This is part 3 of the blog series in which we are introducing java functions for Spring Cloud Stream applications.

Other parts in the series.

Part 1 - General Introduction

Part 2 - Function Composition

In the last two blogs in this series, we provided a general introduction to this new initiative of migrating all the existing Spring Cloud Stream App Starters to functions and the various ways in which we can compose them. In this blog, we continue the series, showing how these functions are developed, tested, and used to generate Spring Cloud Stream applications. In particular, here we are focusing on how to write a supplier function (implementing java.util.function.Supplier…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.1.16 has been released and is now available from repo.spring.io and Maven Central.

This release includes 21 bug fixes, enhancements, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.2.9 has been released and is now available from repo.spring.io and Maven Central.

This release includes 40 bug fixes, enhancements, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

Hi, Spring fans! In this installment Josh Long (@starbuxman) talks to Spring Data lead Mark Paluch (@mp911de) about all things reactive and data: R2DBC, transactions, etc.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.3.2 has been released and is now available from repo.spring.io and Maven Central.

This release includes 88 bug fixes, enhancements, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team, I'm pleased to announce a Spring Data release triple feature: Neumann SR2, Moore SR9, and Lovelace SR19. These service releases are built on top of Spring Framework releases 5.2.8 (Neumann and Moore) and 5.1.17 (Lovelace) and ship with mostly dependency upgrades and fixes, along with a few selected improvements.

Spring Data Neumann SR2 contains 70 improvements and fixes. Spring Data Moore SR9 ships with 35 fixes and improvements. Last, Spring Data Lovelace SR19 includes 23 selected fixes.

All service releases will be picked up by the upcoming Spring Boot 2.3.2, 2.2.9, respective 2.1.16 releases for…

Dear Spring community,

On behalf of the team and everyone who contributed, it is my pleasure to announce a number of maintenance releases for Spring Integration. Mostly these versions contain bug fixes and dependency upgrades.

CVE-2020-5413

The Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit when the incoming data contains malicious code for execution during deserialization.

In order to protect against this type of attack, Kryo can be configured to require a set of trusted classes for (de)serialization. Spring Integration calls kryo.setRegistrationRequired(true); (trust no one) by default and pre-configures out-of-the-box Message<?> implementations as trusted classes. All other types have to be registered with Kryo using any available KryoRegistrar strategy injected into a PojoCodec…

On behalf of the team and everyone who has contributed, I am pleased to announce a full round of Spring Framework releases.

Spring Framework 5.2.8 includes 36 fixes and improvements. Spring Framework 5.1.17 includes 15 selected fixes and improvements.

The maintenance release for 5.0.x (5.0.18) ships with 13 selected fixes and improvements. The 4.3.x branch (4.3.28) also ships with 13 selected fixes and improvements, including a CORS configuration change (see gh-25414 and the CORS section of the reference documentation for more details).

As usual, we'll follow up shortly with corresponding Spring Boot releases (2.3.2, 2.2.9 and 2.1.16…

Hi, Spring fans! Welcome to yet another installment of This Week in Spring! How're you doing? Good, I hope!

I've just finished recording two epic episodes of a Bootiful Podcast that'll be streaming to ears near you in the not-too-distant future. I can not wait.

I'm also super excited: tomorrow I'll be hosting the Reactive Spring and Spring Tips-themed edition of SpringOne Tour. Do not miss this!

Also, the Spring team wants to hear from you! Please fill this survey out.

We've got a ton of stuff to get into this week, so let's begin.

• A Bootiful Podcast: Intuit's Katie Levy on Spring Boot, Kotlin, Android and more
• Announcing Spring Cloud Data Flow for Kubernetes.
• At @VMware, @sinasojoodi & @RKela are helping retailers migrate to event streaming and event-driven microservices. Hear all about it on today's episode of #StreamingAudio, hosted by @tlberglund, where they cover @springcentral and much more!
• Building a Chat application with Angular and Spring Reactive WebSocket: Part 2 | by Hantsy | Jul, 2020 | Medium
• Check out this guide to learn how to schedule Tasks with Spring
• …