Spring Boot 2.7.11 available now fixing CVE-2023-20873

Releases | Andy Wilkinson | April 20, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.11 has been released and is now available from Maven Central.

This release includes 24 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 3.0.6 available now fixing CVE-2023-20873

Releases | Andy Wilkinson | April 20, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.6 has been released and is now available from Maven Central.

This release includes 41 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring for GraphQL 1.2.0-RC1 released

Releases | Rossen Stoyanchev | April 19, 2023 | ...

I'm happy to announce that a Spring for GraphQL 1.2 release candidate is now available via https://repo.spring.io/milestone.

Pagination for Querydsl and Query By Example

The M1 release provided abstractions and infrastructure for pagination and sorting, including support for input and output types on annotated controller methods that minimize what applications need to do to support paginated queries.

The current release candidate completes this by extending pagination support to our Querydsl and Query By Example DataFetcher implementations, both of which now expose a scrollable factory method.

This Week in Spring - April 18th, 2023

Engineering | Josh Long | April 18, 2023 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I just returned from Western Europe for Devoxx FR (Paris) and Kotlin Conf (Amsterdam). I went home, saw my family, did some laundry, and then turned right back around to head to Chicago, Illinois, for a special joint session of the Chicago Kotlin and Java Users Group tonight where I'll be copresenting with my pal, field CTO Justin Reock. It's going to be a ton of fun! Don't miss out!

Spring Authorization Server 1.1.0-RC1 available now

Releases | Joe Grandja | April 18, 2023 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.1.0-RC1.

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

Spring Authorization Server 1.0.2 and 0.4.2 available now

Releases | Joe Grandja | April 18, 2023 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.0.2 and 0.4.2.

See the 1.0.2 and 0.4.2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 released, fix CVE-2023-20862

Releases | Marcus Hert Da Coregio | April 17, 2023 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 versions are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVE:

The 6.0.3 and 5.7.8 versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up the latest Spring Security version.

For Gradle builds in build.gradle

Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 are now available

Releases | Janne Valkealahti | April 17, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 has been released and is now available from Maven Central and https://repo.spring.io/milestone respectively.

Please see the release notes 2.1.8, release notes 3.0.2 and release notes 3.1.0-M2 for more details.

Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

Project Page | GitHub | Issues | Documentation

Spring Data 2023.0-RC1 and Service Releases 2022.0.5 & 2021.2.11 released

Releases | Greg L. Turnquist | April 14, 2023 | ...

On behalf of the team, I’m pleased to announce the availability of the first Release Candidate of the Spring Data 2023.0 release train as well as service releaes 2022.0.5 & 2021.2.11. These releases ship with improvements, including fixes for regressions.

The upcoming Spring Boot 3.0.6 and 2.7.11 releases are going to pick up the service releases for your convenience.

New features included in 2023.0.0 RC1 are amongst others:

  • MariaDB support for Spring Data R2DBC has been reinstated.
  • Spring Data MongoDB introduces an @Hint annotation as well as support for reactive bulk operations.
  • Many enhancements to the Spring Data JPA Hibernate and JPQL parsers to better support aliases and other aspects of query parsing for @Query annotated queries.

Get the Spring newsletter

Thank you for your interest. Someone will get back to you shortly.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all