Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm writing this from the Big Apple, New York City! I'm here for the SpringOne Tour 2022 NYC event. This is my first time back in New York City since before the pandemic and it has been so much fun. I've been catching up with people I've not seen in years. I even accidentally bumped into people I had no idea was going to also be in town at the same time as I was. New York City is like a magnet for fun, and for fun people. Anyway, we've got a lot of stuff to get to this roundup, so let's dive right into it.

Also: if you're just reading this, today - the 28th of June - is the last day to submit to SpringOne 2022, being held in my…

Hi, Spring fans! This year, SpringOne is back in person, and being held in my hometown of San Francisco, California, December 6th-8th. (Have you registered?) and today (June 28th, 2022) is the last day to submit to the Call For Papers! If you have a good idea or story you want to share, submit today!

Either way, I hope to see you in December in San Francisco, a city so famous for its foggy nightscapes that I think it's fair to say we are the original cloud natives!

Hi, Spring fans! In this installment, I (@starbuxman) talk to my old friend, world-famous polyglot and code curmudgeon, software philosopher, industry veteran, and legend of ecosystems aplenty, Ted Neward (@tedneward)

Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead Rossen Stoyanchev (@rstoya05) - whose work you may know from basically everything in the wide and wonderful world of Springdom having to do with the web (HTTP, RSocket, WebSockets, GraphQL, JSF, MVC, etc) - and GraphQL Java engine founder and lead Andi Marek (@andimarek) and of course yours truly, Spring Developer Advocate Josh Long (@starbuxman). It provides an in-depth look at all things Spring for GraphQL.

This week I'm publishing two…

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you? It's been a hot minute since we last chatted. I was in Germany this time last week. Now, I'm back in beautiful San Francisco. Today the weather will climb to a monumental 84 F! That's very unusual, for any time of the year, here in San Francisco. Most places here in San Francisco don't have air conditioning. Some have heating. I bought a brand new condo in 2014 and it didn't have air conditioning. You just open the window. I am privileged enough that I have air conditioning today, of course. I mention all this…

Updates

• [06-20] CVE-2022-22980 is published
• [06-20] Spring Data MongoDB 3.4.1 and 3.3.5 are available

Table of Contents

• Overview
• Vulnerability
• Am I Impacted
• Status
• Suggested Workarounds

Overview

We would like to announce that we have released Spring Data MongoDB 3.4.1 and 3.3.5 to address the following CVE report:

• CVE-2022-22980: Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods

This vulnerability was responsibly reported by Zewei Zhang from NSFOCUS TIANJI Lab on Monday, June 13 2022. The full report will be published to MITRE and as security advisory under tanzu.vmware.com/security…

Dear Spring Community,

I am happy to announce the 4.15.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

fixes and improvements

• (Spring Boot) fixed: VScode incorrectly suggests removing @Autowired annotation from methods (#787)
• (Spring Boot) fixed: VScode quick fix should not suggest removing @Autowired annotation from JUnit tests (#786)
• (Eclipse) fixed: Not able to extract the new version of spring-tool-suite-4-4.15.0.RELEASE-e4.24.0-win32.win32.x86_64.self-extracting.jar on windows 11 (#788)
• (Eclipse) fixed: Cannot open Spring Boot Language Server Java Editor settings menu (#789)
…

Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to Spring Framework contributor Sébastien Deleuze (@sdeleuze) on GraalVM, AOT, project Leyden, and WebAssembly.

We have released Spring Cloud Function 3.2.6 to address the following CVE report.

• CVE-2202-22979: Spring Cloud Function Dos Vulnerability

Please review the information in the CVE report and upgrade immediately.