We have released Spring Framework 5.3.17 and Spring Framework 5.2.20 to address the following CVE report.

• CVE-2022-22950: Spring Expression DoS Vulnerability

Please review the information in the CVE report and upgrade immediately.

Spring Boot users should upgrade to 2.5.11 or 2.6.5.

As a follow-up to my blog post from last year's SpringOne, it is time for an update on our Java 17+ baseline efforts!

We established the new baseline on our main branches, with a few milestones out already. The feedback has been very positive, not only in terms of framework improvements but also in terms of the motivation for a Java upgrade at the application level. Of course, it does not end with JDK 17 LTS: JDK 18 is an immediate option already, JDK 19 will be the current release when we go final later this year, with JDK 20 to be in early access by then - and JDK 21 LTS on the horizon…

Hi, Spring fans! In this installment Josh Long (@starbuxman) talks to event streaming guru at Confluent, the company behind Apache Kafka, Jan Svoboda about Apache Kafka design patterns.

• Kafka summit in London Europe end of April 2022 Kafka Summit London 2022 | April 25-26 | London, UK
• the Confluent Developer Education Portal: Your Apache Kafka® Journey begins here
• check out the upcoming Kafka Summit London event April 25-26, 2022

Hi, Spring fans! In this installment we look at how to use Spring's AbstractRoutingDataSource to build multi-tenant JDBC database code.

code: https://github.com/spring-tips/multitenant-jdbc speaker: Josh Long (@starbuxman)

It finally happened! They did it! They did it just in time for me to get on the road and start building applications on the road with my shiny new laptop, too! JOY!! Oracle and the GraalVM team released GraalVM and the GraalVM native image capability for Apple M1! I've been waiting for this day for so, so, so long! I bought the first Apple M1 the day of the announcement way back in 2020 (does anybody remember that far back? That was, meteorologically speaking, the early pandemic period).

Apple's M1 devices are insanely fast, energy-efficient beasts of machines that run circles around all but the beefiest and latest-and-greatest Intel/NVidia configurations while also consuming a pittance of the power that other configuration does. In short, I'm a big fan…

Those of you who know the Spring Native experimental project are aware that the Spring team has been working on native image support for Spring applications since 2019. After a first beta in March 2021, we shipped an extensive revision of our Spring Native efforts in December 2021.

We’ve also announced at SpringOne last year that we intend to promote this work to Spring Framework 6.0 proper in the course of 2022. Following the release of our third milestone, this blog post walks you through what has been included already and what is coming next.

Ahead-Of-Time Processing

Processing the…

On behalf of everyone involved, I'm pleased to announce the availability of the sixth and final milestone of Spring for GraphQL on the way to 1.0. Our next stop is RC1 in 4 weeks, followed by the GA on May 17.

GraphQL Client

A GraphQL client is something we identified as a goal quite early on. It's issue number 10 from 336 at present in the issue tracker, but we viewed testing support as higher priority and so the GraphQL Tester came first and has been available from the start.

The Tester did prove valuable and popular, but we knew we had to fully explore the client before 1.0 as the two are…

Hi, Spring fans! Welcome to another installment of This Week in Spring! Spring time is here! Astrologically and meteorlogically, speaking, of course. I love this season. Longer days, greener grass, bluer skies, and more. Next week, my family and I are headed to Hawaii for some much-needed R&R while my daughter has a week off from school. (It's hard to believe she might be going to college in another state in 18 short months! We need all the family vacations we can get together! T_T)

As always, we've got a lot to look at today, so let's dive right into it!

• First thing: Java 18 was released today! There are a ton new features, including UTF-8 by default, a simple HTTP server, a reimplementation of core reflection to use method handles, an SPI for internet resolution, an easier JavaDoc attribute to simplify the inclusion of code snippets in JavaDoc comments, and previews of a bunch of amazing new features including pattern matching for switch, Project Panama, the new Vector API (as in matrix multiplication, not a collection, exactly). There's also a switch you can use to disable finialization and finalizers, which you might want to try now to see if your application continues to do the right…

Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to Elastic's Felix Barnsteiner about APM for Spring developers.

• make log onboarding easier. Start here.
• use this to make slow methods show up in traces