Hi Spring fans! Welcome to another installment of This Week in Spring. Today I'm in beautiful Tampla, Fl, where I got to talk to a wonderful Pivotal customer today. Now I'm at TPA airport preparing to board for Paris, France, for JHipsterConf.

We've got a ton to cover so let's get to it!

• I just want to remind people that the majority of the Spring team is sponsored by the company Pivotal, an open-source powerhouse that sponsors among other things Spring, Cloud Foundry, a Kubernetes distribution, RabbitMQ, Jasmine, Apache Geode, Apache Tomcat, and a ton of other things. We've also got a deep bench in building software development tools including things like Pivotal Tracker. Want to learn more?
• Spring Tools 4.3.0 released
• A Bootiful Podcast: IBM's Pratik Patel on Java, Functions-as-a-service, cloud infrastructure, Spring and Devnexus
• Spring Tool Suite 3.9.9 released
• …

Hi Spring fans! This week Josh Long (@starbuxman) speaks to @IBM's Pratik Patel (@prpatel) about function-as-a-service, Spring Cloud Function, Spring, Java and Devnexus

Hi Spring fans! In this installment we look at distributed locks in Spring Integration to ensure exclusive access to a shared resource in a cluster.

speaker: Josh Long (@starbuxman)

Hi Spring fans! Welcome to another installment of This Week in Spring! This week I'm in delightful Des Moines, Iowa; and then it's off to the twin cities of DescriptionMinneapolis–Saint Paul for the epic SpringOne Tour event there.

We've got tons to look at this week so let's get to it!

• Spring Session Corn-M2 and Spring Session Bean-SR6 Released
• Spring Cloud Open Service Broker 3.0.2 Released
• Getting Started with Spring Cloud Gateway
• Spring Boot for Apache Geode & Pivotal GemFire 1.0.1.RELEASE & 1.1.0.M2 Available
• Spring Session for Apache Geode & Pivotal GemFire 2.1.4.RELEASE & 2.2.0.M2 Available
• Spring Security 5.2.0.M3 Released
• Spring Data Moore RC1 and Lovelace SR9 released
• Spring Cloud Finchley SR4 Released
• in last week's A Bootiful Podcast I talked to Pivotal SVP Ian Andrews on Spring, new product announcements, Kubernetes, our customers, and more
• …

Microservice architectures are great, but as your application programming interfaces (APIs) start to grow, so do the challenges related to their maintenance.

For example, as an existing API matures and adds new features it will need to take its clients along with it on the journey. When the details of an API change, clients need to adjust in order to work with these changes. This process takes time and can really slow your APIs evolution and interfere with your ability to iterate quickly.

Offering multiple APIs brings with it its own set of challenges. How do you route requests and responses…

Hi Spring fans! In this installment Josh Long (@starbuxman) talks to Pivotal SVP Ian Andrews about Pivotal, Spring, Cloud Foundry, why he hasn't fired me yet (LOL), exciting new product announcements, frequent flyers, and more.

• Ian on Twitter (@IanAndrewsDC)

Hi Spring fans! In this week's installment Josh Long (@starbuxman) looks at Kotlin's new support for coroutines ("Koroutines"?) and the rich integrations in Spring.

speaker: Josh Long (@starbuxman)

Hi Spring fans! Can you believe it? We're already almost halfway through June! Summer's nearly here! It's 97 Fahrenheit / 37 Celsius in San Francisco! That's nuts! I'm glad I'm in beautiful Amsterdam and Eindhoven, NL, beating the heat, though. What a privilege. We've got a busy week, as always, to get to so let's get to it!

• The Spring team has undertaken a massive effort to eliminate insecure HTTP URLs in favor of HTTPS. Learn how we did it (and you could too) in this blog Announcing nohttp
• A Bootiful Podcast: Spring Cloud lead Spencer Gibb on Microservices, Brazil, and more
• Hi Spring fans! In last week's installment of Spring Tips: Organizational Consistency in your Spring Boot Applications I introduced things you can do to achieve consistency in your applications including auto-configuration, building starter-dependencies, the Spring JavaFormat Maven plugin and more.
• …

I’m pleased to announce the nohttp project, which lets users find, replace, and prevent the usage of http://.

Background

Today, Jonathan Leitschuh published a blog titled Want to take over the Java ecosystem? All you need is a MITM!. The blog demonstrates that hundreds of Java libraries are downloading dependencies over HTTP. This opens the projects up to potential MITM (man in the middle) attacks.

Unfortunately, there were multiple Spring projects that were using HTTP to download dependencies. Fortunately, we uncovered no signs of a successful MITM attack. We have also addressed the issue to…