Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 released, fix CVE-2023-20862

Releases | Marcus Hert Da Coregio | April 17, 2023 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 versions are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVE:

The 6.0.3 and 5.7.8 versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up the latest Spring Security version.

For Gradle builds in build.gradle

Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 are now available

Releases | Janne Valkealahti | April 17, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 has been released and is now available from Maven Central and https://repo.spring.io/milestone respectively.

Please see the release notes 2.1.8, release notes 3.0.2 and release notes 3.1.0-M2 for more details.

Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

Project Page | GitHub | Issues | Documentation

Spring Data 2023.0-RC1 and Service Releases 2022.0.5 & 2021.2.11 released

Releases | Greg L. Turnquist | April 14, 2023 | ...

On behalf of the team, I’m pleased to announce the availability of the first Release Candidate of the Spring Data 2023.0 release train as well as service releaes 2022.0.5 & 2021.2.11. These releases ship with improvements, including fixes for regressions.

The upcoming Spring Boot 3.0.6 and 2.7.11 releases are going to pick up the service releases for your convenience.

New features included in 2023.0.0 RC1 are amongst others:

  • MariaDB support for Spring Data R2DBC has been reinstated.
  • Spring Data MongoDB introduces an @Hint annotation as well as support for reactive bulk operations.
  • Many enhancements to the Spring Data JPA Hibernate and JPQL parsers to better support aliases and other aspects of query parsing for @Query annotated queries.

Spring Framework 6.0.8, 5.3.27 and 5.2.24.RELEASE fix cve-2023-20863

Releases | Brian Clozel | April 13, 2023 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Framework 6.0.8, 5.3.27 and 5.2.24.RELEASE versions are available now.

Spring Framework 6.0.8 ships with 60 fixes and documentation improvements, including 5 fixes for regressions. Spring Framework 5.3.27 ships with 20 fixes and documentation improvements, including 4 fixes for regressions. Spring Framework 5.2.24.RELEASE ships with 3 fixes.

Those versions fix the following CVE:

Those versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up…

A Bootiful Podcast: Sonatype's Steve Poole and Gradle's Justin Reock on Improving Developer Productivity without compromising on things like security

Engineering | Josh Long | April 13, 2023 | ...

Hi, Spring fans! Welcome to another installment of a Bootiful Podcast! In this installment, recorded at Devnexus in Atlanta, GA, I talk to newcomer to the show Steve Poole, from Sonatype, and Justin Reock, from Gradle, about improving developer productivity without comprising on things like security.

This Week in Spring - April 11th, 2023

Engineering | Josh Long | April 11, 2023 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this I am in Amsterdam, Netherlands, preparing to speak at the Utrecht JUG tonight along with fellow Java Champion Trisha Gee. We're not speaking together, but instead it's a double header: she'll speak first, then I after. I am super excited to learn from her! Then, I join James Ward and we'll speak at Kotlin Conf. Then, I take a quick train to Paris to speak at Devoxx Fr. I hope if you're about you'll join me at any of these talks.

A Bootiful Podcast: José Paumard, Java Champion alumnus and Java legend, on Project Loom, Valhalla, and more, from Devnexus 2023!

Engineering | Josh Long | April 06, 2023 | ...

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast. In this installment I'll talk to legendary Oracle Java Champion (alumnus), Java advocate, professor emeritus, and all around amiable fellow José Paumard, recorded at the amazing Devnexus 2023 event!

This Week in Spring - April 4th, 2023

Engineering | Josh Long | April 04, 2023 | ...

The Spring team at Devnexus 2023

News | Josh Long | April 04, 2023 | ...

The Spring team is out in force here at Devnexus! I hope you'll come see us. Here's my annotated look at what sessions I want to see over the oh-so-brief three days of the show.

Tuesday, April 4th, 2023

The fun starts today, with the Spring Boot 3 workshop with Spring Boot cofounder Phil Webb and Micrometer and observability ninja Jonatan Ivanov

Wednesday, April 5th, 2023

Tomorrow, the fun continues! At 10am, our friends over at Vaadin will have a talk, Full Stack Reactive with Spring Boot and React, that looks mighty interesting! My friends and Nate Schutta and Dan Vega have a talk, Spring Recipes: A Collection of Common-Sense Solutions

A Bootiful Podcast: Spring Integration lead Artem Bilan on the latest in Spring Integration 6

Engineering | Josh Long | March 30, 2023 | ...

Hi, Spring fans! In this installment Josh Long (@starbuxman) talks to Spring Integration lead Artem Bilan (@artem_bilan) about the latest and greatest in Spring Integration. Spring Integration makes it easier to connect an increasingly larger ecosystem of disparate services and systems.

SHOW NOTES:

Get the Spring newsletter

Thank you for your interest. Someone will get back to you shortly.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all