Updates

• [11-27] This release includes a fix for CVE-2023-34055

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.18 has been released and is now available from Maven Central.

This release includes 43 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

End of open source support for Spring Boot 2.x

After 5.5 years and 121 releases, 2.7.18 marks the end of open source support for Spring Boot 2.x. Please upgrade to Spring Boot 3 as soon as possible. If you are not yet ready to upgrade, commercial support for Spring Boot 2.7.x is available…

Dear Spring community,

On behalf of Spring Integration team, it is my pleasure to announce 6.2.0 version which is available from Maven Central.

In addition, bug fixes version 6.1.5 has been released as well into Maven Central.

The last Open Source 5.5.20 and 6.0.9 releases are also available and everyone is encouraged to update if you cannot migrate to the latest greatest 6.2.0.

The notable changes in 6.2:

• The documentation migrated to Antora site generator and hosted alongside with other migrated Spring projects here

• Project CrAC support with some internal changes to close resources on components stop

• Virtual threads support with respective TaskExecutor injections and synchronized blocks to Lock

• The project build lifecycle is now connected to Gradle Enterprise, so every one contributing can now benefit from remote shared cache for Gradle tasks

• The LockRegistry interface provides a template-like executeLocked() API:

…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.0 is generally available from Maven Central now!

This release will be included in the upcoming Spring Boot 3.2 GA release.

Please see the release notes for more detail.

A great place to get started is the Quick Tour in the reference docs.

How can you help?

If you're interested in helping out, check out open issues in the Github repository. If you have general questions, please ask on Stack Overflow using the spring-pulsar tag.

GitHub | Issues | Documentation | Stack Overflow

On behalf of the Spring Security team, it is my pleasure to announce that Spring Session 3.2.0 is generally available from Maven Central now! The 3.2 generation comes with some key improvements:

• Introduce SessionIdGenerator to allow custom session id generation
• Allow safe deserialization of Redis sessions

You can check the related documentation on the What's New section of the reference docs. This release will be included in the upcoming Spring Boot 3.2 GA release. We are looking forward to hearing your feedback.

I am pleased to announce that Spring for GraphQL 1.2.4 is now available on Maven Central.

This release closes 23 issues. Thanks to community feedback, there are several bug fixes, some minor improvements, and documentation updates that help us evolve 1.2.x specific features such as pagination support, and exception handling with annotated controller methods.

The 1.2.4 version will ship with Spring Boot 3.1.6 and 3.2.0, to be released later this week. As a reminder, we are not releasing a new minor version with Spring Boot 3.2, and intend to release 1.3 with Spring Boot 3.3 in May, next year…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.2.

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Hot on the heels of Spring Framework 6.1, I am pleased to announce the 3.1 releases of Spring for Apache Kafka and Spring AMQP (Spring for RabbitMQ).

See the release notes for the 3.1.0, 3.1.0-RC1 and 3.1.0-M1 releases of each project - Spring for Apache Kafka and Spring AMQP for detailed content.

Also see the What's New documentation sections for highlights: Spring for Apache Kafka Spring AMQP.

On behalf of the Spring Security team, it is my pleasure to announce that Spring Security 6.2.0 is generally available from Maven Central now! The 6.2 generation comes with improvements that you can check on the What's New section of the documentation.

Spring Security 6.2 has upgraded its Spring Framework baseline to 6.1 along with Project Reactor 2023.0.0 and Micrometer 1.12.0 while requiring Java 17 as minimum platform version and supporting up to Java 21 for Virtual Threads support.

This release will be included in the upcoming Spring Boot 3.2 GA release. We'd like to hear from you, so keep…

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2023.0.6, 2022.0.12, and 2021.2.18 service releases. These releases ship with dependency upgrades, fixes and selected improvements.

The upcoming Spring Boot releases 3.1.6, respective 3.0.13 and 2.7.18 will pick up the above releases by next week.

We expect the next set of Spring Data maintenance releases to ship in mid-December.

End of Life

With today's releases, Spring Data development lines 2021.2.x ("Spring Data 2.7") and 2022.0.x ("Spring Data 3.0") are going end of life as per our open source support policy, with 2022.0.12 and 2021.2.18 being the last planned service releases. Releases may be done in the future, but only in response to commercial support. Please upgrade to Spring Data 2023.0.6 ("Spring Data 3.1") or 2023.1.0…