Spring Boot 2.0 was the first release in the 2.x line and was published on Feburary 28th 2018. We’ve just released Spring Boot 2.7 which means that, so far, we’ve been maintaining the 2.x line for just over 4 years. In total we’ve published 95 distinct releases over that timeframe!

The entire Spring team, and many in our community of contributors, are now preparing for the next generation of Spring. We are planning to release Spring Boot 3.0 in November 2022. This next major revision will be based on Spring Framework 6.0 and will require Java 17 or above. It will also be the first version of Spring Boot that makes use of Jakarta EE 9 APIs (jakarta.*) instead of EE 8 (javax.*…

Hi, Spring fans! I'm in Spain for business and not just a little pleasure. Yesterday, my partner, her mother, and I went to Formentera, Spain, a little island off of Ibiza, Spain. It was amazing. We're now in Ibiza, Spain, which is a little island not far from Barcelona, Spain, on the mainland of Spain. It feels a bit like that Inception movie. We traveled by boat to Formentera for a little vacation inside of another little vacation (Ibiza) and inside of another little vacation (Barcelona). Tomorrow I'll return to Barcelona for the Spring IO event. Yes, technically, this is work. But it's an…

Hi, Spring fans! This is a guest post by Julia Liuson, President, Developer Division, Microsoft

Azure Spring Cloud is now Azure Spring Apps

We launched Azure Spring Cloud with VMware in 2019 to solve common challenges developers, IT operators, and DevOps teams face when running Spring Boot applications at scale. Since then we’ve helped many customers adopt the service including Bosch, Digital Realty, FedEx, Kroger, Liantis, Morgan Stanley, National Life, Raley’s, and Swiss Re. They value the fully managed infrastructure of Azure Spring Cloud that lets them focus on their apps, while the…

On behalf of the Spring for GraphQL team and every contributor, it is my pleasure to announce the 1.0 GA release. It's been 10 months since the project was announced and under 2 years since the first commit, unremarkably called "first commit". The project began with the modest goal to replace the (now archived) minimal GraphQL Java Spring integration, but has since moved significantly beyond through community feedback and collaboration across Spring Boot, Spring Framework, Spring Data, and Spring Security.

The following are highlights from the release:

• Annotation-based programming model for data fetchers
• Data binding from input arguments with validation
• Field-level security through annotations on data @Controller methods
• Server handlers and interception over HTTP, WebSocket, and RSocket
• Querydsl and Query by Example repositories as data fetchers
• Batch loading support
• Client for executing over HTTP, WebSocket, and RSocket
• Test support with HTTP, WebSocket, RSocket, or directly, without a client
• GraphiQL page and schema printing page
…

Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to Devoxx UK organizer and Voxxed Days cofounder Mark Hazell (@mrhazell).

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc.

• A Bootiful Podcast: EasyMock contributor, Java Champion, and Java luminary Henri Tremblay
• Also, while we're on the topic of Spring Boot 2.7, remember that Spring for GraphQL is also 1.0 this week! I'm so excited :)
• Example of Spring Cloud Function with AWS Lambda
• I love this - the Activiti 7 developer's guide - showcases some cool patterns and principles for building service-centric workflow solutions with Spring Boot and Activiti
• a handy tip from Maciej Walkowiak on Twitter that Spring Boot 2.7 (due - :checks notes: - this week!) adds native support for Jackson Mixins with @JsonMixin…

UPDATES

• [05-17] Due to a mixup CVE-2022-22975 should have been CVE-2022-22978. The blog has been updated to reflect this correction.

CVE-2022-22978 : Authorization Bypass in RegexRequestMatcher

Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22978 : Authorization Bypass in RegexRequestMatcher. Please update as soon as possible.

Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22976: BCrypt skips salt rounds for work factor of 31. Please update as soon as possible.

Hi, Spring fans! In this episode, Josh Long (@starbuxman) talks to fellow Java Champion, EasyMock engineer, and Java luminary, JUG leader, and legend Henri Tremblay (@henri_tremblay)