Mark Paluch

Mark Paluch

Mark is Software Craftsman, Spring Data Project Lead at Pivotal, and Lead of the Lettuce Redis driver. His focus is now on reactive data integrations and R2DBC.

Recent Blog posts by Mark Paluch

Multiple CVE reports published for Spring Data

Engineering | April 11, 2018 | ...

Last week, we released Spring Data Ingalls SR11 and Kay SR, which include fixes for the following vulnerabilities:

Spring Boot 1.5.11 (superseded by 1.5.12 due to CVE-2018-1275) and 2.0.1 already pull in the above Spring Data versions, including the fixes that were released last week, and are now also available for use.

Please review the information in the CVE reports and upgrade immediately.

Spring Vault 1.1.2 and 2.0.1 released

Releases | April 05, 2018 | ...

On behalf of the community, I’d like to announce the availability of Spring Vault service releases 1.1.2 and 2.0.1, available from Maven Central.

Both releases primarily deliver bug fixes and dependency version updates along with some minor improvements.

For a complete list of changes see the changelogs of 1.1.2 RELEASE and 2.0.1 RELEASE.

Project Page | GitHub | Issues | Documentation for 1.1.2.RELEASE | Documentation for 2.0.1.RELEASE | Stack Overflow

Spring Data Ingalls SR11 and Kay SR6 released

Releases | April 04, 2018 | ...

On behalf of the Spring Data team, I'm pleased to announce the Ingalls SR11 and Kay SR6 service releases. The Ingalls service release ships on top of the just-released Spring Framework 4.3.15 and in preparation of the upcoming Spring Boot 1.5.11 release. The Kay service release picks up Spring Framework 5.0.5 and will be picked up by Spring Boot 2.0.1 for your convenience.

Both releases ship with 158 tickets fixed in total and are recommended upgrades to all users of the Ingalls and Kay release trains. You can find all details within the linked changelogs.

Ingalls SR 11

Spring Data Kay SR5 released

Releases | February 28, 2018 | ...

On behalf of the Spring Data team, I'd like to announce the fifth service release of the Kay release train in prospect of Spring Boot 2.0 GA.

This service release ships with 23 tickets fixed. Kay SR5 will be picked up by Spring Boot 2.0 GA for your convenience and is a strongly recommended upgrade to users of the Kay release train.

You can find all details within the linked changelogs.

Spring Data Kay SR4 released

Releases | February 20, 2018 | ...

On behalf of the Spring Data team, I'm pleased to announce the fourth service release of the Kay release train in prospect of Spring Boot 2.0 RC2.

This service release ships on top of the just-released Spring Framework 5.0.4 and Project Reactor 3.1.4, and provides the answer to persistence the code and everything. Kay SR4 will be picked up by Spring Boot 2.0 RC2 for your convenience and is a recommended upgrade to users of the Kay release train.

You can find all details within the linked changelogs.

Spring Vault 2.0 GA released

Releases | February 20, 2018 | ...

On behalf of the community, I'm pleased to announce the general availability of Spring Vault 2.0. Since the first efforts for Spring Vault 2.0, it has been a 10 months ride until we reached this GA release. These are the most significant changes in Spring Vault 2.0:

  • Upgrade to Java 8 and Spring Framework 5.
  • Reactive Support.
  • Improved null-safety by providing JSR-305 annotated API.
  • Vault repository support through Spring Data KeyValue repositories.
  • Kubernetes, AWS ECS/IAM authentication.
  • RoleId/SecretId unwrapping for AppId authentication.
  • Spring Security integration with VaultBytesEncryptor and VaultRandomBytesKeyGenerator.

Spring Data Ingalls SR10 and Kay SR3 released

Releases | January 24, 2018 | ...

On behalf of the Spring Data team, I’d like to announce the Ingalls SR10 and Kay SR3 service releases. The Ingalls service release ships on top of the just-released Spring Framework 4.3.14 and in preparation of the upcoming Spring Boot 1.5.10 release. The Kay service release picks up Spring Framework 5.0.3 in and will be picked up by Spring Boot 2.0 RC1 for your convenience.

Both releases ship with 105 tickets fixed in total and are recommended upgrades to all users of the Ingalls and Kay release trains. You can find all details within the linked changelogs.

Spring Data Ingalls SR10

Binding applications to HashiCorp's Vault with Spring in Cloud Foundry

Engineering | November 28, 2017 | ...

In this article, we will dive in how to bind a Spring application to HashiCorp’s Vault service broker on Cloud Foundry.

Spring Boot provides a lot of autoconfiguration and external binding features, some of which are relevant to Cloud Foundry, and many of which are not. Spring Cloud Connectors is a library that you can use in your application if you want to create your own components programmatically, but it doesn’t do anything “magical” by itself.

Spring Cloud Connectors lays the foundation for connectors that integrate with various Cloud services. It has ships components that allow correct…

Spring Data Ingalls SR9 and Kay SR2 released

Releases | November 27, 2017 | ...

On behalf of the entire team, I’d like to announce the availability of Ingalls SR9 and Kay SR2 releases. We didn't announce Ingalls SR8 at the time we shipped it, apologies for that. The service releases ship over 90 issues fixed in total and are recommended upgrades for all users.

For your convenience the service releases are going to be picked up in the upcoming Spring Boot 1.5.9 release, and Kay SR2 will be part of Spring Boot 2.0 M7. You can find the complete list of issues fixed here for Ingalls SR9 and here for Kay SR2.

Spring Data Ingalls SR9

Spring Vault 1.1.0 GA and 2.0.0 M3 available

Releases | October 06, 2017 | ...

On behalf of the community, I’m pleased to announce the general availability of Spring Vault 1.1.0 and the third milestone of Spring Vault 2.0, available from Maven Cental respective the milestone repository.

Highlights of Spring Vault 1.1 GA release are:

  • Pull-mode support for AppRole authentication.

  • Vault login using via AWS IAM.

  • Support of batch transit operations.

  • Rotation of generic secrets based on their lease duration.

  • Introduction of VaultEndpointProvider to configure endpoints dynamically.

Looking at Spring Vault 2.0 M3 you will find the following enhancements:

  • Vault repositories via @EnableVaultRepositories built on top of Spring Data KeyValue.

  • Support to create and modify Vault’s policies represented as JSON.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all