Spring Blog

On behalf of the community, I am pleased to announce that the Service Release 3 (SR3) of the Spring Cloud Hoxton Release Train is available today. The release can be found in Maven Central. You can check out the Hoxton release notes for more information.

Important Security Advisory

Spring Cloud Config contains fixes for CVE-2020-5405.

Notable Changes in the Hoxton Release Train

This milestone was primarily a bugfix release.

Please see the Hoxton.SR3 Github Project for all issues closed.

This milestone release is built with Spring Boot 2.2.5.RELEASE.

Spring Cloud Config

NOTE: The writable env endpoint has been disabled by default. To re-enable this please set management.endpoint.env.post.enabled=true. Please make sure this endpoint is not publicly available.

Possibility to override ConfigTokenProvider was added. Performance issues with KeyStoreTestEncryptorLocator were fixed.

Spring Cloud Contract

Support added for Spring Cloud LoadBalancer in StubRunner.

Spring Cloud CircuitBreaker

Support added for creating and customizing circuit breakers in advance.

Spring Cloud Commons

Support was added for instance health checks in Spring Cloud LoadBalancer. LoadBalancer request context was exposed via the API.

Spring Cloud OpenFeign

OpenFeign was upgraded to 10.7.4. Support was added for @MatrixVariable.

Spring Cloud Sleuth

Support was added for FeignBlockingLoadBalancerClient.

Spring Cloud Gateway

Support was added for rate limits below 1 req/s. Enhancements to RetryFilter were added. ServiceInstance metadata was added to RouteDefinition metadata. Header configuration list was provided for spring-cloud-gateway-mvc.

The following modules were updated as part of Hoxton.SR3:

Module	Version	Issues
Spring Cloud Config	2.2.2.RELEASE	(issues)
Spring Cloud Cloudfoundry	2.2.1.RELEASE
Spring Cloud Vault	2.2.2.RELEASE	(issues)
Spring Cloud Aws	2.2.1.RELEASE
Spring Cloud Bus	2.2.1.RELEASE
Spring Cloud Cli	2.2.1.RELEASE
Spring Cloud Gcp	1.2.2.RELEASE
Spring Cloud Contract	2.2.2.RELEASE	(issues)
Spring Cloud Consul	2.2.2.RELEASE
Spring Cloud Starter	Hoxton.SR3
Spring Cloud Dependencies	Hoxton.SR3
Spring Cloud Starter Parent	Hoxton.SR3
Spring Cloud Sleuth	2.2.2.RELEASE	(issues)
Spring Cloud Commons	2.2.2.RELEASE	(issues)
Spring Cloud Openfeign	2.2.2.RELEASE	(issues)
Spring Cloud Zookeeper	2.2.0.RELEASE
Spring Cloud Kubernetes	1.1.2.RELEASE	(issues)
Spring Cloud Security	2.2.1.RELEASE
Spring Cloud Circuitbreaker	1.0.2.RELEASE	(issues)
Spring Cloud Stream	Horsham.SR3	(issues)
Spring Cloud Gateway	2.2.2.RELEASE	(issues)
Spring Cloud Netflix	2.2.2.RELEASE	(issues)
Spring Cloud Function	3.0.3.RELEASE
Spring Cloud Task	2.2.3.RELEASE

As always, we welcome feedback on GitHub, on Gitter, on Stack Overflow, or on Twitter.

To get started with Maven with a BOM (dependency management only):

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-dependencies</artifactId>
            <version>Hoxton.SR3</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>
<dependencies>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-config</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-netflix-eureka-client</artifactId>
    </dependency>
    ...
</dependencies>

or with Gradle:

buildscript {
dependencies {
classpath "io.spring.gradle:dependency-management-plugin:1.0.9.RELEASE"
}
}



apply plugin: "io.spring.dependency-management"

dependencyManagement {
imports {
mavenBom 'org.springframework.cloud:spring-cloud-dependencies:Hoxton.SR3'
}
}

dependencies {
compile 'org.springframework.cloud:spring-cloud-starter-config'
compile 'org.springframework.cloud:spring-cloud-starter-netflix-eureka-client'
...
}