This Week in Spring - May 12th, 2020

Engineering | Josh Long | May 12, 2020 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring! I hope you're all doing well, staying safe, taking socially distant walks every day to get some fresh air and exercise, and so on. I'm trying my best to stay sane. We just crossed into month three-under quarantine, having gone into quarantine on 11 March 2020. It's pretty crazy to think about how slowly and quickly time has flown.

One of the things that makes me happy? Learning new things. This weekly roundup, This Week in Spring, has always been a lot of fun for me. It's become even more of a privilege in the age of quarantine, having something to learn and soak up. I know that most of us will get through this, but I've been very keen on not letting this time go to waste for me. It's exhausting to live under this quarantine. It's exhausting to be anxious about things. I completely understand the instinct to want to just stay in bed until it all blows over. It's completely normal. You're allowed to be anxious, to worry, to feel despair. I have those days, too. But, I have found it helpful to try to plan activities with my family and to focus on backburner projects. And I find walking to be helpful. My condo's gym is closed because of…

Getting Started With RSocket: Servers Calling Clients

Engineering | Ben Wilcock | May 12, 2020 | ...

Reading Time: about 7 minutes. Coding Time: about 20 minutes.

If you've been following my series on RSocket, you've heard me refer to "clients and servers" many times. But, with RSocket, the line between client and server is blurry. With Rsocket, servers can send messages to clients, and clients can respond to these requests in the same way a server would.

In fact, the RSocket docs don't use the terms 'client' or 'server.' The docs use the terms 'requester' and 'responder' instead. In RSocket, any component can act as a requester, and any component can act as a responder or even both at the…

Spring Cloud Task 2.3.0-M1 is now available!

Releases | Michael Minella | May 11, 2020 | ...

We are pleased to announce that Spring Cloud Task 2.3.0-M1 is now available on Github and the Spring download repository. Many thanks to all of those who contributed to this release.

What's New?

Spring Cloud Task 2.3.0-M1 is intended to be the version of the framework aligned with Spring Boot 2.3. Updates from 2.2.x include:

  • Updates to all dependencies.
  • Support for specifying a PlatformTransactionManager to be used by Spring Cloud Task.
  • A starter for singl-step Spring Batch jobs.

Let's walk through these updates in more detail.

Update to All Dependencies

As stated earlier, this is first…

Spring Security OAuth2 Auto-config 2.3.0.RC1, 2.2.7, 2.1.14 Released

Engineering | Rob Winch | May 11, 2020 | ...

On behalf of the community, I’m pleased to announce the release of Spring Security OAuth2 Auto-config 2.3.0.RC1 (release notes), 2.2.7.RELEASE (release notes), 2.1.14.RELEASE (release notes). The release delivers dependency updates to be compatible with the last versions of Spring Boot. Users are encouraged to update to the latest patch release.

Project Site | Reference | Help

Tanzu Observability by Wavefront Spring Boot Starter

Engineering | Stéphane Nicoll | May 07, 2020 | ...

Spring Boot has a great observability story. With the Actuator, we auto-configure Micrometer, an application metrics facade that supports numerous monitoring systems. With a few properties, you can start emitting a wide range of metrics out-of-the-box to your favorite monitoring system. And if you need to use distributed tracing, Spring Cloud Sleuth gets you covered.

Tanzu Observability for Wavefront (formerly Wavefront) delivers scalable observability as a service where Spring developers can build analytics-driven dashboards based on multi-sourced data including metrics, traces, histograms…

Spring Security 5.4.0-M1 Released

Releases | Eleftheria Stein-Kousathana | May 07, 2020 | ...

On behalf of the community, I’m pleased to announce the release of Spring Security 5.4.0-M1! You can find the complete details in the release notes and the highlights below:

OAuth 2.0

gh-8185 - Resource Server configurers pick up a JwtAuthenticationConverter bean
gh-8324 - Configure AuthoritiesMapper in Reactive OAuth2Login
gh-8324 - Validate ID Token Issuer
gh-8337 - Allow custom header during bearer token extraction
gh-8332 - Provide possibility to use custom cache to store JWK Set

Web

gh-2693 - Transfer session’s max inactive interval in…

Spring Boot 2.2.7 available now

Releases | Stéphane Nicoll | May 07, 2020 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.2.7 has been released and is now available from repo.spring.io and Maven Central.

This release includes 80 bug fixes, enhancements, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

Important Security Advisory

This version of Spring Boot includes a dependency upgrade to Spring Security 5.2.4.RELEASE. It contains fixes for CVE-2020-5407 and CVE-2020-5408, see also the official announcement.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 2.1.14 available now

Releases | Stéphane Nicoll | May 07, 2020 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.1.14 has been released and is now available from repo.spring.io and Maven Central.

This release includes 61 bug fixes, enhancements, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

Important Security Advisory

This version of Spring Boot includes a dependency upgrade to Spring Security 5.1.10.RELEASE. It contains fixes for CVE-2020-5407 and CVE-2020-5408, see also the official announcement.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Get the Spring newsletter

Thank you for your interest. Someone will get back to you shortly.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all