On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 versions are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVE:

• cve-2023-20862: Empty SecurityContext Is Not Properly Saved Upon Logout

The 6.0.3 and 5.7.8 versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up the latest Spring Security version.

For Gradle builds in build.gradle…

On behalf of the team, I’m pleased to announce the availability of the first Release Candidate of the Spring Data 2023.0 release train as well as service releaes 2022.0.5 & 2021.2.11. These releases ship with improvements, including fixes for regressions.

The upcoming Spring Boot 3.0.6 and 2.7.11 releases are going to pick up the service releases for your convenience.

New features included in 2023.0.0 RC1 are amongst others:

• MariaDB support for Spring Data R2DBC has been reinstated.
• Spring Data MongoDB introduces an @Hint annotation as well as support for reactive bulk operations.
• Many enhancements to the Spring Data JPA Hibernate and JPQL parsers to better support aliases and other aspects of query parsing for @Query annotated queries.
…

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Framework 6.0.8, 5.3.27 and 5.2.24.RELEASE versions are available now.

Spring Framework 6.0.8 ships with 60 fixes and documentation improvements, including 5 fixes for regressions. Spring Framework 5.3.27 ships with 20 fixes and documentation improvements, including 4 fixes for regressions. Spring Framework 5.2.24.RELEASE ships with 3 fixes.

Those versions fix the following CVE:

• cve-2023-20863: Spring Expression DoS Vulnerability

Those versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up…

I'm pleased to announce that Spring Web Flow 3.0 RC1 is now available from the Spring milestone repository.

As mentioned in the 3.0 M1 announcement, milestone 1 did not include JSF support. This release changes that and upgrades the Spring Faces module to a Spring Framework 6, Jakarta EE, and Java 17 baseline. The spring-webflow-samples, including JSF samples, have been upgraded to the latest, and you can use sample changes as pointers for your own upgrades.

Spring Web Flow has also migrated from JIRA to GitHub issues recently, and that means you can now search, create, and watch both issues and pull requests, from the project's GitHub issues…

On behalf of the community, I am pleased to announce that the General Availability (RELEASE) of the Spring Cloud 2022.0.2 Release Train is available today. The release can be found in Maven Central. You can check out the 2022.0.2 release notes for more information.

Notable Changes in the 2022.0.2 Release Train

See all issues and pull requests included in this release here.

Spring Cloud Kubernetes

• Added support for external name services using the Fabric8 DiscoveryClient (#1243)
• Add Pod metadata and annotations to ServiceInstance (#1254)

Spring Cloud Contract

• Allow sendMessage to handle body from file (.1867)
• Relaxed SSL validation with RestTemplate interceptors (#1869)
…

Dear Spring community,

Today I'm excited to share with you news that Spring Integration extension project for AWS and AWS Kinesis Binder for Spring Cloud Stream have finally been moved to AWS Java SDK v2, their respective milestones 3.0.0-M2 & 4.0.0-M1 are available from Spring Milestone repository.

I cannot tell that this was a pleasant work to do because it has turned to be not just a plain dependencies upgrade and namespace renaming. The whole AWS SDK API was changed to more modern Java style, including CompletableFuture composition and Stream API, lambda-style configuration, generated…

I'd like to announce the availability of Spring Modulith 0.5.1. The release primarily contains an important bug fix (the spring-modulith-runtime module accidentally contained a Logback configuration file only intended for test usage) and the usual upgrade to the latest Spring Boot version. Find more information in the full changelog, as well as reference documentation.

In case you are wondering about what the project is all about, Voxxed Days Zurich have published "Spring Modulith – Spring for Architecturally Curious Developers":

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.1.0-M2 has been released and is now available from https://repo.spring.io/milestone.

This release includes 81 enhancements, documentation improvements, dependency upgrades, and bug fixes. Notable new features include:

• Auto-configuration for Spring Authorization Service
• Improved Testcontainers integration
• Improved auto-configuration for Spring for GraphQL

Please see the release notes for more details and upgrade instructions.

Thanks to all those who have contributed with issue reports and pull…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 0.2.0 has been released and is now available from Maven Central.

This is the second GA minor release of the framework. Although 0.2.0 still lives in the experimental Spring projects it is in the process of moving into the main Spring projects as follows:

• The core will move into spring-projects/spring-pulsar (targeting mid-April)
• The autoconfiguration will move into spring-projects/spring-boot (targeting the Spring Boot 3.2.0 release)
• The binder will move into spring-cloud/spring-cloud-stream (targeting the SCSt 4.1.0 release)
…