Hi, Spring fans! Welcome to another installment of This Week in Spring wherein I endeavor as best as I can to capture the latest-and-greatest in the wide, wacky, and wonderful world of Springdom! Naturally, I fail miserably basically every week. There's no way I could hope to capture everything of note. But I persist...

Are you coming to SpringOne 2022? This is our first in-person event since the pandemic and it's when we release Spring Framework 6 and Spring Boot 3, the next generation of Spring and Spring Boot respectively. It's running 6-8 December here in my hometown of sunny San Francisco, CA! Register now at SpringOne.io and use the code S1VM22_Advocate_200 …

On behalf of the team, I’m pleased to announce the 6th Milestone of Spring Data 2022.0.0 and service releases 2021.2.3 and 2021.1.7. The service releases ship with mostly bug fixes and dependency upgrades.

The releases include a fix for CVE detected in Spring Data REST. Be sure to update as soon as possible and check out details here.

For your convenience, the next Spring Boot releases will pick up 2021.2.3 and 2021.1.7 in the upcoming days. To round things off, here are the links to the individual modules, changelogs, and documentation:

2022.0.0-M6

• Spring Data Commons 3.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 3.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 3.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 4.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 7.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 4.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Geode 3.0 M6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data LDAP 3.0 M6 - Artifacts - Javadoc - Documentation - …

Updates

• [09-19] Vulnerability announced here and Spring Data REST 3.6.7 and 3.7.3 released
• [09-19] Blog post updated to refer to the CVE report published

The Spring Data 2021.1.7 and 2021.2.3 releases shipped on September 19th contained releases for Spring Data REST 3.6.7 and 3.7.3 which include fixes for CVE-2022-31679. Users are encouraged to update as soon as possible.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.0.0-M7 and 5.8.0-M3 are available now.

See the 6.0.0-M7 and 5.8.0-M3 release notes for more details.

Project Site | Reference | Help

Dear Spring Community,

I am happy to announce the 4.16.0 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

major changes to the Spring Tools 4 for Eclipse distribution

• updated to Eclipse 2022-09 release (new and noteworthy)
• new distribution build for Linux on ARM included now (experimental) - downloads are here
• m2e 2.0.5 release included in distribution builds for Eclipse

important note for upgrading from a previous installation on Eclipse

• Due to the major update to m2e 2.0 that comes with the Eclipse 2022-09 release, several additional third-party m2e connector extensions that the Spring Tools 4 for Eclipse distribution had installed in the past are no longer compatible. This prevents the automatic update of installations of Spring Tools prior to 4.16.0 to the new release. There are two options how to mitigate this:
  • start with a fresh install of Spring Tools 4.16.0 for Eclipse
  • go to the Preferences -> Installation Details and uninstall the following features via the Uninstall button, then restart the IDE, do a Check for Updates, and do the upgrade.
    • Maven Integration for Eclipse JDT Annotation Processor Toolkit
    • m2e connector for mavenarchiver pom properties
    • m2e connector for build-helper-maven-plugin
  …

On behalf of the community, I am pleased to announce that the release of the Spring Cloud Sletuh OTel 1.1.0 project is available today. The release can be found in Maven Central. You can check out the reference documentation for more information.

What is this?

Spring Cloud Sleuth OTel is an extension project to Spring Cloud Sleuth that comes with an OpenTelemetry tracer.

As always, we welcome feedback on GitHub, on Gitter, on Stack Overflow, or on Twitter.

To get started with Maven with a BOM (dependency management only):

<dependencyManagement>
    <dependencies>
        <dependency…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.0.0-M6 and 5.3.23 are available now.

Spring Framework 5.3.23 includes 32 fixes and improvements and is a recommended upgrade for all Spring production scenarios.

Spring Framework 6.0.0-M6 includes 123 additional fixes and improvements specific to the 6.0 branch. This milestone wraps up most of our AOT efforts, in preparation for our release candidate phase. Stay tuned for the announcement of Spring Boot 3.0.0-M5 next week!

Project Page | GitHub | Issues | Documentation

Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to big data legend, former Pivot, and friend to the Spring community, Tim Spann (@PaaSDev), about big data, StreamNative, and Apache Pulsar, and Spring for Apache Pulsar. Get your notebooks ready for this one, class!

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Cloud Dataflow 2.9.6 has been released and is now available from Maven Central.

This release updates to Postgres SQL driver 42.2.26 to address CVE-2022-31197. See the release notes for more information.

Stay in touch...

As always, we welcome feedback and contributions, so please reach out to us on Stackoverflow or GitHub.