Dear Spring Community,

I am happy to announce the 3.9.5 release of the Spring Tool Suite, our Eclipse-based tooling.

Highlights from this release include:

• updated to Eclipse Photon release, including support for JDK 9/10, performance improvements, and more.
• Pivotal tc Server updated to 4.0.1
• various bug fixes

To download the distributions, please go visit:

• Spring Tool Suite: https://spring.io/tools/sts/all

Detailed new and noteworthy notes can be found here: STS 3.9.5 New & Noteworthy.

STS 3.9.6 is scheduled to be released on top of Eclipse 2018-09 in late September 2018.

Enjoy!

We are pleased to announce that Spring Cloud Task 1.2.3.RELEASE is now available via Maven Central, Github and the Pivotal download repository. This release adds the ability to retrieve the last TaskExecution for a specific task. A special thanks to Gunnar Hillert for the contributions around this issue. And additional thanks to Ilayaperumal Gopinathan for helping out with the project.

Spring Cloud Task Home | Source on GitHub | Reference Documentation

We look forward to your feedback in Github, StackOverflow, to me directly via Twitter @cppwfs

We’re pleased to announce that the 2.0.0 release of Spring Cloud Open Service Broker is now generally available. Spring Cloud Open Service Broker is a framework for building Spring Boot applications that implement the Open Service Broker API.

The Open Service Broker API project allows developers to deliver services to applications running within cloud native platforms such as Cloud Foundry, Kubernetes, and OpenShift. Spring Cloud Open Service Broker provides a framework based on Spring Boot that enables you to quickly create a service broker for your own managed service on platform that…

On behalf of the community, I am pleased to announce that the Service Release 4 (SR4) of the Spring Cloud Edgware Release Train is available today. You can find the release in Maven Central. You can also check out the Edgware release notes for more information.

Notable Changes in the Edgware Release Train

spring-boot-autoconfigure-processor

• All of the projects have a new optional dependency, spring-boot-autoconfigure-processor. See Spring Cloud Commons issue #377.

Spring Cloud Commons

• Documentation and bug fixes

Spring Cloud AWS

• Bug fixes

Spring Cloud Config

• Added the ability to configure a proxy host and port for ssh git repo connections
• Added refresh rate to GIT repositories
• Bug fixes
…

Dear Spring Community!

Today, together with Google team, it’s my pleasure to announce the First Release Candidate of Spring Cloud for Google Cloud Platform project of version 1.0.

The artifacts available from Spring Milestone repository via BOM:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-gcp-dependencies</artifactId>
            <version>1.0.0.RC1</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies…

On behalf of the community, I am pleased to announce that the General Availability (RELEASE) of the Spring Cloud Finchley Release Train is available today. The release can be found in Maven Central. You can check out the Finchley release notes for more information.

Lifecycle Announcements for Release Train Versions

The Camden release train has reached end-of-life status. The Dalston release train will reach end-of-life status in December 2018. The Edgware release train will follow the end-of-life cycle of the Spring Boot 1.5.x line.

Notable Changes in the Finchley Release Train

Spring Cloud…

I am pleased to announce that Spring IO Platform Brussels-SR11 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.8
• Spring Boot 1.5.14
• Spring Cloud Connectors 1.2.6
• Spring Data Ingalls SR13
• Spring Framework 4.3.18
• Spring Integration 4.3.17
• Spring Security 4.2.7
• Spring Session 1.3.3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

I am pleased to announce that Spring IO Platform Cairo-SR2 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 2.0.4
• Spring Boot 2.0.3
• Spring Cloud Connectors 2.0.2
• Spring Data Kay SR8
• Spring Framework 5.0.7
• Spring Integration 5.0.6
• Spring Kafka 2.1.7
• Spring Security OAuth2 2.2.2
• Spring Security 5.0.6
• Spring Session Apple SR3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

The following CVEs have been published today:

• CVE-2018-11039: Cross Site Tracing (XST) with Spring Framework
• CVE-2018-11040: JSONP enabled by default in MappingJackson2JsonView

Fixes for those vulnerabilities have been released with Spring Framework 5.0.7 & 4.3.18, Spring Boot 1.5.14 and Spring Boot 2.0.3.

Please, review the information in the CVE reports and upgrade immediately.