On behalf of the Spring Security team and everyone who contributed to this release, I am delighted to announce the general availability of Spring Security 6.4.0 from Maven Central!

The 6.4 release brings several compelling features including:

• Support for Passkeys and One-Time Tokens
• Simplified OAuth 2.0 Configuration
• Refreshable SAML 2.0 Asserting Parties, and
• New method security annotations and capabilities

To find out more about what’s new, see the what's new section of the documentation.

This release will be included in the upcoming Spring Boot 3.4 GA release. We'd like to hear from you…

On behalf of the team and everyone who contributed, I am pleased to announce the General Availability for Spring AMQP 3.2 generation. It can be used directly from Maven Central and will be included into upcoming Spring Boot 3.4.

The version 3.1.8 includes some bug fixes and dependency updates. This is the last Open Source version. From now on fixes into 3.1.x generation will be available only via commercial support.

Some notable changes in 3.2 release:

• The server side retry logic (manual DLX) has been improved for a new retry-count header to make Spring AMQP compatible with recently released RabbitMQ 4.0.x.
…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring LDAP 2.4.4 and 3.2.8 are out! In both cases, the releases are mostly composed of bug fixes and dependency upgrades.

Importantly, these release addresses CVE-2024-38829.

To learn more, please visit the 2.4.4 and 3.2.8 release summaries.

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can update to Spring Boot 2.7.22.5, 3.0.17.5, or 3.1.13.5 respectively to receive the corresponding LDAP releases 2.4.4, 3.0.10, and 3.1.8. These hotfix versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.2.8 and 6.3.5 are out! In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

Importantly, these releases address CVE-2024-38827.

To learn more, please visit the 6.2.8 and 6.3.5 release summaries.

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can update to Spring Boot 2.7.22.5, 3.0.17.5, or 3.1.13.5 respectively to receive the corresponding Security releases 5.7.14, 6.0.14, and 6.1.12. These hotfix versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.12 and 1.1.6 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.12 and 3.3.6 releases, respectively.

This release includes numerous dependency upgrades.

Please see the release notes (1.0.12 and 1.1.6) for more details.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.2.0 has been released and is now available from Maven Central.

The release will be included in the upcoming Spring Boot 3.4.0 release.

This release includes numerous enhancements and dependency upgrades.

Please see the release notes for more details.

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.0.6 and 2023.1.12 service releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

Spring Data 2023.1.12 has reached OSS EOL and is the last OSS release of the 2023.1.x development line that is available from Maven Central. Future releases of the 2023.1.x development line are available through our Commercial Support only. Please consider upgrading to 2024.0.6 or 2024.1.0 even.

The upcoming Spring Boot releases 3.3.6, respective 3.2.12 will…

On behalf of the Spring Data engineering team and everyone who contributed to this release, I am pleased to announce general availability of Spring Data 2024.1 from Maven Central!

This release wraps up our support for Value Expression, completing support for Configuration Properties in @Query methods. You can now use Config Properties in your query methods in JPA, MongoDB, Cassandra, JDBC/R2DBC, and Neo4j.

Extending Spring Data by 3rd-Party Libraries is now much simpler. Developers of Spring Data repository extensions can use our newly introduced SPI discovery mechanism to mount repository…

The Spring Framework has released version 5.3.42 that contains a fix for:

• CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has only been applied to the 5.3.42 commercial release, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7 can make use of Spring Boot Hotfix release 2.7.22.4. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…