The Spring Blog

Engineering
Releases
News and Events

This Week in Spring - May 15th, 2018

Hi Spring fans and welcome to another installment of This Week in Spring! I just returned from a month of travel on Saturday, and on Sunday I was off to Denver, CO, for the epic SpringOne Tour Denver show. Now, I’m off to begin a 10 day tour of Kyiv, Ukraine (JEEConf); Dublin, Ireland and Belfast, Northern Ireland; and Barcelona, Spain (Spring I/O). I hope to see you around! (@starbuxman)

We’ve got a ton of good stuff to look at today so let’s get to it!

Read more...

Spring Security 5.1.0.M1 Released

On behalf of the community I’m pleased to announce the release of Spring Securiity 5.1.0.M1. This release resolves over 80 tickets. The highlights can be seen below:

  • Spring Security OAuth2 Client Support for WebFlux. See the sample for how to use it.

  • Numerous other enhancements to WebFlux Support

  • Added OAuth2ClientArgumentResolver

  • Implementation of the Authorization Code Grant. See the sample for how to use it.

Feedback Please

If you have feedback on this release, I encourage you to reach out via StackOverflow, GitHub Issues, or via the comments section. You can also ping me @rob_winch , Joe @joe_grandja, or Josh @jzheaux on Twitter.

Read more...

New tutorial about Spring Boot and Kotlin

For 2 years, we have introduced Kotlin support in Spring projects (Framework, Boot, Data) and published various blog posts, sample projects, slides and documentation. Today, we are publishing an opinionated tutorial intended to summarize in a single place how to build a Spring Boot web application in Kotlin leveraging these features and following best practices:
https://spring.io/guides/tutorials/spring-boot-kotlin/

Topics covered are:

  • How to create a Spring Boot 2 project in Kotlin
  • Understanding the build configuration
  • Testing with JUnit 5: integration tests, @WebMvcTest + mocking
  • Persistence with JPA and data classes
  • Creating your own extensions
  • Rendering web pages with Mustache
  • HTTP API with @RestController
  • Configuration properties
Read more...

Spring IO Platform Cairo SR1

I am pleased to announce that Spring IO Platform Cairo-SR1 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

  • Spring Boot 2.0.2
  • Spring Data Kay SR7
  • Spring Framework 5.0.6
  • Spring Kafka 2.1.6
  • Spring Integration 5.0.5
  • Spring Security 5.0.5
  • Spring Session Apple SR2

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

Read more...

Spring IO Platform Brussels SR10

I am pleased to announce that Spring IO Platform Brussels-SR10 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

  • Spring Boot 1.5.13
  • Spring Data Ingalls SR12
  • Spring Framework 4.3.17
  • Spring Integration 4.3.16
  • Spring Security 4.2.6
  • Spring Security OAuth 2.0.15

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

Read more...

Spring Cloud Data Flow 1.5 RC1 released

The Spring Cloud Data Flow team is pleased to announce the release of 1.5.0 RC1. Follow the Getting Started guides for Local Server, Cloud Foundry, and Kubernetes.

Here are the highlights:

General Improvements

  • Switch to Hikari connection pool and restructure code to use fewer connections.

  • Several bug fixes in underling deployer libraries.

Dashboard

  • Editing a created/deployed stream is now possible from the Stream Builder. The application and deployment properties can be edited and re-deployed. The App version can be switched, too.

  • A new paginator component is added to all the list page. Switching from a list of 20, 30, 50, or 100 items per page is possible. This further simplifies the bulk operation workflows.

  • Introduction of end-to-end testing via Selenium and SauceLabs.

Read more...

Spring Project Vulnerability Reports Published

The following CVEs have been published today:

Please, review the information in the CVE reports and upgrade immediately.

Spring Boot Users: Spring Boot 2.0.2 and 1.5.13, released earlier today, contain the fixes for the above vulnerabilities.

Read more...

Spring Boot 2.0.2

On behalf of the team and the community, I am pleased to announce that Spring Boot 2.0.2 is now available from repo.spring.io and Maven Central.

Spring Boot 2.0.2 includes over 80 fixes, improvements, and dependency updates. Thanks to everyone that has contributed with issue reports and pull requests. Please note that a number of the upgraded dependencies contain fixes for various security vulnerabilities. Please see this blog post for further details.

How can you help?

If you’re interested in helping out, check out the “ideal for contribution” tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Read more...