This Week in Spring - June 25, 2019

Engineering | Josh Long | June 25, 2019 | ...

Hi Spring fans! Welcome to another installment of This Week in Spring. Today I'm in beautiful Tampla, Fl, where I got to talk to a wonderful Pivotal customer today. Now I'm at TPA airport preparing to board for Paris, France, for JHipsterConf.

We've got a ton to cover so let's get to it!

Spring Tools 4.3.0 released

Releases | Martin Lippert | June 21, 2019 | ...

Dear Spring Community,

I am happy to announce the 4.3.0 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

Highlights from this release include:

  • (Eclipse Theia vs Atom) Eclipse Theia now officially supported, Atom support deprecated
  • (Spring Boot) improvement: project classpath notifications now happen in batch on startup to further optimize performance and job load on the Eclipse side
  • (Spring Boot) improvement: symbols are now being re-created if dependent types change
  • (Spring Boot) fixed: Slow code completion takes more than a 1 sec. (#293)
  • (Spring Boot) fixed: content-assist for Spring XML config files now working again in VS Code and Theia
  • (Spring Boot) fixed: Anonymous inner type beans don't have boot hints
  • (CF Manifest)

Spring Tool Suite 3.9.9 released

Releases | Martin Lippert | June 20, 2019 | ...

Dear Spring Community,

I am happy to announce the 3.9.9 maintenance release of the Spring Tool Suite 3 (STS3).

Highlights from this release include:

  • updated to Eclipse 2019-06 release
  • mimics the https-preferring XSD schema lookup of the core Spring framework
  • allows users to use https for Spring schema locations as default
  • various bug fixes

To download the distributions, please go visit:

STS 3.9.9 is presumably the final release of the Spring Tool Suite 3 distribution. At the moment, there are no further updates or maintenance releases planned. For moving forward we recommend to switch to the next generation of the tooling, the Spring Tools 4. In case of high demand, we might produce additional maintenance update releases of the Spring Tool Suite 3. But in case you are missing important features in the new Spring Tools 4 that prevents you from switching over, let us know and report an enhancement request at

CVE-2019-11272: Spring Security 4.2.13 Released

Releases | Josh Cummings | June 19, 2019 | ...

We have released Spring Security 4.2.13 to address CVE-2019-11272: PlaintextPasswordEncoder authenticates encoded passwords that are null.

Users are encouraged to update immediately.

With Spring Boot, you can override the Spring Security version in Maven like so:


Or in Gradle like so:

ext['spring-security.version'] = '4.2.13.RELEASE'

Note that users of Spring Security 5+ are not affected by this vulnerability.

Java CFEnv 1.1 GA Released

Releases | Mark Pollack | June 19, 2019 | ...

On behalf of the Java CFEnv community I am happy to announce the release of Java CFEnv 1.1 GA.

This release add support for the following services:

  • Volume Services

  • Pivotal Single Sign-On Service

  • Pivotal Redis Service

It also adds the following functionality:

  • Checks the classpath to correctly determine setting of MySQL or MariaDB driver class name.

  • When using the Spring Boot support, an exception is thrown if the Spring Cloud Connector library is on the classpath. This applies only for the following services: DataSource, RabbitMQ, Cassandra, MongoDB, and Redis. The exception message indicates to set the environment variable JBP_CONFIG_SPRING_AUTO_RECONFIGURATION '{enabled: false}'

  • Support for Boot 1.5.x by copying a logging utility class into the project.

Spring Boot 2.2.0.M4

Releases | Andy Wilkinson | June 19, 2019 | ...

On behalf of the team and everyone that contributed, I am pleased to announce that the fourth milestone of Spring Boot 2.2 has been released and is available from our milestone repository. This release closes over 170 issues and pull requests.

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.2 Release Notes on the wiki and the updated reference documentation.

If you want to get started with 2.2 and try out the new features, you can bootstrap a new project on

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter

Spring Boot 2.1.6 released

Releases | Phil Webb | June 19, 2019 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Boot 2.1.6 has been released and is now available from and Maven Central.

This is a maintenance release that includes a number bug fixes, dependency updates and documentation improvements.

Remember that Spring Boot 1.5 will be end of life in august, so all users should now be upgrading to Spring Boot 2.1.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on using the spring-boot tag or chat with the community on Gitter

This Week in Spring - June 18, 2019

Engineering | Josh Long | June 18, 2019 | ...

Get the Spring newsletter

Thank you!

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all