On behalf of the community, I am pleased to announce that Spring Cloud Netflix version 2.2.10.RELEASE has been released.

This is primarily a security release that fixes the CVE-2021-22053.

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf exposed a way to execute code submitted within the request URI path during the resolution of view templates. When a request was made at /hystrix/monitor;[user-provided-data], the path elements following hystrix/monitor were being evaluated as SpringEL expressions, which could lead to code execution.

This release…

I am pleased to announce that Spring Batch 4.2.8 and 4.3.4 have been released and are available now from Maven Central repository. These patch releases come with a number of bug fixes and dependency updates. You can find the complete change logs here: 4.2.8 and 4.3.4.

I would like to thank all contributors who had a role in these releases!

Spring Batch Home | Source on GitHub | Reference Documentation

Hi, Spring fans! Can you believe it's nearly December 2021? I'm still getting used to the idea that we're already in 2021 and now the year's nearly behind us! Stop the world, I want off! Time's flying.

I've been up to my eyeballs in Spring Tips video production. I can't wait for you to see tomorrow's installment (@SpringTipsLive)!

We've also got some great podcast interviews lined up. As always, new episodes drop on Apple Podcasts, Spotify, etc., every Thursday night (California time)/Friday (for most of the world). Don't miss it (@BootifulPodcast)!

You could also just check out my blog (joshlong.com) for the upcoming appearances, podcasts, Spring Tips videos, etc. The trouble is that the blog is otherwise pretty boring. My boring content notwithstanding, it's a plain l'il page on the internet, and I've been wanting to mix it up…

On behalf of the community, it is my pleasure to announce the general availability of Spring Security 5.6. This release is the result of the work that went into 5.6.0-M1, 5.6.0-M2, 5.6.0-M3, 5.6.0-RC1, and 5.6.0.

You can find the highlights of 5.6 in the What’s new section of the Spring Security reference.

As always, we look forward to hearing your feedback!

Project Site | Reference | Help

On behalf of the team, I’m pleased to announce the availability of the Spring Data 2021.0.7 and 2020.0.15 service releases.

Both releases are built on top of Spring Framework 5.3.13. For your convenience, you can consume Spring Data 2021.0.7 and 2020.0.15 through the upcoming Spring Boot releases, 2.5.7 and 2.4.13, respectively.

2020.0.x reached its end of life and will no longer be part of regular OSS releases. If you are still on this version, please consider upgrading at your earliest convenience.

Both service releases ship with mostly bug fixes and dependency upgrades.

To round things off…

On behalf of the team, I’m pleased to announce the availability of the Spring Data 2021.1.0.

These are the most important changes:

• Upgrade to Querydsl 5.0
• Support jMolecules' @Identity Annotation for Identifiers
• Fluent Query API for Querydsl and Query-by-Example
• Deprecated RxJava 2 Support
• MongoDB @DocumentReference, schema derivation for encrypted fields, and MongoDB 5.0 Time Series support
• Redis 6.2 support
• Support for streaming large result sets in Spring Data JDBC, Projections, and SQL Builder refinements around conditions, JOINs, and SELECT projections
• Support for Impersonation and support for Querydsl in Neo4j
…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.3.13 is available now.

Spring Framework 5.3.13 includes 16 fixes and improvements.

Stay tuned for follow-up Spring Boot releases next week.

Project Page | GitHub | Issues | Documentation

Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to Apache Artemis and messaging legend Clebert Suconic (@clebertsuconic). Check out ArtemisCloud.io for easy Kubernetes deployments of Apache Artemis.

Hi, Spring fans! Welcome to another installment of Spring Tips! In this installment, I wanted to share with you the keynote that Google's James Ward (@_JamesWard) and I put together for the recent Reactive Summit 2021 event, titled: "Reactive, Here and There."