On behalf of the Spring for GraphQL team and every contributor, it is my pleasure to announce the 1.0 GA release. It's been 10 months since the project was announced and under 2 years since the first commit, unremarkably called "first commit". The project began with the modest goal to replace the (now archived) minimal GraphQL Java Spring integration, but has since moved significantly beyond through community feedback and collaboration across Spring Boot, Spring Framework, Spring Data, and Spring Security.

The following are highlights from the release:

• Annotation-based programming model for data fetchers
• Data binding from input arguments with validation
• Field-level security through annotations on data @Controller methods
• Server handlers and interception over HTTP, WebSocket, and RSocket
• Querydsl and Query by Example repositories as data fetchers
• Batch loading support
• Client for executing over HTTP, WebSocket, and RSocket
• Test support with HTTP, WebSocket, RSocket, or directly, without a client
• GraphiQL page and schema printing page
…

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc.

• A Bootiful Podcast: EasyMock contributor, Java Champion, and Java luminary Henri Tremblay
• Also, while we're on the topic of Spring Boot 2.7, remember that Spring for GraphQL is also 1.0 this week! I'm so excited :)
• Example of Spring Cloud Function with AWS Lambda
• I love this - the Activiti 7 developer's guide - showcases some cool patterns and principles for building service-centric workflow solutions with Spring Boot and Activiti
• a handy tip from Maciej Walkowiak on Twitter that Spring Boot 2.7 (due - :checks notes: - this week!) adds native support for Jackson Mixins with @JsonMixin…

Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22976: BCrypt skips salt rounds for work factor of 31. Please update as soon as possible.

UPDATES

• [05-17] Due to a mixup CVE-2022-22975 should have been CVE-2022-22978. The blog has been updated to reflect this correction.

CVE-2022-22978 : Authorization Bypass in RegexRequestMatcher

Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22978 : Authorization Bypass in RegexRequestMatcher. Please update as soon as possible.

Hi, Spring fans! In this episode, Josh Long (@starbuxman) talks to fellow Java Champion, EasyMock engineer, and Java luminary, JUG leader, and legend Henri Tremblay (@henri_tremblay)

Hi, Spring fans! I'm writing this from - I can't believe I get to say this - abroad! I'm in London, UK! Now, this is not particularly noteworthy for those millions who already live here. But I don't live here. I'm a visitor! I live in San Francisco. I had to fly here! On a plane! With other people! ACROSS THE OCEAN. This is my first international flight since March of 2020, and I couldn't be more excited to be here for Devoxx UK and also just to catch up with old friends I haven't seen in nearly three years. If you know me, and how I used to travel, you'll appreciate how odd it is for me to be…

Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to fellow Java Champion and Java ecosystem luminary Chandra Guntur (@cguntur) about Java, Spring, and the Spring Katas, among other things.

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you doin'?

I'm excited! This week I'm speaking at the ArabJUG, and I'll be speaking at Microsoft's huuuge JDConf event. Both of these are virtual. Then, next Monday, I'm on a plane bound for London, UK, where I'll be speaking at Devoxx UK 2022. Then, not even two weeks later, I'll be speaking at Spring IO, in Barcelona, Spain! Then a week later, I'll be speaking at JNation, in Lisbon, Portugal. To say that I am excited would be an understatement, my friends.

And all of that ignores the great stuff since last week…

Sometimes, no matter how many features you try to apply, it seems impossible to get Spring Data JPA to apply every thing you’d like to a query before it is sent to the EntityManager.

With 3.0.0-SNAPSHOT (and targeted for the next milestone release train of Spring Data), you now have the ability to get your hands on the query, right before it’s sent to the EntityManager and "rewrite" it. That is, you can make any alterations at the last moment.

Check it out below:

Example 1. Declare a QueryRewriter using @Query

public interface MyRepository extends JpaRepository<User, Long> {

    @Query(value…