We have released Spring Security OAuth 2.3.5, 2.2.4, 2.1.4 and 2.0.17 to address CVE-2019-3778: Open Redirector in spring-security-oauth2. Please review the information in the CVE report and upgrade immediately.

For additional changes included in each release, please refer to:

• 2.3.5 changelog

• 2.2.4 changelog

• 2.1.4 changelog

• 2.0.17 changelog

NOTE: For users of Spring Boot 1.5.x and Spring IO Platform Cairo, it is highly recommended to override the spring-security-oauth version to the latest version containing the fix for the CVE. Please see the Mitigation section in the CVE report for…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.1.3 has been released and is is now available from repo.spring.io and Maven Central.

This release includes over 70 fixes, improvements and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

If you are still using Spring Boot 2.0.x, an upgrade to Spring Boot 2.1.x is strongly encouraged. Following the announcement that Spring Framework 5.0.x will reach its EOL in March, Spring Boot 2.0.x will follow suit with a final release in the 2.0.x line planned for late March. As previously announced, Spring Boot 1.5.x will…

Introduction

The Spring Cloud Connectors library has been with us since the launch event of Cloud Foundry itself back in 2011. One of the main goals of the connector library and Cloud Foundry’s Java buildpack was to “reduce the initial investment when you want to get started with Cloud Foundry”. The connector library creates the Spring bean definitions required to connect to backing services, like databases, using information contained in the VCAP_SERVICES environment variable. The buildpack then replaces these bean definitions you had in your application with those created by the connector…

On behalf of the community I am pleased to announce the release of Spring Security 5.1.4 (changelog). This release provides a round of bug fixes and users are encouraged to update to the latest patch release.

Project Site | Reference | Help

On behalf of the team and everyone who has contributed, it is my pleasure to announce that Spring Framework 5.1.5 is available now.

This maintenance release includes over 40 fixes and improvements. As usual, we'll follow-up later this week with a maintenance release for Spring Boot 2.1, stay tuned!

Project Page | GitHub | Issues | Documentation

On behalf of the Spring Data team, I'd like to announce the availability of the Lovelace SR5 maintenance release. This release ships on top of the just-released Spring Framework 5.1.5. Spring Boot 2.1.3 is going to pick up Lovelace SR5, for your convenience.

The service releases ship with mostly bug fixes and a few dependency upgrades addressing about 40 tickets.

Last but not least, here's the laundry list:

• Spring Data Commons 2.1.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JDBC 1.0.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 2.1.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 2.1.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Solr 4.0.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Gemfire 2.1.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 5.1.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 2.1.5 - Artifacts - Javadoc - Documentation - …

The Spring Cloud Data Flow team is pleased to announce the release of 1.7.4 of Data Flow for Local and Cloud Foundry. The Kubernetes release is at version 1.7.3.

Follow the Getting Started guides for running on Local, Cloud Foundry, and Kubernetes.

Various bugs since the 1.7 GA release have been fixed. You can see the issues for 1.7.1, 1.7.2, 1.7.3, and 1.7.4 for more details.

We have also released 1.1.4 release of Spring Cloud Skipper. The getting started section in the reference guide is the best place to start if you want to use Skipper separately from Data Flow.

Various bugs since the 1.1 GA have been fixed. You can see the issues for 1.1.1, 1.1.2, 1.1.3, and 1.1.4…

The Spring Cloud Data Flow team is pleased to announce the release of 2.0 M2 of Data Flow. Follow the Getting Started guides for running on Local, Cloud Foundry, and Kubernetes.

Hand in hand is the 2.0 M2 release of Spring Cloud Skipper. The getting started section in the reference guide is the best place to start if you want to use Skipper separately from Data Flow.

Here are the highlights for Data Flow

• Launch tasks against multiple platforms

• Revamped metrics and monitoring of deployed applications

• Additional security roles

• Dashboard improvements

• Database migration support

Launch…

Dear Spring Community,

I am happy to announce the 4.1.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Atom.

Highlights from this release include:

• (Spring Boot) easy navigation via symbols now available for regular Spring projects (not using Spring Boot)
• (Spring Boot) live hover for beans and bean wirings now available for regular Spring projects (not using Spring Boot)
• (Spring Boot) support for deprecated propertied added to property editors, including corresponding quick fixes
• (Eclipse) boot dashboard now shows environment information including all properties and their values for running boot apps
• (Eclipse) default distribution brings back support for local Tomcat servers and deploying war-packaged boot apps to those local servers
• …