On behalf of the Spring Integration team, I am pleased to announce that the 4.3.11.RELEASE of Spring Integration is now available.

This release contains a few important bug fixes as well as a couple of improvements. In particular it contains a fix for the Jackson Serialization Gadgets vulnerability. Hence introduced in the version 4.3.10 custom ObjectMapper utility doesn’t allow now to deserialize objects in the untrusted packages. The set of trusted packages can be configured or you can use * to trust all. See JacksonJsonUtils.messagingAwareMapper() for more information.

Another useful fix is…

On behalf of the team, I am pleased to announce that Spring Framework 4.3.10 is available now.

This maintenance release is the base for the upcoming Spring Boot 1.5.5 maintenance release and includes 25 fixes and selected improvements. In particular, 4.3.10 now includes an upgrade to Objenesis 2.6 and is therefore ready for Google App Engine on Java 8.

Project Page | GitHub | Issues | Documentation

Hi Spring fans! This week I'm in Crete, Greece, for the epic JCrete un-conference and then it's off to Istanbul, Turkey for next week's visits with customers and for the Spring meetup. I hope you'll join me in Istanbul!

As usual, we've got a lot to cover so let's get to it!

• Spring Integration ninja Artem Bilan just announced the Spring Integration Extension for Hazlecast 1.0.0.GA. This new release features mainly bug fixes and improvements. It also adds support distributed, clustered applications with implementations of HazelcastMessageStore, HazelcastLockRegistry, and HazelcastMetadataStore.
• Spring Security ninja Joe Grandja just announced Spring Security OAuth 2.2.0.RC1. This new release includes improvements to the way JWT tokens and claim sets are handled. Do not miss the update!
• Want to profile Java applications on Cloud Foundry…

On behalf of the Spring Integration community I’d like to announce the GA release of Spring Integration Extension for Hazelcast. Its artifact is spring-integration-hazelcast.1.0.0.RELEASE and is available in the Release Repository and Maven Central.

Since the previous Milestone 1 and Milestone 2 we have done some bug fixes and internal improvements. The new features added since there are for Spring Integration utilities support which are useful in distributed, clustered applications:

• HazelcastMessageStore

• HazelcastLockRegistry

• HazelcastMetadataStore

See their JavaDocs and respective chapters in the Spring Integration Reference Manual…

On behalf of the community, I’m pleased to announce the release of Spring Security OAuth 2.2.0.RC1.

The 2.2.0.RC1 release includes numerous improvements to the JSON Web Key (JWK) feature contained in JwkTokenStore along with the addition of JwtClaimsSetVerifier that provides the capability of custom JWT Claim(s) verification. See the GitHub Issue for more details.

This release also includes a small number of bug fixes and minor enhancements.

Project Page | GitHub | Documentation | Help

Hi Spring fans! Welcome to another installment of This Week in Spring! This week I'm in Minneapolis, Minnesota; Kansas City, Kansas; and Phoenix, Arizona talking to customers and Pivotal partners about all things Spring and Cloud Foundry. If you're around don't hesitate to say hi!

We've got a lot to cover this week, so let's get started!

• Mark Fisher debuted the first look at Spring Cloud Function, an abstraction that brings the function-as-a-service paradigm to your Spring applications. This is a must-read!
• Spring (big-)Data ninja Thomas Risberg just announced Spring for Apache Hadoop 2.5.0 GA which mostly includes bugfixes and dependency updates.
• Spring Cloud co-founder just announced the first milestone of Spring Cloud Finchley. This release is the first to be based on the upcoming Spring Boot 2.0 baseline with one major new feature: a new microproxy called Spring Cloud Gateway which we see as a replacement for Zuul 1.
• Spring Tool Suite 3.9.0 released…

Dear Spring Community,

I am happy to announce the 3.9.0 release of the Spring Tool Suite, our Eclipse-based tooling.

Highlights from this release include:

• updated to Eclipse Oxygen release (Oxygen New and Noteworthy)
• improved support for editing cloud foundry manifest files
• improved support for using Spring Cloud CLI services (incl. log streaming to console view)

To download the distributions, please go visit:

• Spring Tool Suite: https://spring.io/tools/sts/all

Detailed new and noteworthy notes can be found here: STS 3.9.0 New & Noteworthy.

There is also an early access version of JDT available that includes support for Java9. You can install that from the Eclipse Marketplace. More details can be found in the Java9 section of the Eclipse Oxygen New and Noteworthy.

STS 3.9.1 is scheduled to be released on top of Eclipse Oxygen.1 (4.7.1) in early October 2017.

Enjoy!

On behalf of the community, I am pleased to announce that the Milestone 1 (M1) of the Spring Cloud Finchley Release Train is available today. The release can be found in Spring Milestone repository. You can check out the Finchley release notes for more information.

Notable Changes in the Finchley Release Train

Finchley is based on the Spring Boot 2.0.0 line. Finchley.M1 is based on Spring Boot 2.0.0.M2. This is largely a compatibility build with no new features with the exception of Spring Cloud Gateway. Finchley will follow Spring Boot's milestones and release candidates with a corresponding…

We are pleased to announce the Spring for Apache Hadoop 2.5.0 GA release.

The 2.5 version is primarily a bug fix and version upgrade release.

See the release changelog for details.

We continue to provide version specific artifacts with their respective transitive dependencies in the Spring IO milestone repository:

• 2.5.0.RC1 (default - Apache Hadoop stable 2.7.3)
• 2.5.0.RC1-cdh5 (Cloudera CDH 5.10)
• 2.5.0.RC1-hdp26 (Hortonworks HDP 2.6)

We discussed the future of the Spring for Apache Hadoop Project in the 2.5.0 RC1 announcement.

Please provide feedback so we can prioritize the work on new…