LoginSign Up
← Back to all sparks
M

Micronaut

DEVOPS
Velocity5.0

JVM framework for building modular microservice and serverless applications

micronaut.io ↗

Micronaut Core's 5.1 line is maintenance work, patched in lockstep with 5.0.

maintenancedependency-updatescorsnettyaop-proxiesdual-branch
◆Current state
Micronaut Core is running two maintenance trains, 5.0.x and 5.1.x, and every fix that matters lands on both within days. The window is dominated by dependency movement — Netty, netty-tcnative, Jackson security patches — and small correctness repairs around AOP proxies, bean replacement and CORS matching. 5.1.11 is the first release in this window that adds anything rather than only repairing.
◆Where it's heading
Nothing in these entries points at new capability; this reads as a stabilisation stretch on a framework whose feature work is happening outside Core. The recurring threads are compile-time proxy correctness, GraalVM native-image warnings, and keeping the Netty and Jackson floor current. SCIM media type support is the one place the surface actually grew.
◆Prediction
Expect the paired 5.0.x and 5.1.x patch pattern to continue, driven by upstream Netty and Jackson releases, unless a 5.2 line opens and pulls feature work back into Core.

◆Recent moves

  1. 2d ago

    SCIM media type support alongside CORS and multipart fixes

    The broadest 5.1 release in this window, though still modest: SCIM JSON media type support is the single addition, next to case-insensitive Content-Type and Content-Length matching in the multipart FormDemuxer and a fix for its event loop race. The CORS value-equality fix here is the same change already shipped on 5.0.7, which is how this project has handled every fix in the window — both trains, days apart.

    View source ↗
  2. 26d ago

    CORS matching fixed and Jackson security patch backported

    Replacing reference equality with value equality in the CORS isAny checks is a real correctness fix, since the old comparison could silently fail to match configured origins. The Jackson dependency patch here is the 5.0.x half of a security update applied to both trains within a day.

    View source ↗
  3. 27d ago

    Jackson security patch on the 5.1 line

    A single dependency update patching Jackson vulnerabilities, cut on its own rather than held for the next fix release. The speed of the matching 5.0.x release a day later is the part worth noting.

    View source ↗
  4. 28d ago

    Fix for processing replaced executable methods

    A one-commit release repairing how replaced executable methods are processed. It belongs to the run of bean-replacement and AOP fixes that defines this stretch of the 5.1 line.

    View source ↗
  5. 29d ago

    Method injection repaired on AOP introduction proxies

    Method injection on AOP introduction proxies is fixed here, another entry in the compile-time proxy thread, alongside a KSP version bump. Small in isolation, but the third proxy-related fix in a week.

    View source ↗
  6. 1mo ago

    Private JsonProperty introspection and GraalVM warning cleanup

    The broadest release in this window: introspection now works for private JsonProperty fields, factory beans in superclasses are fixed, and an exclusive service-loader strategy clears GraalVM warnings. The native-image work is the piece that goes beyond bug repair.

    View source ↗