Updates

• [11-27] Blog posts updated to refer to the CVE reports published

The Spring Framework 6.0.14 release shipped on November 16th includes a fix for CVE-2023-34053.

The Spring Boot 2.7.18 release shipped on November 23th includes fixes for CVE-2023-34055.

Users are encouraged to update as soon as possible.

Hi, Spring fans! In this installment of Spring Tips, I look at the new Spring Boot 3.2 release, due to drop today, the 23rd of November 2023! (23-11-23!)

We're diving into the cool new features of Spring Boot 3.2 and Java 21. We'll explore how virtual threads from Project Loom make your code run better and how Java 21 enhances your applications. Plus, we're building a Java 21 program right here! We'll talk about how SSL support and improved observability in Spring Boot 3.2 can help you in production. We'll also look at the new Project Loom and Project CRaC support can help you go faster with…

Hi, Spring fans! We're releasing Spring Boot 3.2 today! And it's Thanksgiving in the USA (Happy Thanksgiving!). So, we wanted to celebrate with an amazing episode, and so today's guest is opensource legend Bruno Lowagie. Enjoy!

Hi, Spring fans! Welcome to another epic installment of This Week in Spring! As amazing as the week's already been, it's all leading up to this Thursday - Thanksgiving day! - when we release Spring Boot 3.2! (and yes, I am very grateful). This release is stuffed to the gills with a ton of new features:

• reloadable SSL support
• the new JdbcClient and the new RestClient, from Spring Framework 6.1.
• Java 21 virtual threads (project Loom)
• Coordinated Restore at Checkpoint (CRaC)
• observability improvements
• a ton of new and updated dependencies, like the newly integrated Spring for Apache Pulsar starter and autoconfiguration, the new Testcontainer support for ActiveMQ, and so much more.
…

Hi, Spring fans! Happy Thanksgiving to those who celebrate!

Have you tried out Spring Boot 3.2? It comes out NEXT week on the 23rd! Get the bits and try them out now! https://start.spring.io

This week I am joined by Google Developer Advocate, Java legend, Alexis Moussine Pouchkine

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's November 14th, and you know what that means? NINE MORE DAYS until Spring Boot 3.2 drops (on the day of the US holiday of Thanksgiving, no less)!

Some key features include:

• virtual threads
• initial CRaC support
• more sophisticated observability with Micrometerio
• JdbcClient, RestClient
• ActiveMQ Testcontainers/ Docker Compose support
• Kotlin 1.9.0

I can't wait for the next release. I've been playing with it for months. It builds on the strenghts of Spring Boot 3.0 and 3.1. 3.0 brought GraalVM native images, and 3.…

Hi, Spring fans! In this week's installment I talk to Azul Deputy CTO Simon Ritter (@speakjava), recorded live at Devoxx Belgium 2023!

Hi, Spring fans!

Can you believe we've already turned the calendar page to November? Time sure is a swift developer, deploying months as if they were minor versions in an ever-evolving application. As we adjust our clocks to fall back, waving a reluctant goodbye to daylight savings time, the encroaching evening arrives with a brisk efficiency. Yes, it's dark outside, a bit too early for my liking, if I'm honest. The shortened days remind us that while we may not be in control of the celestial clock, we do have the power to harness the hours we're given. This is the perfect time to settle in…

In Spring Boot 3.2.0, we're adding the ability for embedded web servers to hot-reload SSL certificates and keys. That means you can rotate your SSL trust material without restarting your application. Hot reloading is supported for Tomcat and Netty embedded web servers.

Let's see that in action!

First, we're going to create our SSL private key and matching certificate using OpenSSL:

mkdir certs
cd certs
openssl req -x509 -subj "/CN=demo-cert-1" -keyout demo.key -out demo.crt -sha256 -days 365 -nodes -newkey rsa 

This creates a private key stored in certs/demo.key and a matching (self-signed) certificate with the common name "demo-cert-1" in certs/demo.crt…