On behalf of the team and everyone that contributed, I am pleased to announce that Spring Boot 1.5.17 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 1.5.17 includes 19 fixes, improvements, and dependency updates as well as 2 CVE reports. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team and everyone that contributed, it is my pleasure to announce that Spring Boot 2.0.6 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 2.0.6 includes 97 fixes, improvements, and dependency updates as well as a Spring Framework CVE report. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

I’m pleased to announce the releases of Spring Security OAuth 2.3.4, 2.2.3, 2.1.3 and 2.0.16. The releases address a vulnerability. Please see this blog post published after the associated Spring Boot 2.0.6 and 1.5.17 releases.

For a list of changes, please refer to:

• 2.3.4 changelog

• 2.2.3 changelog

• 2.1.3 changelog

• 2.0.16 changelog

Project Page | GitHub | Documentation | Help

On behalf of the team, I am pleased to announce that Spring Framework 5.1.1, 5.0.10 and 4.3.20 are available now.

The first maintenance release of the 5.1 line includes over 30 fixes and improvements. Spring Framework 5.0.10 also includes a wide range of 20 fixes and improvements while Spring Framework 4.3.20 is a rather minimal patch release.

The first release candidate of Spring Boot 2.1, based on Spring Framework 5.1.1, is around the corner! We'll also follow up with corresponding Spring Boot 2.0.6 and 1.5.17 releases later this week.

Project Page | GitHub | Issues | Documentation

2018-10-16 UPDATE: The releases address a vulnerability. Please see this blog post…

On behalf of the Spring Data team, I'd like to announce the availability of the Lovelace SR1, Kay SR11, and Ingalls SR16 maintenance releases. All of these releases pick up the latest Spring Framework maintenance releases: 5.1.1, 5.0.10, and 4.3.20, respectively. Spring Boot is going to pick up Kay SR11 and Ingalls SR16 for easier consumption with its Spring Boot releases 2.0.6 1.5.17 releases, respectively.

The service releases ship with mostly bug fixes and a few dependency upgrades and with over 70 issues fixed in total. You can find the complete list of issues by following the links below:

We're please to announce the release of Spring Cloud Open Service Broker 2.1.0.M1. The 2.1.0 release will support additions and changes in the Open Service Broker API v2.14. This release includes:

• Support providing an updated dashboard_url when updating a service instance
• Resolves issues with deserializing the model objects that were converted to the builder pattern

View the closed issue list on GitHub. The next release, 2.1.0.M2, will include support for asynchronous bindings. Watch for it in the coming weeks.

Project Page | GitHub | Reference Doc | API Doc

We're please to announce the release of Spring Cloud Open Service Broker 3.0.0.M1. The 3.0 release introduces full reactive support and builds upon 2.1.0.M1, which will support additions and changes in the Open Service Broker API v2.14. This release includes:

• First class support for Spring WebFlux and Project Reactor
• The starter has been renamed because it now supports both Spring web frameworks
• Introduces several reactive life cycle hooks for performing additional operations

Include the following Spring Boot starter:

<dependency>
  <groupId>org.springframework.cloud</groupId…

On behalf of the community, I'd like to announce the general availability of Spring Vault 2.1. Spring Vault 2.1 requires JDK 8 or higher and specifically supports JDK 11 as the next long-term support release. The most notable changes of Spring Vault 2.1 are:

• Extending infrastructure-based authentication to support Google Cloud IAM and Azure Managed Service Identity.
• Integrating Vault’s versioned Key-Value backend.
• Wrapping API support.
• Java 11 compatibility.

This release is compatible with Vault versions from 0.5.2 up to 0.11.1.

Make sure to also check out our blog post that explains the new features in detail…

On behalf of the community, it is my pleasure to announce the general availability of Spring Security 5.1. This release closes off 50+ tickets.

Please check out the What’s New in Spring Security 5.1.

As always, we look forward to hearing your feedback!

Project Site | Reference | Help