HeroDevs
Visit NES for Spring Home Page

Spring Cloud Contract 3.0.x Release Notes

1 version

Comprehensive release notes and changelog for Spring Cloud Contract 3.0.x, including security patches, bug fixes, and feature updates across all supported versions.

Mar 11, 2026
Latest: 3.0.7
1 Patched Vulnerability
VEX Statements

March 2026

3.0.7

Released last Wednesday
CVE-2024-22236
Full Version: 
3.0.6-spring-cloud-contract-3.0.7

Bug Fixes

  • Local information disclosure via temporary directory created with unsafe permissions in shaded com.google.guava:guava dependency (CVE-2024-22236).

Notes

  • This release originates from the open‑source Spring Cloud Contract repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Contract 3.0.6.

Dependency Upgrades

  • Spring Cloud Build (NES) 3.0.5-spring-cloud-build-3.0.6
  • Spring Cloud Commons (NES) 3.0.6-spring-cloud-commons-3.0.7
  • Spring Cloud Consul (NES) 3.0.4-spring-cloud-consul-3.0.5
  • Spring Cloud Netflix (NES) 3.0.6-spring-cloud-netflix-3.0.7
  • Spring Cloud Stream (NES) 3.1.6-spring-cloud-stream-3.1.7
  • Spring Cloud Zookeeper (NES) 3.0.5-spring-cloud-zookeeper-3.0.6

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.