The Spring Framework has released version 5.3.42 that contains a fix for:

• CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has only been applied to the 5.3.42 commercial release, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7 can make use of Spring Boot Hotfix release 2.7.22.4. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.0 is available now. We would like to thank our community of "early adopters" who helped us refine this version during the milestone phase.

This new Spring generation will materialize in Spring Boot applications next week with Spring Boot 3.4.0. We wrote extensive release notes that will let you know how to easily upgrade and leverage the new features.

The Framework team is already working on the next major release as announced previously. Keep an eye on our official support timeline to…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.15 is available now.

Spring Framework 6.1.15 ships with 34 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.12 and Spring Boot 3.3.6 next week.

Project Page | GitHub | Issues | Documentation

On behalf of the community, I am pleased to announce that the Release Candidate 1 (RC1) of the Spring Cloud 2024.0.0 Release Train is available today. The release can be found in Spring Milestone repository. You can check out the 2024.0.0-RC1 release notes for more information.

Notable Changes in the 2024.0.0-RC1 Release Train

This release of Spring Cloud is based on Spring Boot 3.4.0-RC1.

The GitHub project for this release can be found here.

Spring Cloud Gateway

• Implement ModifyResponseBody in MVC Server (#3189
• Use new Spring Boot http client autoconfiguration framework (#3571

Spring Cloud…

On behalf of the community, I am delighted to announce the avability of Spring Modulith 1.3 RC1, 1.2.5, and 1.1.10. While the service releases contain a few bugfixes and the usual dependency updates, the release candidate is packed with features and improvements such as (full change log here):

• An archiving event publication completion mode (thanks to Cora Iberkleid for the contribution).
• Support for MariaDB (thanks, @Fezlight) and Oracle DB (thanks to @DSXVII) in the JDBC-based event publication registry.
• Support to externalize events into a Spring (Integration) MessageChannel via the new spring-modulith-events-messaging artifact (thanks to Josh Long for the contribution).
• Event externalization now allows to add headers to the messages sent out and uses the Spring Message abstraction for broker interaction where feasible.
• Support for SpEL expressions in @Externalized.
• Deprecate event externalization for Amazon SQS and SNS in favor of the implementation in Spring Cloud AWS (thanks to Marcin Slowiak…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.4.0-RC1 has been released and is now available from https://repo.spring.io/milestone.

This release includes 142 enhancements, documentation improvements, dependency upgrades, and bug fixes. Notable new features include:

• Updated Buildpacks support with support for both ARM and x86 architectures
• Updated ClientHttpRequestFactory support, including new builders and support for more customization
• Improved support for controlling access to Actuator endpoints

Please see the release notes for more…

On behalf of the team and all contributors, I am pleased to announce that the first release candidate of Spring Batch 5.2 is now available from our milestones repository.

This release marks the feature freeze milestone of version 5.2 and comes with a number of bug fixes, dependencies upgrades and documentation enhancements. For the complete list of changes, please check the release notes.

What's next?

First, I would like to thank all contributors who had a role in this release! Spring Batch 5.2.0-RC1 comes with Spring Boot 3.4.0-RC1.

We will continue our work of making this release candidate as stable as possible towards a GA in November 2024. We look forward to your feedback on Github Issues, Github Discussions, Twitter, and StackOverflow…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.2.11 has been released and is now available from Maven Central.

This release includes 52 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.3.5 has been released and is now available from Maven Central.

This release includes 65 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …