Speaker: Josh Long

Hi Spring fans! In this installment of Spring Tips we'll look at the reactive Cloud Foundry Java client. We'll see how to use it support applications that know how to deploy themselves into a cloud target.

It is my pleasure to announce that I have just joined the developer advocacy team at Pivotal, focusing on Spring. I feel privileged to have the opportunity to learn and collaborate with great and passionate engineers from all over the world. Hence, I must say I am really excited for the upcoming journey.

If you would like to follow me, I tweet under @JakubPilimon and blog here.

Before joining Pivotal, I have had the pleasure of consulting with and learning from software development teams across a variety of domains. Whether the domain is e-commerce, pharma, fintech, or insurance—common to all domains in software are the expectations of users. In this post I'm going to introduce some of my…

After a long and exciting journey, we are pleased to announce the General Availability release of the Spring Cloud Stream Elmhurst release train - Elmhurst.RELEASE/2.0.0.RELEASE.

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-stream-dependencies</artifactId>
            <version>Elmhurst.RELEASE</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

Spring Cloud Stream Elmhurst (2.0.0.RELEASE) is available for use in Maven Central and the Spring Repo. The release notes include relevant information about version…

CVE-2018-1270 reported last week was unfortunately not fully addressed in the 4.3.x branch of the Spring Framework. Spring Framework 4.3.16 has been released today, so we've decided to also release Spring Boot 1.5.12 to help people upgrade easily.

This release includes just 3 fixed issues, but should be considered a priority upgrade for all existing Spring Boot 1.5 users.

Spring Boot 2.0 users are not affected and should use the existing 2.0.1 release.

Project Page | GitHub | Issues | Documentation | Stack Overflow | Gitter

I am pleased to announce that Spring IO Platform Brussels-SR9 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring Boot 1.5.12
• Spring Framework 4.3.16

Project Page | GitHub | Issues | Documentation

Maintenance of the Spring IO Platform will end twelve months from today, 9 April 2019, and the project will be moved to the attic. Maintenance releases of both the Brussels and Cairo lines will continue to be published up until that time.

When the Platform was first introduced almost four years ago it provided dependency management for a number of projects that were not managed by Spring Boot. In recent releases that number has decreased and would have continued to do so in the future as the Spring portfolio continues to evolve.

The decreasing difference between Spring Boot's dependency management and the Platform's dependency management means that offering the Platform as a separate choice no longer makes sense. All users of the Platform are encouraged to start using Spring Boot's dependency management directly, either by using spring-boot-starter-parent as their Maven project's parent, or by importing the spring-boot-dependencies…

It's my pleasure to announce that Spring IO Platform Cairo-RELEASE is now available from the Spring release repository and Maven Central. The Cairo generation of the Platform builds on top of Spring Framework 5.0 and Spring Boot 2.0 and requires Java 8.

What has changed

Cairo upgrades the versions of a number of projects:

• Reactor Bismuth
• Spring AMQP 2.0
• Spring Batch 4.0
• Spring Boot 2.0
• Spring Cloud Connectors 2.0
• Spring Data Kay
• Spring Framework 5.0
• Spring Integration 5.0
• Spring Kafka 2.1
• Spring REST Docs 2.0
• Spring Security 5.0
• Spring Security OAuth 2.2
• Spring Session 2.0
• Spring Web Flow 2.5
• Spring Web Services 3.0
…

CVE-2018-1270 was reported last week, and unfortunately, was not fully addressed in the 4.3.x branch of the Spring Framework.

A follow-up 4.3.16 version was created and released to Maven Central, and a new CVE-2018-1275 report was published. Please upgrade to 4.3.16 immediately!

Spring Boot 1.5.x Instructions: if impacted by this issue, please upgrade to Spring Boot 1.5.12.

I am pleased to announce that Spring IO Platform Brussels-SR8 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.7
• Spring Batch 3.0.9
• Spring Boot 1.5.11
• Spring Data Ingalls SR11
• Spring Framework 4.3.15
• Spring Integration 4.3.15
• Spring Kafka 1.1.8
• Spring Security 4.2.5
• Spring Session 1.3.2
• Spring Social 1.1.6

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation