On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Boot 1.5.20 has been released and is now available from repo.spring.io and Maven Central.

Spring Boot 1.5.20 is a maintenance release that includes over 30 dependency updates and selected bug fixes. These upgrades include Spring Security OAuth 2.0.17 which addresses a recently announced CVE.

If you haven’t already upgraded to Spring Boot 2, please consider doing so as support for 1.x will end on August 1st 2019.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter