Upgrade to latest possible Feign Version

[trafficant]

Please Upgrade to Feign 13.9 to get full Jackson 3 Support including JsonMapper
https://github.com/OpenFeign/feign/releases/tag/13.9

[herrytco]

This also blocks our daily business

[AlexyNau]

It will also remove critical and high vulnerabilities from io.undertow:undertow-core 2.3.18.Final that comes from io.github.openfeign/feign-form 13.6.

Checkmarx :

It need at least feign 13.7 here to remove these 4 vulnerabilities.

[ryanjbaxter]

This cannot be upgraded until our next major

[Omkar-Shetkar]

When is the next major release expected?

[ryanjbaxter]

We do not have a concrete date to share right now

[Omkar-Shetkar]

@ryanjbaxter - With Jackson 3 compatibility changes yet to be done, can we say spring-cloud-openfeign not compatible with Spring Boot 4.0 or still ways to make it work? It will help us decide whether to move to Spring HTTP Service Client immediately or buy some more time.

[ryanjbaxter]

@Omkar-Shetkar jackson 2 is still supported in spring boot 4 https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.0-Migration-Guide#jackson-2-compatibility

So yes spring cloud openfeign 5.0.x is compatible with spring boot 4

[stephenmontgomery]

@ryanjbaxter doesn't sound like it is though - as per https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.0-Migration-Guide#upgrading-jackson "Spring Boot now uses Jackson 3 as its preferred JSON library" Given that Feign is a http client and uses json, surely this is a major oversight?

[ryanjbaxter]

It is not a major oversight. It is compatible with Spring Boot 4 because in Spring Boot 4 you can use Jackson 2 even though 3 is the default. Unfortunately Feign 13.9 was not available for several months after Spring Cloud 2025.1.0 was released so we had to make due with what was available at that time.

If you are having a specific issue, please open a separate issue with a sample that demonstrates the problem.

[trafficant]

meanwhile OpenFeign 13.12 is available