Update Jan 5: 2022: The Spring Framework version in this release includes fixes for CVE-2021-22060 whose official publication was deferred until today since many people take time off at the end of the year.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.5.8 has been released and is now available from Maven Central.

This release includes 46 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

Update Jan 5: 2022: The Spring Framework version in this release includes fixes for CVE-2021-22060 whose official publication was deferred until today since many people take time off at the end of the year.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.6.2 has been released and is now available from Maven Central.

This release includes 55 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the community, I’m pleased to announce the release of Spring Security 5.2.15 (release notes), Spring Security 5.3.13 (release notes), Spring Security 5.4.10 (release notes), Spring Security 5.5.4 (release notes) and Spring Security 5.6.1 (release notes). These releases deliver bug fixes along with some minor improvements. Users are encouraged to update to the latest patch release.

Project Site | Reference | Help

NOTE: There was a missing dependency update in 5.2.14.RELEASE which caused us to need to release 5.2.15.RELEASE.

On behalf of the community, I am pleased to announce that the General Availability (RELEASE) of the Spring Cloud 2020.0.5 Release Train is available today. The release can be found in Maven Central. You can check out the 2020.0.5 release notes for more information.

Notable Changes in the 2020.0.5 Release Train

Spring Cloud Netflix

• Upgraded Netflix/Eureka to 1.10.17 issue

Spring Cloud Config

• Support Using HTTPS proxies for Git Repositories (1965)
• Support ordering AWS, Redis, and CredHub Repositories (1980)

Spring Cloud Gateway

• Enhancements for metrics: Netty connections, path as tag, and route definition count
…

Dear Spring community,

It is my pleasure to announce that the first Spring Framework 6.0 milestone release is available from htts://repo.spring.io/milestone now. This initial milestone covers our baseline upgrade efforts, in particular requiring JDK 17+ and migrating to the Jakarta EE 9 APIs; see my recent baseline blog post for the rationale. At the same time, it removes many long-deprecated classes, including several support packages for outdated third-party infrastructure.

For current upgrade notes, please refer to our Upgrading to Spring Framework 6.0 page which we will keep updating. Follow our main branch on GitHub for the latest changes, as we prepare for 6.0 M2 and the corresponding Spring Boot 3.0 M1 release in January. At that point, you will also be able to consume Spring Framework 6.0 through https://start.spring.io/. For the time being, feel free to grab 6.0 M1 from https://repo.spring.io/…

Update Jan 5, 2022: The releases include fixes for CVE-2021-22060 whose official publication was deferred until today since many people take time off at the end of the year.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.3.14 and 5.2.19 are available now.

Spring Framework 5.3.14 includes 36 fixes and improvements. Spring Framework 5.2.19 includes 11 selected fixes and improvements.

Stay tuned for the announcement of Spring Framework 6.0.0-M1 later today!

Project Page | GitHub | Issues | Documentation

On behalf of the community, I am pleased to announce that the Release Candidate 1 (RC1) of the Spring Cloud Square 0.4.0 is available today. The release can be found in Spring Milestone repository. You can check out the 0.4.0-RC1 release notes for more information.

This is primarily a bugfix release. See all issues included in this release here.

Notable changes in RC1:

• Spring Cloud Sleuth integration for OkHttpClient #36

The documentation for this milestone can be found here.

The Spring GraphQL team has just released the 4th milestone towards a 1.0.0 release. Thanks to all contributors!

In this milestone, we have further improved the annotation programming model and extended the Spring Data support that were provided in the previous milestones.

Interface Projections for GraphQL Arguments

If you're familiar with Spring Data's Interface-based Projections, then this new feature will make perfect sense: you can use a well-defined interface to work with GraphQL arguments, without the need for any Object implementation.

For example:

@Controller
public class…

Dear Spring Community,

I am happy to announce the 4.13.0 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

major changes to the Spring Tools 4 for Eclipse distribution

• updated to Eclipse 2021-12 release (including support for Java 17) (new and noteworthy)
• builds for Apple Silicon platform (ARM M1) are available now from the regular download page

additional changes

• (Spring Boot) fixed: STS 4.12.0 (for eclipse) *.yml can't automatic prompt (#690)
• (Spring Boot) fixed: A StackOverFlow error for serializable Kotlin data class for autocompletion in the Eclipse IDE (#693)
• (Eclipse) fixed: Typescript comparison: An internal error occurred during: "LSP4E Linked Editing Highlight" (#700)
• (Eclipse) fixed: js syntax highlight disabled by STS4 (#702)
• (Eclipse) fixed: Cannot copy/paste from ANSI console without escape sequences (#667) - fixed in ANSI Color Console project thanks to @mihnita
…