diff --git a/MODULE.bazel b/MODULE.bazel
index c74cd1064b..7b0bfa2947 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -70,12 +70,12 @@ maven.install(
         "com.squareup.okio:okio-jvm:3.16.4",
         "com.flipkart.zjsonpatch:zjsonpatch:0.4.16",
         # ---- spring (Java 17+ modules) ----
-        "org.springframework:spring-core:7.0.7",
-        "org.springframework:spring-aop:7.0.7",
-        "org.springframework:spring-beans:7.0.7",
-        "org.springframework:spring-context:7.0.7",
-        "org.springframework:spring-expression:7.0.7",
-        "org.springframework:spring-test:7.0.7",
+        "org.springframework:spring-core:7.0.8",
+        "org.springframework:spring-aop:7.0.8",
+        "org.springframework:spring-beans:7.0.8",
+        "org.springframework:spring-context:7.0.8",
+        "org.springframework:spring-expression:7.0.8",
+        "org.springframework:spring-test:7.0.8",
         # ---- test ----
         "ch.qos.logback:logback-classic:1.5.32",
         "ch.qos.logback:logback-core:1.5.32",
@@ -103,7 +103,7 @@ maven.install(
 )
 
 # Spring Boot 4.0.6 artifacts declared with exclusions to keep
-# spring-framework pinned to 7.0.7.
+# spring-framework pinned to 7.0.8.
 _SPRING_FRAMEWORK_EXCLUSIONS = [
     "org.springframework:spring-core",
     "org.springframework:spring-aop",
diff --git a/maven_install.json b/maven_install.json
index ff29a21806..af7320906d 100644
--- a/maven_install.json
+++ b/maven_install.json
@@ -1,7 +1,7 @@
 {
   "__AUTOGENERATED_FILE_DO_NOT_MODIFY_THIS_FILE_MANUALLY": "THERE_IS_NO_DATA_ONLY_ZUUL",
-  "__INPUT_ARTIFACTS_HASH": -787372907,
-  "__RESOLVED_ARTIFACTS_HASH": 154547653,
+  "__INPUT_ARTIFACTS_HASH": -604013199,
+  "__RESOLVED_ARTIFACTS_HASH": -1192023294,
   "conflict_resolution": {
     "com.google.code.gson:gson:2.8.9": "com.google.code.gson:gson:2.14.0",
     "com.google.errorprone:error_prone_annotations:2.3.2": "com.google.errorprone:error_prone_annotations:2.48.0",
@@ -270,15 +270,15 @@
     },
     "io.micrometer:micrometer-commons": {
       "shasums": {
-        "jar": "b0cc8c620453ef71e22d6c4ec5c496cc112f964b4e826b9f87182fc97512c8f9"
+        "jar": "45aff76226830db257f4bc39a5bcff83d633e572fee9dc4e45cfa12af9a0a49a"
       },
-      "version": "1.16.5"
+      "version": "1.16.6"
     },
     "io.micrometer:micrometer-observation": {
       "shasums": {
-        "jar": "4406f33535185ff896375e9a81a4b8694e28bf20c1089b24de0325d87f63dfe7"
+        "jar": "4c0826d5e7c8522a8e111470b4e77f77b0a10f520eb5502ddd143fdbcedb2340"
       },
-      "version": "1.16.5"
+      "version": "1.16.6"
     },
     "io.netty:netty-buffer": {
       "shasums": {
@@ -828,39 +828,39 @@
     },
     "org.springframework:spring-aop": {
       "shasums": {
-        "jar": "c0503b7f318368f37f0d0e0557f65e572cebdf61cf9c318a7cbcad7824b0f284"
+        "jar": "1178f039e087884174e2affc46e484f4a8bd7f2a4e011d33dd9137709f740f80"
       },
-      "version": "7.0.7"
+      "version": "7.0.8"
     },
     "org.springframework:spring-beans": {
       "shasums": {
-        "jar": "13775be4269a6cc82ebcee619a9fef1545c90ae54c6fba84a0d8c6d79ff6877a"
+        "jar": "6ec2e361a8872a71d8b1ff66f1bcb8cfa29fcc437931998919da7cecfb59b45b"
       },
-      "version": "7.0.7"
+      "version": "7.0.8"
     },
     "org.springframework:spring-context": {
       "shasums": {
-        "jar": "4a252050fd8595c5922c4d795728f8aae495e41171b3a958b0cee349b5e3586b"
+        "jar": "1eb7d552414ebac00e30ab3e809138d810785f6d2c4271db77cdf0181f308f19"
       },
-      "version": "7.0.7"
+      "version": "7.0.8"
     },
     "org.springframework:spring-core": {
       "shasums": {
-        "jar": "9e1c13ed6d69002aae7ebc4b7d2d1d07e309013a2fbb63ab266bea8601229785"
+        "jar": "726ba2a5130833644bdf267a55ff26e1f52e8dcc9aa1ffa06904ca9c14619f25"
       },
-      "version": "7.0.7"
+      "version": "7.0.8"
     },
     "org.springframework:spring-expression": {
       "shasums": {
-        "jar": "3c23d7eb62bb3fbddc0ad1d7f94be94d1518424f1c9a1b4de6b1b6906e8d0c54"
+        "jar": "3c97c38ab59c77ee886e08ccf8096f6bb58a1245f68dfed7a40e93f41c435f9a"
       },
-      "version": "7.0.7"
+      "version": "7.0.8"
     },
     "org.springframework:spring-test": {
       "shasums": {
-        "jar": "9ed5fda6520b79f1f53714b2f307891a19c5fc18181169fe81d5272efd73a934"
+        "jar": "6ffb7796075a204915edc4bb9e54dc420183cecb520d753004f660f153763c8e"
       },
-      "version": "7.0.7"
+      "version": "7.0.8"
     },
     "org.wiremock:wiremock": {
       "shasums": {
diff --git a/pom.xml b/pom.xml
index cf9ae5c2f6..4325228c51 100644
--- a/pom.xml
+++ b/pom.xml
@@ -70,7 +70,7 @@
     <apache.commons.io>2.22.0</apache.commons.io>
     <common.codec.version>1.22.0</common.codec.version>
     <spring.boot.version>4.0.6</spring.boot.version>
-    <spring.version>7.0.7</spring.version>
+    <spring.version>7.0.8</spring.version>
     <prometheus.client.version>0.16.0</prometheus.client.version>
     <reflections.version>0.10.2</reflections.version>
     <aws.sdk.version>2.46.5</aws.sdk.version>