On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.0.2 and 0.4.2.

See the 1.0.2 and 0.4.2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.1.0-RC1.

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I just returned from Western Europe for Devoxx FR (Paris) and Kotlin Conf (Amsterdam). I went home, saw my family, did some laundry, and then turned right back around to head to Chicago, Illinois, for a special joint session of the Chicago Kotlin and Java Users Group tonight where I'll be copresenting with my pal, field CTO Justin Reock. It's going to be a ton of fun! Don't miss out!

• A Bootiful Podcast: Sonatype's Steve Poole and Gradle's Justin Reock on Improving Developer Productivity without compromising on things like security
• Spring Authorization Server 1.0.2 and 0.4.2 available now
• Upgrade to the latest and greatest in Spring Data, because it's good for you: Spring Data 2023.0-RC1 and Service Releases 2022.0.5 & 2021.2.11 released
• Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 are now available
• A Guide to @Timeout Annotation in JUnit 5
• Best practices for managing Java dependencies
• I love the new pod topology constraint support in Kubernetes 1.27. Blog: Kubernetes 1.27: More fine-grained pod topology spread policies reached beta…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Shell 2.1.8, 3.0.2 and 3.1.0-M2 has been released and is now available from Maven Central and https://repo.spring.io/milestone respectively.

Please see the release notes 2.1.8, release notes 3.0.2 and release notes 3.1.0-M2 for more details.

Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

Project Page | GitHub | Issues | Documentation

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 6.1.0-RC1, 6.0.3, 5.8.3 and 5.7.8 versions are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVE:

• cve-2023-20862: Empty SecurityContext Is Not Properly Saved Upon Logout

The 6.0.3 and 5.7.8 versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up the latest Spring Security version.

For Gradle builds in build.gradle…

On behalf of the team, I’m pleased to announce the availability of the first Release Candidate of the Spring Data 2023.0 release train as well as service releaes 2022.0.5 & 2021.2.11. These releases ship with improvements, including fixes for regressions.

The upcoming Spring Boot 3.0.6 and 2.7.11 releases are going to pick up the service releases for your convenience.

New features included in 2023.0.0 RC1 are amongst others:

• MariaDB support for Spring Data R2DBC has been reinstated.
• Spring Data MongoDB introduces an @Hint annotation as well as support for reactive bulk operations.
• Many enhancements to the Spring Data JPA Hibernate and JPQL parsers to better support aliases and other aspects of query parsing for @Query annotated queries.
…

Hi, Spring fans! Welcome to another installment of a Bootiful Podcast! In this installment, recorded at Devnexus in Atlanta, GA, I talk to newcomer to the show Steve Poole, from Sonatype, and Justin Reock, from Gradle, about improving developer productivity without comprising on things like security.

• I wrote an e-book on AOT and GraalVM support in Spring Boot 3
• Check out this roving 1 hour tour of Spring Boot 3 over on the Jetbrains channel
• I did a 6m video looking at Spring Boot 3 for the impatient on my channel
• want a great free resource to learn Spring Boot? Check out the Spring.academy

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Framework 6.0.8, 5.3.27 and 5.2.24.RELEASE versions are available now.

Spring Framework 6.0.8 ships with 60 fixes and documentation improvements, including 5 fixes for regressions. Spring Framework 5.3.27 ships with 20 fixes and documentation improvements, including 4 fixes for regressions. Spring Framework 5.2.24.RELEASE ships with 3 fixes.

Those versions fix the following CVE:

• cve-2023-20863: Spring Expression DoS Vulnerability

Those versions will be shipped with Spring Boot 3.0.6 and 2.7.11, to be released next Thursday. In the meantime, you can update your existing Spring Boot application to pick up…

Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this I am in Amsterdam, Netherlands, preparing to speak at the Utrecht JUG tonight along with fellow Java Champion Trisha Gee. We're not speaking together, but instead it's a double header: she'll speak first, then I after. I am super excited to learn from her! Then, I join James Ward and we'll speak at Kotlin Conf. Then, I take a quick train to Paris to speak at Devoxx Fr. I hope if you're about you'll join me at any of these talks.

• Want to learn the nitty gritty of using Spring Cloud's Azure Key Vault integration? Check out this guide on the Baeldung blog: A Guide to Spring Cloud Azure Key Vault
• Context Propagation with Project Reactor 1 - The Basics
• Context Propagation with Project Reactor 2 - The bumpy road of Spring Cloud Sleuth
• Context Propagation with Project Reactor 3 - Unified Bridging between Reactive and Imperative
• Is There an Equivalent of Spring Boot for Kotlin? (Yes. Also: Sébastien Deleuze works like a "Greek hero")
• Did you know that Spring has a ton of helpful utility methods? Check out this oldie-but-a-goodie Spring Tips…