Spring Cloud Hoxton Service Release 3 (SR3) is available.

On behalf of the community, I am pleased to announce that the Service Release 3 (SR3) of the Spring Cloud Hoxton Release Train is available today. The release can be found in Maven Central. You can check out the Hoxton release notes for more information.

Important Security Advisory

Spring Cloud Config contains fixes for CVE-2020-5405.

Notable Changes in the Hoxton Release Train

This milestone was primarily a bugfix release.

Please see the Hoxton.SR3 Github Project for all issues closed.

This milestone release is built with Spring Boot 2.2.5.RELEASE.

Spring Cloud Config

NOTE: The writable env endpoint has been disabled by default. To re-enable this please set management.endpoint.env.post.enabled=true. Please make sure this endpoint is not publicly available.

Possibility to override ConfigTokenProvider was added. Performance issues with KeyStoreTestEncryptorLocator were fixed.

Spring Cloud Contract

Support added for Spring Cloud LoadBalancer in StubRunner.

Spring Cloud CircuitBreaker

Support added for creating and customizing circuit breakers in advance.

Spring Cloud Commons

Support was added for instance health checks in Spring Cloud LoadBalancer. LoadBalancer request context was exposed via the API.

Spring Cloud OpenFeign

OpenFeign was upgraded to 10.7.4. Support was added for @MatrixVariable.

Spring Cloud Sleuth

Support was added for FeignBlockingLoadBalancerClient.

Spring Cloud Gateway

Support was added for rate limits below 1 req/s. Enhancements to RetryFilter were added. ServiceInstance metadata was added to RouteDefinition metadata. Header configuration list was provided for spring-cloud-gateway-mvc.

The following modules were updated as part of Hoxton.SR3:

| Module | Version | Issues |--- |--- |--- |--- | Spring Cloud Config | 2.2.2.RELEASE | (issues) | Spring Cloud Cloudfoundry | 2.2.1.RELEASE |
| Spring Cloud Vault | 2.2.2.RELEASE | (issues) | Spring Cloud Aws | 2.2.1.RELEASE |
| Spring Cloud Bus | 2.2.1.RELEASE |
| Spring Cloud Cli | 2.2.1.RELEASE |
| Spring Cloud Gcp | 1.2.2.RELEASE |
| Spring Cloud Contract | 2.2.2.RELEASE | (issues) | Spring Cloud Consul | 2.2.2.RELEASE |
| Spring Cloud Starter | Hoxton.SR3 |
| Spring Cloud Dependencies | Hoxton.SR3 |
| Spring Cloud Starter Parent | Hoxton.SR3 |
| Spring Cloud Sleuth | 2.2.2.RELEASE | (issues) | Spring Cloud Commons | 2.2.2.RELEASE | (issues) | Spring Cloud Openfeign | 2.2.2.RELEASE | (issues) | Spring Cloud Zookeeper | 2.2.0.RELEASE |
| Spring Cloud Kubernetes | 1.1.2.RELEASE | (issues) | Spring Cloud Security | 2.2.1.RELEASE |
| Spring Cloud Circuitbreaker | 1.0.2.RELEASE | (issues) | Spring Cloud Stream | Horsham.SR3 | (issues) | Spring Cloud Gateway | 2.2.2.RELEASE | (issues) | Spring Cloud Netflix | 2.2.2.RELEASE | (issues) | Spring Cloud Function | 3.0.3.RELEASE |
| Spring Cloud Task | 2.2.3.RELEASE |

As always, we welcome feedback on GitHub, on Gitter, on Stack Overflow, or on Twitter.

To get started with Maven with a BOM (dependency management only):


or with Gradle:

buildscript {
dependencies {
classpath "io.spring.gradle:dependency-management-plugin:1.0.9.RELEASE"

apply plugin: "io.spring.dependency-management"

dependencyManagement {
imports {
mavenBom 'org.springframework.cloud:spring-cloud-dependencies:Hoxton.SR3'

dependencies {
compile 'org.springframework.cloud:spring-cloud-starter-config'
compile 'org.springframework.cloud:spring-cloud-starter-netflix-eureka-client'

Get the Spring newsletter

Stay connected with the Spring newsletter


Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all