On behalf of the team and everyone who has contributed, I am pleased to announce that Spring LDAP 2.4.4 and 3.2.8 are out! In both cases, the releases are mostly composed of bug fixes and dependency upgrades.

Importantly, these release addresses CVE-2024-38829.

To learn more, please visit the 2.4.4 and 3.2.8 release summaries.

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can update to Spring Boot 2.7.22.5, 3.0.17.5, or 3.1.13.5 respectively to receive the corresponding LDAP releases 2.4.4, 3.0.10, and 3.1.8. These hotfix versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.2.8 and 6.3.5 are out! In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

Importantly, these releases address CVE-2024-38827.

To learn more, please visit the 6.2.8 and 6.3.5 release summaries.

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can update to Spring Boot 2.7.22.5, 3.0.17.5, or 3.1.13.5 respectively to receive the corresponding Security releases 5.7.14, 6.0.14, and 6.1.12. These hotfix versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.12 and 1.1.6 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.12 and 3.3.6 releases, respectively.

This release includes numerous dependency upgrades.

Please see the release notes (1.0.12 and 1.1.6) for more details.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.2.0 has been released and is now available from Maven Central.

The release will be included in the upcoming Spring Boot 3.4.0 release.

This release includes numerous enhancements and dependency upgrades.

Please see the release notes for more details.

On behalf of the Spring Data engineering team and everyone who contributed to this release, I am pleased to announce general availability of Spring Data 2024.1 from Maven Central!

This release wraps up our support for Value Expression, completing support for Configuration Properties in @Query methods. You can now use Config Properties in your query methods in JPA, MongoDB, Cassandra, JDBC/R2DBC, and Neo4j.

Extending Spring Data by 3rd-Party Libraries is now much simpler. Developers of Spring Data repository extensions can use our newly introduced SPI discovery mechanism to mount repository…

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.0.6 and 2023.1.12 service releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

Spring Data 2023.1.12 has reached OSS EOL and is the last OSS release of the 2023.1.x development line that is available from Maven Central. Future releases of the 2023.1.x development line are available through our Commercial Support only. Please consider upgrading to 2024.0.6 or 2024.1.0 even.

The upcoming Spring Boot releases 3.3.6, respective 3.2.12 will…

The Spring Framework has released version 5.3.42 that contains a fix for:

• CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has only been applied to the 5.3.42 commercial release, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7 can make use of Spring Boot Hotfix release 2.7.22.4. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.0 is available now. We would like to thank our community of "early adopters" who helped us refine this version during the milestone phase.

This new Spring generation will materialize in Spring Boot applications next week with Spring Boot 3.4.0. We wrote extensive release notes that will let you know how to easily upgrade and leverage the new features.

The Framework team is already working on the next major release as announced previously. Keep an eye on our official support timeline to…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.15 is available now.

Spring Framework 6.1.15 ships with 34 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.12 and Spring Boot 3.3.6 next week.

Project Page | GitHub | Issues | Documentation