On behalf of the team, I am pleased to announce that Spring Boot 1.5.4 has been released and is available now from repo.spring.io and Maven Central.

Spring Boot 1.5.4 adds over 60 fixes, improvements and 3rd party dependency updates to the 30 issues fixed in Spring Boot 1.4.7. Thanks to all that have contributed!

This release is a recommended upgrade for all users, in a particular due to CVE-2017-4995 that was recently fixed in Spring Security 4.2.3.

What's next?

We are ramping down with a second release candidate of Spring Framework 5 next week and we will follow as expected with a second milestone of Spring Boot 2. If you want to try what we have for Spring Boot 2 already, and we’d love to hear your feedback if you do, please go to start.spring.io and select Spring Boot 2.0.0.BUILD-SNAPSHOT…

We are pleased to announce that these maintenance releases of Spring for Apache Kafka are now available, 1.2.2.RELEASE and 1.1.6.RELEASE.

These versions include several bug fixes and improvements.

They are functionally equivalent; the 1.2.2.RELEASE is based on the 0.10.2.0 kafka-clients jar and 1.1.6.RELEASE can be used with 0.10.0.x and 0.10.1.x.

Project Page | Issues | Contributing | Help | Chat

We are pleased to announce that these maintenance releases of Spring AMQP are now available, 1.6.10.RELEASE and 1.7.3.RELEASE.

These versions include several bug fixes and improvements.

Both these versions are included in upcoming Spring Boot 1.4.7 and 1.5.4, respectively.

Project Page | GitHub | Help | Documentation | Chat

On behalf of the Spring Integration team, I am pleased to announce that the 4.3.10.RELEASE of Spring Integration is now available.

This release contains a few important bug fixes as well as a couple of improvements.

One of the most interesting feature is customized Jackson ObjectMapper which is aware of Message and MessageHeaders serialization/deserialization to/from JSON. This functionality is useful in those components which allow to configure custom serializer/deserializer, for example RedisMessageStore:

RedisMessageStore store = new RedisMessageStore(redisConnectionFactory);

ObjectMapper…

On behalf of the Spring Cloud team it is my pleasure to announce a new milestone release of Spring Cloud Pipelines - 1.0.0.M5.

What’s new?

With 1.0.0.M5 we’ve added a new step in the Build stage called API Compatibility check. Now, your pipeline can break when, as a HTTP / messaging producer, you’re doing a backward incompatible change. We’re checking what were the latest contracts you’ve defined for your most recent production deployment and from those contracts we’re generating tests to your current application.

You can read more about this feature in Spring Cloud Pipelines Docs

Also, the…

On behalf of the team, I am pleased to announce that Spring Framework 4.3.9 is available now.

This maintenance release is the base for the upcoming Spring Boot 1.4.7 and 1.5.4 maintenance releases and includes 30 fixes and selected improvements.

Project Page | GitHub | Issues | Documentation

I am pleased to announce that Gradle dependency management plugin 1.0.3.RELEASE is now available from Maven Central, Bintray, and the Gradle Plugin Portal. This maintenance release fixes a handful of issues and is a recommended upgrade for all users of the plugin.

On behalf of the community, I’m pleased to announce the releases of Spring Security OAuth 2.1.1 and 2.0.14.

Both are maintenance releases that primarily include bug fixes and minor improvements.

Project Page | GitHub | Documentation | Help

On behalf of the Spring Cloud Data Flow team, I’m pleased to announce the release of Spring Cloud Data Flow and Spring Cloud Data Flow for Cloud Foundry 1.2.1.RELEASE. This release provides several improvements around OAuth2 authorization.

Here are the relevant links to documentation and getting started guides.

• Local: Quick Start, Getting Started Guide
• Cloud Foundry: Getting Started Guide

Spring Cloud Data Flow now provides role support for OAuth2, converging with the VIEW, CREATE, MANAGE roles that Data Flow supports when using the traditional security option. Considering the varying use-case requirements across organizations in regards to security roles, the out-of-the-box implementation will assign all the VIEW, CREATE, MANAGE roles to the OAuth authenticated user. However, this can be customized by providing your own AuthoritiesExtractor…