On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.3.4, 6.2.7, and 5.8.15 are available now. In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

To learn more, please visit the 6.3.4, 6.2.7, and 5.8.15 release summaries.

Project Site | Reference | Help

On behalf of the team and everyone who has contributed, I am pleased to announce that the first release candidate of Spring Security 6.4 is available.

This release brings several compelling features including:

• Support for Passkeys
• Support for making access token requests with RestClient
• Improved support for making access token requests with WebClient
• Support for building a ClientRegistration from provided configuration
• AuthorizationManager now returns an AuthorizationResult
• AuthorizationEventPublisher now accepts an AuthorizationResult
• Support for extracting nested authorities via SpEL expressions
• Security Observations are now selectable
…

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.0.5 and 2023.1.11 service releases. These releases ship with dependency upgrades, fixes for regressions, and selected improvements.

The upcoming Spring Boot releases 3.3.5, respective 3.2.11 will pick up the above releases by next week.

2024.0.5

• Spring Data Commons 3.3.5 - Javadoc - Documentation - Changelog
• Spring Data JPA 3.3.5 - Javadoc - Documentation - Changelog
• Spring Data MongoDB 4.3.5 - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 4.3.5 - Javadoc - Documentation - Changelog
• Spring Data KeyValue 3.3.5 - Javadoc - Documentation - Changelog
• Spring Data Neo4j 7.3.5 - Javadoc - Documentation - Changelog
• Spring Data LDAP 3.3.5 - Javadoc - Documentation - Changelog
• Spring Data REST 4.3.5 - Javadoc - Documentation - Changelog
• Spring Data Redis 3.3.5 - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 5.3.5 - Javadoc - Documentation - …

On behalf of the team and everyone who has contributed, I’m pleased to announce that Spring Data release train 2024.1 has entered the release candidate phase with 2024.1.0-RC1 being available now.

This release completes our Value Expression support across modules allowing you to leverage property placeholders in @Query along with the existing SpEL support. Developers of Spring Data fragments now can leverage fragment registration through spring.factories and obtain invocation metadata.

Please see the release notes for more details and upgrade instructions.

Going forward, we aim for a GA…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.14 is available now.

Spring Framework 6.1.14 ships with 25 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.11 and Spring Boot 3.3.5 next week.

Project Page | GitHub | Issues | Documentation

The Spring Framework has released version 6.1.14 that contains a fix for both:

• CVE-2024-38819: Path traversal vulnerability in functional web frameworks (2nd report)
• CVE-2024-38820: Spring Framework DataBinder case sensitive match exception

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has been applied to the 5.3.41 and 6.0.25 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading…

Dear Spring Community,

I am happy to announce the 4.26.0 release of the Spring Tools 4 for Visual Studio Code, Eclipse and Theia.

important highlights

• (Spring Boot) CRON expressions have auto completion and a nice description as inlay hints now
• (Spring Boot) @ConditionalOnBean and @ConditinalOnMissingBean have auto completion support now for bean names, including support for go to definition
• (Spring Boot) support for go to definition for beans and methods in SPEL expressions
• (Spring Boot) Improvements to completion proposals ordering for application.properties files
• (Spring Boot) Fixes to PostgreSql validation
…

We are happy to announce the availability of the second release candidate of Spring Framework 6.2. We have been working on fixing regressions from previous milestones and shipping performance improvements.

Spring Framework 6.2.0-RC2 is available from repo.spring.io/milestone now, check out the detailed changelog for this version.

Spring 3.4.0-RC1 will be released next week, a good opportunity for testing the upcoming Spring generation in existing applications!

6.2 features recap

Check out our What's New page for details about the new features available at this point.

I am pleased to announce that the second milestone of Spring Batch 5.2 is now available from our milestones repository. This blog post walks you through the main changes in Spring Batch 5.2:

• MongoDB job repository support
• New resourceless job repository
• Composite item reader implementation
• New adapters for java.util.function APIs
• Concurrent steps with blocking queue item reader and writer

For the complete list of changes, please check the release notes.

MongoDB job repository support

This release introduces the first NoSQL job repository implementation which is backed by MongoDB. Similar to…