On behalf of the Spring for GraphQL team, I am pleased to announce the availability of our first 1.4 milestone.
Aligning with the GraphQL over HTTP specification
The GraphQL over HTTP draft specification is making good progress,
so we have decided to fully align with it for our 1.4 release.
Previous versions of Spring for GraphQL already supported the official "application/graphql-response+json",
and it has been our default response media type for a while now.
Usually, GraphQL HTTP clients should expect 4xx/5xx HTTP responses if the server is unavailable,
security credentials are missing or if the request body is not valid JSON.
The remaining gap with this new specification was about the HTTP response status behavior in case of complete GraphQL engine failures.
With recent changes, "application/graphql-response+json" responses will also use 4xx statuses if the GraphQL document sent by the client cannot be parsed
or is considered invalid by the GraphQL engine. We are keeping the former behavior when clients request the "application/json"…
On behalf of the team and everyone who has contributed, I am pleased to announce the third milestone of the next Spring Framework generation.
The third milestone continues delivering new features and refinements on top of 7.0.0-M1 and 7.0.0-M2.
In this milestone, we are shipping the first step of our new "API versioning" feature for web applications.
Keep an eye for further improvements and documentation there, we're definitely interested in feedback from the community!
On behalf of the team and everyone who has contributed, I am pleased to announce the first milestone of the next Spring Framework generation.
As announced previously, we shipped "7.0.0-M1" to the usual repo.spring.io artifact repository, but also to Maven Central.
We hope to collect more feedback from the community this year along the way; we are targeting November 2025 for the official release date.
This first milestone partially delivers the baseline changes that we shared last October.
Spring Framework still expects a JDK 17-27 compatibility range and raises its minimum requirements to…
The Spring Framework has released version 5.3.42 that contains a fix for:
CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter
Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has only been applied to the 5.3.42 commercial release, available now.
Commercial customers using Spring Boot 2.7 can make use of Spring Boot Hotfix release 2.7.22.4. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…
On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.0 is available now.
We would like to thank our community of "early adopters" who helped us refine this version during the milestone phase.