Spring Authorization Server is on Spring Initializr!

Engineering | Steve Riesenberg | May 24, 2023 | ...

Today, I'm excited to announce that you have a new superpower: creating applications with Spring Authorization Server on Spring Initializr!

That's right, it's time to begin your OAuth2 journey and become the hero you always knew you could be! In this post, I'll explain how you can get the most from your new superpower and where to go to learn more.

What is Spring Authorization Server?

Spring Authorization Server is an open-source framework built on top of Spring Security that allows you to create your own standards-based OAuth2 Authorization Server or OpenID Connect Provider. It implements…

This Week in Spring - May 23rd, 2023

Engineering | Josh Long | May 23, 2023 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's May 23rd and, famously, nothing major has happened in the last week OH WAIT WE RELEASED SPRING BOOT 3.1! Have you checked it out yet? It's dope. I did a Spring Tips installment looking at some of its features here that you might like.

Friends, we've got a ton of stuff to get into this week, so let's dive right into it!

Unleash Spring apps in a flex environment with Azure Spring Apps Consumption and Dedicated plans

Engineering | Josh Long | May 23, 2023 | ...

In March, we introduced the Consumption pricing plan for Azure Spring Apps allowing you to start from zero and scale to zero vCPU. Today, we are thrilled to announce the public preview of the Standard Dedicated plan! The Standard Dedicated plan provides a fully managed, dedicated environment for running Spring applications on Azure. This plan offers you customizable compute options (including memory-optimized), single tenancy, and high availability to help you achieve price predictability, cost savings, and performance for running Spring applications at scale.

In 2019, Microsoft and Pivotal (now VMware) announced Azure Spring Apps, a fully managed service for Spring apps. We set out to solve many of the common challenges enterprise developers face when running Spring apps at scale. The service manages dynamic scaling, security patching, out-of-the-box instrumentation for monitoring, and more so developers can focus on their apps. Since then, we’ve worked with many customers including Bosch, Digital Realty, FedEx, Kroger, Liantis, Morgan Stanley, National Life, Raley's, and Swiss Re

Spring Boot 2.5.15 and 2.6.15 available now, fixing CVE-2023-20883

Releases | Phil Webb | May 18, 2023 | ...

I happy to announce that Spring Boot 2.5.15 and 2.6.15 have been released and are now available from Maven Central.

This release follows a request from a customer with commercial support that was looking to have the ability to upgrade to later versions of SnakeYAML.

This release also includes fixes for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability as well as CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

If you're interested in purchasing commercial support for Spring, please see https://spring.io/support.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 2.7.12 available now, fixing CVE-2023-20883

Releases | Andy Wilkinson | May 18, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.12 has been released and is now available from Maven Central.

This release includes 28 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 3.0.7 available now, fixing CVE-2023-20883

Releases | Andy Wilkinson | May 18, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.7 has been released and is now available from Maven Central.

This release includes 54 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Integration 6.1 goes GA

Releases | Artem Bilan | May 18, 2023 | ...

Dear Spring community,

Hope you enjoy Spring IO anniversary in Barcelona these days. I'm not there this years for many reasons. Either way, it is my pleasure to announce that Spring Integration 6.1.0 is generally available now from Maven Central.

In addition, bug fixes version 5.5.18 has been released.

The Spring Integration 6.1 version is a natural evolution of 6.x generation with fixes and improvements which didn't make it into 6.0. Plus we listen to community and make some possibly, but convenient for target projects breaking changes.

Some highlights of this new version include:

  • Upgrades to the latest dependencies, but only if they don't break the public API we expose

  • Added Protobuf transformers support (shout out to Christian Tzolov)

  • Migration of Zip extension to respective module in the core project

  • The MessageFilter now emits a WARN log when a request message is dropped making it, technically, not silent as it was before

  • Now gateways and replying handlers don't block forever for sending and receiving operations.

Spring Boot 3.1.0 available now

Releases | Scott Frederick | May 18, 2023 | ...

On behalf of the Spring Boot team and everyone that has contributed, I am pleased to announce that Spring Boot 3.1.0 has been released and is available from Maven Central.

This release adds a significant number of new features and improvements. For full upgrade instructions and new and noteworthy features please see the release notes.

What's new in 3.1

The highlights of the 3.1 release include:

  • Support for managing external services at development time using Testcontainers and Docker Compose
  • Simplified configuration of Testcontainers in integration tests
  • Centralized and expanded configuration of SSL trust material for connections
  • Auto-configuration for Spring Authorization Server

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all