The Spring Boot team has released versions 3.2.9 and 3.3.3 that contain fixes for CVE-2024-38807, Signature Forgery Vulnerability in Spring Boot's Loader. For support customers, 2.7.22, 3.0.17, and 3.1.13 have also been released.

It is my pleasure to announce the availability of Spring Modulith 1.3 M2, 1.2.3, and 1.1.8. They all contain bug fixes and upgrades to the latest versions of dependencies. Here are the most important features of the releases:

• Support for nested application modules (1.3 M2 only). See the reference documentation for details. – GH-578
• Event publication completion now issues a by-id query to significantly improve performance and reduce load on the database (1.3 M2 only). – GH-258
• Minor performance improvements for event completion (all releases). – GH-749

For details, please check out the change logs for 1.3 M2, 1.2.3, and 1.1.8. We appreciate any kind of feedback, in particular regarding the milestone release, in the GitHub discussions…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.2.9 has been released and is now available from Maven Central.

This release includes 68 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.3.3 has been released and is now available from Maven Central.

This release includes 73 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I am pleased to announce that the second milestone of Spring Session 3.4 is released.

This second milestone brings the possibility to customize the Redis Session Expiration Policy bringing a more robust mechanism if needed when using Clustered Redis.

You can read more about it in the What's New section of the 3.4 documentation.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Session 3.3.2 and 3.2.5 are available now. In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

To learn more, please visit the 3.3.2, and 3.2.5 release summaries.

Project Site | Reference | Help

On behalf of the team and everyone who has contributed, I am pleased to announce that the second milestone of Spring Security 6.4 is released.

This second milestone release brings several compelling features including:

• Extended Annotation Expression Placeholders Support to to @AuthenticationPrincipal and @CurrentSecurityContext
• Use inline CSS for default login and logout page
• SAML 2.0 Now Supports OpenSAML 4 and 5
• Saml 2.0 Refreshable, Expiry-Aware Asserting Party Metadata Source
• SAML 2.0 Cacheable RelyingPartyRegistrations
• LDAP Supports UnboundID 7
• Kotlin Supports @PreFilter and @PostFilter
• OIDC Backchannel Logout Accepts logout+jwt Tokens
• Make protected resources requests with RestClient
…

On behalf of the community, I am pleased to announce that the Milestone 1 (M1) of the Spring Cloud 2024.0.0 Release Train is available today. The release can be found in Spring Milestone repository.

Notable Changes in the 2024.0.0 Release Train

The primary goal of the first milestone of Spring Cloud 2024.0.0 is to provide compatibility with Spring Boot 3.4.0-M1. There are no notable new features in this first milestone. We would appreciate users trying our this first milestone and reporting any issues they may notice.

The following modules were updated as part of 2024.0.0-M1:

On behalf of everyone who contributed, we are pleased to announce that Spring for Apache Kafka 3.3.0-M2, 3.2.3 and 3.1.8 are generally available now.

See the release notes for more details:

https://github.com/spring-projects/spring-kafka/releases/tag/v3.3.0-M2

https://github.com/spring-projects/spring-kafka/releases/tag/v3.2.3

https://github.com/spring-projects/spring-kafka/releases/tag/v3.1.8

These releases will be included in the upcoming Spring Boot 3.2.9, 3.3.3 and 3.4.0-M2 respectively.

The 3.4.0-M2 version of Spring for Apache Kafka updated the Kafka client to the recently released version 3.8.0…