Phil Webb

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Boot 3.0.0-M2 has been released and is now available from https://repo.spring.io/milestone.

This release includes 50 bug fixes, documentation improvements, and dependency upgrades. Notable new features include:

• Reinstated Support for EhCache 3
• Reinstated Support for H2 Console
• Improved @ConstructorBinding Detection

Please see the release notes for more details and upgrade instructions.

Thanks to all those who have contributed with issue reports and pull requests.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Boot 2.7.0-M3 has been released and is now available from https://repo.spring.io/milestone.

This release includes over 90 bug fixes, documentation improvements, and dependency upgrades. Notable new features include:

• Support for generating Docker images with Podman
• Improved SanitizingFunction support
• Spring GraphQL 1.0.0-M6 support, including the new GraphQL client

Please see the release notes for more details and upgrade instructions.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Boot 3.0.0-M1 has been released and is now available from https://repo.spring.io/milestone.

This milestone starts our exciting journey to the next generation of the Spring Framework and raises our baseline from Java 8 to Java 17. We are planning to release a new milestone of Spring Boot 3.0 every two months. M2 should arrive on March 24 and we are planning on a GA release in late November.

If you are trying an existing application with Spring Boot 3.0 you’ll need to be aware that we’ve migrated all Java EE APIs to their equivalent Jakarta EE variant. For most users, this means you’ll need to replace any javax imports with jakarta. For example, javax.servlet.Filter would be replaced with jakarta.servlet.Filter.

Updates: Since this blog post has been published, a new logback 1.2.9 version has been published. While this fixes a security issue, prerequisites for exploits are very different as they “requires write access to logback’s configuration file”.
Log4J also released a new 2.17.0 version with fixes for CVE-2021-45046 and CVE-2021-45105.
Spring Boot 2.5.8 and 2.6.2 haven been released and provide dependency management for logback 1.2.9 and Log4J 2.17.0.
Log4J 2.17.1 contains a fix for CVE-2021-44832

As you may have seen in the news, a new zero-day exploit has been reported against the popular Log4J2 library which can allow an attacker to remotely execute code. The vulnerability has been reported with CVE-2021-44228 against the log4j-core jar and has been fixed in Log4J v2.15.0.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Boot 2.6.0-M3 has been released and is now available from https://repo.spring.io/milestone.

Highlights of this release include:

• The PathPattern based path matching strategy is now used by default for Spring MVC applications.
• Elasticsearch properties for the different client implementations have have been consolidation and rationalized.
• Sanitization rules are now pluggable and can be based on the backing PropertySource.
• Spring Integration PollerMetadata properties are now provided.

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Boot 2.6.0-M1 has been released and is now available from https://repo.spring.io/milestone.

This release includes 120 bug fixes, documentation improvements, and dependency upgrades. Notable new features include:

• Auto-configuration for Spring Data Envers
• More metrics support (including task execution and scheduling export and support for the Dynatrace v2 API)
• Auto-configured Spring Web Service Server Tests
• Improved Configuration of the Maven Plugin’s Start Goal

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Boot 2.5.2 has been released and is now available from Maven Central.

This release includes 53 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you’re interested in helping out, check out the “ideal for contribution” tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

In preparation for the GA release on May 20 2021, I am pleased to announce that Spring Boot 2.5.0-RC1 has been released and is available from our milestone repository. This release adds a number of new features and bug fixes.

Highlights of the RC include:

• A new actuator endpoint for Quartz
• Support for database initialization with R2DBC
• Micometer metrics support for Spring Data repositories and MongoDB
• Support for Gradle 7.0

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.5.0-RC1 Release Notes on the wiki and the updated reference documentation.

I am pleased to announce that the third milestone of Spring Boot 2.5 has been released and is available from our milestone repository. This release adds a number of new features and bug fixes.

Highlights of this milestone include:

• OpenMetrics support for Prometheus
• Support for environment variable prefixes
• More Buildpack updates
• A fresh new look for the docs (including a “dark theme”).

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.5-M3 Release Notes on the wiki and the updated reference documentation.