On behalf of the team and everyone who has contributed, I am pleased to announce a new milestone for the next Spring Security generation. We encourage you to review the Spring Security 6 to 7 migration guide to gauge your preparedness for the release. Please also check out the main feature set in our What's New in Spring Security 7 page. Finally, for a detailed view of all changes, please see the Spring Security 7.0.0-M2 release notes.

7.0.0-M2 is now available from Maven Central.

Project Page | GitHub | Issues | Documentation

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring for Apache Pulsar 1.2.9 and 2.0.0-M2 have been released and are now available from Maven Central.

The 1.2.9 release will be included in the upcoming Spring Boot 3.4.9 and 3.5.5 releases. The 2.0.0-M2 release will be included in the upcoming Spring Boot 4.0.0-M2 release.

Please see the release notes (1.2.9 and 2.0.0-M2) for more details.

On behalf of the team and everyone who has contributed, I’m pleased to announce the availability of 2025.0.3 and 2024.1.9 service releases. These releases ship with dependency upgrades, fixes for regressions and selected improvements.

The upcoming Spring Boot releases will pick up the above releases by next week.

2025.0.3

• Spring Data Commons 3.5.3 - Javadoc - Documentation - Changelog
• Spring Data JPA 3.5.3 - Javadoc - Documentation - Changelog
• Spring Data Neo4j 7.5.3 - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 4.5.3 - Javadoc - Documentation - Changelog
• Spring Data MongoDB 4.5.3 - Javadoc - Documentation - Changelog
• Spring Data KeyValue 3.5.3 - Javadoc - Documentation - Changelog
• Spring Data LDAP 3.5.3 - Javadoc - Documentation - Changelog
• Spring Data REST 4.5.3 - Javadoc - Documentation - Changelog
• Spring Data Redis 3.5.3 - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 5.5.3 - Javadoc - Documentation - …

On behalf of the team and everyone who has contributed, I am pleased to announce the fourth milestone for the next Spring Data generation. This milestone continues delivering new features, refinements, and dependency upgrades.

Updated MongoDB UUID Format Defaults

Spring Data MongoDB now defaults to the BSON binary subtype 4 to represent UUIDs migrating off the legacy subtype 3. While this change doesn't manifest in a breaking code change, any existing data stored in MongoDB using subtype 3 will not be read correctly and will either require migrating to BSON binary subtype 4 or switching the…

Hi, Spring fans! In this installment I caught up with architecture guru and Spring Modulith founder and lead Oliver Drotbohm and we looked at some of the amazing possibilities in Spring Modulith 2.0, coming after Spring Framework 7.0 and Spring Boot 4.0 drop later this year!

On behalf of the team and everyone who has contributed, I am pleased to announce a new milestone for the next Spring Framework generation. We have compiled all the upgrade information, new features and deprecations on the Spring Framework 7.0 release notes preview page.

API Versioning updates

This is another feature-rich milestone for the API Versioning support. There are quite a few refinements around the configuration model and how we ensure that the API Versioning setup is valid. We also now support inserting API Version information in Media Types on the client side. We are receiving lots…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.2.10 is available now.

Spring Framework 6.2.10 ships with 11 fixes and documentation improvements. This version will be shipped next week with Spring Boot 3.4.9 and 3.5.5.

CVE-2025-41242:

This release addresses CVE-2025-41242 for "Path traversal vulnerability on non-compliant Servlet containers".

Open source support for Spring Framework 5.3.x and 6.1.x generations has ended, see our support page for more information. This fix has been applied to the 5.3.44 and 6.1.22 commercial releases…

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's August 5th! Which means we're only a few short weeks away until SpringOne 2025! Have you registered? There's so much to cover this week, so let's dive right into it!

• I love Spring Modulith and I love JetBrains IntelliJ IDEA! So imagine my joy to discover that the new IntelliJ IDEA release features support for Spring Modulith!
• Spring Cloud Oakwood has been released
• In last week's installment of A Bootiful Podcast, I talked to Spring Security lead and legend Rob Winch about the new and novel in Spring Security and what we're going to be talking about at SpringOne 2025! (Have you registered yet?)
• Spring Shell's been updated!
• Spring AI has been updated
• Spring gRPC 0.10.0 is available! This is another up-and-coming…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring gRPC 0.10.0 has been released and is now available from Maven Central. We are still planning to have a 1.0.0 release around the same time as Spring Boot 4.0.0.

The main changes in this release are bug fixes for 0.9.0. All users should upgrade as soon as possible.

How can you help?

If you're interested in helping out, check out the open issues. If you have general questions, please ask on Stack Overflow using the spring-grpc tag.

GitHub | Issues | Documentation | Stack Overflow