpringBoot 4.0.5. Tomcat is a runtime deployment choice made by application developers, which Vaadin does not use or depend on. You can be upgraded on the application side to Tomcat 9.0.117+, 10.1.54+, or 11.0.21+. The corresponding updates will come in their next releases (SpringBoot 4.0.6).