On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.6, 6.0.19 and 5.3.34 are available now:

• Spring Framework 6.1.6 ships with 41 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.5, to be released next week.
• Spring Framework 6.0.19 ships with 14 fixes and documentation improvements. This version will be shipped with Spring Boot 3.1.11, to be released next week.
• Spring Framework 5.3.34 ships with 10 fixes and documentation improvements.

The releases address CVE-2024-22262 for "URL Parsing with Host Validation (3rd report)". Important CVEs on popular projects, like the original CVE-2024-22243, often get attention from the security community. We received many reports and helpful feedback about new attack variants over the last weeks. The security of Spring applications is…

I am pleased to announce that Spring for GraphQL 1.2.6 is now available on Maven Central.

This release closes 8 issues. It is a bit off our usual cycle but we wanted to fix particular issues a give an early chance to external integrations to release against this version.

The 1.2.6 version will ship with Spring Boot 3.1.11 and 3.2.5, to be released next month.

How can you help?

If you have general questions, please ask on stackoverflow.com using the spring-graphql tag.

Project Page | GitHub | Issues | Documentation | Stack Overflow

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.5, 6.0.18 and 5.3.33 are available now.

Spring Framework 6.1.5 ships with 45 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.4, to be released next week.

Spring Framework 6.0.18 ships with 11 fixes and documentation improvements. This version will be shipped with Spring Boot 3.1.10, to be released next week.

Spring Framework 5.3.33 ships with 10 fixes and documentation improvements.

The releases address CVE-2024-22259 for URL Parsing with Host…

I am pleased to announce that Spring for GraphQL 1.2.5 is now available on Maven Central.

This release closes 20 issues. We have shipped important fixes for @SubscriptionMapping support, which was not working properly with graphql-java 21.x+ versions, and for scrolling with offset positions, which did not correctly match the Relay spec.

The 1.2.5 version will ship with Spring Boot 3.1.9 and 3.2.3, to be released later this week. We are excited to ship Milestone 1 of Spring for GraphQL 1.3.0 today.

How can you help?

If you have general questions, please ask on stackoverflow.com using the spring-graphql tag…

The Spring Framework 6.0.16 and 6.1.3 releases shipped on January 11th includes a fix for CVE-2024-22233.

The Spring Boot 3.1.8 and 3.2.2 releases shipped last week upgrade to the relevant Spring Framework versions.

Users are encouraged to update as soon as possible.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.2.1 has been released and is now available from Maven Central.

This release includes 81 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.1.7 has been released and is now available from Maven Central.

This release includes 39 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.0.15 and 6.1.2 are available now.

Spring Framework 6.0.15 ships with 25 fixes and documentation improvements, including 7 fixes for regressions. This version will be shipped with Spring Boot 3.1.7, to be released next week.

Spring Framework 6.1.2 ships with 119 fixes and documentation improvements, including 14 fixes for regressions. This version will be shipped with Spring Boot 3.2.1, to be released next week.

Project Page | GitHub | Issues | Documentation

Updates

• [11-27] Blog posts updated to refer to the CVE reports published

The Spring Framework 6.0.14 release shipped on November 16th includes a fix for CVE-2023-34053.

The Spring Boot 2.7.18 release shipped on November 23th includes fixes for CVE-2023-34055.

Users are encouraged to update as soon as possible.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.1.6 has been released and is now available from Maven Central.

This release includes 84 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …