The Problem

One of Spring Data JPA’s handy features is letting you plugin in custom JPA queries through its @Query annotation.

This allows some flexiblity because you are still able to offer sort parameters to the consumers of your app. Check out the example below:

interface SampleRepository extends CrudRepository<Employee, Long> {

    @Query("select e from Employee e where e.firstName = :firstName")
    List<Employee> findCustomEmployees(String firstName, Sort sort);

}

Spring Data JPA will turn this custom query into a JPA query when provided not just with a criteria (firstName) but also a custom sort via findCustomEmployees("Alice", Sort.by("lastName"))…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.1.0-M2.

The main feature delivered in this release is support for OAuth 2.0 Device Authorization Grant (gh-1106).

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | ZenHub Board

I am pleased to announce the first milestone release of Spring for GraphQL 1.2.0 is now available from our Milestone repository. This version will be shipped with Spring Boot 3.1.0-M2 due for release this Thursday.

This first milestone raises the baseline to GraphQL Java 20.0 and we will align with the new GraphQL Java release policy in the future. We are also upgrading to the next generations of Spring Framework, Spring Data and Spring Security.

Pagination Support

When it comes to navigating large result sets with GraphQL, the Cursor Connection Specification is very popular. With the features…

Hi, Spring fans! Welcome to another rip roaring installment of This Week in Spring! It's March 21st and today they announced Java 20! It's an exciting time to be a Java developer. Java 20, of course, is just another amazing installment before Java 21, which comes out in six short months, including Project Loom. And, of course, Spring Framework looks set to provide integrations with it in Spring Framework 6.1. It's an amazing time to be a Java and Spring Boot developer!

• In my latest installment of Spring Tips, I look Vaadin Flow and Spring Boot 3
• I did a video introducing Spring Boot 3 for the fine folks over at Jetbrains a few weeks ago. People seem to love it. Maybe you will too?
• In the comments for this video, a viewer from Columbia asked me to do a video introducing Spring Webflux and I remembered I've done a ton of videos on reactive programming with Spring Boot, including this one, that people seemed to like from 2019
• …

Hi, Spring fans! In this installment, we'll look at the fantastic Vaadin Flow library, which has recently been updated for Spring Boot 3, and how it can help you be happier.

the code is available, as usual, here

this episode features special guest Marcus Hellberg, VP developer relations from Vaadin, and my colleague Tiffany Jernigan

NO DEVELOPER ADVOCATES WERE HARMED IN THE MAKING OF THIS VIDEO

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Framework 6.0.7 and 5.3.26 versions are available now.

Spring Framework 6.0.7 ships with 28 fixes and documentation improvements, including 2 fixes for regressions. Spring Framework 5.3.26 ships with 40 fixes and documentation improvements.

Those versions fix the following CVEs:

• cve-2023-20860: Security Bypass With Un-Prefixed Double Wildcard Pattern
• cve-2023-20861: Spring Expression DoS Vulnerability

Those versions will be shipped with Spring Boot 3.0.5 and 2.7.10, to be released Thursday. In…

On behalf of the team, I am pleased to announce that Spring Framework 5.2.23.RELEASE is available now. This release has been requested by Spring Framework commercial support customers and is available on Maven Central.

Spring Framework 5.2.23.RELEASE ships with 3 fixes, including a fix for the following CVE:

• cve-2023-20861: Spring Expression DoS Vulnerability.
• 5.2.22.RELEASE was not vulnerable to cve-2023-20860, so no fix was required.

This version will not be shipped with a Spring Boot release as 2.3.x is out of commercial support. You can manually upgrade Spring Framework in your Spring Boot Maven or Gradle builds. Upgrading to a supported Spring Boot version is…

On behalf of the team, I’m pleased to announce the availability of the 3rd Milestone of the Spring Data 2023.0 release train as well as service releaes 2022.0.4 & 2021.2.10. These releases ship with improvements, including fixes for regressions.

The upcoming Spring Boot 3.0.5 and 2.7.10 releases are going to pick up the service releases for your convenience.

New features included in 2023.0.0 Milestone 3 are amongst others:

• A new scroll API to support offset and key based pagination
• Improvements in JPA query parsing for HQL and JPQL
• Support for MongoDB's explicit field level encryption
• Aggregate reference request parameters in Data REST
…

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Vault 3.0.2 and 2.3.3 versions are available now.

Spring Vault 3.0.2 ships with 7 fixes and documentation improvements Spring Vault 2.3.3 ships with 13 fixes and selected improvements.

Those versions fix the following CVE:

CVE-2023-20859: Insertion of Sensitive Information into Log Sourced from Failed Revocation of Tokens

Those versions will be shipped with Spring Cloud in the next days. Until then, please override the dependency version in your project.

For Gradle builds in build.gradle:

…