We have released Spring Security OAuth 2.3.6, 2.2.5, 2.1.5 and 2.0.18 to address CVE-2019-11269: Open Redirector in spring-security-oauth2. Please review the information in the CVE report and upgrade immediately.

For additional changes included in each release, please refer to:

• 2.3.6 changelog

• 2.2.5 changelog

• 2.1.5 changelog

• 2.0.18 changelog

NOTE: For users of Spring Boot 1.5.x and Spring IO Platform Cairo, it is highly recommended to override the spring-security-oauth version to the latest version containing the fix for the CVE. Please see the Mitigation section in the CVE report…

On behalf of the community, I am pleased to announce that the Service Release 6 (SR6) of the Spring Cloud Edgware Release Train is available today. The release can be found in Maven Central. You can check out the Edgware release notes for more information.

Edgware End Of Life Reminder

As a reminder, the Edgware release train will reach EOL status on August 1st, 2019.

Notable Changes in the Edgware Release Train

Spring Cloud Netflix

• Bug Fixes

Spring Cloud Sleuth

• Bug Fixes

Spring Cloud Config

• Bug Fixes

Spring Cloud Commons

• Bug Fixes

Spring Cloud Contract

• Bug Fixes

Spring Cloud Vault

• Upgraded to Vault 1.1.3
…

We are pleased to announce the 3.0.1 release of Spring Cloud Open Service Broker. This release is a maintenance release that includes the following updates:

• Improve getting started experience
• Update reference documentation

Include the following Spring Boot starter:

<dependency>
  <groupId>org.springframework.cloud</groupId>
  <artifactId>spring-cloud-starter-open-service-broker</artifactId>
  <version>3.0.1.RELEASE</version>
</dependency>

Project Page | GitHub | Reference Doc | API Doc

Dear Spring Community,

I am happy to announce the 4.2.2 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Atom.

Highlights from this release include:

• (all language servers) performance: additional improvements to language server startup time
• (Spring Boot) new: navigation for bean identifiers, bean classes, and property names for Spring XML config files
• (Spring Boot) new: content-assist rolled out for many more Spring XML config elements and attributes
• (Spring Boot) fixed: Detect @RequestMapping with path defined as constant instead of literal string (#281)
• (CF Manifest) new: added support for anchors and references
• (Eclipse) new: added project-related XSD schema resolution
• (Eclipse) fixed: high CPU and memory spikes when code minings and live hovers are active (#292…

The Spring Cloud Data Flow team is pleased to announce the release of 2.1 of Data Flow.

We have a brand new website with great new content, which is where you can find our getting started guide for use on Cloud Foundry and Kubernetes and your Local Machine.

Here are the highlights:

New Dedicated Data Flow Website

The Data Flow team takes pride is openly communicating with the community in various forums including StackOverflow, Gitter, GitHub, Twitter, and at times in Email and Zoom calls even.

However, we realized that we could provide a much better experience to answer common questions and provide an easier on-ramp to using Data Flow if we focused on improving the online documentation. The reference guide was not the ideal format to achieve that goal, so we embarked on creating a new website - https://dataflow.spring.io…

Spring Data R2DBC

On behalf of the community and everyone who contributed, I'm delighted to announce the availability of the second milestone of Spring Data R2DBC 1.0. It is based on the recently released Moore M4 release and R2DBC 0.8.0.M8 release. Please note that Spring Data R2DBC is released outside of the Moore release train and it will be part of the next release train Neumann.

Spring Data R2DBC ships with 32 tickets fixed. The most notable features are:

• Support for MySQL by using jasync-sql.
• Reactive transaction manager.
• Fluent API for insert/update/delete operations.
• Coroutine extensions.
• Support for custom conversions.
• Named parameters that are translated to native bind markers by using Dialect instances.
• Support for single-column projections for simple types.
• Refactored package structure.
…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Boot 2.1.5 has been released and is now available from repo.spring.io and Maven Central.

This is a maintenance release that includes a number of important dependency updates and bug fixes.

A gentle reminder that Spring Boot 1.5 will be end of life in august, so all users should now be upgrading to Spring Boot 2.1.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team and everyone that contributed, I am pleased to announce that the third milestone of Spring Boot 2.2 has been released and is available from our milestone repository. This release closes over 100 issues and pull requests.

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.2 Release Notes on the wiki and the updated reference documentation.

If you want to get started with 2.2 and try out the new features, you can bootstrap a new project on https://start.spring.io.

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter

The 4th Generation of Reactor is arriving. On behalf of the team we want to thank all our community for the tremendous feedback. Over the last year we have grown our reactive line-up significantly including R2DBC and BlockHound. Our adoption in the java ecosystem looks phenomenal and we are collaborating with major corps including Microsoft and Google. We have more than doubled our regular Gitter audience with some awesome -you guessed it- reactive discussions happening every day. Finally, Sergei Egorov has joined the core team and we have no plans to stop expanding!

Dysprosium-M1 is available on our milestone repository. It is paving the way for more changes in the work. It's worth noting that 2 features are being deprecated, and evaluated for removal at the…