On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.2 has been released and is now available from Maven Central. This release includes 66 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests. How can you help? If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter. Project Page | GitHub…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.1 has been released and is now available from Maven Central. This release includes 54 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests. How can you help? If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter. Project Page | GitHub…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.0-RC2 has been released and is now available from https://repo.spring.io/milestone. This release includes 116 enhancements, documentation improvements, dependency upgrades, and bug fixes. This is the second release candidate and so doesn't include much in the way of new features. It does, however, bring a migration to Jakarta EE 10 APIs and a few changes to /actuator endpoints. Our final release is scheduled for November 24, 2022 so this is your last chance to provide feedback or raise issues for…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.0-RC1 has been released and is now available from https://repo.spring.io/milestone. This release includes 135 enhancements, documentation improvements, dependency upgrades, and bug fixes. This is our first release candidate for Spring Boot 3.0, which we expect to release November 24, 2022. We are not expecting any more features to be added at this point, and we will only be making API changes if we find issues. This release is the culmination of 11 months of work and is the first release to fully…
Spring Boot 2.0 was the first release in the 2.x line and was published on Feburary 28th 2018. We’ve just released Spring Boot 2.7 which means that, so far, we’ve been maintaining the 2.x line for just over 4 years. In total we’ve published 95 distinct releases over that timeframe! The entire Spring team, and many in our community of contributors, are now preparing for the next generation of Spring. We are planning to release Spring Boot 3.0 in November 2022. This next major revision will be based on Spring Framework 6.0 and will require Java 17 or above. It will also be the first version of…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.0-M3 has been released and is now available from https://repo.spring.io/milestone. This release includes over 90 bug fixes, documentation improvements, and dependency upgrades. Notable new features include: Support for generating Docker images with Podman Improved SanitizingFunction support Spring GraphQL 1.0.0-M6 support, including the new GraphQL client Please see the release notes for more details and upgrade instructions. Thanks to all those who have contributed with issue reports and pull…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.0-M2 has been released and is now available from https://repo.spring.io/milestone. This release includes 50 bug fixes, documentation improvements, and dependency upgrades. Notable new features include: Reinstated Support for EhCache 3 Reinstated Support for H2 Console Improved @ConstructorBinding Detection Please see the release notes for more details and upgrade instructions. Thanks to all those who have contributed with issue reports and pull requests. How can you help? If you're interested in…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.0-M1 has been released and is now available from https://repo.spring.io/milestone. This milestone starts our exciting journey to the next generation of the Spring Framework and raises our baseline from Java 8 to Java 17. We are planning to release a new milestone of Spring Boot 3.0 every two months. M2 should arrive on March 24 and we are planning on a GA release in late November. If you are trying an existing application with Spring Boot 3.0 you'll need to be aware that we've migrated all Java…
Updates: Since this blog post has been published, a new logback 1.2.9 version has been published. While this fixes a security issue, prerequisites for exploits are very different as they "requires write access to logback's configuration file".
Log4J also released a new 2.17.0 version with fixes for CVE-2021-45046 and CVE-2021-45105.
Spring Boot 2.5.8 and 2.6.2 haven been released and provide dependency management for logback 1.2.9 and Log4J 2.17.0.
Log4J 2.17.1 contains a fix for CVE-2021-44832 As you may have seen in the news, a new zero-day exploit has been reported against the popular…
On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.6.0-M3 has been released and is now available from https://repo.spring.io/milestone. Highlights of this release include: The PathPattern based path matching strategy is now used by default for Spring MVC applications. Elasticsearch properties for the different client implementations have have been consolidation and rationalized. Sanitization rules are now pluggable and can be based on the backing PropertySource. Spring Integration PollerMetadata properties are now provided. For more details please…
