Spring Team
Oliver Drotbohm

Oliver Drotbohm

Spring Data Project Lead

Dresden, Germany

Oliver Gierke is the lead of the Spring Data project at Pivotal, formerly known as SpringSource, and member of the JPA 2.1 expert group. He has been into developing enterprise applications and open source projects for over 8 years now. His working focus is centered around software architecture, Spring, REST and persistence technologies. He is a Java Champion, regularly speaking at German and international conferences and the author of technology articles as well as the first book on Spring Data.
Blog Posts by Oliver Drotbohm

What's new in Spring Data Lovelace?

With Spring Data Lovelace just released in its generally available version last week, it is time to have a brief walk through the new features we have added. The release train is pretty packed with features. In this blog post, I cover the more general ones. Advanced, store-specific news is covered in the following blog posts:

Read more...

Spring Data Lovelace RC2 available

On behalf of the Spring Data team, I’d like to announce the availability of the Lovelace RC2 release. This ships in preparation of Spring Boot 2.1 M2 and, of course, our own GA release mid-September. The release ships with 82 tickets fixed. You can find more details in the the updated and curated release wiki.

A pretty late but significant new feature has made it into the release: deferred repository initialization for Spring Data JPA. The feature allows your startup to use Spring Framework’s JPA background initialization option more effectively and can significantly cut down startup time. See the previewing example for details.

Read more...

Security issue in Spring Data REST (CVE-2017-8046)

Last fall, a security vulnerability affecting Spring Data REST was discovered. We patched the affected modules and published a CVE. We’ve seen some recent news about this that’s led to confusion. Here’s the scoop:

tl;dr:

  • There was a security vulnerability allowing arbitrary code execution in Spring Data REST up to version 2.6.8 and 3.0.0.
  • This vulnerability has been fixed in the following versions:
    – Spring Data REST 2.6.9 (Ingalls SR9, Oct. 27th, 2017), included in Spring Boot 1.5.9 (Oct, 28th 2017).
    – Spring Data REST 3.0.1 (Kay SR1, Oct. 27th 2017), included in Spring Boot 2.0 M6, (Nov. 6th 2017)
  • The CVE was originally published at the end of September 2017. We originally thought that we had fixed the issue with releases that had been published a couple of days before. Subsequent feedback showed that this wasn’t the case and the issue was eventually fixed in October / November 2017. Regrettably, the CVE was not updated to reflect this. The team is working on making sure that this lack of update does not happen again.
Read more...

Spring Data Ingalls SR8 released

On behalf of the Spring Data team I’d like to announce the eighth service release of the release train Ingalls. The release ships on top of the just released Spring Framework 4.3.12 and in preparation of the upcoming Spring Boot 1.5.8 released.

The release ships 42 (yay!) tickets fixed and is a recommended upgrade to all users of the Ingalls release train.

Read more...

Spring Data release train Kay goes GA

On behalf of the Spring Data engineering team I am happy to announce the general availability of Spring Data Kay. It’s the first major revision since Spring Data’s inception in 2009 and thus packed with tons of features. Here are the most significant ones:

  • Upgrade to Spring Framework 5.0, Java 8 and JavaEE 7 as baseline
  • Revised repository APIs (better method names, Optional etc.)
  • A revised repository composition model
  • Support for reactive data access for Cassandra, Couchbase, MongoDB and Redis
  • Addition of Spring Data Geode to the release train
  • Use of nullability annotations and advanced runtime checks on those
  • Kotlin support for null-safety and immutable data classes supported through Kotlin constructors
  • General Java 9 compatibility
Read more...

Spring Data Kay M2 released

On behalf of the Spring Data team, I’d like to announce the availability of the second milestone of the release train Kay. The release is an important step towards a second generation of Spring Data.

We’ve upgraded the majority of the codebase to Java 8, now also embracing e.g. Optional in method signatures. This mostly affects internal SPIs but also leaks into user code, especially in CrudRepository. The support for reactive Spring Data repositories has been extended to Couchbase (Thanks, Subhashni!), the Redis module has a reactive template API now. The release also ships support for IsEmpty and IsNotEmpty for derived queries and implementaitons of those for MongoDB and JPA. The aggregation framework in MongoDB now also supports streaming results.

Read more...

Spring Data Ingalls SR1 and Hopper SR8 released

On behalf of the entire team, I’d like to announce the availability of Ingalls SR1 and Hopper SR8 service releases. Both of them ship 77 issues fixed in total. As usual, service releases are bugfix ones and recommended upgrades for all users. The releases are going to be picked up by the upcoming Boot 1.5 and 1.4 services releases for your convenience.

The complete list of issues fixed for Ingalls SR1 can be found here, the one for Hopper SR 8 here.

Spring Data Ingalls SR1

Read more...

Spring Data Release Train Ingalls Goes GA

On behalf of the Spring Data team I’d like to announce the general availability of our Ingalls release train. After nine months of development, this release not only contains a huge set of new features, improvements and bug fixes, it also marks the conclusion of a branch of Spring Data that has helped developers dealing with persistence for more than 5 years — even 8, if you count in some module’s predecessors.

The release ships more than 630 tickets fixed in total. Here’s a very truncated list of the most important features shipping with the release:

Read more...

Spring Data Release Train Hopper SR7 Released

In preparation of the upcoming Spring Boot 1.4.4 release, I am pleased to announce the availability of the seventh service release of Spring Data release train Hopper. The release ships 39 tickets fixed and is a recommended upgrade for all users.

Read more...

Spring Data Release Train Ingalls RC1 Released

On behalf of the Spring Data team I’d like to announce the first (and final) release candidate of Spring Data train Ingalls. The release ships over 310 issues fixed (some of them previously released with Hopper service releases). The most important new features are:

  • Upgrade to Spring 4.3(.5) as baseline - #294.
  • Support to easily expose domain events as Spring application events from aggregate roots - DATACMNS-928.
  • Support for exists projection from derived query methods - DATACMNS-875.
  • Support for Javaslang’s Option, collection and map types on repository query methods - DATACMNS-937, DATACMNS-940.
  • Added Spring Data LDAP module taking over the repository implementation of Spring LDAP.
  • Support for MongoDB aggregation operators added in latest releases - DATAMONGO-1536.
  • Stream execution now rejects invocation without surrounding transaction in JPA - DATAJPA-1023.
  • Support for annotation based indexing and expirations in Gemfire - SGF-106, SGF-516.
  • Support for CORS configuration in Spring Data REST - DATAREST-573.
Read more...