On behalf of the team and everyone who contributed, I am pleased to announce the third Milestone for Spring Integration 6.4.0 generation.

In addition the regular bug fixes and dependency upgrades were release as Spring Integration 6.3.4 and 6.2.9.

Here are some notable improvements and new features in Spring Integration 6.4:

• First class support for IndexAccessor from SpEL and JsonIndexAccessor implementation (shout out to Sam Brannen for contribution);
• Performance and memory improvements for dynamic integration flow registrations;
• Control Bus Management via ControlBusCommandRegistry and deprecation for SpEL-based (and Groovy) Control Bus components;
• The ControlBusController at /control-bus to expose an endpoint for Control Bus Management via REST API;
• Fix JdbcMetadataStore for PostgreSQL and MySQL (and cover with respective tests);
• Introduce an MqttMessageNotDeliveredEvent to be emitted from the MqttActionListener.onFailure()…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.0.10 and 1.1.4 have been released and are now available from Maven Central.

The releases will be included in the upcoming Spring Boot 3.2.10 and 3.3.4.

These patch releases includes numerous dependency upgrades.

Please see the release notes (1.0.10 and 1.1.4) for more details.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.2.0-M2 has been released and is now available from https://repo.spring.io/milestone.

The release will be included in the upcoming Spring Boot 3.4.0-M3 release.

This release includes numerous enhancements, documentation improvements, bug fixes, and dependency upgrades.

Notable new features include:

• Message Container Startup Policy - you can now configure the message listener container startup failure policy to stop, continue, or retry (more details)

• Message Container Factory Customizers (Spring Boot) - the upcoming Spring Boot 3.4.0-M3 has introduced a generic message container factory customizer (PulsarContainerFactoryCustomizer<T extends PulsarContainerFactory<?, ?>>) that can be used to further configure one or more of the auto-configured message listener container factories that back the @PulsarListener, @PulsarReader, and @ReactivePulsarListener (more details)

…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.4.0-M2.

See the 1.4.0-M2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2024.1.0-M1, 2024.0.4, and 2023.1.10 releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

The upcoming Spring Boot releases 3.4.0-M3, 3.3.4, respective 3.2.10 will pick up the above releases by next week.

2024.1.0-M1

• Spring Data Commons 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data JPA 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data MongoDB 4.4 M1 - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 4.4 M1 - Javadoc - Documentation - Changelog
• Spring Data Neo4j 7.4 M1 - Javadoc - Documentation - Changelog
• Spring Data KeyValue 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data LDAP 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data REST 4.4 M1 - Javadoc - Documentation - Changelog
• Spring Data Redis 3.4 M1 - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 5.4 M1 - Javadoc - Documentation - …

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.1.13 is available now.

Spring Framework 6.1.13 ships with 24 fixes and documentation improvements. This version will be shipped with Spring Boot 3.2.10 and Spring Boot 3.3.4 next week.

Project Page | GitHub | Issues | Documentation

The Spring Framework has released version 6.1.13 that contains a fix for CVE-2024-38816: Path traversal vulnerability in functional web frameworks.

Note that open source support for Spring Framework 5.3.x and 6.0.x generations has ended last month, as announced previously. As a result, this fix has been applied to the 5.3.40 and 6.0.24 commercial releases, available now.

If you are not a commercial customer, please consider upgrading to an open source supported version at your earliest convenience.

Upgrading Your Project

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can make use of Spring Boot Hotfix releases 2.7.22.1, 3.0.17.1, and 3.1.13.1. Releases are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription…

On behalf of the team, I am pleased to announce that Spring Framework 5.3.40 and 6.0.24 have been released for support customers. The releases are available from https://packages.broadcom.com.

• Spring Framework 5.3.40 ships with 1 bug fix.
• Spring Framework 6.0.24 ships with 2 bug fixes.

Those are out of cycle releases that address CVE-2024-38816, we will resume our usual 3 months cadence for 5.3.x and 6.0.x commercial releases.

We are happy to announce the availability of the first release candidate of Spring Framework 6.2. We shipped a few features since the last M7 release.

Spring Framework 6.2.0-RC1 is available from repo.spring.io/milestone now, check out the detailed changelog for this version.

Housekeeping

On top of new features, we also use minor versions as an opportunity to do some housekeeping in our codebase. For example, we harmonized Reactor client class names within the http.client package or promoted Etag as a first class concept. While those changes should be functionally equivalent, they might cause…