The Spring Blog

Engineering
Releases
News and Events

Spring Cloud Edgware.SR2 Released

On behalf of the community, I am pleased to announce that the Service Release 2 (SR2) of the Spring Cloud Edgware Release Train is available today. The release can be found in Maven Central. You can check out the Edgware release notes for more information.

Notable Changes in the Edgware Release Train

Spring Cloud Commons

Issues

Spring Cloud Contract

Issues

Spring Cloud Config

Issues

Spring Cloud Consul

Issues

Spring Cloud Netflix

Issues

Spring Cloud Bus

Issues

Spring Cloud Sleuth

Issues

The following modules were updated as part of Edgware.SR2:

Read more...

Spring Cloud for Google Cloud Platform 1.0 Milestone 2 Available

Dear Spring Community!

It’s my pleasure to announce today a new project in the Spring Cloud family. It’s called Spring Cloud GCP and its goal is to bring into your applications well-known Spring patterns and Spring Boot conventions for consuming Google Cloud Platform services.

The project currently is in version 1.0.0.M2 and is available from the Spring Milestone Repository:

<dependencyManagement>
   <dependencies>
       <dependency>
           <groupId>org.springframework.cloud</groupId>
           <artifactId>spring-cloud-gcp-dependencies</artifactId>
           <version>1.0.0.M2</version>
           <type>pom</type>
           <scope>import</scope>
       </dependency>
   </dependencies>
</dependencyManagement>
Read more...

Spring Data Lovelace M1 released.

On behalf of the Spring Data team I’m happy to announce the first milestone of the Lovelace release train. The release ships over 200 tickets fixed! The most important new features are:

  • JPA 2.2 result streaming.
  • MongoDB Validator and JsonSchema support.
  • Support for MongoDB Change Streams.
  • Neo4J OGM 3.1 upgrade.
  • Exist/Count projections as well as a fluent template API in Spring Data for Apache Cassandra.
  • Spring Data for Apache Geode added JCache Annotation support.
  • Query By Example for Redis repository abstractions.
  • Spring Data REST offers more fine grained method exposure mechanisms.
Read more...

Spring Cloud Skipper 1.0 GA Released

On behalf of the team, I am pleased to announce the release of Spring Cloud Skipper 1.0 GA

Skipper is a lightweight tool that allows you to discover Spring Boot applications and manage their lifecycle on multiple Cloud Platforms. You can use Skipper standalone or integrate it with Continuous Integration pipelines to help implement the practice of Continuous Deployment.

The getting started section in the reference guide is the best place to start kicking the tires.

Release Highlights:

  • Introduction of Flyway to manage schema along with various schema tweaks.

  • Option to delete a release along with its package.

  • Refined the REST API.

  • Updated properties to YAML converter.

  • Add resource metadata in manifest template.

  • Separate platform deployers into multiple maven modules.

  • Support passing to the shell commands to execute.

  • Updated documentation.

  • Various bug fixes.

Read more...

Spring Cloud Data Flow 1.3 GA released

On behalf of the team, I am pleased to announce the general availability of Spring Cloud Data Flow 1.3 across a range of platforms

Follow the Getting Started guides for Local Server, Cloud Foundry, and Kubernetes

Release Highlights

Stream updates and rollback

A streaming data pipeline orchestrated as a series of microservice applications has always been the core value of Spring Cloud Data Flow’s design. In Data Flow 1.3 we have provided the ability to update sources, processors, and sinks independently without having to undeploy and redeploy the entire stream.

The stream update and rollback functionality is implemented by delegating the deployment process to a new Spring Cloud project called Skipper. Skipper is a lightweight Spring Boot application, purpose-built to fill this feature gap in Data Flow. Skipper defines a package format, much like helm or brew and can also deploy/undeploy applications to multiple cloud platforms: Local, Cloud Foundry, and Kubernetes. It uses the same Spring Cloud Deployer libraries that have been part of Data Flow since the beginning. Recent presentations at SpringOne 2017 introduces Skipper and the integration with Data Flow in more depth.

When deploying a Stream, Data Flow creates Skipper package describing the Stream and the applications that are part of the Stream definition. Skipper then deploys the applications to the desired platform. When requesting a stream update, only the application or applications that need to be changed are automatically redeployed. A simple strategy managed by a Spring Statemachine instance performs the update or rollback steps.

Data Flow includes new stream commands to make upgrade and rollback operations.

dataflow:>app register --name transform --type processor --uri maven://com.eg:transformer:0.0.1

dataflow:>stream create mystream --definition "jdbc | transform | mongodb"

dataflow:>app register --name transform --type processor --uri maven://com.eg:transformer:0.0.2

dataflow:>stream update mystream --properties “version.transform=0.0.2”

dataflow:>stream rollback mystream

In this series of commands, the stream is deployed using version 0.0.1 of the transformer. The jdbc and mongodb source and sink are already registered. The stream is then updated to use version 0.0.2 of the transformer. Only the transform application is updated, with version 0.0.2 being deployed and version 0.0.1 being undeployed. The jdbc and mongodb applications are left as-is. The rollback command does the opposite, bringing the stream back to the state with version 0.0.1 of the transformer.

Note: To use Data Flow and Skipper, Data Flow’s feature toggle for Skipper must be enabled in both the Data Flow Server and shell.

Read more...

Spring IO Platform Brussels SR7

I am pleased to announce that Spring IO Platform Brussels-SR7 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

  • Spring AMQP 1.7.6
  • Spring Boot 1.5.10
  • Spring Data Ingalls-SR10
  • Spring Framework 4.3.14
  • Spring Integration 4.3.14
  • Spring Retry 1.2.2
  • Spring Security 4.2.4
  • Spring Web Flow 2.4.7

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

Read more...

Spring Boot 2.0.0 RC1 available now

On behalf of the team, it is my great pleasure to announce that Spring Boot 2.0.0.RC1 has been released and is now available from our milestone repository.

This release closes a massive 313 issues and pull requests, and is our first release candidate. At this point we’re not anticipating that any major API changes or new features will be added before our final 2.0 GA release.

We’ve refined a number of items from previous milestone, and provide a number of notable new features including:

  • A module to help with legacy property migration
  • HTTP/2 support for Jetty (to go along with the Tomcat and Undertow that was added in M7)
  • Greatly enhanced GSON support (thanks to an external contribution)
  • Improved actuator JSON structures
  • Helpful security matchers for both Servlet and Reactive deployements
Read more...

Spring Boot 1.5.10 available now

Spring Boot 1.5.10 has been released and is is now available from repo.spring.io and Maven Central.

This release includes an important fix for security vulnerability CVE-2018-1196, which can affect anyone using Spring Boot’s systemd and init.d service support. It also provides the latest version of Spring Security which fixed CVE-2018-1199.

In addition the security fix, Spring Boot 1.5.10 includes over 55 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

Read more...

CVE-2018-1199: Spring Security 5.0.1, 4.2.4, 4.1.5 Released

We have released Spring Security 5.0.1, 4.2.4, and 4.1.5 to address CVE-2018-1199: Security bypass with static resources Users are encouraged to update immediately.

One of the changes introduced for this CVE was setting StrictHttpFirewall as the default HttpFirewall. User’s can refer to the Javadoc and reference for additional information on how to configure it.

Read more...

Spring Messaging Projects Maintenance Releases - Integration, AMQP, Kafka

We are pleased to announce the availability of the following maintenance releases; users are encouraged to upgrade at the earliest opportunity.

Spring Integration 4.3.13, Spring AMQP 1.7.6 will be used in the upcoming Spring Boot 1.5.10 release. Spring Integration 5.0.1, Spring AMQP 2.0.2 and Spring for Apache Kafka 2.1.2 will be used in the upcoming release candidate for Spring Boot 2.0.

Read more...