On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.6 has been released and is now available from Maven Central.

This release includes 41 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.11 has been released and is now available from Maven Central.

This release includes 24 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

Hi, Spring fans! In this installment, Java Champion and legend Trisha Gee (@trisha_gee) rejoins the show to talk about Gradle, developer productivity, and so much more

I'm happy to announce that a Spring for GraphQL 1.2 release candidate is now available via https://repo.spring.io/milestone.

Pagination for Querydsl and Query By Example

The M1 release provided abstractions and infrastructure for pagination and sorting, including support for input and output types on annotated controller methods that minimize what applications need to do to support paginated queries.

The current release candidate completes this by extending pagination support to our Querydsl and Query By Example DataFetcher implementations, both of which now expose a scrollable factory method.

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.0.2 and 0.4.2.

See the 1.0.2 and 0.4.2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.1.0-RC1.

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I just returned from Western Europe for Devoxx FR (Paris) and Kotlin Conf (Amsterdam). I went home, saw my family, did some laundry, and then turned right back around to head to Chicago, Illinois, for a special joint session of the Chicago Kotlin and Java Users Group tonight where I'll be copresenting with my pal, field CTO Justin Reock. It's going to be a ton of fun! Don't miss out!

• A Bootiful Podcast: Sonatype's Steve Poole and Gradle's Justin Reock on Improving Developer Productivity without compromising on things like security
• Spring Authorization Server 1.0.2 and 0.4.2 available now
• Upgrade to the latest and greatest in Spring Data, because it's good for you: Spring Data 2023.0-RC1 and Service Releases 2022.0.5 & 2021.2.11 released
• Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 are now available
• A Guide to @Timeout Annotation in JUnit 5
• Best practices for managing Java dependencies
• I love the new pod topology constraint support in Kubernetes 1.27. Blog: Kubernetes 1.27: More fine-grained pod topology spread policies reached beta…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 has been released and is now available from Maven Central and https://repo.spring.io/milestone respectively.

Please see the release notes 2.1.8, release notes 3.0.2 and release notes 3.1.0-M2 for more details.

Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

Project Page | GitHub | Issues | Documentation

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 versions are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVE:

• cve-2023-20862: Empty SecurityContext Is Not Properly Saved Upon Logout

The 6.0.3 and 5.7.8 versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up the latest Spring Security version.

For Gradle builds in build.gradle…