Spring Security 6.4.0-RC1 is available now

Releases | Steve Riesenberg | October 21, 2024 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the first release candidate of Spring Security 6.4 is available.

This release brings several compelling features including:

  • Support for Passkeys
  • Support for making access token requests with RestClient
  • Improved support for making access token requests with WebClient
  • Support for building a ClientRegistration from provided configuration
  • AuthorizationManager now returns an AuthorizationResult
  • AuthorizationEventPublisher now accepts an AuthorizationResult
  • Support for extracting nested authorities via SpEL expressions
  • Security Observations are now selectable

Spring Data 2024.0.5 and 2023.1.11 released

Releases | Mark Paluch | October 18, 2024 | ...

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.0.5 and 2023.1.11 service releases. These releases ship with dependency upgrades, fixes for regressions, and selected improvements.

The upcoming Spring Boot releases 3.3.5, respective 3.2.11 will pick up the above releases by next week.

2024.0.5

Spring Data 2024.1.0 goes RC1

Releases | Mark Paluch | October 18, 2024 | ...

On behalf of the team and everyone who has contributed, I’m pleased to announce that Spring Data release train 2024.1 has entered the release candidate phase with 2024.1.0-RC1 being available now.

This release completes our Value Expression support across modules allowing you to leverage property placeholders in @Query along with the existing SpEL support. Developers of Spring Data fragments now can leverage fragment registration through spring.factories and obtain invocation metadata.

Please see the release notes for more details and upgrade instructions.

Going forward, we aim for a GA…

Spring Framework CVE-2024-38819 and CVE-2024-38820 published

Releases | Brian Clozel | October 17, 2024 | ...

The Spring Framework has released version 6.1.14 that contains a fix for both:

  • CVE-2024-38819: Path traversal vulnerability in functional web frameworks (2nd report)
  • CVE-2024-38820: Spring Framework DataBinder case sensitive match exception

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has been applied to the 5.3.41 and 6.0.25 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading…

Spring Tools 4.26.0 released

Releases | Martin Lippert | October 17, 2024 | ...

Dear Spring Community,

I am happy to announce the 4.26.0 release of the Spring Tools 4 for Visual Studio Code, Eclipse and Theia.

important highlights

  • (Spring Boot) CRON expressions have auto completion and a nice description as inlay hints now
  • (Spring Boot) @ConditionalOnBean and @ConditinalOnMissingBean have auto completion support now for bean names, including support for go to definition
  • (Spring Boot) support for go to definition for beans and methods in SPEL expressions
  • (Spring Boot) Improvements to completion proposals ordering for application.properties files
  • (Spring Boot) Fixes to PostgreSql validation

Spring Framework 6.2.0-RC2 available now

Releases | Brian Clozel | October 17, 2024 | ...

We are happy to announce the availability of the second release candidate of Spring Framework 6.2. We have been working on fixing regressions from previous milestones and shipping performance improvements.

Spring Framework 6.2.0-RC2 is available from repo.spring.io/milestone now, check out the detailed changelog for this version.

Spring 3.4.0-RC1 will be released next week, a good opportunity for testing the upcoming Spring generation in existing applications!

6.2 features recap

Check out our What's New page for details about the new features available at this point.

This Week in Spring - October 15th, 2024

Engineering | Josh Long | October 15, 2024 | ...

Hi, Spring fans! Welcome to another rip-roaring and ever-so-riveting installment of This Week in Spring! I'm in Amsterdam, at the moment, rounding out a week between Antwerp, Beglium, and Amsterdam, the Netherlands. Today I'm off to Dubai for the fantastic GITEX/DevSlam event. Then I return back to Europe for Voxxed Days Thessaloniki, in Greece. Should be a fun week!

It's certainly been a fun week! Let's dive right into it!

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all