On behalf of the community, I’m pleased to announce the release of Spring Security 5.4.4 (release notes), 5.3.8 (release notes), and 5.2.9 (release notes). These releases deliver bug fixes along with some minor improvements. Users are encouraged to update to the latest patch release.

Project Site | Reference | Help

NOTE: There was an issue releasing 5.4.3 and 5.3.7 which caused us to need to release 5.4.4 and 5.3.8.

On behalf of the community, I am pleased to announce that the Service Release 10 (SR10) of the Spring Cloud Hoxton Release Train is available today. The release can be found in Maven Central. You can check out the Hoxton release notes for more information.

Notable Changes in the Hoxton Release Train

See all issues included in this release here.

This was primarily a bug fix and documentation release. Hoxton.SR10 is compatible with Spring Boot 2.3.x and 2.2.x.

Fix for CVE-2021-22113

This release contains the fix for CVE-2021-22113. Please find the report here.

Spring Cloud Commons

• Random algorithm added for Spring Cloud LoadBalancer
• Sticky implementation added for Spring Cloud LoadBalancer
• Backported standalone RetryableLoadBalancerExchangeFilterFunction
• Added the possibility to refetch the instances for health-check in Spring Cloud LoadBalancer
…

Dear Spring Community,

Today it’s my pleasure to announce releases of Spring Integration for Amazon Web Services extension versions 2.3.5.RELEASE & 2.4.0, and Spring Cloud Stream Binder for AWS Kinesis versions 2.0.4.RELEASE & 2.1.0.

These releases can be downloaded from Maven Central, JCenter:

compile "org.springframework.integration:spring-integration-aws:2.3.5.RELEASE"

If you don’t use Kinesis Binder. Or via Binder dependency:

compile "org.springframework.cloud:spring-cloud-stream-binder-kinesis:2.0.4.RELEASE"

Mostly these versions have bug fixes and some community feedback refinements…

On behalf of the community, I am pleased to announce that Service Release 1 of the Spring Cloud 2020.0 Release Train (2020.0.1) is available today. The release can be found in Maven Central. You can check out the 2020.0 release notes for more information.

Notable Changes in the 2020.0.0 Release Train

This release was primarliy for bug fixes and dependency upgrades.

See this page for a list of Known Issues.

See the wiki for a list of all breaking changes in this release train.

See all of the included issues and pull requests at the Github project.

Spring Cloud Config

All of the known issues…

Spring Cloud Task 2.2.5 includes fixes for the following vulnerability:

CVE-2020-5428 In applications using Spring Cloud Task 2.2.4.RELEASE and below, may contain code that is vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Users of Spring Cloud Task 2.2.4.RELEASE and below are encouraged to upgrade to Spring Cloud Task 2.2.5.RELEASE or 2.3.0.

Spring Cloud Data Flow team is pleased to announce the release of 2.7.1.

2.7.1 is a maintenance release fixing following issues:

• UI bug fixes
• Cloudfoundry Java Client has been updated to 4.13.0 fixing its memory leak
• Using Spring Boot 2.3.7 and Cloud Hoxton.SR9
• Spring Cloud Task updated to 2.2.5
• Dataflow server contains fixes for docker, metrics and some endpoints
• More detailed list can be found from GitHub 2.7.1

There is also releases for GitHub 2.6.5 and GitHub 2.5.4 with updated Spring Cloud Task.

These releases fixes CVE-2020-5427.

We've switched Pre-packaged Applications in our import links to point to 3.x…

On behalf of the team and everyone that contributed, I am pleased to announce that the first milestone of Spring Boot 2.5 has been released and is available from our milestone repository. This release closes over 130 issues and pull requests.

Highlights of this first milestone include:

• Support for GET requests to the startup endpoint
• Security improvements to the info endpoint
• Preliminary support for Java 16
• Spring Integration 5.5.0 M1
• Spring Data 2021.0.0 M1
• Spring Security 5.5.0 M1
• Spring Session 2021.0.0 M1
• Spring HATEOAS 1.3.0 M1
• Numerous other dependency upgrades

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.5 Release Notes on the wiki and the updated reference documentation…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.4.2 has been released and is now available from Maven Central.

This release includes a number bug fixes and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.3.8 has been released and is now available from Maven Central.

This release includes 35 bug fixes and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …