On behalf of the community, I am pleased to announce that SR2 (Service Release) of the Spring Cloud Finchley Release Train is available today. The release can be found in Maven Central. You can check out the Finchley release notes for more information.

Spring Cloud Gateway

• Support WebFlux error handling in Hystrix timeouts #553
• Read multiple certificates in PEM file #583
• Support for configuring TLS timeouts #578
• ModifyRequestBodyGatewayFilterFactory updates headers appropriately #492
• Support relative redirects in redirect filter #468
• Bug Fixes

Spring Cloud Sleuth

• Bug Fixes

Spring Cloud…

Spring Cloud Function has a couple of new features in 2.0 (still in milestone phase), and possibly the most dramatic is the ability to go "fully functional". This is made possible by changes in Spring Boot 2.1 together with Spring Framework 5.1, and it means a different way of thinking about bean definitions in Spring applications, but also significant improvements in startup performance.

AWS Cost Savings

It’s always good to start with a picture, especially if it tells a story. Here’s a graph that shows the improvement in Spring Cloud Function 2.0 over 1.0, comparing the cost of cold starts in…

The Spring Cloud Data Flow team is pleased to announce the release of 1.7 RC1. Follow the Getting Started guides for Local Server, Cloud Foundry, and Kubernetes.

The RC1 release builds on the core features introduced in 1.7 M1 with a few refinements.

Here are the highlights

• Improved UI — The UI has a completely new look. The property whitelisting functionality has been refined to not display all application properties by default if the whitelist is empty.

• Stream Application DSL — This has been integrated into the UI so you can design a data pipeline made out of arbitrary Boot applications.

• Support for scheduling of tasks on Kubernetes.

• Audit trail. — Task and Scheduler supported has been added.

• Concurrent Task Launch Limiting.

• Stream and Task validation. — Added support for validation of applications registered of type 'app'.

• Force upgrade for Streams.

  …

I am pleased to announce that Spring IO Platform Brussels-SR14 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.11
• Spring Boot 1.5.17
• Spring Data Ingalls SR16
• Spring Framework 4.3.20
• Spring Security 4.2.9
• Spring Security OAuth 2.0.16
• Spring Web Flow 2.4.8
• Spring Web Services 2.4.3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

I am pleased to announce that Spring IO Platform Cairo-SR5 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Reactor Bismuth-SR12
• Spring AMQP 2.0.8
• Spring Boot 2.0.6
• Spring Data Kay SR11
• Spring Framework 5.0.10
• Spring Integration 5.0.9
• Spring Security 5.0.9
• Spring Security OAuth 2.2.3
• Spring Session Apple SR6
• Spring Web Flow 2.5.1
• Spring Web Services 3.0.4

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

Just starting your dev career? Check out this last report on the JVM ecosystem. Simon Maple, Andrew Binstock, and many others have done developers of all skill levels a great service with this data.

<@snyksec>Mirror mirror on the wall, which is the most popular Java web framework of them all?

<Mirror> We live in a Spring-world. In fact, the average application is more likely to use Spring than not! 54% of apps use Spring Boot/Spring MVC/JHipster.https://t.co/2dkjt6xauK pic.twitter.com/KcMYWew6Jk

— Simon Maple (@sjmaple) October 19, 2018

I'm a long-time Spring developer, and I've advocated for it for the last 10 years. It's no surprise how widely adopted it is. Spring Boot dominates the Cloud Native Java ecosystem. Download numbers keep growing at unseen rates. In fact, according to the survey, there are more people developing using Spring technologies than not. It's a great time to be a Java developer!

I could be happier though…

On behalf of the community, I am pleased to announce that the Service Release 5 (SR5) of the Spring Cloud Edgware Release Train is available today. You can find the release in Maven Central. You can also check out the Edgware release notes for more information.

Notable Changes in the Edgware Release Train

Spring Cloud Commons

• Bug fixes

Spring Cloud Config

• Documentation and Bug fixes

Spring Cloud Contract

• Bug fixes

Via #707 we've a test listener that handles issues with closing and starting WireMock servers. Thanks to this change you no longer need to set the @DirtiesContext on your tests…

On behalf of the team, it is my pleasure to announce that Spring Boot 2.1.0.RC1 has been released and is now available from our milestone repository.

This release closes over 100 issues and pull requests, and is our first release candidate. At this point we're not anticipating that any major API changes or new features will be added before our final 2.1 GA release.

We've refined a number of items from previous milestone, and provide a number of notable new features including:

• Auto-configuration for additional Micrometer registries: AppOptics, Humio and KairosDB
• Support for Jersey metrics (Thread pool and HTTP request)
• Integration with Hibernate's BeanContainer API
…

The following CVEs have been published today:

1. CVE-2018-15756 for Spring Framework 5.1.1, 5.0.10, and 4.3.20.
2. CVE-2018-15758 for Spring Security OAuth 2.3.4, 2.2.3, 2.1.3, and 2.0.16.

Please, review the information, including affected project versions, in the CVE reports and upgrade immediately.

Spring Boot Users: Spring Boot 2.0.6 and 1.5.17, released earlier today, contain the fixes for the above vulnerabilities.