A Bootiful Podcast: Spring Security legend Laura Spilca joins us to talk Spring Authorization Server and upgrading to Spring Boot 3
Hi, Spring fans! This week, my first as an employee of Broadcom, I am joined by Spring Security community legend Laura Spilca and we talk about all things security, OAuth, and more.
This Week in Spring - 28 November, 2023
Hi, Spring fans! I hope everyone who celebrated Thanksgiving had a wonderful time. Did you indulge in too much turkey? Anyway, let's jump into this week's edition of This Week in Spring—a particularly special one for a couple of reasons. First, it's our first issue after the launch of Spring Boot 3.2 last Thursday. Second, it's my inaugural post as a member of the Broadcom family. Exciting times!
Spring Boot 3.2: A Game Changer
Spring Boot 3.2 is nothing short of revolutionary. I've delved into its myriad features in an in-depth video, which you can watch here. This release includes:
- reactive cache/scheduled abstraction
- virtual threads (project Loom)
- CRaC
- improved GraalVM native image support
- Spring for Apache Pulsar support
- the new Spring Framework 6.1
RestClient
andJdbcClient
- reloadable SSL
- Java 21
- observability
spring.main.keep-alive=true
- Docker for Neo4J, ActiveMQ, etc.
- dependencies updates (of course)
TransactionalExecutionListener
…
Spring Shell 2.1.15, 3.0.10, 3.1.6 and 3.2.0-RC1 are now available
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Shell 2.1.15
, 3.0.10
, 3.1.6
and 3.2.0-RC1
has been released and are now available from Maven Central and Spring Repos respectively.
Please see the release notes 2.1.15, release notes 3.0.10, release notes 3.1.6 and release notes 3.2.0-RC1 for more details.
Thanks to all those who have contributed with issue reports and pull requests.
How can you help?
CVE-2023-34053, CVE-2023-34055: Spring Framework and Spring Boot vulnerabilities
Updates
- [11-27] Blog posts updated to refer to the CVE reports published
The Spring Framework 6.0.14 release shipped on November 16th includes a fix for CVE-2023-34053.
The Spring Boot 2.7.18 release shipped on November 23th includes fixes for CVE-2023-34055.
Users are encouraged to update as soon as possible.
Spring Modulith 1.1 GA and 1.0.3 released
On behalf of the community I am delighted to announce the general availability of Spring Modulith 1.1 and the 1.0.3 bugfix release. This rather short stint after our 1.0 GA release in just three months ago brings us back in sync with the Spring Boot release train which we are going to follow going forward. We still managed to package up quite a few great new features, most notably:
- Support for event externalization into AMQP, Kafka, JMS, AWS SNS and SQS (the latter two contributed by Maciej Walkowiak) #248 #344
- API to deal with completed and incompleted event publications #294
- Strengthened relationship constraints for code residing in the application root #317
- A
Now
interface extracted fromMoments
and additional methods to access today (LocalDate
) and the current point in time asInstant
. @ApplicationModuleListener
moved into theevents
package (in the…-events-api
artifact) #322- Support for the actuators in native images #376, #375
- A Neo4j implementation of the Event Publication Repository (contributed by Gerrit Meier) …
Spring Vault 3.1 available
On behalf of the team, it is my pleasure to announce the general availability of Spring Vault 3.1 from Maven Central.
This release ships with several refinements and new features. Highlights of the new release include:
- Upgrade to Spring Framework 6.1.
- A brand new reference documentation site based on Antora.
- Reactive Template API support for Transit and Key-Value Secret backends.
- Renewal of Leases if the Login token expires.
- JWT Authentication support.
Head over to the release notes page in our wiki to find out more about the release.
Thanks to everyone who has contributed to Spring Vault…
Spring Boot 3.2.0 available now
On behalf of the Spring Boot team and everyone that has contributed, I am pleased to announce that Spring Boot 3.2.0 has been released and is available from Maven Central.
This release adds a significant number of new features and improvements. For full upgrade instructions and new and noteworthy features please see the release notes.
What's new in 3.2
The highlights of the 3.2 release include:
- Support for Virtual Threads
- Initial support for JVM Checkpoint Restore (Project CRaC)
- SSL Bundle Reloading
- A lot of Observability Improvements
- Support for RestClient
- Support for JdbcClient
- Support for Jetty 12
- Support for Spring for Apache Pulsar
- SSL bundle support for Kafka and RabbitMQ
- Reworked Nested Jar handling
- Docker Image Building improvements …
Spring Boot 3.1.6 available now
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.1.6
has been released and is now available from Maven Central.
This release includes 84 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.
How can you help?
If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot
tag or chat with the community on Gitter.
Project Page | GitHub | Issues | Documentation | Stack Overflow | …
A Bootiful Podcast: iText Creator Bruno Lowagie
Hi, Spring fans! We're releasing Spring Boot 3.2 today! And it's Thanksgiving in the USA (Happy Thanksgiving!). So, we wanted to celebrate with an amazing episode, and so today's guest is opensource legend Bruno Lowagie. Enjoy!