This Week in Spring - March 19th, 2024

Hi, Spring fans! And happy Java 22 release day to those who celebrate! I just put out a huge blog detailing many of the exciting new features in Java 22. Check it out!

As usual, we’ve got a packed roundup to get through this week so let’s dive right into it!

• the Spring Authorization Server 1.3.0-M3 is available!
• the Token Exchange Support in Spring Security 6.3.0-M3
• the Spring Authorization Server 1.2.3, 1.1.6, and 1.0.6 are available now and include fixes for CVE-22258
• Spring for Apache Kafka 3.0.15, 3.1.3, and 3.2.0-M2 are available now
• Spring for Apache Pulsar 1.0.4 are available now
• Spring Security 6.3.0-M3, 6.2.3, 6.1.8, 6.0.10, 5.8.11 and 5.7.12 are now available
• Spring for Apache Pulsar 1.1.0-M2
• Dr. Dave Syer wrote up an amazing look at hypermedia and browser enhancement technologies like HTMX and their relationship to Spring
• Spring Data 2023.1.4 and 2023.0.10 are available
• Spring Data 2024.0.0-m2
• in last week’s installment of a Bootiful Podcast, I talked to Spring Boot Testjars creator and Spring Security lead Rob Winch
• Spring HATEOAS 2.1.4, 2.2.1, and 2.3 M1 have been released
• Spring Framework 6.1.5, 6.0.18, and 5.3.33 are available including fixes for CVE 2024-22259
• in last week’s installment of Spring Tips, I looked at Spring Batch remote partitioning
• Spring Tools 4.22.0 has been released
• Spring Security 6.3.0-M3, 6.2.3, 6.1.8, 6.0.10, 5.8.11 and 5.7.12 are now available
• the Webjars project needs your help! Try out this new Webjars locator implementation, contributed by our very own Dr. Syer, to make webjars even more performant when used in the context of something like a Spring Boot application.
• the Java Technie blog has a nice video on Spring Boot Apache Pular
• A propos: if you’re running Java 8 onward on macOS 14.4 on Apple Silicon, then you may be susceptible to a regression in macOS that’ll manifest as apparent and sudden quit outs of your Java process. There is no fix yet, so Oracle advise considering delaying your upgrade.
• Our friend Joris Kuipers over on the TRIFORK blog has a nice pokst on Spring Boot Observability for database interactions
• Hey, did I mention I’ll be keynoting Google Cloud Tech in Las Vegas? I hope to see you there!
• the Netflix tech blog shares an amazing look at their garbage collection numbers here in this blog
• I know Java 22 just dropped, but for those who haven’t heard it, you should be at least on Java 21!