Welcome to another installment of This Week in Spring! This week I'm in Malaysia and then Singapore where I'll spend time with customers in the financial services world and speak at the Singapore Spring User Group on June 8th. If you're around, come out or say hi!

• Spring IO Platform lead and Spring Boot ninja Andy Wilkinson just announced the Gradle Dependency management plugin 1.0.3
• Spring web guru has just announced Spring Web Flow 2.4.5
• the Baeldung blog has a nice look at Spring Boot and Kotlin
• Ranga Karanam put together a nice look at building web applications with Spring Boot
• I liked this blog offering tips and tricks for using the compile-time annotation processor Lombok in production application. Lombok is not a Spring project, obviously, but it's easy to use with Spring and it's available on the Spring Initializr [as a dependency].
• I reallly enjoyed some of the replies in the Quora post …

I am pleased to announce that Gradle dependency management plugin 1.0.3.RELEASE is now available from Maven Central, Bintray, and the Gradle Plugin Portal. This maintenance release fixes a handful of issues and is a recommended upgrade for all users of the plugin.

A minor maintenance release version 2.4.5 for Spring Web Flow is now available for use.

The release includes an important security fix for vulnerability report CVE-2017-4971. Please review the report details and upgrade.

Hi Spring fans! This week I'm in Chicago for the epic Spring Days Chicago and then I'm off to Singapore for VOXXED Singapore. We've got a lot to cover so let's get to it!

• Spring Security ninja Joe Grandja has just announced the new Spring Security OAuth 2.1.1 and 2.0.4
• Spring Cloud Data Flow engineer Gunnar Hillert just announced Spring Cloud Data Flow 1.2.1
• Spring Cloud co-founder Spencer Gibb just announced Spring Cloud Dalston SR1
• I liked Jonas Hecht's post looking at how to run Spring Boot on Docker Windows
• I loved this post from RedHat engineer Sébastien Blanc on using Keycloak, their OAuth-aware identity provider, with Spring Boot applications. Keycloak is also supported on the Spring Initializr.
• The Docker blog also has a nice post by Sophia Parafina on …

On behalf of the community, I’m pleased to announce the releases of Spring Security OAuth 2.1.1 and 2.0.14.

Both are maintenance releases that primarily include bug fixes and minor improvements.

Project Page | GitHub | Documentation | Help

On behalf of the Spring Cloud Data Flow team, I’m pleased to announce the release of Spring Cloud Data Flow and Spring Cloud Data Flow for Cloud Foundry 1.2.1.RELEASE. This release provides several improvements around OAuth2 authorization.

Here are the relevant links to documentation and getting started guides.

• Local: Quick Start, Getting Started Guide
• Cloud Foundry: Getting Started Guide

Spring Cloud Data Flow now provides role support for OAuth2, converging with the VIEW, CREATE, MANAGE roles that Data Flow supports when using the traditional security option. Considering the varying use-case requirements across organizations in regards to security roles, the out-of-the-box implementation will assign all the VIEW, CREATE, MANAGE roles to the OAuth authenticated user. However, this can be customized by providing your own AuthoritiesExtractor…

On behalf of the community, I am pleased to announce that the Service Release 1 (SR1) of the Spring Cloud Dalston Release Train is available today. The release can be found in Maven Central. It is mostly a bugfix and documentation update. You can check out the Dalston release notes for more information.

The following modules were updated as part of Dalston.SR1:

Welcome to another installment of This Week in Spring! This week I'm in Amsterdam, NL and Essen, DE, talking to customers about cloud-native transformation. We've got a lot to cover so let's get to it.

• Spring Tool Suite lead Martin Lippert just announced a preview of Concourse Pipeline and Cloud Foundry manifest editing support releases as a language server. These language servers can be used by any IDE or text editor that supports them, including in this case Microsoft's Visual Studio Code and later STS itself.
• Spring Cloud Stream ninja Soby Chako just announced Spring Cloud Stream.SR2
• Simon Baslé just announced the Reactor Bismuth release train M1
• Stéphane Nicoll just announced Spring Boot 2.0M1! It's finally here! Get the bits of the first major release towards a reactive Spring Boot 2.0. There's so much good stuff…

Back in February 2017 we started to introduce new IDE-agnostic tooling support with our first beta version of the Cloud Foundry manifest editing support. As promised, we continue this journey with an improved version of the Cloud Foundry manifest editing support for Visual Studio Code and brand-new support for editing Concourse task and pipeline definitions - also as an extension to Visual Studio Code. This marks our second step towards implementing tooling in an IDE-agnostic way, adopting the language server protocol from Visual Studio Code.

We also continue our work on the Eclipse-based…