Hi, Spring fans! It's Friday, and you know what that means? Some poor schlub somewhere is trying fruitlessly to get something deployed to production, or at least rolled back consistently, in time for dinner. And it's not working. I've been there. Deployments are hard. There's nuance in deployment. I love Kubernetes as much as the next Operator, but let's not pretend it's the pinnacle of productivity. Quite the contrary. There's a whole cottage industry around simplifying application deployments with Kubernetes. See for example KNative, Cloud Foundry on Kubernetes, or Azure Spring Cloud…

On behalf of the Spring Boot team and everyone that has contributed, I am pleased to announce that Spring Boot 2.6.0 has been released and is available from Maven Central.

This release adds a significant number of new features and improvements. For full upgrade instructions and new and noteworthy features please see the release notes.

What's new in 2.6

• Support for SameSite attributes on session cookies for servlet applications
• Support for configuring health groups on the main or management port
• Enhanced /info endpoint with Java Runtime information
• Support for testing Spring MVC using WebTestClient
• Auto-configuration for spring-rabbit-stream
• Support for pluggable rules for sanitizing properties in /env and configprops
…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.4.13 has been released and is now available from Maven Central.

This release includes 26 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

End of OSS Support

2.4.x has now reached the end of its OSS support period and regular releases will no longer be made. If you are still on this version, please consider upgrading at your earliest convenience. If you cannot upgrade at this time, commercial support is available…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.5.7 has been released and is now available from Maven Central.

This release includes 35 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

I am pleased to announce that Spring for Apache Kafka 2.8.0 is now available.

Notable Changes

• This version uses the 3.0.0 kafka-clients version

• Out of order manual commits are now supported

• The same container factory can now be used for both batch and record listeners

• Separate record and batch error handlers have been replaced with common error handlers

• KafkaTemplate can now be used to receive specific records from known partitions/offsets

For information about all changes in this release, see What’s New.

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter

I am pleased to announce that Spring AMQP 2.4.0 is now available.

Notable Changes

• Initial support for the RabbitMQ Stream Plugin

• Support for remoting using Spring Framework’s RMI support is deprecated

For information about all changes in this release, see What’s New.

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! This week - a week before Thanksgiving here in the US - Josh Long (@starbuxman) wants you to know he and the Spring team are_thankful_ for you, and then he talks to newly minted Java Champion and Java ecosystem legend Kate Stanley (@KateStanley91) about Kubernetes and Apache Kafka.

Hi, Spring fans! In this installment of Spring Tips, we're going to resume our series on Spring's @Controller annotation, this time diving into Spring's WebSocket support.

The code is here

On behalf of the community, I am pleased to announce that Spring Cloud Netflix version 2.2.10.RELEASE has been released.

This is primarily a security release that fixes the CVE-2021-22053.

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf exposed a way to execute code submitted within the request URI path during the resolution of view templates. When a request was made at /hystrix/monitor;[user-provided-data], the path elements following hystrix/monitor were being evaluated as SpringEL expressions, which could lead to code execution.

This release…