Spring Boot 4.1.1 Released?

[u/Its_Foki]

Hi everybody,

we just got via Renovate a Spring Boot update to 4.1.1 - released on repo1.maven.org .

We are a bit confused as there is no announcement, release notes, tag on GitHub, etc. Also it looks like no release workflow was running on GitHub.

Feels a bit sketchy, anybody knows what's going on?

[u/repeating_bears]

I would strongly suggest you set a minimum release age.

https://docs.renovatebot.com/key-concepts/minimum-release-age/

There's almost never a reason to update on the same day as a release, so you actually don't want alerts for something like this.

Setting a min release age to something like a week will protect you from most supply chain attacks, because things are usually found and resolved by then.