diff --git a/RELEASE-NOTES.md b/RELEASE-NOTES.md
index bfc5cd2..00b8183 100644
--- a/RELEASE-NOTES.md
+++ b/RELEASE-NOTES.md
@@ -1,3 +1,7 @@
+## 3.0-RC1
+
+* #125 Upgrade to Spring 5.3.39
+
 ## 3.0-M6
 
 * #123 Jobs as lambdas
diff --git a/pom.xml b/pom.xml
index 1926c02..3a35a21 100644
--- a/pom.xml
+++ b/pom.xml
@@ -44,7 +44,7 @@
     <properties>
         <!-- TODO: we are bringing the entire huge Spring framework to just use a few scheduling classes, and no injection -->
         <!-- Note that Spring > 5 requires Java 17 -->
-        <spring.version>5.3.34</spring.version>
+        <spring.version>5.3.39</spring.version>
         <consul.client.version>1.5.3</consul.client.version>
         <okhttp.version>4.12.0</okhttp.version>
         <guava.version>33.1.0-jre</guava.version>