What’s New in Spring Framework 5.3.20? Features, Bug Fixes & Dependency Updates

New Features

Added "application/graphql+json" MIME type support for GraphQL.

Spring Security SAML now allows logout policies to be configured per relying‑party.

Bug Fixes

SpringApplication

default properties now have higher precedence than those defined with @PropertySource.

Fixed WebClient metric recording failure that caused request errors (issue #31089).

Resolved incomplete dependency management for Artemis (issue #31079).

Added missing buffered and step properties for the StatsD component.

Improved WebFlux endpoint request debug logging format for better readability.

Corrected @ConditionalOnProperty meta‑annotation @AliasFor behavior.

Addressed thread‑safety issue in JobExecutionExitCodeGenerator event handling.

Fixed Gradle build warning ServiceConfigurationError from Hibernate service loading logs.

Resolved startup failure when using LOGGING_LEVEL environment variable for log configuration.

Removed unused

MethodValidationExcludeFilter

SearchStrategy

parameter.

Corrected malformed hyphens in

spring.security.saml2.relyingparty.registration.asserting-party

property.

Adjusted DevTools recommendation to avoid setting spring.mustache.cache property.

Dependency Updates

ActiveMQ 5.16.5

Byte Buddy 1.12.10

Cassandra Driver 4.14.1

Couchbase Client 3.2.7 and 3.3.0

Elasticsearch 7.17.3

Flyway 8.5.11

GraphQL Java 18.1

Hibernate 5.6.9.Final

Infinispan 13.0.10.Final

Jackson Bom 2.13.3

Jaybird 4.0.6.java8

Johnzon 1.2.18

Kafka 3.1.1

Micrometer 1.9.0

Mockito 4.5.1

MSSQL JDBC 10.2.1.jre8

MySQL 8.0.29

Netty 4.1.77.Final

Postgresql 42.3.5

Reactor Bom 2020.0.19

Selenium 4.1.4 and Selenium HtmlUnit 3.61.0

SendGrid 4.9.2

Spring AMQP 2.4.5

Spring Batch 4.3.6

Spring Data 2021.2.0

Spring for GraphQL 1.0.0

Spring Framework 5.3.20

Spring HATEOAS 1.5.0

Spring Integration 5.5.12

Spring Kafka 2.8.6

Spring LDAP 2.4.0

Spring Security 5.7.1

Spring Session Bom 2021.2.0

Tomcat 9.0.63

UnboundID LDAPSDK 6.0.5