On behalf of the team and everyone who has contributed, I am pleased to announce that the second release candidate of Spring Framework 5.3 has been released and is available from our milestone repository.

Spring Framework 5.3.0-RC2 includes 38 fixes and improvements and is our last stop before GA proper scheduled 2 weeks from now.

Next up is Spring Boot 2.4.0-M4, stay tuned!

Project Page | GitHub | Issues | Documentation

On behalf of the community, I’m pleased to announce the release of Spring Security 5.3.5 (release notes), 5.2.7 (release notes), 5.1.13 (release notes) , 5.0.19 (release notes), 4.2.19 (release notes). These releases deliver bug fixes along with some minor improvements. Users are encouraged to update to the latest patch release.

Project Site | Reference | Help

On behalf of the community, I am pleased to announce that the Milestone 4 (M4) of the Spring Cloud 2020 Release Train is available today. The release can be found in Spring Milestone repository. You can check out the 2020 release notes for more information.

Notable Changes in the 2020 Release Train

This release requires Spring Boot 2.4.0-M3.

Please see [the wiki] for a list of all breaking changes in this release train.

See all of the included issues and pull requests at the Github project.

Spring Cloud Commons

• The bootstrap phase is no longer enabled by default. If your project requires it, it can be re-enabled by properties or by a new starter. To re-enable by properties set spring.cloud.bootstrap.enabled=true or spring.config.use-legacy-processing=true. These need to be set as an environment variable, java system property or a command line argument. The other option is to include the new spring-cloud-starter-bootstrap. Bootstrap is mostly used to import configuration from remote sources. To do this without boostrap see the new features in Config, Consul, Vault and Zookeeper.

• Added a mechanism to avoid retrying on the same instance

  …

With the recent release of Spring Security 5.4, we’d like to announce that maintenance for Spring Security SAML Extensions 1.x will end on 6 October 2021.

SAML 2.0 support has been added to the core Spring Security framework over the last three minor releases. There are two main reasons for this.

First, the extension project is based on a version of OpenSAML that the OpenSAML team no longer supports. This version has known CVEs that make it unsafe for use in a production system.

Second, moving the support to the core Spring Security framework allowed us to simplify the API, use the latest OpenSAML, and add long-requested support for features like multi-tenancy and Spring Boot integration…

On behalf of the Spring and Apache Geode communities, it is my pleasure to announce the release of Spring Session for Apache Geode (SSDG) 2.1.11.RELEASE, 2.2.5.RELEASE, 2.3.1.RELEASE and 2.4.0-RC1.

SSDG 2.1.11.RELEASE is pulled in by Spring Boot 2.1, SSDG 2.2.5.RELEASE by Spring Boot 2.2, SSDG 2.3.1.RELEASE by Spring Boot 2.3 and SSDG 2.4.0-RC1 by Spring Boot 2.4. All of these releases are primarily dependency alignment releases and pick up the latest Spring Data bits on which SSDG is strongly based.

Note

SSDG 2.4.0-RC1 is now based on Apache Geode 1.13.0. Given VMware Tanzu GemFire (formerly known as Pivotal GemFire) is now longer released by VMware, Inc. as a standalone, independently managed solution, SSDG 2.4 will no longer ship a spring-session-data-gemfire module. GemFire 9.10 was the last supported, standalone, independently managed version of GemFire, which was based on Apache Geode 1.12…

On behalf of the Spring and Apache Geode communities, it is my pleasure to announce the release of Spring Boot for Apache Geode (SBDG) 1.1.10.RELEASE, 1.2.10.RELEASE, 1.3.4.RELEASE and 1.4.0-M3.

SBDG 1.1.10.RELEASE is based on Spring Boot 2.1.17.RELEASE, SBDG 1.2.10.RELEASE is based on Spring Boot 2.2.10.RELEASE, SBDG 1.3.4.RELEASE is based on Spring Boot 2.3.4.RELEASE and SBDG 1.4.0-M3 is based on Spring Boot 2.4.0-M3. In addition, SBDG pulls in the latest Spring Data, Spring Session and Spring Test for Apache Geode releases and bits.

Each of these releases includes dependency alignment, documentation revisions and minor improvements. See the changelog…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.1.17 has been released and is now available from repo.spring.io and Maven Central.

This release includes 22 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

Please note that version of Spring Framework that is used by this release of Spring Boot contains a fix for a security vulnerability (CVE-2020-5421).

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

I am pleased to announce that Spring Batch 4.3.0-RC1 is now available from our milestone repository.

What’s New?

This release comes with a number of new features that you can find in the release notes, but here are the major highlights:

1. GraalVM Support

A lot of work has already been done in Spring Framework to support running some types of Spring applications on GraalVM. In this release, we made changes in Spring Batch to correctly run Batch applications on GraalVM as well.

The support is still experimental, so we encourage you to give the release a try and share your feedback.

2. Java…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.2.10 has been released and is now available from repo.spring.io and Maven Central.

This release includes 72 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

Please note that version of Spring Framework that is used by this release of Spring Boot contains a fix for a security vulnerability (CVE-2020-5421).

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…