The Spring team is out in force here at Devnexus! I hope you'll come see us. Here's my annotated look at what sessions I want to see over the oh-so-brief three days of the show.

Tuesday, April 4th, 2023

The fun starts today, with the Spring Boot 3 workshop with Spring Boot cofounder Phil Webb and Micrometer and observability ninja Jonatan Ivanov

Wednesday, April 5th, 2023

Tomorrow, the fun continues! At 10am, our friends over at Vaadin will have a talk, Full Stack Reactive with Spring Boot and React, that looks mighty interesting! My friends and Nate Schutta and Dan Vega have a talk, Spring Recipes: A Collection of Common-Sense Solutions…

Hi, Spring fans! The Spring community is everything. Without your voice, there is no Spring. And we love to hear from you. Make your voice heard and submit a talk for the SpringOne@Explore conference being held in tandem with VMWare Explore in Las Vegas August 21st to 24th, 2023.

See you in Vegas!

A critical piece of infrastructure, the Spring Artifactory instance lies at the heart of the Spring portfolio development work. Since 2013, JFrog, Inc., has generously sponsored the instance for the Spring developer community.

In October 2020, we announced some permissions changes to our Artifactory instance to restrict anonymous access to the platform for third-party dependencies.

At that time, we asked the Community to source Spring releases from Maven Central. Today, we are announcing some changes to our infrastructure in alignment with that request so that we can better position repo…

Here are the results of the survey (which is now closed): https://tanzu.vmware.com/content/ebooks/the-state-of-spring-2022. Thank you for your participation.

The State of Spring survey is here! Please give us your feedback by going to spring.io/survey. Spread the word by sharing these posts on Twitter, LinkedIn, and any other social platform you use!

Spring fans, our annual survey of the Spring community is back! Last year, we dived into the biggest projects and the most popular app patterns built with Spring, and a whole lot more! You told us your views about Spring Native, Data, and what…

TL;DR - head over to spring.io/survey to take the State of Spring 2021 survey! You can also RT this tweet and help spread the word! Thank you <3

We ran the State of Spring survey last year, and it was a huge success. Spring community members across the globe, like you, shared their views and experiences, and it all made for fantastic reading.

The survey is back this year, and we want to hear from you! How can Spring help you build new apps and experiences this year? What would you like us to change? This year, we have new sections on Spring Native, building & sharing APIs internally…

A critical piece of infrastructure, the Spring Artifactory instance repo.spring.io, lies at the heart of the Spring portfolio development work. Since 2013, JFrog, Inc. has generously sponsored the instance for the Spring developer community.

The Artifactory repository streamlines our project development by acting as a single location where Spring engineers can point their builds and by providing the community with early access to our snapshots and milestones.

Today, we are providing notice of some upcoming changes to the repository.

Upcoming Changes

If you use repo.spring.io as directed by start.spring.io, (for example, using only /snapshot and /milestone…

Need better insight into your Spring Boot Applications? Join Spring Developer Advocate Josh Long and Sushant Dewan in a live webinar conversation on June 24th at 10:00 AM PST.

Get Tanzu Observability tips on how to understand the impact of your code on your application with application maps, metrics, distributed traces, histograms, and span logs analytics!

Register now for this free, virtual event you won't want to miss.

The following CVE reports were published today:

• CVE-2020-5403 affecting Reactor Netty HttpServer 0.9.3 and 0.9.4.
• CVE-2020-5404 affecting Reactor Netty HttpClient for all 0.8.x and 0.9.x versions in applications where the automatic following of redirects is explicitly enabled.

The fixes are in Reactor Netty 0.9.5 and 0.8.16. If using the reactor-bom, you can upgrade to Dysprosium-SR5 or Californium-SR16.

Reactor Netty is used internally in many frameworks including Spring WebFlux and its WebClient. If you have a Spring Boot application, you can upgrade to Spring Boot 2.2.5 or 2.1.13.

Spring is constantly evolving and always innovating while being consistent where it matters: delivering a reliable framework to help you build maintainable software, faster. In the last few years, the Spring contributors have worked hard to bring the predictable Spring experience to microservices, serverless, streams, reactive, batch, data, and new languages like Kotlin. Over the coming year, you'll see many more examples of this, including some cool new features that we're just dying to share with you.

However, there was one area of Spring that we felt was desperately in need of some love and…