The Spring Cloud Data Flow team is pleased to announce the release of 1.5.0 RC1. Follow the Getting Started guides for Local Server, Cloud Foundry, and Kubernetes.

Here are the highlights:

General Improvements

• Switch to Hikari connection pool and restructure code to use fewer connections.

• Several bug fixes in underling deployer libraries.

Dashboard

• Editing a created/deployed stream is now possible from the Stream Builder. The application and deployment properties can be edited and re-deployed. The App version can be switched, too.

• A new paginator component is added to all the list page. Switching from a list of 20, 30, 50, or 100 items per page is possible. This further simplifies the bulk operation workflows.

• Introduction of end-to-end testing via Selenium and SauceLabs.

…

The following CVEs have been published today:

• CVE-2018-1257 for Spring Framework 5.0.6, 4.3.17.
• CVE-2018-1258 for Spring Security 5.0.5.
• CVE-2018-1259 for Spring Data Ingalls SR12, Kay SR7.
• CVE-2018-1260 for Spring Security OAuth 2.3.3, 2.2.2, 2.1.2, 2.0.15.
• CVE-2018-1261 for Spring Integration “Zip” extension 1.0.1.

Please, review the information in the CVE reports and upgrade immediately.

Spring Boot Users: Spring Boot 2.0.2 and 1.5.13, released earlier today, contain the fixes for the above vulnerabilities.

speaker: Josh Long

Hi Spring fans! In this installment we'll look at the new OAuth client support in Spring Security 5.

On behalf of the team and the community, I am pleased to announce that Spring Boot 2.0.2 is now available from repo.spring.io and Maven Central.

Spring Boot 2.0.2 includes over 80 fixes, improvements, and dependency updates. Thanks to everyone that has contributed with issue reports and pull requests. Please note that a number of the upgraded dependencies contain fixes for various security vulnerabilities. Please see this blog post for further details.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

On behalf of the team and community, I am pleased to announce that Spring Boot 1.5.13 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 1.5.13 includes over 20 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests. Please note that a number of the upgraded dependencies contain fixes for various security vulnerabilities. Please see this blog post for further details.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

I’m pleased to announce the releases of Spring Security OAuth 2.3.3, 2.2.2, 2.1.2 and 2.0.15. These maintenance releases primarily deliver bug fixes.

For a complete list of changes, please refer to:

• 2.3.3 changelog

• 2.2.2 changelog

• 2.1.2 changelog

• 2.0.15 changelog

2018-05-09 Update: The releases address a vulnerability. Please see this blog post published after the associated Spring Boot 1.5.13 release.

Project Page | GitHub | Documentation | Help

On behalf of the community I’m pleased to announce the release of Spring Session BOM Apple-SR2. This release includes an update to the core modules and adds support for Spring Session for Apache Geode. You can use the BOM

With Maven:

<dependencyManagement>
	<dependencies>
		<dependency>
			<groupId>org.springframework.session</groupId>
			<artifactId>spring-session-bom</artifactId>
			<version>Apple-SR2</version>
			<type>pom</type>
			<scope>import</scope>
		</dependency>
	</dependencies>
</dependencyManagement>
<dependencies>
	<dependency>
		<groupId>org.springframework.session</groupId…

I'm pleased to announce the release of Spring Security 4.2.6. The release primarily delivers bug fixes and dependency version updates along with some minor improvements.

For a complete list of changes, please refer to the 4.2.6 changelog.

Project Site | Reference | Help

2018-05-09 Update: The releases address a vulnerability. Please see this blog post published after the associated Spring Boot 2.0.2 releases.

I'm pleased to announce the release of Spring Security 5.0.5. The release primarily delivers bug fixes and dependency version updates along with some minor improvements.

For a complete list of changes, please refer to the 5.0.5 changelog.

Project Site | Reference | Help