also you should use @Validated on class level in the controller

@RestController
@Validated
class Controller {
    @PostMapping("/hello")
    fun hello(@Valid @RequestBody messageDto: MessageDto) {
        messageDto.words.map(System.out::println)
    }
}