Brian Clozel

Brian Clozel

Blog posts by Brian Clozel

Spring for GraphQL 1.4 M1 Released

Releases | March 18, 2025 | ...

On behalf of the Spring for GraphQL team, I am pleased to announce the availability of our first 1.4 milestone.

Aligning with the GraphQL over HTTP specification

The GraphQL over HTTP draft specification is making good progress, so we have decided to fully align with it for our 1.4 release. Previous versions of Spring for GraphQL already supported the official "application/graphql-response+json", and it has been our default response media type for a while now.

Usually, GraphQL HTTP clients should expect 4xx/5xx HTTP responses if the server is unavailable, security credentials are missing or if the request body is not valid JSON. The remaining gap with this new specification was about the HTTP response status behavior in case of complete GraphQL engine failures. With recent changes, "application/graphql-response+json" responses will also use 4xx statuses if the GraphQL document sent by the client cannot be parsed or is considered invalid by the GraphQL engine. We are keeping the former behavior when clients request the "application/json"

Spring Framework 7.0.0-M3 Available Now

Releases | March 13, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce the third milestone of the next Spring Framework generation. The third milestone continues delivering new features and refinements on top of 7.0.0-M1 and 7.0.0-M2.

In this milestone, we are shipping the first step of our new "API versioning" feature for web applications. Keep an eye for further improvements and documentation there, we're definitely interested in feedback from the community!

By popular demand, the java Optional type is now better supported in SpEL expressions. Not only you can now call null-safe operations on Optional types, but you can also use the Elvis operator

Spring Framework 6.1.18 and 6.2.4 Available Now

Releases | March 13, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.18 and 6.2.4 are available now.

Spring Framework 6.1.18 ships with 11 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.3.10.

Spring Framework 6.2.4 ships with 46 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.4 and 3.5.0-M3.

Project Page | GitHub | Issues | Documentation

Spring Framework 7.0.0-M1 Available Now

Releases | January 23, 2025 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce the first milestone of the next Spring Framework generation.

As announced previously, we shipped "7.0.0-M1" to the usual repo.spring.io artifact repository, but also to Maven Central. We hope to collect more feedback from the community this year along the way; we are targeting November 2025 for the official release date.

This first milestone partially delivers the baseline changes that we shared last October. Spring Framework still expects a JDK 17-27 compatibility range and raises its minimum requirements to…

Spring Framework 6.1.16 and 6.2.1 Available Now

Releases | December 12, 2024 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.16 and 6.2.1 are available now.

Spring Framework 6.1.16 ships with 6 fixes and documentation improvements. This version will be shipped with Spring Boot 3.3.7 next week.

Spring Framework 6.2.1 ships with 49 fixes and documentation improvements, including several regressions from 6.2.0. This version will be shipped with Spring Boot 3.4.1 next week.

Project Page | GitHub | Issues | Documentation

Spring Framework CVE-2024-38828 published

Releases | November 15, 2024 | ...

The Spring Framework has released version 5.3.42 that contains a fix for:

  • CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last August, as announced previously. This fix has only been applied to the 5.3.42 commercial release, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7 can make use of Spring Boot Hotfix release 2.7.22.4. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription

Spring Framework 6.2.0 Available Now

Releases | November 14, 2024 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.0 is available now. We would like to thank our community of "early adopters" who helped us refine this version during the milestone phase.

This new Spring generation will materialize in Spring Boot applications next week with Spring Boot 3.4.0. We wrote extensive release notes that will let you know how to easily upgrade and leverage the new features.

The Framework team is already working on the next major release as announced previously. Keep an eye on our official support timeline to…

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all