The Spring Blog

On behalf of the team, I am pleased to announce that Spring Framework 4.3.9 is available now.

This maintenance release is the base for the upcoming Spring Boot 1.4.7 and 1.5.4 maintenance releases and includes 30 fixes and selected improvements.

Project Page | GitHub | Issues | Documentation

Welcome to another installment of This Week in Spring! This week I’m in Malaysia and then Singapore where I’ll spend time with customers in the financial services world and speak at the Singapore Spring User Group on June 8th. If you’re around, come out or say hi!

• Spring IO Platform lead and Spring Boot ninja Andy Wilkinson just announced the Gradle Dependency management plugin 1.0.3
• Spring web guru has just announced Spring Web Flow 2.4.5
• the Baeldung blog has a nice look at Spring Boot and Kotlin
• Ranga Karanam put together a nice look at building web applications with Spring Boot
• I liked this blog offering tips and tricks for using the compile-time annotation processor Lombok in production application. Lombok is not a Spring project, obviously, but it’s easy to use with Spring and it’s available on the Spring Initializr [as a dependency].
• I reallly enjoyed some of the replies in the Quora post When would you choose Couchbase vs MongoDB vs Redis
• Cloud Foundry is dropping Consul from its internal implementation. This design doc / post-mortem looks at why, in this particular case, it makes sense for Cloud Founddry to move Consul out of the stack
• The Baeldung blog also updated their Java 9 Reactive Streams content, which is as-always a worthy read
• I liked this talk by Martin Fowler on the different uses of messaging
• Pivotal’s very own Matt Stine put together a nice read, What’s your Decomposition Strategy?
• interesting analysis from Bob Evans at Forbes: Sorry Amazon, but Microsoft is the World’s #1 Cloud Vendor
• I loved this Dreamworks case-study
• Coda Hale (who, among many things, created the DropWizard Metrics library) put together a great read introducing Little’s Law - an approach to modeling system performance - and his new library, usl4j.
• Pivotal’s own Joshua McKenty put together a nice piece on how to diversify a cloud portfolio.

I am pleased to announce that Gradle dependency management plugin 1.0.3.RELEASE is now available from Maven Central, Bintray, and the Gradle Plugin Portal. This maintenance release fixes a handful of issues and is a recommended upgrade for all users of the plugin.

A minor maintenance release version 2.4.5 for Spring Web Flow is now available for use.

The release includes an important security fix for vulnerability report CVE-2017-4971. Please review the report details and upgrade.

Hi Spring fans! This week I’m in Chicago for the epic Spring Days Chicago and then I’m off to Singapore for VOXXED Singapore. We’ve got a lot to cover so let’s get to it!

• Spring Security ninja Joe Grandja has just announced the new Spring Security OAuth 2.1.1 and 2.0.4
• Spring Cloud Data Flow engineer Gunnar Hillert just announced Spring Cloud Data Flow 1.2.1
• Spring Cloud co-founder Spencer Gibb just announced Spring Cloud Dalston SR1
• I liked Jonas Hecht’s post looking at how to run Spring Boot on Docker Windows
• I loved this post from RedHat engineer Sébastien Blanc on using Keycloak, their OAuth-aware identity provider, with Spring Boot applications. Keycloak is also supported on the Spring Initializr.
• The Docker blog also has a nice post by Sophia Parafina on running a Spring Boot application in a Docker container
• The Pivotal engineering blog has a nice post by Ian Fisher on the must-know Spring Boot annotations
• the IBM DeveloperWorks blog has a nice post on building Spring Boot applications
• I really liked this post by Aboullaite Mohammed on using the Spring Boot Actuator
• the MemoryNotFound blog has a nice post on using the @ConfigurationProperties annotation in a Spring Boot application.
• Grygoriy Gonchar looks at the implications for doing reactive JDBC (even if it’s just a facade around fundamentally blocking APIs) with Spring 5’s Reactor support.
• The All and Sundry blog has a nice look at writing a ratio-aware proxy using Spring Cloud Netflix Zuul to ease the migration to a new service

On behalf of the Spring Cloud Data Flow team, I’m pleased to announce the release of Spring Cloud Data Flow and Spring Cloud Data Flow for Cloud Foundry 1.2.1.RELEASE. This release provides several improvements around OAuth2 authorization.

Here are the relevant links to documentation and getting started guides.

• Local: Quick Start, Getting Started Guide
• Cloud Foundry: Getting Started Guide

Spring Cloud Data Flow now provides role support for OAuth2, converging with the VIEW, CREATE, MANAGE roles that Data Flow supports when using the traditional security option. Considering the varying use-case requirements across organizations in regards to security roles, the out-of-the-box implementation will assign all the VIEW, CREATE, MANAGE roles to the OAuth authenticated user. However, this can be customized by providing your own AuthoritiesExtractor.

On behalf of the community, I am pleased to announce that the Service Release 1 (SR1) of the Spring Cloud Dalston Release Train is available today. The release can be found in Maven Central. It is mostly a bugfix and documentation update. You can check out the Dalston release notes for more information.

The following modules were updated as part of Dalston.SR1:

Welcome to another installment of This Week in Spring! This week I’m in Amsterdam, NL and Essen, DE, talking to customers about cloud-native transformation. We’ve got a lot to cover so let’s get to it.

• Spring Tool Suite lead Martin Lippert just announced a preview of Concourse Pipeline and Cloud Foundry manifest editing support releases as a language server. These language servers can be used by any IDE or text editor that supports them, including in this case Microsoft’s Visual Studio Code and later STS itself.
• Spring Cloud Stream ninja Soby Chako just announced Spring Cloud Stream.SR2
• Simon Baslé just announced the Reactor Bismuth release train M1
• Stéphane Nicoll just announced Spring Boot 2.0M1! It’s finally here! Get the bits of the first major release towards a reactive Spring Boot 2.0. There’s so much good stuff, including an updated Gradle plugin, relaxed binding improvements, major dependency upgrades and so much more!
• I think this article by Paweł Chudzik on poor man’s batch solutions - iterating over large datasets - was very interesting. The conclusion is obvious: if you want to scroll through a large amount of records then use a java.util.Stream<T> finder query in your Spring Data repository. That’s one obvious conclusion. May I also humbly recommend that you look at Spring Batch and have a rich man’s batch at poor man’s prices? :)
• Want easier handling form encoded JSON in Spring MVC? Vote for this issue!
• I liked this walk through on how to implement a forgot password flow with Spring Boot on the Code by Amir blog by Amir Boroumand.
• Amir Boroumand also has a nice walkthrough on creating a REST API with Spring Boot
• Our friends at JDriven are doing what appears to be an awesome (though I think Dutch-language) on MQTT and Spring Cloud Stream and Spring Cloud Data Flow
• I liked this fairly approachable look at how to deploy Hashicorp Vault to Cloud Foundry by our very own Toshiaki Maki.
• Want a bit of insight into what the future of Serverless looks for Spring? Check out the slides to the good Dr. Dave Syer’s presentation on Spring Cloud Function at Spring IO
• WeaveWorks’ Scope is now available and supports Cloud Foundry
• I liked this rant from Steve Yegge on why Kotlin is a nice language. Interesting reading!