On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.9 and 1.1.3 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.9 and 3.3.3.

These patch releases includes numerous dependency upgrades.

Please see the release notes (1.0.9 and 1.1.3) for more details.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.3.2, 6.2.6, and 5.8.14 are available now. In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

To learn more, please visit the 6.3.2, 6.2.6, and 5.8.14 release summaries.

Project Site | Reference | Help

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.4.0-M1, 1.3.2 and 1.2.6.

See the 1.4.0-M1, 1.3.2 and 1.2.6 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of everyone who contributed, we are pleased to announce that Spring for Apache Kafka 3.3.0-M2, 3.2.3 and 3.1.8 are generally available now.

See the release notes for more details:

https://github.com/spring-projects/spring-kafka/releases/tag/v3.3.0-M2

https://github.com/spring-projects/spring-kafka/releases/tag/v3.2.3

https://github.com/spring-projects/spring-kafka/releases/tag/v3.1.8

These releases will be included in the upcoming Spring Boot 3.2.9, 3.3.3 and 3.4.0-M2 respectively.

The 3.4.0-M2 version of Spring for Apache Kafka updated the Kafka client to the recently released version 3.8.0…

On behalf of the community, I am pleased to announce that the Milestone 1 (M1) of the Spring Cloud 2024.0.0 Release Train is available today. The release can be found in Spring Milestone repository.

Notable Changes in the 2024.0.0 Release Train

The primary goal of the first milestone of Spring Cloud 2024.0.0 is to provide compatibility with Spring Boot 3.4.0-M1. There are no notable new features in this first milestone. We would appreciate users trying our this first milestone and reporting any issues they may notice.

The following modules were updated as part of 2024.0.0-M1:

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.0.3 and 2023.1.9 service releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

The upcoming Spring Boot releases 3.3.3, respective 3.2.9 will pick up the above releases by next week.

2024.0.3

• Spring Data Commons 3.3.3 - Javadoc - Documentation - Changelog
• Spring Data JPA 3.3.3 - Javadoc - Documentation - Changelog
• Spring Data MongoDB 4.3.3 - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 4.3.3 - Javadoc - Documentation - Changelog
• Spring Data Neo4j 7.3.3 - Javadoc - Documentation - Changelog
• Spring Data KeyValue 3.3.3 - Javadoc - Documentation - Changelog
• Spring Data LDAP 3.3.3 - Javadoc - Documentation - Changelog
• Spring Data REST 4.3.3 - Javadoc - Documentation - Changelog
• Spring Data Redis 3.3.3 - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 5.3.3 - Javadoc - Documentation - …

The Spring Framework has released versions 5.3.39, 6.0.23, and 6.1.12 that contain fixes for CVE-2024-38809, DoS via conditional HTTP requests.

The 5.3.39 release contains an additional fix for CVE-2024-38808, DoS via SpEL expression.

Note that version 5.3.39 has fixes for both CVEs. Version 5.3.38 was released earlier on the same day, and it contains the fix for CVE-2024-38809 but not CVE-2024-38808.

Upgrading Your Project

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can make use of Spring Boot Hotfix releases 2.7.21.1, 3.0.16.1, and 3.1.12.1. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

We are happy to announce the availability of the seventh milestone of Spring Framework 6.2. We shipped quite a few features since the last M6 release.

Spring Framework 6.2.0-M7 is available from repo.spring.io/milestone now, check out the detailed changelog for this version.

Core and Native Support

This release contains various improvements in the core of the framework, including to the cache abstraction's error handling. It adds a flexible multi-unit format to the previously introduced Duration parsing/printing support.

On the topic of Native Support, it is now possible to ignore bean registration during AOT processing thanks to a newly introduced attribute. Beans registered with the Kotlin DSL…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.12, 6.0.23 and 5.3.39 are available now. While 5.3.38 has also been released, it got superseded by 5.3.39.

• Spring Framework 6.1.12 ships with 43 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.9 and Spring Boot 3.3.3, to be released next week.
• Spring Framework 6.0.23 ships with 14 fixes and documentation improvements.
• Spring Framework 5.3.39 ships with 1 fixes plus the 12 fixes and documentation improvements of 5.3.38.

Please note that OSS support for 5.3.x and 6.0.x ends on August 31, 2024. As such, 5.3.39 and 6.0.23 are meant to be the last OSS releases. Commercial support is available…