HI Spring fans and welcome to another installment of This Week in Spring! This week I'm in sunny California, then it's off to Istanbul, Turkey for the epic SpringOne Tour event, and then it's off to Chicago, Illinois for the better-and-better GOTO Chicago show. I hope to see you there!

We've got a busy week in Spring so without further ado let's get to it!

• Preview releases of Spring Cloud Alibaba are available: 0.9.0, 0.2.2, and 0.1.2
• A Bootiful Podcast: Pivotal Field CTO and OG Cloud Native Matt Stine on Architecture
• Spring Cloud Data Flow 2.1.0.M1 released
• Spring Tools 4.2.1 released
• CVE-2019-3799: Spring Cloud Config 2.1.2, 2.0.4, 1.4.6 Released
• Spring Cloud Task 2.2.0.M1 is now available
• Flight of the Flux 2 - Debugging Caveats
• Introducing Spring Cloud Circuit Breaker
• Spring Security 5.2.0.M2 Released
• Spring Boot 2.2 M2
• CVE-2019-3801: Java Projects using HTTP to fetch dependencies
• …

Hi Spring fans! Welcome to another installment of a Bootiful Podcast. In this episode, recorded in lovely Johannesburg, South Africa for the SpringOne Tour event, I'm joined by my buddy and one of the original cloud natives, Matt Stine!

• Matt's Twitter (@mstine)

NOTE: This is a guest post from our friends at Alibaba.

Hi! Today, we’re very excited to announce that the 0.9.0, 0.2.2, and 0.1.2 releases of Spring Cloud Alibaba are now available.

Release Highlight

Included in this GA are 3 new releases:

• Release 0.9.0: Compatible with Spring Cloud Greenwich
• Release 0.2.2: Compatible with Spring Cloud Finchley
• Release 0.1.2: Compatible with Spring Cloud Edgware

Four new modules were added to all three releases:

• spring-cloud-alibaba-sentinel-zuul
• spring-cloud-alibaba-seata
• spring-cloud-alibaba-dubbo (not available in Release 0.1.2)
• spring-cloud-alibaba-sms
…

The Spring Cloud Data Flow team is pleased to announce the release of a 2.1.0 M1 milestone-release. Follow the Getting Started guides for running on Local, Cloud Foundry, and Kubernetes.

What’s new?

SCDF Helm Chart and Apache Kafka

With continued interest from the community, as of v2.0.2, we have now added support to toggle between RabbitMQ and Apache Kafka when using SCDF’s helm chart. Though the chart is in the PR status in Helm repository, you could still try it out and give us feedback.

Docker Compose and Apache Kafka

To continue with the same trend in regards to Apache Kafka, along with regular Apache Kafka binder properties, we have now also added support for Kafka Streams binder properties; likewise, we have switched to use the official Confluent’s Docker image as part of the Docker Compose getting-started experience…

Dear Spring Community,

I am happy to announce the 4.2.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Atom.

Highlights from this release include:

• (Spring Boot) performance: additional performance and memory footprint improvements to symbol indexing, now eats less memory and is faster while doing the initial indexing run
• (Spring Boot) new: content-assist for bean types in Spring XML config files
• (Spring Boot) new: content-assist for property names in Spring XML config files
• (Spring Boot) new: content-assist for bean references in property definitions in Spring XML config files (very rough early cut, needs a lot more work on proposal content, number of proposals, and sorting)
• (Eclipse) fixed: empty property values in custom properties not set when launching boot apps (#275…

We have released Spring Cloud Config 2.1.2, 2.0.4, and 1.4.6 to address CVE-2019-3799: Directory Traversal with spring-cloud-config-server. Please review the information in the CVE report and upgrade immediately.

These fixes will be included in the next release of the respective Spring Cloud release train.

NOTE: To override the version in Maven, update the dependency to include the version, such as:

<dependency>
	<groupId>org.springframework.cloud</groupId>
	<artifactId>spring-cloud-config-server</artifactId>
	<version>2.1.2.RELEASE</version>
</dependency>

Similarly, in Gradle:

dependencies…

Background

When using a microservices architecture to build our applications, it is very common to end up with a pretty complex dependency tree amongst services. If the service down the dependency tree encounters an issue that causes it to start to respond slowly, it ends up causing a set of issues that cascade up the dependency tree. As more and more requests come in to the application, more and more resources may be consumed by waiting for the slow service to respond. Even worse, the additional load being put on the slow service may exacerbate the problem. To help alleviate the effect of…

On behalf of the community, I’m pleased to announce the release of Spring Security 5.2.0.M2! This release includes 100+ updates. You can find the highlights below:

OAuth 2.0

gh-6446 - Client Support for PKCE

PKCE isn’t just for native or browser-based apps, but for any time we want to have a public client. Spring Security 5.2 introduces a secure way for backends to authenticate as public clients.

gh-5350 - OpenID Connect RP-Initiated Logout

gh-5465 - Ability to use symmetric keys with JwtDecoder

gh-5397 - Ability for NimbusReactiveJwtDecoder to take a custom processor

gh-6513 & gh-5200…

Hi Spring fans! What a week it's been! When we last spoke I was in Capetown, South Africa or Johannesburg, South Africa. I've since been to Mauritius, back to Capetown, Serbia (for the amazing ITKonekt conference) and I'm now staring at the beautiful Bund river in beautiful Shanghai, China as I write this.

We've got a ton to get to this week, as usual, so let's get to it.

• Hi Spring fans! Welcome to yet another installment of Spring Tips, this one on the just-released-in-master support for RSocket Messaging in Spring Boot 2.2. It's here! It's finally here! I was so excited to see this land and I hope you get a chance to try it out.
• Don't miss this webinar coming on April 18th, A Spring Developer’s Guide to the Pivotal Cloud Foundry Galaxy Webinar
• Spring Session for Apache Geode & Pivotal GemFire 2.2.0.M1 Available
• Spring Session for Apache Geode & Pivotal GemFire 2.0.9.RELEASE & 2.1.3.RELEASE Available
• Check out this post looking at the future of Kotlin and Spring, …