On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.10 and 1.1.4 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.10 and 3.3.4.

These patch releases includes numerous dependency upgrades.

Please see the release notes (1.0.10 and 1.1.4) for more details.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.2.0-M2 has been released and is now available from https://repo.spring.io/milestone.

The release will be included in the upcoming Spring Boot 3.4.0-M3 release.

This release includes numerous enhancements, documentation improvements, bug fixes, and dependency upgrades.

Notable new features include:

• Message Container Startup Policy - you can now configure the message listener container startup failure policy to stop, continue, or retry (more details)

• Message Container Factory Customizers (Spring Boot) - the upcoming Spring Boot 3.4.0-M3 has introduced a generic message container factory customizer (PulsarContainerFactoryCustomizer<T extends PulsarContainerFactory<?, ?>>) that can be used to further configure one or more of the auto-configured message listener container factories that back the @PulsarListener, @PulsarReader, and @ReactivePulsarListener (more details)

…

Hi, Spring fans! Last week I was in scintilliating Seoul, Korea, and then tantalizing Tokyo, Japan, and now I'm in marvelous Mumbai, India, at the airport, actually, headed to New Delhi, India. It's been a busy week for me and even busier a week for the community, so let's dive into it!

• Java 23 is here! Happy Java 23 day to those who celebrate! Now to wait for SDKMAN to pick it up...
• In last week's podcast episode, I (finally!) got to sit down with Spring creator Rod Johnson.
• Spring Tools has some cool new upgrades.
• I love this documentary looking at the success of Kotlin.
• Nice tip from Spring community member and JetBrains developer advocate Pasha Finkelshteyn: when you put a cron pattern like * 2 */3 * * 2 inside an @Scheduled annotation in a Spring application, IntelliJ IDEA explains what you just wrote!. Speaking of IntelliJ, the new EAP release is out and has some truly cool AI-centric features…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.4.0-M2.

See the 1.4.0-M2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.1.0-M1, 2024.0.4, and 2023.1.10 releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

The upcoming Spring Boot releases 3.4.0-M3, 3.3.4, respective 3.2.10 will pick up the above releases by next week.

2024.1.0-M1

• Spring Data Commons 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data JPA 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data MongoDB 4.4 M1 - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 4.4 M1 - Javadoc - Documentation - Changelog
• Spring Data Neo4j 7.4 M1 - Javadoc - Documentation - Changelog
• Spring Data KeyValue 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data LDAP 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data REST 4.4 M1 - Javadoc - Documentation - Changelog
• Spring Data Redis 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 5.4 M1 - Javadoc - Documentation - …

In this wide-ranging interview, I finally sit down one-on-one and talk to Dr. Rod Johnson, the creator of Spring, entrepreneur, venture capitalist, engineer, father, Kotlin fan, AI researcher, and musician, about this, that, and everything in between, fresh off our recent SpringOne presentation on Spring AI with Spring AI founder Dr. Mark Pollack. This is an extra special, extra-long episode!

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.13 is available now.

Spring Framework 6.1.13 ships with 24 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.10 and Spring Boot 3.3.4 next week.

Project Page | GitHub | Issues | Documentation

The Spring Framework has released version 6.1.13 that contains a fix for CVE-2024-38816: Path traversal vulnerability in functional web frameworks.

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last month, as announced previously. As a result, this fix has been applied to the 5.3.40 and 6.0.24 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can make use of Spring Boot Hotfix releases 2.7.22.1, 3.0.17.1, and 3.1.13.1. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team, I am pleased to announce that Spring Framework 5.3.40 and 6.0.24 have been released for support customers. The releases are available from https://packages.broadcom.com.

• Spring Framework 5.3.40 ships with 1 bug fix.
• Spring Framework 6.0.24 ships with 2 bug fixes.

Those are out of cycle releases that address CVE-2024-38816, we will resume our usual 3 months cadence for 5.3.x and 6.0.x commercial releases.