On behalf of the team, I am pleased to announce that Spring Boot 2.7.22, 3.0.17, and 3.1.13 have been released for support customers. The releases are available from https://packages.broadcom.com.

• Spring Boot 2.7.22 ships with 17 bug fixes and dependency upgrades.
• Spring Boot 3.0.17 ships with 35 bug fixes and dependency upgrades.
• Spring Boot 3.1.13 ships with 46 bug fixes and dependency upgrades.

The next 2.7.x, 3.0.x, and 3.1.x releases for support customers are planned for 3 months' time.

The Spring Boot team has released versions 3.2.9 and 3.3.3 that contain fixes for CVE-2024-38807, Signature Forgery Vulnerability in Spring Boot's Loader. For support customers, 2.7.22, 3.0.17, and 3.1.13 have also been released.

It is my pleasure to announce the availability of Spring Modulith 1.3 M2, 1.2.3, and 1.1.8. They all contain bug fixes and upgrades to the latest versions of dependencies. Here are the most important features of the releases:

• Support for nested application modules (1.3 M2 only). See the reference documentation for details. – GH-578
• Event publication completion now issues a by-id query to significantly improve performance and reduce load on the database (1.3 M2 only). – GH-258
• Minor performance improvements for event completion (all releases). – GH-749

For details, please check out the change logs for 1.3 M2, 1.2.3, and 1.1.8. We appreciate any kind of feedback, in particular regarding the milestone release, in the GitHub discussions…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.2.9 has been released and is now available from Maven Central.

This release includes 68 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.3.3 has been released and is now available from Maven Central.

This release includes 73 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I am pleased to announce that the second milestone of Spring Session 3.4 is released.

This second milestone brings the possibility to customize the Redis Session Expiration Policy bringing a more robust mechanism if needed when using Clustered Redis.

You can read more about it in the What's New section of the 3.4 documentation.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Session 3.3.2 and 3.2.5 are available now. In all cases, the releases are mostly composed of bug fixes, dependency upgrades, and documentation improvements.

To learn more, please visit the 3.3.2, and 3.2.5 release summaries.

Project Site | Reference | Help

On behalf of the team and everyone who has contributed, I am pleased to announce that the second milestone of Spring Security 6.4 is released.

This second milestone release brings several compelling features including:

• Extended Annotation Expression Placeholders Support to to @AuthenticationPrincipal and @CurrentSecurityContext
• Use inline CSS for default login and logout page
• SAML 2.0 Now Supports OpenSAML 4 and 5
• Saml 2.0 Refreshable, Expiry-Aware Asserting Party Metadata Source
• SAML 2.0 Cacheable RelyingPartyRegistrations
• LDAP Supports UnboundID 7
• Kotlin Supports @PreFilter and @PostFilter
• OIDC Backchannel Logout Accepts logout+jwt Tokens
• Make protected resources requests with RestClient
…

Hi, Spring fans! Welcome to another installment in This Week in Spring! And happy week-before-SpringOne! I'm so excited I could spit! As you might imagine, AI, cloud native architecture, and so much more are top-of-mind. I love AI, and all its many applications. In that spirit, let's get ChatGPT to write a little poem for us!

'Twas the week before SpringOne, and all through Las Vegas, Java devs were arriving, their excitement contagious. Spring Boot and Kotlin, all polished with care, In hopes that new features soon would be there. Workshops and sessions, each bright in their light, Promising…