On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.2.8 and 6.3.5 are out! In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

Importantly, these releases address CVE-2024-38827.

To learn more, please visit the 6.2.8 and 6.3.5 release summaries.

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can update to Spring Boot 2.7.22.5, 3.0.17.5, or 3.1.13.5 respectively to receive the corresponding Security releases 5.7.14, 6.0.14, and 6.1.12. These hotfix versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.12 and 1.1.6 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.12 and 3.3.6 releases, respectively.

This release includes numerous dependency upgrades.

Please see the release notes (1.0.12 and 1.1.6) for more details.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.2.0 has been released and is now available from Maven Central.

The release will be included in the upcoming Spring Boot 3.4.0 release.

This release includes numerous enhancements and dependency upgrades.

Please see the release notes for more details.

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.0.6 and 2023.1.12 service releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

Spring Data 2023.1.12 has reached OSS EOL and is the last OSS release of the 2023.1.x development line that is available from Maven Central. Future releases of the 2023.1.x development line are available through our Commercial Support only. Please consider upgrading to 2024.0.6 or 2024.1.0 even.

The upcoming Spring Boot releases 3.3.6, respective 3.2.12 will…

On behalf of the Spring Data engineering team and everyone who contributed to this release, I am pleased to announce general availability of Spring Data 2024.1 from Maven Central!

This release wraps up our support for Value Expression, completing support for Configuration Properties in @Query methods. You can now use Config Properties in your query methods in JPA, MongoDB, Cassandra, JDBC/R2DBC, and Neo4j.

Extending Spring Data by 3rd-Party Libraries is now much simpler. Developers of Spring Data repository extensions can use our newly introduced SPI discovery mechanism to mount repository…

The Spring Framework has released version 5.3.42 that contains a fix for:

• CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has only been applied to the 5.3.42 commercial release, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7 can make use of Spring Boot Hotfix release 2.7.22.4. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.0 is available now. We would like to thank our community of "early adopters" who helped us refine this version during the milestone phase.

This new Spring generation will materialize in Spring Boot applications next week with Spring Boot 3.4.0. We wrote extensive release notes that will let you know how to easily upgrade and leverage the new features.

The Framework team is already working on the next major release as announced previously. Keep an eye on our official support timeline to…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.15 is available now.

Spring Framework 6.1.15 ships with 34 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.12 and Spring Boot 3.3.6 next week.

Project Page | GitHub | Issues | Documentation

On behalf of the community, I am pleased to announce that the Release Candidate 1 (RC1) of the Spring Cloud 2024.0.0 Release Train is available today. The release can be found in Spring Milestone repository. You can check out the 2024.0.0-RC1 release notes for more information.

Notable Changes in the 2024.0.0-RC1 Release Train

This release of Spring Cloud is based on Spring Boot 3.4.0-RC1.

The GitHub project for this release can be found here.

Spring Cloud Gateway

• Implement ModifyResponseBody in MVC Server (#3189
• Use new Spring Boot http client autoconfiguration framework (#3571

Spring Cloud…