I am excited to announce the releases of versions 1.5.4, 2.0.3 and 2.1 M1 of Spring HATEOAS. The bug fix releases primarily ship dependency upgrades, including one to the latest Spring Framework 5 and 6 releases which include fixes for a CVE. The 2.1 milestone includes a couple of new features, such as:

• Property metadata for forms now also considers JSR-03's @Size annotation – #1920
• Introduction of SlicedModel, a simplified version of PagedModel to navigate slices but not calculate a total – #1856

For more information, please check out the full changelogs on GitHub.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.10 has been released and is now available from Maven Central.

This release includes 34 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

Java 20 Support

Following the GA release of Java 20 earlier this week, Spring Boot 2.7.10 adds support for Java 20.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.5 has been released and is now available from Maven Central.

This release includes 40 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

Java 20 Support

Following the GA release of Java 20 earlier this week, Spring Boot 3.0.5 adds support for Java 20.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

Dear Spring community,

On behalf of the team, it is my pleasure to announce that Spring Integration 6.1.0-M2 is now available from Spring Milestone repository.

In addition bug fixes versions 5.5.17 and 6.0.4 have been released. They also include upgrades to the latest point versions of dependencies with their bug fixes.

The Spring Integration 6.1 version is a natural evolution of 6.x generation with fixes and improvements which didn't make it into 6.0. Plus we listen to community and make some possibly but convenient for target projects breaking changes.

Some highlights of this new version…

I'm pleased to announce that the Spring for GraphQL 1.0.4 and 1.1.3 maintenance versions are now available on Maven Central.

Spring for GraphQL 1.0.4 includes 6 fixes and documentation improvements. This version will be shipped with Spring Boot 2.7.10, to be released this Thursday.

Spring for GraphQL 1.1.3 includes 12 fixes and documentation improvements. This version will be shipped with Spring Boot 3.0.5, to be released this Thursday.

How can you help?

If you have general questions, please ask on stackoverflow.com using the spring-graphql tag.

Project Page | GitHub | Issues | Documentation | …

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.1.0-M2.

The main feature delivered in this release is support for OAuth 2.0 Device Authorization Grant (gh-1106).

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

I am pleased to announce the first milestone release of Spring for GraphQL 1.2.0 is now available from our Milestone repository. This version will be shipped with Spring Boot 3.1.0-M2 due for release this Thursday.

This first milestone raises the baseline to GraphQL Java 20.0 and we will align with the new GraphQL Java release policy in the future. We are also upgrading to the next generations of Spring Framework, Spring Data and Spring Security.

Pagination Support

When it comes to navigating large result sets with GraphQL, the Cursor Connection Specification is very popular. With the features…

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Framework 6.0.7 and 5.3.26 versions are available now.

Spring Framework 6.0.7 ships with 28 fixes and documentation improvements, including 2 fixes for regressions. Spring Framework 5.3.26 ships with 40 fixes and documentation improvements.

Those versions fix the following CVEs:

• cve-2023-20860: Security Bypass With Un-Prefixed Double Wildcard Pattern
• cve-2023-20861: Spring Expression DoS Vulnerability

Those versions will be shipped with Spring Boot 3.0.5 and 2.7.10, to be released Thursday. In…

On behalf of the team, I am pleased to announce that Spring Framework 5.2.23.RELEASE is available now. This release has been requested by Spring Framework commercial support customers and is available on Maven Central.

Spring Framework 5.2.23.RELEASE ships with 3 fixes, including a fix for the following CVE:

• cve-2023-20861: Spring Expression DoS Vulnerability.
• 5.2.22.RELEASE was not vulnerable to cve-2023-20860, so no fix was required.

This version will not be shipped with a Spring Boot release as 2.3.x is out of commercial support. You can manually upgrade Spring Framework in your Spring Boot Maven or Gradle builds. Upgrading to a supported Spring Boot version is…