Last 7 days
2
Features: 0
Changes: 0
Fixes: 1
Deprecations: 1
Spring Boot
Java framework for production-ready Spring applications and services.
Latest Spring Boot changelog updates, official release notes, breaking changes, security patches, pricing changes, and developer reactions in one product feed.
Follow this Spring Boot release-notes page to spot useful features, risky migrations, noisy announcements, and source links before they hit your backlog.
Where Spring Boot updates are checked
Changes.Watch links back to official changelog and release-note sources so summaries stay easy to verify.
Related changelog channels
Use channels to follow groups of tools around a stack, workflow, or topic.
Spring Boot updates by type
Rolling windows show how many product updates landed in the last 7, 30, 90, and 365 days, grouped by existing changelog semantics.
2
2
6
26
Latest Spring Boot changelog updates
Fixed a wide range of bugs in Kafka security handling, Cloud Foundry integration, Spring Boot components, and resource cleanup.
Spring Boot Gradle plugin no longer auto‑configures gRPC when the Protobuf plugin is applied; opt‑in via an empty grpc block in the protobuf extension.
Upgrade Spring AMQP to version 3.2.12
Fixed numerous bugs across auto‑configuration, SSL handling, GraphQL WebSocket, Actuator endpoints, MeterRegistry cleanup, thread‑pool precision, Whitelabel error page HTML escaping, JWT decoding, and other core components.
Fixed numerous bugs affecting SSL auto‑configuration, actuator endpoints, Reactor Netty, and other core components.
Added public constructor to InvalidConfigurationPropertyValueException and reduced memory consumption in WritableJson.toByteArray.
- Fixed multiple bugs including symlink handling in ApplicationPidFileWriter and ApplicationTemp, RandomValuePropertySource misuse for secrets, Cassandra auto‑configuration, Remote DevTools comparison, RabbitMQ SSL hostname verification,...
Fixed numerous auto‑configuration and security‑related bugs (e.g., Actuator, RabbitMQ SSL, Cassandra, symlink handling, and metrics)
Fixed numerous issues including Spring Integration test starter, transaction auto‑configuration, WebSocket task executor handling, metadata annotation processing, external property overrides, native image Flyway resources, Netty reactive...
Upgraded Jackson to 2.21.2, addressing end‑of‑life support and potential breaking changes.
Fixed numerous bugs in endpoint request matching, Actuator configuration, RSocket, Docker Compose, test client timeout handling, and documentation inconsistencies.
Deprecate OpenTelemetry ZipkinSpanExporter with removal planned for Spring Boot 4.2.
Added TWENTY_SIX constant to the JavaVersion enum
Fixed whitespace removal issue in Spring Boot configuration processor on multiline Javadoc and corrected server.jetty.threads.max handling with virtual threads.
Removed the unused org.eclipse.jetty.ee11:jetty-ee11-servlet dependency from Spring Boot Jetty, requiring explicit addition if the application uses it (potential breaking change).
Fixed several bugs including bean condition evaluation for missing types, actuator /info endpoint in native images, Oracle UCP DataSourceBuilder issues, zero‑length byte buffer handling, reproducible JAR extraction, and AOT test processi...
Hibernate upgraded to 7.2.0.Final; Kotlin serialization starters renamed for module alignment; TestRestTemplate now requires the spring‑boot‑restclient dependency.
Fixed multiple health indicator errors (Rabbit, Redis) and NPE in UndertowWebServer during context cleanup
Fix multiple health indicator errors (Rabbit, Redis) and context bean closure issues; resolve NPE in UndertowWebServer and AOT profile handling in native images.
Introduce starter modules for Tomcat and Jetty runtimes and rename the Kotlin serialization starter to match the Kotlinx module name.
Fix Testcontainers integration with modern Docker versions and add option to downgrade Docker API if needed
Fixed Testcontainers integration with Docker 29.0.0 and added option to downgrade the minimum Docker API if needed.
Added TWENTY_FIVE constant to JavaVersion enum
Fixed multiple bugs including SBOM manifest location mismatch, Jetty virtual thread configuration, and signed jar verification in uber wars
Fixed multiple bugs: quoted D arguments on Linux with Spring AOT, Groovy template NPE, NestedJarFile available() behavior, Docker Compose service connections, and Flyway ignore migration patterns empty string handling.
Fixed bugs in available() handling, Flyway empty migration patterns, Docker Compose service links, and quoted D arguments on Linux with Spring AOT.
Fixed multiple bugs: Hazelcast health indicator, tracing overhead, OutputCapture race condition, WebClient resource usage, and several configuration/property issues.
Fixed various bugs such as incorrect Hazelcast health status, high tracing overhead, race condition in OutputCapture, and memory leaks on context restart.
Fixed a range of bugs including LambdaSafe visibility, executable JAR performance, missing runtime dependencies, Hikari metrics in native images, permission inconsistencies, and environment variable binding issues.
Resolved numerous bugs affecting LambdaSafe visibility, executable JAR performance, lazy‑init leak detection, binder context restoration, Hikari metrics in native images, and permissions handling in Gradle uber‑jars.
Fixed Binder context not restoring previous source, preventing missing data on Spring Boot 3.5 and later.
Fixed IllegalArgumentException thrown when property source filtering is applied twice
Upgraded embedded Tomcat to 10.1.42, introducing configurable multipart part count and header size limits.
Upgrade to Tomcat 10.1.42 adds configurable limits for multipart part count and header size, potentially impacting existing requests
Upgraded to Tomcat 10.1.42, adding configurable limits for multipart/form‑data part count and header size which may affect existing applications
New defaults: heapdump endpoint restricted by default, SSL status tag removed from metrics, and 'spring.http.client' deprecation removed with property renamed to 'spring.http.reactiveclient'.
Fixed several bugs related to Micrometer annotations, SpringApplication environment prefix handling, and property binding in native images; corrected JerseyWebApplicationInitializer loading issue.
Bug fixes for Micrometer annotations, environment prefix handling, property binding in native images, and several other edge‑case errors
Fixed numerous bugs affecting native image builds, bean auto‑configurations, JOOQ translation, Hikari datasource handling, SSL bundle access, and logging stack overflows
Resolved a wide range of bugs including native image builds on Podman, message interpolation, JMX warnings, OAuth2 config, MongoDB coroutine driver, JDBC handling, and various auto‑configuration issues.
Tomcat APR support is disabled by default on Java 24+ to prevent JDK warnings.
Fixed resource and stream handling bugs, Docker API messages, Kafka SSL issues, and native testing/main‑class proxy problems.
Breaking change: upgrade to Prometheus Client 1.3.6 removes Guava dependency management, requiring projects to specify Guava version manually.
Fixed numerous bugs including Reactive Jetty fast‑fail, web server refresh handling, Maven ArgFile usage on Windows, Thymeleaf view resolver fallback, banner placeholders, Mustache charset, native‑image Logback config, and SSL bundle reg...
Fixed several bugs including property metadata type for logging, NPE in GraylogExtendedLogFormatProperties, and Docker Compose handling of empty ClickHouse passwords
Multiple bug fixes addressing PostgreSQL environment handling with Bitnami images, Docker Compose unknown-orphans flag errors, BuildInfo timestamp truncation, FileWatcher symlink support, and numerous Javadoc/documentation link problems.
Resolved a wide range of bugs including SSL property building in Kafka, property resolution failures, deterministic shutdown handling, Docker Compose support, and various configuration and initialization issues.
Fixed numerous bugs including SSL property building in KafkaProperties, incorrect resource handler selection, shutdown handler ordering, and Maven shading issues on Java 21.
Introduced new APIs (withDefaultRequestConfigCustomizer, JsonObjectDeserializer.nullSafeValue) and performance tweaks for ConfigurationPropertiesBinder and metadata reading.
Upgrade to OpenTelemetry 1.38.0, bringing newer tracing capabilities
Fixed numerous bugs including OCI image packaging with the new relic buildpack, WebServerPortFileWriter handling, SSL options detection, Logback URL processing, and several NPEs in image building and loading.
Resolved numerous bugs including Windows classpath length failures, empty condition reports, locale‑sensitive comparison issues, datasource driver errors, Rabbit Streams auto‑configuration, ForkJoinPool ClassNotFoundException, ActiveMQ A...
Fixed multiple bugs: locale‑sensitive case comparisons, suppressed stacktrace for DataSourceProperties, Rabbit Streams auto‑configuration, ActiveMQ Artemis native‑image factory, duplicate meter binding, and empty condition report in fail...
Fixed numerous bugs such as routing datasource ignore flag, OAuth2 validation messages, SSL bundle handling, Zipkin client loading, @RestartScope recursion, large JAR loading, and several configuration property issues.
Fixed numerous bugs including health DB ignore routing, OAuth2 validation messages, SSL bundle handling, and large JAR loading issues
Added the TWENTY_THREE constant to the JavaVersion enum.
Added TWENTY_THREE constant to the JavaVersion enum.
Fix numerous bugs including missing defaultTimeout config, NPE in OnClassCondition, Spring Authorization Server defaults, @NestedConfigurationProperty on records, Testcontainers scoped beans, Jetty classloader issues, and others
Fixed numerous runtime bugs including NPEs in auto‑configuration, missing defaultTimeout property, ActiveMQ native‑image issue, Docker pipe path errors, Jetty classloader problems, and Testcontainers bean post‑processor bugs
- Fixed numerous bugs across core components (e.g., malformed SQL Server JDBC URL, devtools remote restart, Tomcat thread metric, Mongo health indicator compliance, and others).
- Fixed a wide range of bugs such as malformed SQL Server JDBC URLs, Git property coercion, MongoHealthIndicator API compliance, DataSourceProperties binding without java.sql module, Tomcat SSL protocol issues, Uber jar Multi‑Release man...
Add support for record component descriptions in configuration metadata generation.
Fixed a wide range of bugs including image build cleanup, Jetty client timeout, URI handling, JPA testcontainers, native image init, Redis IPv6 support, and more.
Fixed numerous bugs including wrong defaults for spring init, crashes in SpringBootMockMvcBuilderCustomizer, native image startup failures, IPv6 handling in Redis, and container reuse issues.
Fixed multiple bugs including BindValidationFailureAnalyzer target, Log4j2 environment pollution, Maven property setters, @ServletComponentScan mock registration, Tomcat StackOverflowError with Log4j2, Jetty virtual thread naming, slower...
Fixed ClientObservationConventionAdapter overwriting WebClient attributes and prevented StackOverflowError in custom deny‑all filter on Tomcat with Log4j2.
Add TWENTY_TWO constant to JavaVersion enum and document Java 22 support
Fix graceful shutdown bug in Tomcat when aborted and resolve Windows URL handling for BuildpackReference and correct start script task type
Upgrade to Hibernate 6.4.4.Final (default) – not compatible with GraalVM native images; users must pin to 6.4.2.Final via `hibernate.version` when using GraalVM.
Upgraded Hibernate to 6.2.22.Final with a GraalVM native‑image incompatibility notice (downgrade to 6.2.20.Final recommended).
Added micrometer.observations.annotations.enabled property (default false) to control Micrometer observation annotations support when AspectJ is on the classpath, restoring previous behavior when enabled.
Fixed multiple bugs such as SSL bundle toString, mixed PEM/JKS server.ssl handling, RabbitMQ stream auto-start, logging initialization errors, actuator endpoint accessibility, and AutoConfiguration ordering.
Upgraded core dependencies including Hibernate 6.4.1.Final, Spring Framework 6.1.2, Jetty 12, Kafka 3.6.1 and many others, dropping support for Hibernate 6.3.
Fixed multiple bugs such as HibernateJpaAutoConfiguration ordering, Gradle bootJar permission issues, SSL certificate usage in RestTemplate, and zip file handling errors
Added auto‑configuration for RestClient observations, Oracle Free support via Testcontainers/Docker Compose, CRaC dependency management and new Liquibase properties, plus a custom ApplicationContextFactory and clearer AOT initializer err...
Upgrade default CNB builders to Paketo Jammy, adding a new feature for improved container builds.
Switch default Cloud Native Buildpack builder to Paketo Jammy (replacing Bionic) which may require image rebuilds
Default container builder switched to Paketo Jammy, replacing the removed Bionic builder (potential breaking change for image builds).
Fixed JMS listener concurrency behavior to match documentation; users setting only spring.jms.listener.concurrency must review configuration (breaking change).
Fixed spring.jms.listener.concurrency to match documentation, requiring config review for affected users.
Corrected spring.jms.listener.concurrency to match documentation; users should verify configuration when setting concurrency without max concurrency (potential breaking change).
Added a new JavaVersion enum constant (TWENTY_ONE) and fixed numerous bugs across logging, security, AOT processing, and performance.
Added new JavaVersion enum entry (TWENTY ONE) and updated documentation for PKCS8 PEM usage.
Added a new JavaVersion enum constant “TWENTY_ONE” and improved OCI image name parsing.
Fixed numerous bugs such as logging URLs with query parameters not being detected as XML, environment variable name change, server header size handling on Netty with HTTP/2, and several component-specific issues
Upgrade MariaDB to 3.1.4 (3.0.x no longer supported) with a fallback property for downgrading if needed
Upgrade MariaDB to 3.1.4 restoring Java 8 compatibility, with a fallback to 3.0.x via the mariadb.version property.
Resolved multiple bugs including native reflection hints for superclass properties, Mongo host handling, health‑group routing, Jackson mapper auto‑configuration, and various configuration‑properties issues.
Fixed a wide range of bugs, including native reflection hints for super‑class properties, health endpoint grouping, configuration‑properties handling, OTel span attributes, and several auto‑configuration edge‑cases.
Fixed multiple bugs across health endpoints, Mockito processing, configuration properties handling, Flyway 9.20.0 compatibility, Saml2RelyingParty selection, ImportsContextCustomizer alias support, and ConfigurationPropertyName equality ...
Fixed numerous bugs across core modules including WebFlux Jetty websockets, RestTemplate SSL handling, actuator logger endpoint, SSL bundle configuration, configuration property validation, tracing, SpringApplication.from usage, DevTools...
- Fixed multiple bugs such as circular references in the Spring Boot properties migrator, Actuator logger endpoint failures, validation issues with @ConfigurationProperties, DevTools handling of package‑private main classes, and WebFlux ...
Fixed numerous bugs including circular reference creation in the Spring Boot properties migrator, devtools handling of package‑private main classes, missing JavaVersion enum entry for Java 20, improper logging in @EndpointCloudFoundryExt...
Added new SpringApplication.from(...) result handling and made Flyway use SLF4J by default with an override property.
Fixed Welcome page 404 when response cannot be produced and prevented NoSuchMethodError when loading application.yml with SnakeYAML 2.0
Fixed 404 errors on the Welcome page and resolved NoSuchMethodError when loading application.yml with SnakeYAML 2.0.
Fixed numerous bugs such as welcome page 404, native‑image issues (Zipkin reporter duplication, Hibernate 6.2 incompatibility, property binding with package‑private accessors), WebClient auto‑configuration fallback, missing R2DBC pool se...
Fixed numerous bugs including Welcome page 404, PEM EC key handling, WebFlux graceful shutdown NPE, health mail port display, and Flyway password handling.
Fixed numerous bugs such as CloudFoundry endpoint mapping, ApplicationAvailability auto‑configuration, Gradle Kotlin DSL bootJar layering, Cassandra defaults, test slice inheritance, Liquibase native image hints, Spring Batch observabili...
Fixed bugs across integrations and core features, including CloudFoundry endpoint mapping, Kotlin DSL bootJar layering, banner placeholders, Cassandra config resolution, ApplicationAvailability auto‑configuration, and nested test class p...
Fixed multiple bugs including embedded server auto‑configuration, duplicate resource imports, SnakeYAML NoSuchMethodError, Kotlin @ConfigurationProperties on mutable data classes, Podman image builds, and AOT generation errors with @Enti...
Fixed multiple bugs such as ignored deprecated SAML2 properties, Maven plugin timestamp handling, SnakeYAML NoSuchMethodError, and Jetty graceful‑shutdown logger issues
Fixed bugs in Maven plugin timestamps, Jetty logger, configuration binding, ConfigDataLocationResolver, and observation handler ordering
Fixed multiple runtime bugs such as ClassNotFoundException during AOT Logback processing, broken Actuator health endpoint with Gson on Java 17, and Maven plugin stream handling errors.
Fixed multiple bugs: Maven plugin resource transformer stream handling, Actuator health endpoint with Gson/Java 17, devtools restart performance, SpyBean reset after tests, and Map‑type deprecated property detection.
Fixed numerous bugs across core modules (e.g., bean definition errors, DevTools native image issues, JOOQ transaction provider, health indicator logging, and configuration property handling).
MySQL JDBC driver coordinates changed from `mysql:mysql-connector-java` to `com.mysql:mysql-connector-j`.
Fix numerous bugs across logging, GraphQL, WebClient, native image support, testing utilities and other core components
Fixed typo in LocalDevToolsAutoConfiguration logging and resolved PKCS#11 KeyStore startup error
Introduced a new configuration property to customize observation patterns for Spring Integration components.
Fixed numerous bugs such as auto‑configuration of ScheduledBeanLazyInitializationExcludeFilter, duplicate banner output, property binding errors, IPv6 Redis sentinel parsing, and other runtime issues.
Fixed a range of bugs including auto-configuration of ScheduledBeanLazyInitializationExcludeFilter, bridge method property binding issues, duplicate SpringBootContextLoader banner, Lettuce metrics histograms, IPv6 sentinel node parsing, ...
Fixed numerous bugs including comment parsing, actuator configprops DataSize display, KafkaAutoConfiguration type information, PEM elliptic‑curve TLS key handling, slow CapturedOutput with Kotlin, empty @DefaultValue on collections, and ...
Fixed numerous bugs including Bean method type information, TLS key parsing, Actuator configprops DataSize display, @DefaultValue usage on collections, comment parsing, blocking Couchbase health checks, BootBuildImage input annotations, ...
Add NINETEEN to JavaVersion enum.
Added NINETEEN constant to JavaVersion enum.
Fixed a wide range of bugs such as misleading JarMode layertools errors, ClassNotFoundException under GC pressure, Flyway auto‑configuration issues, BasicJsonParser crashes, health contributor recreation, and several logging and lifecycl...
- Fixed numerous bugs including JSON parser nesting failures, JarMode error messages, wrong port logging, servlet lifecycle stop state, and health contributor recreation.
Fixed numerous bugs including Docker image publishing failures, health indicator discovery, Actuator mappings, and various class‑loading and configuration issues
Fixed multiple runtime bugs such as ClassNotFoundException with ImportAutoConfigurationImportSelector, 500 error on /actuator/mappings, Log4j2 shutdown hook not disabled, InstanceAlreadyExistsException with Actuator/JMX, and assorted oth...
Fixed numerous bugs such as configuration property overrides, NullPointerException in BasicJsonParser, health indicator diagnostics, Tomcat HTTP/2 header size handling, and WebMvcMetricsFilter issues
Fixed numerous bugs such as inconsistent @RestControllerAdvice handling, ignored Tomcat header size, NPE in BasicJsonParser, and Cassandra properties overrides
Added GraphQL default MIME type "application/json" with backward compatibility and customizable single logout for auto‑configured SAML SP registration.
Fixed numerous bugs including property precedence, WebClient metric recording, @ConditionalOnProperty alias handling, and startup failures
Various bug fixes including property precedence, WebClient metric handling, thread‑safety in job execution, and startup failures on Java 11+
Fixed NPE and thread‑safety bugs in boot info, actuator configprops, and ApplicationAvailabilityBean; corrected test environment handling and configuration metadata
Fixed several NullPointerExceptions and thread‑safety issues in actuator endpoints, ApplicationAvailabilityBean, and configuration property handling.
Fixed MustacheAutoConfiguration ClassNotFoundException in servlet apps when Spring MVC is absent.
Fixed MustacheAutoConfiguration ClassNotFoundException when Spring MVC is absent
Upgrade core libraries (Kafka 3.0.1, Netty, Hibernate, etc.) – Kafka upgrade enables idempotence by default
Added a new JavaVersion enum constant (EIGHTEEN) as a feature update.
Fixed numerous bugs such as JMXAutoConfiguration hierarchy, profile logging with commas, @SpyBean circular references, Gradle plugin eager configuration, fat‑jar layout issues, Liquibase CDI support, Tomcat redirect handling, reactive We...
- Fixed a series of bugs such as JmxAutoConfiguration hierarchy handling, ambiguous active‑profile logging, SpringApplicationShutdownHook cleanup, eager Gradle task configuration, @SpyBean circular‑reference errors, and Tomcat relative r...
Fixed numerous bugs including placeholder resolution in spring.config.import, Tomcat listener warnings, configuration source reattachment, @SpringBootTest web type handling, embedded launch script permission errors, ResponseStatusExcepti...
Fixed bugs in configuration handling, launch script permissions, Maven repackaging speed, and SpringBootTest property loading.
Fixed numerous bugs including property binding quirks, database initialization eager loading, Thymeleaf extras startup failure, health endpoint cache TTL, and SameSite cookie handling for Spring Session
- Fixed numerous bugs including eager bean initialization, Thymeleaf‑Security classpath issues, Quartz schema configuration, and property binding inconsistencies.
Fixed several bugs: corrected matching‑strategy property name, prevented deployment failures with ErrorPageSecurityFilter on Servlet 3.1, and eliminated ArrayStoreException when using Spring Security
Added support for both kebab‑case and camelCase options in the Spring init CLI.
Fixed multiple bugs including outdated JSTL dependency handling, JUnit caching, AOP proxy duplication, profile precedence, Logback charset defaults, method validation inheritance, and Prometheus endpoint content type.
Fixed bugs related to dependency management (JSTL), JUnit caching, validation propagation, and Logback charset handling.
- Fixed numerous bugs such as JMX endpoint unavailability, R2DBC precedence over JDBC, GC pressure from JarFileWrapper, OpenMetrics content negotiation, and IPv6 address handling in RabbitMQ configuration.
Fixed multiple bugs including misleading failure analysis when jOOQ's DSLContext is unavailable, JMX endpoint issues with lazy initialization, cache heap consumption, IPv6 address parsing for RabbitMQ, and timestamp parsing for MeterValue
Fixed numerous bugs such as actuator endpoints not sanitizing JSON, startup failures with Flyway, Undertow URL errors, and memory leak in Tomcat deployments.
Fixed numerous bugs across actuator sanitization, Web MVC metrics, concurrent image builds, Zip64 jar handling, binder conversion concurrency, @MockBean/@Repeat usage, and Undertow URL parsing.
Fixed multiple bugs: configuration metadata leaks, NPE in TomcatMetricsBinder, cyclic bean definitions, WebTestClientContextCustomizerFactory IllegalStateException, and URI sanitization issue.
Fixed several bugs such as Spring Boot configuration metadata leaks, a TomcatMetricsBinder NPE, and WebTestClientContextCustomizerFactory IllegalStateException.
Add Java 17 to the JavaVersion enum as a new supported version
Fixed numerous bugs including JSON mapper breakage, actuator configprops errors, Redis health false positives, lazy initialization incompatibilities with Spring Session JDBC and Spring Batch, and LiveReload connectivity issues.
Fixed numerous bugs related to class loading, profile-specific configuration, application shutdown, and database initialization (e.g., Instantiator without a classloader, EnvironmentPostProcessor classloader issues, deadlock on System.ex...
Fixed numerous bugs including class loader issues for EnvironmentPostProcessors, profile-specific configuration handling, memory leak in Metrics interceptor, Gradle configuration‑cache failure, and case‑sensitive LiveReload headers.
Fixed numerous bugs such as SqlInitializationAutoConfiguration failures, RestTemplateBuilder incompatibility, health details serialization, profile‑specific property ordering, and JDK 11 SecurityManager startup issues
Fixed a wide range of bugs affecting RestTemplateBuilder, health serialization, config import handling, JDK 11 startup with SecurityManager, logging system selection, bootBuildImage, and other components.
Fixed several bugs: RestTemplateBuilder incompatibility, CompositeHealth serialization, logging system selection, RandomValuePropertySource divide‑by‑zero, and startup issues on JDK 11 with SecurityManager.
Fixed numerous bugs including Actuator CORS handling, Jetty shutdown delays, lazy initialization issues, configuration property processing, and metrics filter failures.
Fixed numerous bugs including Actuator CORS handling, Jetty shutdown delays, lazy initialization issues, and metrics filter failures.
Fix numerous bugs: lazy initialization of SmartInitializingSingleton beans, classpath scanning for ConfigurationProperties and SpringBootConfiguration, clearer dependency‑cycle analysis, Jetty shutdown delay, actuator CORS handling, metr...
Fixed numerous bugs such as CloudPlatform.isActive mis‑reporting, Elasticsearch auto‑configuration converters, Gradle bootBuildImage file‑permission loss, keystore InputStream leak, actuator and endpoint handling errors, and other valida...
Fixed numerous bugs including bootBuildImage permission preservation, proper keystore stream closing, handling of UnknownHostException in Prometheus metrics, validator hierarchy errors, and cleanup of unpacked JARs
Fixed numerous bugs including null exception handling in JooqExceptionTranslator, startup failures with Actuator/Jersey, and incorrect configuration metadata loading
Spring Boot's dependency management now aligns Nimbus JOSE JWT with Spring Security 5.4.5 by defaulting to version 8.x (overrideable via nimbus jose jwt.version).
Fixed multiple bugs including Flyway/Liquibase migration timing, Redshift driver detection, RabbitMQ metrics, JPA deadlock on ContextRefreshedEvent, Thymeleaf dialect handling in tests, and metric interceptor errors.
Added a new API for retrieving PropertySource resource locations.
Multiple bug fixes address servlet registration, datasource metrics, build-image handling (including WAR packaging), bootRun toolchain and JVM arguments, classpath ordering, and WebTestClient base path issues.
Fixed default servlet registration issue.
Multiple bug fixes addressing configuration binding order, actuator endpoint behavior, JPA repository defaults, locale resolver handling, and various framework components
Fixed nondeterministic JavaBean property binding and numerous bugs in actuator, Redis, JPA repositories, error handling, WebFlux tags, and other core components
Fixed numerous bugs including Redis health indicator response size, actuator status handling, configuration property binding order, and Spring Integration metrics detection.
Added a property or environment variable to enable DevTools' restarter regardless of launch mode
Fixed numerous bugs: configuration metadata accessor issues, Tomcat SSL password handling, JPA test schema handling, Quartz datasource selection, test filter equality, @PostConstruct on Java 11+, hidden config paths, JarFileWrapper strea...
A large set of bug fixes addressing configuration properties, embedded server behavior, logging integration, and resource handling.
Fixed numerous bugs affecting WebMvcTest slices, Jetty session timeout, Undertow filter init, shutdown hooks, configuration properties binding, and logging integrations.
Fixed @ConfigurationPropertiesBinding not applying Formatter beans.
Multiple bug fixes covering configuration proxy handling, signed‑jar performance, MVC error model, actuator endpoint sanitization, and various runtime edge cases (e.g., HSQLDB, RSocket, Undertow, memory leaks on Java 11)
Fixed numerous bugs across core modules (e.g., configuration proxying, RSocket NPE, Undertow customizer, SSL Logback, and memory issues on Java 11+).
Fix performance issue with signed JAR dependencies when repackaged into a single jar.
Feature: Jetty no longer requires Conscrypt to enable HTTP/2 support.
Added configurable liveness/readiness health indicators and probes, a run‑image option for container image builds, and reactive Elasticsearch health check support.
Fixed multiple runtime bugs such as startup failures with DynamoDBLocal, NullPointerExceptions in ErrorPageFilter, RedisReactiveHealthIndicator issues, and conditional bean matching errors.
Fixed NullPointerException in ErrorPageFilter when a MissingServletRequestParameterException is thrown without a DefaultHandlerExceptionResolver.
Added new features such as Oracle JDBC driver dependency management, Elasticsearch URI user‑info support, and a welcome page for Spring WebFlux, plus enhancements to Docker and property handling.
Added feature to restrict custom YAML types and provided dependency management for Oracle JDBC driver coordinates.
Restrict use of custom YAML types to improve configuration safety.
Added several new features including extensible Undertow constructors, Redis sentinel password support, configurable LifecycleProcessor timeout, and a @WebServiceClientTest annotation for SOAP client testing.
Add feature to throw an exception when spring.config.location uses a classpath location and deprecate PushRegistryConfig.numThreads.
Add a new feature that throws an exception when spring.config.location is set to a classpath resource
Added dependency management for Jakarta XML SOAP and introduced Java 14 support.
Added URI sanitisation for address‑related properties to improve security.
Fixed multiple bugs: BuildInfo task version handling, collection binding errors, Jetty logging with compression, WebFlux @ResponseStatus handling, TomcatMetrics cleanup, @ActiveProfiles merging, SSL keyAlias errors, DataSource URL handli...
Fixed @ActiveProfiles with @SpringBootTest to merge profiles instead of overriding them
Added new features such as avoiding 406 errors for error pages, ignoring trailing slashes when recording web metrics, and using RBAC credentials for Couchbase cluster info.
Fixed runtime bugs such as StackOverflowError in PoolingDataSourceBean.getParentLogger, invalid jar entry dates, profile name handling, missing antlib properties, null‑safe equality checks, and wildcard list target type issues.
Add constructor binding support for third‑party classes and upgrade compatibility to Gradle 6 (new features).
Fixed multiple bugs such as SSL key alias handling, actuator endpoint DB info, Rabbit SSL config, health endpoint authority exposure, Maven plugin shutdown, JSON parser whitespace handling, and ServletComponentScan with component index.
Disabled @ConfigurationProperties scanning by default; opt‑in via @ConfigurationPropertiesScan (breaking change).
Added support for amqps:// URIs in spring.rabbitmq.addresses
Added new APIs and renamings (e.g., NettyRSocketServerFactory methods, server.jetty.idle timeout) plus improvements like optional Saml2LoginConfiguration and enhanced failure analysis
Fixed numerous bugs such as typo in error messages, actuator endpoint caching, ordering with ObjectProvider, JUnit 5 detection, NPE in concurrent EndpointRequest calls, and several configuration and conditional bean issues.
Added new resource server configuration for issuer validation and exposed dependency management plugin version.
Introduced AbstractDependsOnBeanFactoryPostProcessor to identify bean dependencies by type (new feature).
Fixed bugs: Embedded MongoDB now uses HTTPS, corrected Jetty/Infinispan reference, proper session property name, jOOQ expansion, and improved Javadoc for management server port.
Added feature to exclude groovy.lang.MetaClass from configuration annotation processing
Added auto‑configuration for Spring Session’s DefaultCookieSerializer and cached MimeTypes for faster static resource handling.
Fixed missing/highlighted syntax and a broken link in the reference documentation.
Added new features: Reactor Netty client error detection, JAXB runtime for TldSkipPatterns, enriched NoSuchMethodError diagnostics, and refined EndpointRequest handling with separate management ports.
Fixed Gradle plugin to write all required manifest entries.
Fixed bugs: enabled @JsonTest without Jackson, prevented zip extraction outside target directory, and ensured Tomcat creates upload temp directory when missing.
Fixed numerous bugs across servlet endpoints, OpenEntityManagerInView, actuator endpoints, Undertow timeouts, null pointer exceptions, and logging behavior.
Added server.connection timeout support for Netty, included health details in Elasticsearch REST and Jest HealthIndicators, and disabled Tomcat reference clearing on Java 11.
Added StringSequence optimization and fixed related bugs like equals handling and NPE avoidance.
Upgrade core libraries and frameworks to their latest patch releases, including Spring Framework 4.3.22, Spring Security 4.2.11, Spring Batch 3.0.10, and Spring Integration 4.3.19.
Added Actuator health check for Elasticsearch REST clients and several new default behaviors (RabbitMQ template queue deprecation, SSL client auth disable, Java 9 multi‑release JAR support).
Added fine‑grained metrics for Spring Data REST repositories.
Updated Homebrew formula homepage to avoid redirect (new feature)
- Added new OAuth2 starters, renamed the OIDC client starter, and introduced support for parameterized containers and conditional servlet filters.
Added auto‑configuration for Thymeleaf's Spring Security 5 dialect and deprecated the Spring Security 4 dialect auto‑configuration; @ConditionalOnEnabledEndpoint can now be applied to any component.
Fixed multiple bugs: Undertow SSL key/trust store providers ignored, @AutoConfigureMockMvc filter registration ignored, WebRequestTraceFilter trace data loss, and BasicJsonParser handling of escaped characters.
Added new features such as limiting metrics collection, auto‑configuring HiddenHttpMethodFilter for WebFlux, enabling actuator endpoints with mvcMatchers, and deprecating legacy JPA builder callback and JMS pooled connection factory.
Add new Rabbit SSL factory properties and enhanced NoSuchMethodError analysis
Added new features such as microsecond support in Duration conversions, lazy Charset handling, primary DispatcherServlet path discovery, and deprecated the unused ConfigFileApplicationListener.APPLICATION_CONFIGURATION_PROPERTY_SOURCE_NAME.
Added a new feature to strip carriage returns in TypeUtils.getJavaDoc().
Added enhancements like configurable JMX metrics domain, auto‑configuration of JOOQ TransactionListenerProvider, custom UriTemplateHandler support, and handling of placeholder values and empty trust‑store passwords.
Fixed many bugs across Actuator endpoints, data source handling, RabbitMQ starter, Quartz auto‑configuration, and other components