v4.2.0-M1

⭐ New Features

• Deprecate RestTemplateNodeLocator #3540
• Feature Request: Add support for setting a connection name in SingleAmqpConnectionFactory #3532
• AbstractRoutingConnectionFactory equivalent for AMQP 1.0/AmqpConnectionFactory #3438
• RabbitListener Add batch(), batchSize(), and receiveTimeout() Overrides #1545

🐞 Bug Fixes

• CVE-2026-59320: Fix AMQP 1.0 listener for no link credit on error #3587
• CVE-2026-59271: Don't log password in BrokerRunningSupport #3584
• CVE-2026-59272: AmqpAppender : verifyHostname=true by default #3581
• CVE-2026-59275: Allowlist for the ultimate array component #3578
• CVE-2026-47860: Unbounded decompression of attacker-supplied compressed message bodies #3575
• Fix error-spin in AMQP 1.0 listener container #3550

📔 Documentation

• Correct AMQP specification URL in amqp10-client.adoc #3551

🔨 Dependency Upgrades

• Upgrade micrometer-tracing to 1.8.0-M1 #3572
• Upgrade micrometer to 1.18.0-M1 #3569
• Upgrade reactor to 2026.0.0-M1 #3566
• Upgrade spring-data-bom to 2026.1.0-M1 #3563
• Upgrade spring-framework to 7.1.0-M1 #3561
• Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #3558
• Upgrade to Log4J 2.26.x #3539
• RabbitConnectionFactoryBean#enableHostnameVerification is no longer relevant: Upgade to RabbitMQ Client 5.34.x #3525

❤️ Contributors

Thank you to all the contributors who worked on this release:

@ngocnhan-tran1996