Actually, that won't be possible: dam rm shows libspring-java among other rdeps. We'll just stick with the EOL in debian-security-support. Cheers, --Seb