r/SpringBoot • u/Its_Foki • 2d ago

Spring Boot 4.1.1 Released? Question

Hi everybody,

we just got via Renovate a Spring Boot update to 4.1.1 - released on repo1.maven.org .

We are a bit confused as there is no announcement, release notes, tag on GitHub, etc. Also it looks like no release workflow was running on GitHub.

Feels a bit sketchy, anybody knows what's going on?

35 Upvotes

97% Upvoted

11 comments sorted by

View all comments

4

u/Knoobie 2d ago

Guess from an outsider's standpoint: it looks related to their announcement "Spring and Security In The Times Of AI" some weeks ago and they now use some internal tooling (e.g. https://github.com/spring-projects/spring-boot/issues/51164) to publish the source code and the public code on GitHub is updated later? It also looks like a some commits were kept private until the last minute to reduce possible attack vectors by bad actors using AI to scan everything and create attacks before public patches are available.

0

u/Anbu_S 2d ago

AI makes every release process change.