The Spring Framework has released versions 5.3.39, 6.0.23, and 6.1.12 that contain fixes for CVE-2024-38809, DoS via conditional HTTP requests.

The 5.3.39 release contains an additional fix for CVE-2024-38808, DoS via SpEL expression.

Note that version 5.3.39 has fixes for both CVEs. Version 5.3.38 was released earlier on the same day, and it contains the fix for CVE-2024-38809 but not CVE-2024-38808.

Upgrading Your Project

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can make use of Spring Boot Hotfix releases 2.7.21.1, 3.0.16.1, and 3.1.12.1. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Cloud Data Flow 2.11.4 has been released and is now available from Maven Central.

Notable Changes in 2.11.4

• Added tasks/thinexecutions used to list Task Executions more efficiently.

• Add ability for a user to specify app version when creating schedule.

• Updated versions and mitigations for CVEs.

  • CVE-2024-37084 Skipper remote code execution mitigated.
  • PRISMA-2023-0067 Jackson 2.17.1

Library Updates

See the release notes for more information.

Stay in touch...

As always, we welcome feedback and contributions, so please reach out to us on Stackoverflow or GitHub…

Dear Spring Community,

I am happy to announce the 4.24.0 release of the Spring Tools 4 for Visual Studio Code, Eclipse and Theia.

important highlights

• (Spring Boot) SPEL syntax highlighting and validation inside Java and embedded Spring Data queries.
• (Spring Boot) MySQL and PostgreSQL queries syntax highlighting and validation.
• (Spring Boot) Improvements around Content Assist, Navigation and/or Find References for @Profile, @Resource, @Qualifier, @Value annotations.

Detailed changes can be found in the release notes: https://github.com/spring-projects/sts4/releases/tag/4.24.0.RELEASE

…

I am excited to announce the releases of Spring Modulith 1.3 M1, 1.2.2, and 1.1.7. The former ships with the following new features:

• Upgrade to Spring Boot 3.4 M1 and Spring Framework 6.2 M6 – GH-737
• Improvements in the documentation creation – GH-644, GH-638
• @ApplicationModuleTest can now be used outside a module folder – GH-466
• A configuration property to define the schema of the Event Publication Registry tables for JDBC – GH-685

These features are surrounded by a few bug fixes that have all been backported to the 1.2 and 1.1 generations of Spring Modulith. Here you can find the full change logs for the releases 1.3 M1, 1.2.2, and 1.1.7…

Shortly after our fifth milestone, we have released Spring Framework 6.2.0-M6. This milestone is mostly about addressing a binary backward compatibility with previous 6.x generations.

Spring Framework 6.2.0-M6 is available from repo.spring.io/milestone now, check out the detailed release notes for this version.

6.2 features recap

Check out our What's New page for details about the new features available at this point.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.2.8 has been released and is now available from Maven Central.

This release includes 39 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.3.2 has been released and is now available from Maven Central.

This release includes 50 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.4.0-M1 has been released and is now available from https://repo.spring.io/milestone.

This release includes 118 enhancements, documentation improvements, dependency upgrades, and bug fixes. Notable new features include:

• Structured Logging
• AssertJ support for MockMvc with auto-configuration of MockMvcTester
• Improved support for Testcontainers and Docker Compose

Please see the release notes for more details and upgrade instructions.

Thanks to all those who have contributed with issue reports and…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.8 and 1.1.2 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.8 and 3.3.2 releases, respectively.

This release includes numerous dependency upgrades.

Please see the release notes (1.0.8 and 1.1.2) for more details.