The Spring Blog

Engineering
Releases
News and Events

Spring Cloud Finchley SR4 Released

On behalf of the community, I am pleased to announce that the Service Release 4 (SR4) of the Spring Cloud Finchley Release Train is available today. The release can be found in Maven Central. You can check out the Finchley release notes for more information.

Notable Changes in the Finchley Release Train

Spring Cloud Commons

Bug Fixes

Spring Cloud Vault

Bug Fixes

Spring Cloud Config

Bug Fixes

Spring Cloud Gateway

Bug Fixes

Spring Cloud Netflix

Bug Fixes

Spring Cloud Sleuth

Bug Fixes

Spring Cloud Consul

Bug Fixes

Read more...

Spring Framework 5.2.0.M3 and 5.1.8 available now

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.2.0.M3 and 5.1.8 are available now.

The third milestone of Spring Framework 5.2 includes 50 fixes and improvements while Spring Framework 5.1.8 includes 31 fixes and selected improvements.

If you want to give the milestone a try, you can boostrap a new application on start.spring.io once Spring Boot 2.2.0.M4 is released early next week.

Project Page | GitHub | Issues | Documentation

Read more...

Java CFEnv 1.1.0.RC1 Released

Introduction

On behalf of the community I am happy to announce the release of Java CFEnv 1.1 RC1.

The RC1 release adds the following functionality:

  • Checks the classpath to correctly determine setting of MySQL or MariaDB driver class name.

  • When using the Boot support, an exception is thrown if the Spring Cloud Connector library is on the classpath when . This applies only for the following services: DataSource, RabbitMQ, Cassandra, MongoDB, and Redis. The exception message indicates to set the environment variable JBP_CONFIG_SPRING_AUTO_RECONFIGURATION '{enabled: false}'

  • Support for Boot 1.5.x by copying a logging utility class into the project.

The project README has more information.

The GA release is planned for next week. Please try it out and give feedback on our github issues page.

Read more...

This Week in Spring - June 11th, 2019

Hi Spring fans! Can you believe it? We’re already almost halfway through June! Summer’s nearly here! It’s 97 Fahrenheit / 37 Celsius in San Francisco! That’s nuts! I’m glad I’m in beautiful Amsterdam and Eindhoven, NL, beating the heat, though. What a privilege. We’ve got a busy week, as always, to get to so let’s get to it!

Read more...

Announcing nohttp

I’m pleased to announce the nohttp project, which lets users find, replace, and prevent the usage of http://.

Background

Today, Jonathan Leitschuh published a blog titled Want to take over the Java ecosystem? All you need is a MITM!. The blog demonstrates that hundreds of Java libraries are downloading dependencies over HTTP. This opens the projects up to potential MITM (man in the middle) attacks.

Unfortunately, there were multiple Spring projects that were using HTTP to download dependencies. Fortunately, we uncovered no signs of a successful MITM attack. We have also addressed the issue to ensure that no MITM attacks can be made in the future.

Read more...

React-ing to start.spring.io + User feedback updates

We are happy to announce today that start.spring.io is now built using React/Gatsby as the front-end framework. We also made UI improvements based on your feedback. Thank you to all those who have contributed to this update and to all the users who continue to tell us how to improve!

React.js

During the previous Web UI modernization (launched on March 5th), we realized that making even small changes to the site had become more time consuming than we anticipated. The architecture was inhibiting our ability to run experiments and move quickly to make small, incremental changes.

Read more...