The Spring Blog

Engineering
Releases
News and Events

Spring IO Platform Cairo-RELEASE

It’s my pleasure to announce that Spring IO Platform Cairo-RELEASE is now available from the Spring release repository and Maven Central. The Cairo generation of the Platform builds on top of Spring Framework 5.0 and Spring Boot 2.0 and requires Java 8.

What has changed

Cairo upgrades the versions of a number of projects:

  • Reactor Bismuth
  • Spring AMQP 2.0
  • Spring Batch 4.0
  • Spring Boot 2.0
  • Spring Cloud Connectors 2.0
  • Spring Data Kay
  • Spring Framework 5.0
  • Spring Integration 5.0
  • Spring Kafka 2.1
  • Spring REST Docs 2.0
  • Spring Security 5.0
  • Spring Security OAuth 2.2
  • Spring Session 2.0
  • Spring Web Flow 2.5
  • Spring Web Services 3.0
Read more...

Spring IO Platform end-of-life announcement

Maintenance of the Spring IO Platform will end twelve months from today, 9 April 2019, and the project will be moved to the attic. Maintenance releases of both the Brussels and Cairo lines will continue to be published up until that time.

When the Platform was first introduced almost four years ago it provided dependency management for a number of projects that were not managed by Spring Boot. In recent releases that number has decreased and would have continued to do so in the future as the Spring portfolio continues to evolve.

Read more...

Spring IO Platform Brussels SR8

I am pleased to announce that Spring IO Platform Brussels-SR8 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

  • Spring AMQP 1.7.7
  • Spring Batch 3.0.9
  • Spring Boot 1.5.11
  • Spring Data Ingalls SR11
  • Spring Framework 4.3.15
  • Spring Integration 4.3.15
  • Spring Kafka 1.1.8
  • Spring Security 4.2.5
  • Spring Session 1.3.2
  • Spring Social 1.1.6

The versions of a number of third-party dependencies have also been updated.

Read more...

Multiple CVE reports published for the Spring Framework

UPDATE 2018-04-09: see follow-up announcement for 4.3.x branch.

Spring Framework 5.0.5 and 4.3.15 (superseded by 4.3.16 with CVE-2018-1275), released earlier this week, include fixes for the following vulnerabilities:

Spring Boot 2.0.1 and 1.5.11 (superseded by 1.5.12 with CVE-2018-1275), that match the above Spring Framework versions, were released today, and are now also available for use.

Please, review the information in the CVE reports and upgrade immediately.

Read more...

Spring Boot 2.0.1 available now

Hot on the heels of Spring Boot 1.5.11, Spring Boot 2.0.1 is now available from repo.spring.io and Maven Central.

The first maintenance release of Spring Boot 2 includes over 160 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

Note that the Spring Framework versions included in both Spring Boot releases contain fixes that address multiple vulnerability reports. Please see this blog post for more details.

How can you help?

If you’re interested in helping out, check out the “ideal for contribution” tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Read more...

Spring for Apache Hadoop project End-Of-Life announcement

Dear Spring community,

The Spring team hereby announces that the Spring for Apache Hadoop project will reach End-Of-Life status twelve months from today on April 5th, 2019. We will publish occasional 2.5.x maintenance releases as needed up until that point and will then move the project to the attic. The current Spring for Apache Hadoop 2.5.0 release is built using Apache Hadoop version 2.7.3 and should be compatible with the latest releases of the most popular Hadoop distributions.

The Spring Cloud Stream App Starter - HDFS Sink applications rely on the Spring for Apache Hadoop project. Moving forward, we will port the required capabilities directly onto the HDFS App Starter project. Spring Cloud Data Flow would continue to orchestrate the HDFS sink applications into coherent streaming pipelines.

Read more...

Spring Boot 1.5.11 available now

On behalf of the team, I am pleased to announce that Spring Boot 1.5.11 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 1.5.11 includes over 70 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you’re interested in helping out, check out the “ideal for contribution” tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Read more...

Spring Vault 1.1.2 and 2.0.1 released

On behalf of the community, I’d like to announce the availability of Spring Vault service releases 1.1.2 and 2.0.1, available from Maven Central.

Both releases primarily deliver bug fixes and dependency version updates along with some minor improvements.

For a complete list of changes see the changelogs of 1.1.2 RELEASE and 2.0.1 RELEASE.

Read more...

Spring Data Ingalls SR11 and Kay SR6 released

On behalf of the Spring Data team, I’m pleased to announce the Ingalls SR11 and Kay SR6 service releases. The Ingalls service release ships on top of the just-released Spring Framework 4.3.15 and in preparation of the upcoming Spring Boot 1.5.11 release. The Kay service release picks up Spring Framework 5.0.5 and will be picked up by Spring Boot 2.0.1 for your convenience.

Both releases ship with 158 tickets fixed in total and are recommended upgrades to all users of the Ingalls and Kay release trains. You can find all details within the linked changelogs.

Read more...