Rob Winch

Rob Winch

Rob Winch is employed by VMware as the project lead of security related projects within Spring. He is also a committer on the core Spring Framework and co-author for Spring Security LiveLessons and a Spring Security book. In the past he has worked in the health care industry, bioinformatics research, high performance computing, and as a web consultant. When he is not sitting in front of a computer he enjoys cycling with his friends.

Recent Blog posts by Rob Winch

Spring Session 2026-02 Releases

Releases | February 18, 2026 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Session 4.1.0-M1, 4.0.2, and 3.5.5. This set of releases includes bug fixes and dependency upgrades. For a complete list of changes, refer to the changelogs: 4.1.0-M1 4.0.2 3.5.5 Project Page | GitHub | Issues | Documentation

Spring Authorization Server 2025-12 Releases

Releases | December 16, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Authorization Server 1.5.5, 1.5.4, 1.4.8, and 1.4.7. This set of releases includes bug fixes and back to back releases due do an error in the release process. For a complete list of changes, refer to the changelogs: 1.5.5 1.5.4 1.4.8 1.4.7 Project Page | GitHub | Issues | Documentation

Spring Session 2025-12 Releases

Releases | December 16, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Session 4.0.1, 3.5.4, and 3.4.7. This set of releases includes bug fixes and dependency upgrades. For a complete list of changes, refer to the changelogs: 4.0.1 3.5.4 3.4.7 Project Page | GitHub | Issues | Documentation

Spring Security 2025-12 Releases

Releases | December 15, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Security 7.0.1 and 7.0.2. This release included back to back releases to fix a bug in Spring Security 7.0.1. The highlights of 7.0.1 include: Fixing MFA support in Authorization Server For a complete list of changes, refer to the changelogs: 7.0.1 7.0.2 Project Page | GitHub | Issues | Documentation

Spring Security 2025-11 Releases - 7.0.0, 6.5.7, 6.4.13 available now!

Releases | November 17, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Security 7.0.0, 6.5.7, and 6.4.13. The highlights of 7.0.0 can be found in the What's New Section of the reference. For a complete list of changes, refer to the changelogs: 7.0.0 7.0.0-M1 7.0.0-M2 7.0.0-M3 7.0.0-RC1 7.0.0-RC2 7.0.0-RC3 6.5.7 6.4.13 Project Page | GitHub | Issues | Documentation

Spring Security 2025-10 Releases

Releases | October 20, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Security 7.0.0-RC1, 6.4.12 and 6.5.6. The highlights of 7.0.0-RC1 include: Improved MFA Support Support for providing credentials within a specified amount of recency Jackson 3 Support OAuth 2.0 Dynamic Client Registration Protocol For a complete list of changes, refer to the changelogs: 7.0.0-RC1 6.4.12 6.5.6 Project Page | GitHub | Issues | Documentation

Spring Session Hazelcast: Now Led by Hazelcast Team

Engineering | October 14, 2025 | ...
It gives me great pleasure to announce that the Spring Session Hazelcast project will now be led by the Hazelcast Team. NOTE: This announcement is in alignment with our announcement Spring Session MongoDB: Now Led by MongoDB Team. For ten years Spring Session has provided the infrastructure for transparently replacing session stores in a vendor independent manner. With that infrastructure in place, it is just a matter of implementing SessionRepository javadoc in order to support storing session information in a new datastore. I cannot think of a team who has more Hazelcast experience than the…

Spring Session MongoDB: Now Led by MongoDB Team

Engineering | October 14, 2025 | ...
It gives me great pleasure to announce that the Spring Session MongoDB project will now be led by the MongoDB Team. NOTE: This announcement is in alignment with our announcement Spring Session Hazelcast: Now Led by Hazelcast Team. For ten years Spring Session has provided the infrastructure for transparently replacing session stores in a vendor independent manner. With that infrastructure in place, it is just a matter of implementing SessionRepository javadoc in order to support storing session information in a new datastore. I cannot think of a team who has more MongoDB experience than the…

Spring Session 3.5.0 Released

Releases | May 20, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the general availability of Spring Session 3.5.0! This release contains fixes, dependency updates, and enhancements to position the project for Spring Session 4.0.0 this fall. Project Page | GitHub | Issues | Documentation

Spring Security 6.3.9 Released

Releases | April 21, 2025 | ...
On behalf of the team and everyone who has contributed, I am pleased to announce the availability of Spring Security 6.3.9. Please check the changelog for more details. Project Page | GitHub | Issues | Documentation

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all