On behalf of the team and everyone who has contributed, I am pleased to announce the release candidate milestone for the final Spring Security 6 minor release.

Among a number of feature enhancements, there are some that we'd love your attention on as we prepare them for general availability:

Core

• Complete Deprecation of ConfigAttribute, SecurityConfig, and other Access API components.

Specifically, please speak up if you are using any of the ACL Access components that were deprecated.

OAuth 2.0

• Further refinements to DPoP support - #16937, #16921, and #16900

SAML 2.0

• Simplified SAML 2.0 Response validation (docs), Assertion validation (docs), and Authentication conversion (docs)
• A RelayState-based Authentication Request Repository - #14793
…

On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Security 6.4.5.

Please check the changelog for more details.

Project Page | GitHub | Issues | Documentation

On behalf of the Spring for GraphQL team, I am pleased to announce the availability of 1.4.0-RC1, our last stop before the generally available release. In case you missed it, 1.4.0-M1 already shipped lots of new features and improvements.

You can read the full changelog for 1.4.0-RC1 and the upgrade notes on our wiki.

DataLoader observations

The Spring for GraphQL instrumentation creates Micrometer Observations for GraphQL requests and DataFetcher operations. Some data fetching operations are relying on batch loading calls to avoid the "N+1 problem". In previous generations, one would not see the difference between a "full" data fetching operation and one that simply delegates to DataLoader…

I am pleased to announce that Spring for GraphQL 1.3.5 is now available on Maven Central.

1.3.5 closes 12 issues. This version will ship with Spring Boot 3.3.11 and 3.4.5, to be released next week.

How can you help?

If you have general questions, please ask on stackoverflow.com using the spring-graphql tag.

Project Page | GitHub | Issues | Documentation | Stack Overflow

On behalf of the team and everyone who has contributed, I am pleased to announce a new milestone for the next Spring Framework generation. The fourth milestone continues delivering new features and refinements on top of 7.0.0-M1, 7.0.0-M2 and 7.0.0-M3.

Class-File API usage for Java 24+ apps

Spring Framework reads class bytecode to collect metadata about the application code. Historically we have used a slim ASM fork for this purpose, through the MetadataReaderFactory and MetadataReader types in the org.springframework.core.type.classreading package. Although Spring applications typically have no direct exposure to this API, this is especially useful when parsing @Configuration…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.19 and 6.2.6 are available now.

Spring Framework 6.1.19 ships with 11 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.3.11.

Spring Framework 6.2.6 ships with 35 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.5 and 3.5.0-RC1. It's very unusual for us to ship new features in maintenance versions, but this version also brings first-class support for Bean Overrides with @ContextHierarchy. Please refer to the "Context hierarchies with bean overrides" documentation section…

We are excited to announce the release of Spring AI 1.0.0 Milestone 7. This will be the last milestone release. Next month will be the RC1 release followed quickly by a GA release in time for the Spring IO conference in Barcelona.

To celebrate this release, we have added a new song to our AI-generated music playlist featuring lyrics by Josh Long and Claude! Check out the latest track to enhance your blog reading and coding experience.

Here are the key changes in this release. Note, there are breaking changes!

Breaking Changes

Spring AI 1.0.0-M7 introduces several important changes that align…

This blog post is authored by Eddú Meléndez.

Docker recently released a Model Runner in Docker Desktop for Mac 4.40.0 on Apple silicon. The Docker Model Runner provides a local Inference API designed to be compatible with the OpenAI API, enabling easy integration with Spring AI as part of the Spring AI 1.0.0-M7 release. Models are distributed as standard OCI artifacts on Docker Hub under the ai namespace.

Prerequisites

• Download Docker Desktop for Mac 4.40.0.

• Choose one of the following options to enable the Model Runner:

  Option 1:

• Enable Model Runner `docker desktop enable model-runner --tcp 12434`.

• Set the base-url to `http://localhost:12434/engines\`

  Option 2:

• Enable Model Runner `docker desktop enable model-runner`.

• Use Testcontainers and set the base-url as follows:

…

On behalf of the community, I am pleased to announce that the Milestone 3 (M3) of the Spring Cloud 2025.0.0 Release Train is available today. The release can be found in Spring Milestone repository. You can check out the 2025.0.0 release notes for more information.

Notable Changes in the 2025.0.0 Release Train

A complete list of all changes in this release can be found in this project on GitHub.

The release is based off of Spring Boot 3.5.0-M3.

Spring Cloud Stream

• Add ability to define bindings dynamically with BindingsLifecycleController
• Add ability to modify existing binidngs with BindingsLifecycleController
• Fix SpEL Expresion serialization for Actuator
…