Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it will be! I'm in Venice, Italy, on a little vacation, but tomorrow I begin a quick journey to beautiful Sofia, Bulgaria, where I'll be speaking at the amazing JPrime software show (it's my first time speaking there, though not even my 20th time speaking in Bulgaria!). I'm so looking forward to it.

Then, I turn right back around and head to Barcelona, Spain, for the not-to-be-missed Spring IO event! I love Spring IO, and you should too! It is, in my estimation, the premier Spring event in EMEA and an…

Spring Boot 3.3.0 has been released, and it contains support for SBOMs. SBOM stands for "Software Bill of Materials" and describes the components used to build a software artifact. In the context of this blog post, that's your Spring Boot application. These SBOMs are useful because they describe exactly what your application contains. With that information, you can assess if a security vulnerability affects your application, or use automated security tools to scan your applications and alert you on security vulnerabilities.

There are multiple SBOM formats out there, the most widely used ones are CycloneDX, SPDX, and Syft. Spring Boot 3.3.0 supports CycloneDX out of the box. The…

I am excited to announce the availability of Spring Modulith 1.2 alongside the service releases 1.1.5 and 1.0.8. The latter two contain a lot of bug fixes, improvements and dependency upgrades. 1.2 most notably ships with new features:

• Support for open application modules
• Support for a package-info.java alternative for Kotlin
• Indexes for event publication registry database tables (JDBC)
• Spring AOT-generated classes excluded from verification
• Upgrade to Spring Boot 3.3 (while retaining compatibility with 3.2 and 3.1)

Find more information in the full changelogs for 1.2 (RC1, M3, M2, M1), 1.1.5 and 1.0.8…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.1.12 has been released and is now available from Maven Central.

This release includes 49 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

End of open source support for Spring Boot 3.1.x

Spring Boot 3.1.12 marks the end of open source support for Spring Boot 3.1.x. Please upgrade to Spring Boot 3.2.x as soon as possible. If you are not yet ready to upgrade, commercial support for Spring Boot 3.1.x is available…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.2.6 has been released and is now available from Maven Central.

This release includes 75 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

Hi, Spring fans! In today's installment we talk to Tagir Valeev, a fellow Java Champion and IntelliJ IDEA Java legend.

Also: don't forget to try out the just-released Spring Boot 3.3 release!

On behalf of the Spring Boot team and everyone that has contributed, I am pleased to announce that Spring Boot 3.3.0 has been released and is available from Maven Central.

This release adds a significant number of new features and improvements. For full upgrade instructions and new and noteworthy features please see the release notes.

What's new in 3.3

The highlights of the 3.3 release include:

• CDS Support for improved startup times and reduced memory consumption
• Observability improvements, for example support for Micrometer's @SpanTag, a process InfoContributor and Prometheus 1.x support
• Spring Security improvements, for example an auto-configuration for JwtAuthenticationConverter
• Service connection support for Apache ActiveMQ Artemis and LDAP
• Docker Compose support for Bitnami Container Images
• Virtual thread support for websockets
• Support for Base64 resources in property (and YAML) files
• Support for SBOMs with the new SBOM actuator endpoint
• A completely revamped documentation…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.3.

The 1.3 release contains a few noteworthy new features:

• RFC 8705 OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens (gh-101)
• RFC 8693 OAuth 2.0 Token Exchange (gh-1525)
• Multitenancy support (gh-1342) -- see the guide How-to: Implement Multitenancy

See the 1.3 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.8, 6.0.21 and 5.3.36 are available now.

We are releasing out of our usual cycle to fix an AOP regression that was shipped last week.

• Spring Framework 6.1.8 ships with 10 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.6, to be released tomorrow.
• Spring Framework 6.0.21 ships with 6 fixes and documentation improvements. This version will be shipped with Spring Boot 3.1.12, to be released tomorrow.
• Spring Framework 5.3.36 ships with 3 fixes and documentation improvements.
…