v4.1.1

⭐ New Features

• Feature Request: Add support for setting a connection name in SingleAmqpConnectionFactory #3548
• RepublishMessageRecoverer: don't publish error stack trace by default #3518

🐞 Bug Fixes

• CVE-2026-59320: Fix AMQP 1.0 listener for no link credit on error #3585
• CVE-2026-59271: Don't log password in BrokerRunningSupport #3583
• CVE-2026-59272: AmqpAppender : verifyHostname=true by default #3580
• CVE-2026-59275: Allowlist for the ultimate array component #3577
• CVE-2026-47860: Unbounded decompression of attacker-supplied compressed message bodies #3576
• Fix error-spin in AMQP 1.0 listener container #3552
• Concurrency race condition around RabbitAmqpListenerContainer.ConsumerMessageHandler.ConsumerBatch #3529
• The AbstractJacksonMessageConverter may got confused with wrong content-type from the message #3520
• Encode queue in the RabbitMQ management URL #3489
• The DefaultMessagePropertiesConverter.toMessageProperties() fails with a ClassCastException when x-death header is melformed #3488
• Kotlin: Inconstistent nullability in all properties of MessageProperties #3487
• [3.2.11 Regression] x-queue-leader-locator breaks classic queue declarations on RabbitMQ 3.13 #3478

📔 Documentation

• Correct AMQP specification URL in amqp10-client.adoc #3553
• Update core retry example in template.adoc #3535
• Remove duplicated "the" #3534
• Escape asterisk character #3521
• Improve Documentation for PooledChannelConnectionFactory #1557

🔨 Dependency Upgrades

• Upgrade micrometer-tracing to 1.7.1 #3573
• Upgrade micrometer to 1.17.1 #3570
• Upgrade reactor to 2025.0.7 #3568
• Upgrade spring-framework to 7.0.9 #3565
• Upgrade spring-data-bom to 2026.0.1 #3562
• Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #3557
• Bump org.apache.commons:commons-pool2 from 2.13.0 to 2.13.1 #3543
• Bump org.junit:junit-bom from 6.1.1 to 6.1.2 #3523
• Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 #3515
• Bump com.fasterxml.jackson:jackson-bom from 2.21.4 to 2.21.5 #3514
• Bump tools.jackson:jackson-bom from 3.1.4 to 3.1.5 #3513
• Bump org.apache.logging.log4j:log4j-bom from 2.25.4 to 2.25.5 #3512
• Bump org.junit:junit-bom from 6.1.0 to 6.1.1 #3506
• Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.37 #3502
• Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 #3496

⚠️ Attention Required

• The RepublishMessageRecoverer does not include stack trace header by default any more.
  Use includeStackTrace(true) to opt-in. #3518

❤️ Contributors

Thank you to all the contributors who worked on this release:

@bclozel, @benelog, @cppwfs, and @ngocnhan-tran1996