2.3.0

Highlights

• New module spring-ai-agentcore-payments: Amazon Bedrock AgentCore Payments (x402) for Spring AI agents (#253)
• Spring AI Session 0.10 support in the memory module (#257)
• Reactive rate limiting filter for the runtime starter (#218)

Security

• Long-term memory retrieval is now scoped strictly to the requesting actor and session. An advisory with details will follow; all users of spring-ai-agentcore-memory should upgrade.

Breaking changes

• Long-term memory rejects actor IDs that contain / or * (IllegalArgumentException).

Fixes

• Runtime: invalid caller input (e.g. a missing user or session id) returns HTTP 400 instead of 500 (#266)
• Runtime: Actuator health is reported on /ping (#247)
• Memory: summary advisor replaces only the current user message (#249)
• Memory: episodic reflections namespace is validated separately (#256)

Deprecations

• agentcore.memory.long-term.namespace.auto-register is deprecated and will be removed in 3.0.0; namespace mismatch errors now name the exact property to set (#265)

Dependencies

• OpenTelemetry 1.67.0, AWS SDK, Playwright, nimbus-jose-jwt and Maven plugin updates