On behalf of the community, I’m pleased to announce the release of Spring Security 5.0.0 M3. This release includes bug fixes, new features, and is based off of Spring Framework 5.0.0 RC3.

The new features included in this milestone are:

• Support added for JSON Web Token (JWT) and JSON Web Signature (JWS) via the new module spring-security-jwt-jose

• Integrated the ID Token for OpenID Connect authentication flows

Please refer to the change log for further details on this release.

Project Site | Reference | Guides | Help

Dear Spring community,

I'm pleased to announce that the third Spring Framework 5.0 release candidate is available!

This release comes with refined nullability declarations (including the field and bean property level), even stronger Kotlin support (with a declarative bean definition DSL and support for default constructor arguments on Kotlin data classes), as well as several API refinements in Spring WebFlux. Furthermore, Spring Framework 5.0 RC3 ships against Reactor 3.1 M3 and JUnit 5.0 M6 and is fully tested against the recent JDK 9 release candidate.

With respect to our remaining roadmap, despite being feature-complete already, we opted for an extended release candidate phase. This allows for further hardening of our revised APIs and in particular for a proper upgrade to Reactor 3.1 GA, JUnit 5.0 GA and Jackson 2.9 GA (all expected by early September). As a consequence, we are aiming for our Spring Framework 5.0 GA release in September…

On behalf of the community, I am pleased to announce that the Service Release 2 (SR2) of the Spring Cloud Dalston Release Train is available today. The release can be found in Maven Central. You can check out the Dalston release notes for more information.

This release is primarily a bug fix release and users are encouraged to upgrade.

End of Life for Angel and Brixton release trains

The Angel and Brixton release trains have reached their end of life. As such, there will be no more releases to those trains. The community is encouraged to upgrade to Camden.SR7 or Dalston.SR2.

The following…

We are pleased to announce that Spring Batch 3.0.8.RELEASE is now available via Maven Central, Github, and the Pivotal download repository. This is the 8th maintenance release for the 3.0.x branch of Spring Batch and addresses a number of minor bug fixes and enhancements. One of the new features is that the DefaultDataFieldMaxValueIncrementerFactory has been updated to support InnoDB for the sequence tables used in MySql for the job repository when using Spring Framework 4.3.6+. Many thanks to all of those who submitted the many pull requests that went into this release.

Be sure to be on the…

On behalf of the Spring Integration team, I am pleased to announce that the 4.3.11.RELEASE of Spring Integration is now available.

This release contains a few important bug fixes as well as a couple of improvements. In particular it contains a fix for the Jackson Serialization Gadgets vulnerability. Hence introduced in the version 4.3.10 custom ObjectMapper utility doesn’t allow now to deserialize objects in the untrusted packages. The set of trusted packages can be configured or you can use * to trust all. See JacksonJsonUtils.messagingAwareMapper() for more information.

Another useful fix is…

On behalf of the team, I am pleased to announce that Spring Framework 4.3.10 is available now.

This maintenance release is the base for the upcoming Spring Boot 1.5.5 maintenance release and includes 25 fixes and selected improvements. In particular, 4.3.10 now includes an upgrade to Objenesis 2.6 and is therefore ready for Google App Engine on Java 8.

Project Page | GitHub | Issues | Documentation

Hi Spring fans! This week I'm in Crete, Greece, for the epic JCrete un-conference and then it's off to Istanbul, Turkey for next week's visits with customers and for the Spring meetup. I hope you'll join me in Istanbul!

As usual, we've got a lot to cover so let's get to it!

• Spring Integration ninja Artem Bilan just announced the Spring Integration Extension for Hazlecast 1.0.0.GA. This new release features mainly bug fixes and improvements. It also adds support distributed, clustered applications with implementations of HazelcastMessageStore, HazelcastLockRegistry, and HazelcastMetadataStore.
• Spring Security ninja Joe Grandja just announced Spring Security OAuth 2.2.0.RC1. This new release includes improvements to the way JWT tokens and claim sets are handled. Do not miss the update!
• Want to profile Java applications on Cloud Foundry…

On behalf of the Spring Integration community I’d like to announce the GA release of Spring Integration Extension for Hazelcast. Its artifact is spring-integration-hazelcast.1.0.0.RELEASE and is available in the Release Repository and Maven Central.

Since the previous Milestone 1 and Milestone 2 we have done some bug fixes and internal improvements. The new features added since there are for Spring Integration utilities support which are useful in distributed, clustered applications:

• HazelcastMessageStore

• HazelcastLockRegistry

• HazelcastMetadataStore

See their JavaDocs and respective chapters in the Spring Integration Reference Manual…

On behalf of the community, I’m pleased to announce the release of Spring Security OAuth 2.2.0.RC1.

The 2.2.0.RC1 release includes numerous improvements to the JSON Web Key (JWK) feature contained in JwkTokenStore along with the addition of JwtClaimsSetVerifier that provides the capability of custom JWT Claim(s) verification. See the GitHub Issue for more details.

This release also includes a small number of bug fixes and minor enhancements.

Project Page | GitHub | Documentation | Help