This Week in Spring - April 23, 2019

Engineering | Josh Long | April 23, 2019 | ...

HI Spring fans and welcome to another installment of This Week in Spring! This week I'm in sunny California, then it's off to Istanbul, Turkey for the epic SpringOne Tour event, and then it's off to Chicago, Illinois for the better-and-better GOTO Chicago show. I hope to see you there!

We've got a busy week in Spring so without further ado let's get to it!

Preview releases of Spring Cloud Alibaba are available: 0.9.0, 0.2.2, and 0.1.2

Releases | Spencer Gibb | April 19, 2019 | ...

NOTE: This is a guest post from our friends at Alibaba.

Hi! Today, we’re very excited to announce that the 0.9.0, 0.2.2, and 0.1.2 releases of Spring Cloud Alibaba are now available.

Release Highlight

Included in this GA are 3 new releases:

  • Release 0.9.0: Compatible with Spring Cloud Greenwich
  • Release 0.2.2: Compatible with Spring Cloud Finchley
  • Release 0.1.2: Compatible with Spring Cloud Edgware

Four new modules were added to all three releases:

  • spring-cloud-alibaba-sentinel-zuul
  • spring-cloud-alibaba-seata
  • spring-cloud-alibaba-dubbo (not available in Release 0.1.2)
  • spring-cloud-alibaba-sms

Spring Cloud Data Flow 2.1.0.M1 released

Releases | Janne Valkealahti | April 18, 2019 | ...

The Spring Cloud Data Flow team is pleased to announce the release of a 2.1.0 M1 milestone-release. Follow the Getting Started guides for running on Local, Cloud Foundry, and Kubernetes.

What’s new?

SCDF Helm Chart and Apache Kafka

With continued interest from the community, as of v2.0.2, we have now added support to toggle between RabbitMQ and Apache Kafka when using SCDF’s helm chart. Though the chart is in the PR status in Helm repository, you could still try it out and give us feedback.

Docker Compose and Apache Kafka

To continue with the same trend in regards to Apache Kafka, along with regular Apache Kafka binder properties, we have now also added support for Kafka Streams binder properties; likewise, we have switched to use the official Confluent’s Docker image as part of the Docker Compose getting-started experience

Spring Tools 4.2.1 released

Releases | Martin Lippert | April 18, 2019 | ...

Dear Spring Community,

I am happy to announce the 4.2.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Atom.

Highlights from this release include:

  • (Spring Boot) performance: additional performance and memory footprint improvements to symbol indexing, now eats less memory and is faster while doing the initial indexing run
  • (Spring Boot) new: content-assist for bean types in Spring XML config files
  • (Spring Boot) new: content-assist for property names in Spring XML config files
  • (Spring Boot) new: content-assist for bean references in property definitions in Spring XML config files (very rough early cut, needs a lot more work on proposal content, number of proposals, and sorting)
  • (Eclipse) fixed: empty property values in custom properties not set when launching boot apps (#275

CVE-2019-3799: Spring Cloud Config 2.1.2, 2.0.4, 1.4.6 Released

Releases | Spencer Gibb | April 17, 2019 | ...

We have released Spring Cloud Config 2.1.2, 2.0.4, and 1.4.6 to address CVE-2019-3799: Directory Traversal with spring-cloud-config-server. Please review the information in the CVE report and upgrade immediately.

These fixes will be included in the next release of the respective Spring Cloud release train.

NOTE: To override the version in Maven, update the dependency to include the version, such as:

<dependency>
	<groupId>org.springframework.cloud</groupId>
	<artifactId>spring-cloud-config-server</artifactId>
	<version>2.1.2.RELEASE</version>
</dependency>

Similarly, in Gradle:

dependencies…

Introducing Spring Cloud Circuit Breaker

Engineering | Ryan Baxter | April 16, 2019 | ...

Background

When using a microservices architecture to build our applications, it is very common to end up with a pretty complex dependency tree amongst services. If the service down the dependency tree encounters an issue that causes it to start to respond slowly, it ends up causing a set of issues that cascade up the dependency tree. As more and more requests come in to the application, more and more resources may be consumed by waiting for the slow service to respond. Even worse, the additional load being put on the slow service may exacerbate the problem. To help alleviate the effect of…

Spring Security 5.2.0.M2 Released

Releases | Josh Cummings | April 16, 2019 | ...

On behalf of the community, I’m pleased to announce the release of Spring Security 5.2.0.M2! This release includes 100+ updates. You can find the highlights below:

OAuth 2.0

gh-6446 - Client Support for PKCE

PKCE isn’t just for native or browser-based apps, but for any time we want to have a public client. Spring Security 5.2 introduces a secure way for backends to authenticate as public clients.

gh-5350 - OpenID Connect RP-Initiated Logout
gh-5465 - Ability to use symmetric keys with JwtDecoder
gh-5397 - Ability for NimbusReactiveJwtDecoder to take a custom processor
gh-6513 & gh-5200

This Week in Spring - April 16th, 2019

Engineering | Josh Long | April 16, 2019 | ...

Hi Spring fans! What a week it's been! When we last spoke I was in Capetown, South Africa or Johannesburg, South Africa. I've since been to Mauritius, back to Capetown, Serbia (for the amazing ITKonekt conference) and I'm now staring at the beautiful Bund river in beautiful Shanghai, China as I write this.

We've got a ton to get to this week, as usual, so let's get to it.

Spring Boot 2.2 M2

Releases | Brian Clozel | April 16, 2019 | ...

On behalf of the team and everyone that contributed, I am pleased to announce that the second milestone of Spring Boot 2.2 has been released and is available from our milestone repository. This release closes almost 100 issues and pull requests.

Highlights of this milestone include:

  • Spring Framework 5.2.0.M1
  • @ConfigurationProperties scanning
  • Immutable @ConfigurationProperties binding
  • Initial RSocket Server Support
  • Lazy Initialization and performance improvements

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.2 Release Notes on the wiki and the updated reference documentation

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all