Upgrade to latest possible Feign Version

Please Upgrade to Feign 13.9 to get full Jackson 3 Support including JsonMapper
https://github.com/OpenFeign/feign/releases/tag/13.9

This also blocks our daily business

It will also remove critical and high vulnerabilities from io.undertow:undertow-core 2.3.18.Final that comes from io.github.openfeign/feign-form 13.6.

Checkmarx :

It need at least feign 13.7 here to remove these 4 vulnerabilities.

This cannot be upgraded until our next major

When is the next major release expected?

We do not have a concrete date to share right now

@ryanjbaxter

@ryanjbaxter - With Jackson 3 compatibility changes yet to be done, can we say spring-cloud-openfeign not compatible with Spring Boot 4.0 or still ways to make it work? It will help us decide whether to move to Spring HTTP Service Client immediately or buy some more time.

@Omkar-Shetkar

@Omkar-Shetkar jackson 2 is still supported in spring boot 4 https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.0-Migration-Guide#jackson-2-compatibility

So yes spring cloud openfeign 5.0.x is compatible with spring boot 4

@ryanjbaxter

@ryanjbaxter doesn't sound like it is though - as per https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.0-Migration-Guide#upgrading-jackson "Spring Boot now uses Jackson 3 as its preferred JSON library" Given that Feign is a http client and uses json, surely this is a major oversight?

It is not a major oversight. It is compatible with Spring Boot 4 because in Spring Boot 4 you can use Jackson 2 even though 3 is the default. Unfortunately Feign 13.9 was not available for several months after Spring Cloud 2025.1.0 was released so we had to make due with what was available at that time.

If you are having a specific issue, please open a separate issue with a sample that demonstrates the problem.

meanwhile OpenFeign 13.12 is available

As a workaround, I excluded the Jackson 2 feign-jackson module that Spring Cloud OpenFeign pulls in transitively, and added feign-jackson3 (currently 13.13) instead, which brings in tools.jackson.core:jackson-databind and aligns Feign with the Jackson 3 stack used by Spring Boot 4:

<dependency>
    <groupId>org.springframework.cloud</groupId>
    <artifactId>spring-cloud-starter-openfeign</artifactId>
    <exclusions>
        <exclusion>
            <groupId>io.github.openfeign</groupId>
            <artifactId>feign-jackson</artifactId>
        </exclusion>
    </exclusions>
</dependency>
<dependency>
    <groupId>io.github.openfeign</groupId>
    <artifactId>feign-jackson3</artifactId>
    <version>13.13</version>
</dependency>

It works, but having to manually swap the Jackson module suggests the starter isn't yet aligned with Jackson 3 on Spring Boot 4. It would be good if this were handled by the starter's dependency management.

Navigation Menu

Repository navigation

Upgrade to latest possible Feign Version #1334

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Upgrade to latest possible Feign Version #1334

Description

Activity

herrytco commented on Feb 26, 2026

AlexyNau commented on Mar 4, 2026

ryanjbaxter commented on Mar 17, 2026

Omkar-Shetkar commented on Apr 15, 2026

ryanjbaxter commented on Apr 15, 2026

Omkar-Shetkar commented on Apr 19, 2026

ryanjbaxter commented on Apr 19, 2026

stephenmontgomery commented on Apr 21, 2026

ryanjbaxter commented on Apr 21, 2026

trafficant commented on Apr 22, 2026

Ascii256 commented on Jul 7, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions