Spring Cloud Task 2.2.5 includes fixes for the following vulnerability:

CVE-2020-5428 In applications using Spring Cloud Task 2.2.4.RELEASE and below, may contain code that is vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Users of Spring Cloud Task 2.2.4.RELEASE and below are encouraged to upgrade to Spring Cloud Task 2.2.5.RELEASE or 2.3.0.

Spring Cloud Data Flow team is pleased to announce the release of 2.7.1.

2.7.1 is a maintenance release fixing following issues:

• UI bug fixes
• Cloudfoundry Java Client has been updated to 4.13.0 fixing its memory leak
• Using Spring Boot 2.3.7 and Cloud Hoxton.SR9
• Spring Cloud Task updated to 2.2.5
• Dataflow server contains fixes for docker, metrics and some endpoints
• More detailed list can be found from GitHub 2.7.1

There is also releases for GitHub 2.6.5 and GitHub 2.5.4 with updated Spring Cloud Task.

These releases fixes CVE-2020-5427.

We've switched Pre-packaged Applications in our import links to point to 3.x…

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I've spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

The open web has long extended hope to those who wanted a commodity platform to build and deploy services and applications at…

Hi, Spring fans! In this installment Josh Long (@starbuxman) talks to Spring Tools lead Martin Lippert (@martinlippert) about sustainability in software, specifically, and I.T., generally.

• the slides to Martin's talk Sustainability in Software Engineering, as presented at EclipseCON 2020
• and here is the video for that talk

On behalf of the team and everyone that contributed, I am pleased to announce that the first milestone of Spring Boot 2.5 has been released and is available from our milestone repository. This release closes over 130 issues and pull requests.

Highlights of this first milestone include:

• Support for GET requests to the startup endpoint
• Security improvements to the info endpoint
• Preliminary support for Java 16
• Spring Integration 5.5.0 M1
• Spring Data 2021.0.0 M1
• Spring Security 5.5.0 M1
• Spring Session 2021.0.0 M1
• Spring HATEOAS 1.3.0 M1
• Numerous other dependency upgrades

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.5 Release Notes on the wiki and the updated reference documentation…

This is a guest post authored by our friend, Microsoft's Asir Vedamuthu Selvasingh

Hi, Spring fans! We are excited to announce that Application Performance Monitoring (APM) is now fully integrated into Azure Spring Cloud, powered by Application Insights.

Azure Spring Cloud is jointly built, operated, and supported by Microsoft and VMware. It is a fully managed service for Spring Boot applications that lets you focus on building the applications that run your business without the hassle of managing infrastructure.

APM in Azure Spring Cloud offers in-depth performance monitoring for your…

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I've spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

It's 3 AM. Do you know where your production KPI Metrics are? You can't improve that you can't measure, and metrics are an…

Hi, Spring fans! Welcome to another installment of This Week in Spring! We've got a lot to cover so let's get to it.

• What’s new in Spring Boot 2.4
• A Bootiful Podcast - Spring Cloud Stream lead Oleg Zhurakousky
• YMNNALFT: Easy RPC with RSocket
• YMNNALFT: Express Yourself with SpEL
• Check out the Sentry Spring Boot starter
• Developing Spring Boot applications with Kotlin on Google Cloud
• JEP draft: Primitive Objects (Preview)
• @__jpr has integrated Hotwire into a Spring Boot environment
• New Loom Early Access Build
• No matter what the usecase, Azure has your Java apps covered
• On the JetBrains Blog: Results of the First Kotlin Multiplatform Survey
• Spring Boot 2.2.13 available now
• Spring Boot 2.3.8 available now
• …

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I've spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

Integrating two services separated by a common, potentially volatile, and overwhelmed network is one of the most challenging…