The Spring Blog

Engineering
Releases
News and Events

Spring IO Platform Cairo-SR5

I am pleased to announce that Spring IO Platform Cairo-SR5 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

  • Reactor Bismuth-SR12
  • Spring AMQP 2.0.8
  • Spring Boot 2.0.6
  • Spring Data Kay SR11
  • Spring Framework 5.0.10
  • Spring Integration 5.0.9
  • Spring Security 5.0.9
  • Spring Security OAuth 2.2.3
  • Spring Session Apple SR6
  • Spring Web Flow 2.5.1
  • Spring Web Services 3.0.4

The versions of a number of third-party dependencies have also been updated.

Read more...

Spring IO Platform Brussels-SR14

I am pleased to announce that Spring IO Platform Brussels-SR14 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

  • Spring AMQP 1.7.11
  • Spring Boot 1.5.17
  • Spring Data Ingalls SR16
  • Spring Framework 4.3.20
  • Spring Security 4.2.9
  • Spring Security OAuth 2.0.16
  • Spring Web Flow 2.4.8
  • Spring Web Services 2.4.3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

Read more...

Spring Cloud Edgware.SR5 Has Been Released

On behalf of the community, I am pleased to announce that the Service Release 5 (SR5) of the Spring Cloud Edgware Release Train is available today. You can find the release in Maven Central. You can also check out the Edgware release notes for more information.

Notable Changes in the Edgware Release Train

Spring Cloud Commons

Spring Cloud Config

Spring Cloud Contract

Via #707 we’ve a test listener that handles issues with closing and starting WireMock servers. Thanks to this change you no longer need to set the @DirtiesContext on your tests if you want to reuse the same ports for your stubs.

Read more...

Spring Boot 2.1.0 RC1 available now

On behalf of the team, it is my pleasure to announce that Spring Boot 2.1.0.RC1 has been released and is now available from our milestone repository.

This release closes over 100 issues and pull requests, and is our first release candidate. At this point we’re not anticipating that any major API changes or new features will be added before our final 2.1 GA release.

We’ve refined a number of items from previous milestone, and provide a number of notable new features including:

  • Auto-configuration for additional Micrometer registries: AppOptics, Humio and KairosDB
  • Support for Jersey metrics (Thread pool and HTTP request)
  • Integration with Hibernate’s BeanContainer API
Read more...

This Week in Spring - October 16th, 2018

Hi Spring fans! Welcome to another installment of This Week in Spring! This week I’m in Toronto, Canada, where I’ve been speaking to customers and at a meetup, then it’s off to St. Petersburg, Russia for the epic Joker conf 2018. As usual, we’ve got a ton to cover so let’s get to it!

Read more...

Spring Project Vulnerability Reports Published

The following CVEs have been published today:

  1. CVE-2018-15756 for Spring Framework 5.1.1, 5.0.10, and 4.3.20.
  2. CVE-2018-15758 for Spring Security OAuth 2.3.4, 2.2.3, 2.1.3, and 2.0.16.

Please, review the information, including affected project versions, in the CVE reports and upgrade immediately.

Spring Boot Users:
Spring Boot 2.0.6 and 1.5.17, released earlier today, contain the fixes for the above vulnerabilities.

Read more...

Spring Boot 2.0.6

On behalf of the team and everyone that contributed, it is my pleasure to announce that Spring Boot 2.0.6 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 2.0.6 includes 97 fixes, improvements, and dependency updates as well as a Spring Framework CVE report. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you’re interested in helping out, check out the “ideal for contribution” tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Read more...

Spring Security 5.1.1, 5.0.9, and 4.2.9 Released

On behalf of the community, I am pleased to announce that Spring Security 5.1.1 (changelog) Spring Security 5.0.9 (changelog) and 4.2.9 (changelog) have been released. The releases primarily deliver bug fixes and dependency version updates along with some minor improvements. The releases will be found in the upcoming Spring Boot maintenance releases coming this week.

Read more...