Spring Cloud Hoxton.SR10 has been released

February 11, 2021

On behalf of the community, I am pleased to announce that the Service Release 10 (SR10) of the Spring Cloud Hoxton Release Train is available today. The release can be found in Maven Central. You can check out the Hoxton release notes for more information.

Notable Changes in the Hoxton Release Train

See all issues included in this release here.

This was primarily a bug fix and documentation release. Hoxton.SR10 is compatible with Spring Boot 2.3.x and 2.2.x.

Fix for CVE-2021-22113

This release contains the fix for CVE-2021-22113. Please find the report here.

Spring Cloud Commons

Random algorithm added for Spring Cloud LoadBalancer
Sticky implementation added for Spring Cloud LoadBalancer
Backported standalone RetryableLoadBalancerExchangeFilterFunction
Added the possibility to refetch the instances for health-check in Spring Cloud LoadBalancer

Spring Cloud Netflix

Fixed CVE-2021-22113
Several dependencies upgraded

Spring Cloud OpenFeign

Encoding path variables with / added

Spring Cloud Contract

Several dependencies upgraded

Spring Cloud Sleuth

Spring Cloud Config

Added Index regeneration
Added the option to clone git submodules at start
Improved root exception handling

Spring Cloud Consul

Added LoadBalancer support for serverListQueryTags
Several dependencies upgraded

The following modules were updated as part of Hoxton.SR10:

Module	Version	Issues
Spring Cloud Starter Build	Hoxton.SR10
Spring Cloud Netflix	2.2.7.RELEASE	(issues)
Spring Cloud Openfeign	2.2.7.RELEASE	(issues)
Spring Cloud Config	2.2.7.RELEASE	(issues)
Spring Cloud Aws	2.2.6.RELEASE	(issues)
Spring Cloud Gateway	2.2.7.RELEASE	(issues)
Spring Cloud Gcp	1.2.7.RELEASE
Spring Cloud Commons	2.2.7.RELEASE	(issues)
Spring Cloud Consul	2.2.6.RELEASE	(issues)
Spring Cloud Contract	2.2.6.RELEASE	(issues)
Spring Cloud Kubernetes	1.1.8.RELEASE
Spring Cloud Sleuth	2.2.7.RELEASE	(issues)
Spring Cloud Vault	2.2.7.RELEASE	(issues)
Spring Cloud CLI	2.2.4.RELEASE

As always, we welcome feedback on GitHub, on Gitter, on Stack Overflow, or on Twitter.

To get started with Maven with a BOM (dependency management only):

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-dependencies</artifactId>
            <version>Hoxton.SR10</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>
<dependencies>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-config</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-netflix-eureka-client</artifactId>
    </dependency>
    ...
</dependencies>

or with Gradle:

buildscript {
  dependencies {
    classpath "io.spring.gradle:dependency-management-plugin:1.0.10.RELEASE"
  }
}

apply plugin: "io.spring.dependency-management"

dependencyManagement {
  imports {
    mavenBom 'org.springframework.cloud:spring-cloud-dependencies:Hoxton.SR10'
  }
}

dependencies {
  compile 'org.springframework.cloud:spring-cloud-starter-config'
  compile 'org.springframework.cloud:spring-cloud-starter-netflix-eureka-client'
  //...
}

Spring Blog