Hi Spring fans! What a week! This week I'm in San Francisco, CA; Columbus, OH (for the epic SpringOne Tour stop there), and then it's off to Tel Aviv, Israel for customer visits and an appearance at the Israel JUG. If you're around, then I'd love to connect!

Anyway, and as always, we've got tons to cover so let's get to it!

• Spring Cloud Finchley.SR3 Now Available
• Out of the Box Application Observability with Spring Boot & Pivotal Cloud Foundry - Pivotal
• The CIO's guide to Kubernetes
• Spring Cloud Data Flow and Skipper 2.0 RC1 Released
• Spring Tools 4.1.2 released
• Last week in A Bootiful Podcast, I had the privilege of interviewing Sree Tummidi, Senior Product Manager for Security at Pivotal
• CVE-2019-3778: Spring Security OAuth 2.3.5, 2.2.4, 2.1.4, 2.0.17 Released
• Check out the latest-and-greatest in my second favorite place on the internet, start.Spring.io: What's new with Spring Initializr
• Last week was the recap post for season 5 of Spring Tips where we look at all the episodes from the last season. Spring Tips: Season 5 Recap I'm already hard at work on season 6, of course, so stay tuned. If you get through the Season 5 episodes, then you might go back and watch the older ones…

Hi Spring fans! This week I'm excited to welcome Sreee Tummidi, a senior product manager working at the intersection of application security and platform at Pivotal. We talked about security, Spring Security, cloud platforms, OAuth, OIDC and OIDC Connect, SAML, and of course the Cloud Foundry UAA, and tons more.

Twitter: @sreetummidi UAA

Dear Spring Community,

I am happy to announce the 4.1.2 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Atom.

Highlights from this release include:

• (Spring Boot) new: live hover information for bean wirings now supports war-packaged boot apps running in a local server installation
• (Spring Boot) new: live hover information for @Value annotations (#177)
• (Spring Boot) new: bean symbols from XML config files now include exact location information
• (Spring Boot) fixed: navigate to resource in live hovers for apps running on CF works again
• (Spring Boot) fixed: search for symbols in project now happens on the server side to avoid no project-related symbols showing up on the client side before you start typing in a query
• (Spring Boot) performance: improvement to further reduce the CPU load when checking processes for live hovers (#140…

The Spring Cloud Data Flow team is pleased to announce the release of 2.0 RC1 of Data Flow. Follow the Getting Started guides for running on Local, Cloud Foundry, and Kubernetes.

Hand in hand is the 2.0 RC1 release of Spring Cloud Skipper. The getting started section in the reference guide is the best place to start if you want to use Skipper separately from Data Flow.

Here are the highlights for Data Flow

• Revamped metrics and monitoring of deployed applications on Kubernetes

• Updated analytics using micrometer

• Security improvements

• Dashboard improvements

• Database migration support

…

We have released Spring Security OAuth 2.3.5, 2.2.4, 2.1.4 and 2.0.17 to address CVE-2019-3778: Open Redirector in spring-security-oauth2. Please review the information in the CVE report and upgrade immediately.

For additional changes included in each release, please refer to:

• 2.3.5 changelog

• 2.2.4 changelog

• 2.1.4 changelog

• 2.0.17 changelog

NOTE: For users of Spring Boot 1.5.x and Spring IO Platform Cairo, it is highly recommended to override the spring-security-oauth version to the latest version containing the fix for the CVE. Please see the Mitigation section in the CVE report for…

The quickest way to generate Spring Boot projects is through start.spring.io. The site provides a curated list of dependencies that you can add to your application based on the selected Spring Boot version. You can also choose the language, build system and JVM version for the project. Over the years, the popularity of start.spring.io as the tool for generating Spring projects has grown exponentially and millions of projects are generated every year using the site.

For the past few months, we’ve been working on a complete overhaul of the project generation API. To better understand the…

Hi Spring fans! Can you believe it? We're at the end of yet another season - our fifth! - of Spring Tips! I wasn't sure at first (when we started down this journey a few years ago) that these videos would take off or become popular but it seems the Spring community's curiosity knows no bounds!

I try in every season to look at new technology (RSocket and R2DBC, eh, spring to mind..), and to introduce variations on themes (we looked at three projects that extend Spring Cloud to native IaaS-platforms this season!), and to introduce potentially niche but often appreciated topics (this season we…

Hi Spring fans! Welcome to another installment of This Week in Spring! In the US, Monday was a public holiday so today, Tuesday, feels a bit like Monday and i was happily going through the Monday motions and then I got a reminder that I had to write this week's installment! Ooops! Thank goodness for technology.

I'm at San Francisco International Airport about to board a fight for the Washington DC edition of the SpringOne Tour. Are you going to be in Washington DC? Reach out and say hi! My direct messages on Twitter are correct, too

Then, it's off to Kansas City, KS/MO for, among other things, an appearance at the Kansas City JUG this…

It was a lot of fun to talk to Greg Turnquist, one of the more industrious and variously applied members of the Spring family, about how he found his way to the Spring team and community, Python, his new book, Spring team legends like Keith Donald and Brian Dussault, and so much more.

• Twitter: @GregTurn
• Spring team profile page
• Spring guides