What’s New in Spring Framework 5.3.20? Features, Bug Fixes, and Dependency Updates

New Features

Added "application/graphql+json" MIME type for GraphQL.

Spring Security SAML can target a specific logout strategy per configuration.

Bug Fixes

SpringApplication

default properties now have higher precedence than those defined with @PropertySource.

Fixed WebClient metric recording failure causing request errors (#31089).

Resolved incomplete Artemis dependency management (#31079).

Added missing buffered and step properties for StatsD component.

Improved formatting of WebFlux endpoint request debug logs for readability.

Corrected @ConditionalOnProperty meta‑annotation @AliasFor behavior.

Made JobExecutionExitCodeGenerator event handling thread‑safe.

Addressed Gradle build warning ServiceConfigurationError from Hibernate service loading logs.

Fixed startup failure when LOGGING_LEVEL environment variable is used for log configuration.

Handled unused SearchStrategy parameter in

MethodValidationExcludeFilter.byAnnotation(Class, SearchStrategy)

.

Removed unwanted hyphens in

spring.security.saml2.relyingparty.registration.asserting-party

property for asserting party.

Updated DevTools to discourage use of spring.mustache.cache property.

Dependency Updates

ActiveMQ 5.16.5

Byte Buddy 1.12.10

Cassandra Driver 4.14.1

Couchbase Client 3.2.7 and 3.3.0

Elasticsearch 7.17.3

Flyway 8.5.11

GraphQL Java 18.1

Hibernate 5.6.9.Final

Infinispan 13.0.10.Final

Jackson Bom 2.13.3

Jaybird 4.0.6.java8

Johnzon 1.2.18

Kafka 3.1.1

Micrometer 1.9.0

Mockito 4.5.1

MSSQL JDBC 10.2.1.jre8

MySQL 8.0.29

Netty 4.1.77.Final

Postgresql 42.3.5

Reactor Bom 2020.0.19

Selenium 4.1.4 and Selenium HtmlUnit 3.61.0

SendGrid 4.9.2

Spring AMQP 2.4.5

Spring Batch 4.3.6

Spring Data 2021.2.0

Spring for GraphQL 1.0.0

Spring Framework 5.3.20

Spring HATEOAS 1.5.0

Spring Integration 5.5.12

Spring Kafka 2.8.6

Spring LDAP 2.4.0

Spring Security 5.7.1

Spring Session Bom 2021.2.0

Tomcat 9.0.63

UnboundID LDAPSDK 6.0.5