This Week in Spring - May 23rd, 2023

Engineering | Josh Long | May 23, 2023 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's May 23rd and, famously, nothing major has happened in the last week OH WAIT WE RELEASED SPRING BOOT 3.1! Have you checked it out yet? It's dope. I did a Spring Tips installment looking at some of its features here that you might like.

Friends, we've got a ton of stuff to get into this week, so let's dive right into it!

Spring Boot 3.1.0 available now

Releases | Scott Frederick | May 18, 2023 | ...

On behalf of the Spring Boot team and everyone that has contributed, I am pleased to announce that Spring Boot 3.1.0 has been released and is available from Maven Central.

This release adds a significant number of new features and improvements. For full upgrade instructions and new and noteworthy features please see the release notes.

What's new in 3.1

The highlights of the 3.1 release include:

  • Support for managing external services at development time using Testcontainers and Docker Compose
  • Simplified configuration of Testcontainers in integration tests
  • Centralized and expanded configuration of SSL trust material for connections
  • Auto-configuration for Spring Authorization Server

Spring Boot 3.0.7 available now, fixing CVE-2023-20883

Releases | Andy Wilkinson | May 18, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.7 has been released and is now available from Maven Central.

This release includes 54 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 2.7.12 available now, fixing CVE-2023-20883

Releases | Andy Wilkinson | May 18, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.12 has been released and is now available from Maven Central.

This release includes 28 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 2.5.15 and 2.6.15 available now, fixing CVE-2023-20883

Releases | Phil Webb | May 18, 2023 | ...

I happy to announce that Spring Boot 2.5.15 and 2.6.15 have been released and are now available from Maven Central.

This release follows a request from a customer with commercial support that was looking to have the ability to upgrade to later versions of SnakeYAML.

This release also includes fixes for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability as well as CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

If you're interested in purchasing commercial support for Spring, please see https://spring.io/support.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Integration 6.1 goes GA

Releases | Artem Bilan | May 18, 2023 | ...

Dear Spring community,

Hope you enjoy Spring IO anniversary in Barcelona these days. I'm not there this years for many reasons. Either way, it is my pleasure to announce that Spring Integration 6.1.0 is generally available now from Maven Central.

In addition, bug fixes version 5.5.18 has been released.

The Spring Integration 6.1 version is a natural evolution of 6.x generation with fixes and improvements which didn't make it into 6.0. Plus we listen to community and make some possibly, but convenient for target projects breaking changes.

Some highlights of this new version include:

  • Upgrades to the latest dependencies, but only if they don't break the public API we expose

  • Added Protobuf transformers support (shout out to Christian Tzolov)

  • Migration of Zip extension to respective module in the core project

  • The MessageFilter now emits a WARN log when a request message is dropped making it, technically, not silent as it was before

  • Now gateways and replying handlers don't block forever for sending and receiving operations.

Spring Batch 5.0.2 available now!

Releases | Mahmoud Ben Hassine | May 17, 2023 | ...

I am pleased to announce that Spring Batch 5.0.2 is now available from Maven Central.

This release resolves 25 issues, including bug fixes, enhancements, documentation updates and dependency updates. For more details about the changes, please refer to the change log.

I would like to thank all contributors who had a role in this release!

Feedback

We look forward to your feedback on Github Issues, Github Discussions, Twitter, and StackOverflow.

Spring Batch Home|Source on Github|Reference documentation

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all