On behalf of the team, I am pleased to announce that Spring Boot 1.5.4 has been released and is available now from repo.spring.io and Maven Central.

Spring Boot 1.5.4 adds over 60 fixes, improvements and 3rd party dependency updates to the 30 issues fixed in Spring Boot 1.4.7. Thanks to all that have contributed!

This release is a recommended upgrade for all users, in a particular due to CVE-2017-4995 that was recently fixed in Spring Security 4.2.3.

What's next?

We are ramping down with a second release candidate of Spring Framework 5 next week and we will follow as expected with a second milestone of Spring Boot 2. If you want to try what we have for Spring Boot 2 already, and we’d love to hear your feedback if you do, please go to start.spring.io and select Spring Boot 2.0.0.BUILD-SNAPSHOT.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask at stackoverflow.com using the spring-boot tag.

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter