close

Spring Cloud Task 2.2.5 Release!

Spring Cloud Task 2.2.5 includes fixes for the following vulnerability:

CVE-2020-5428
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may contain code that is vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Users of Spring Cloud Task 2.2.4.RELEASE and below are encouraged to upgrade to Spring Cloud Task 2.2.5.RELEASE or 2.3.0.

Read more

Spring Cloud Data Flow 2.7.1 Released

Spring Cloud Data Flow team is pleased to announce the release of 2.7.1.

2.7.1 is a maintenance release fixing following issues:

  • UI bug fixes
  • Cloudfoundry Java Client has been updated to 4.13.0 fixing its memory leak
  • Using Spring Boot 2.3.7 and Cloud Hoxton.SR9
  • Spring Cloud Task updated to 2.2.5
  • Dataflow server contains fixes for docker, metrics and some endpoints
  • More detailed list can be found from GitHub 2.7.1

There is also releases for GitHub 2.6.5 and GitHub 2.5.4 with updated Spring Cloud Task.

Read more

YMNNALFT: Websockets

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I’ve spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

The open web has long extended hope to those who wanted a commodity platform to build and deploy services and applications at a large scale. We knew that the web could be compelling once a few things were improved. People could deliver rich clients that would be upgradeable with the refresh of a browser page. They could deliver data-and-multimedia-centric, immersive experiences. We knew that people could do these things if they only had the right paradigm for building web sites and services. But they say that you can’t appreciate the sweet without the sour, so the community embarked on a mission to find the absolute worst approach to building websites and services, and that, kids, is the story of how we got PHP.

Read more

Spring Boot 2.5.0-M1 available now

On behalf of the team and everyone that contributed, I am pleased to announce that the first milestone of Spring Boot 2.5 has been released and is available from our milestone repository. This release closes over 130 issues and pull requests.

Highlights of this first milestone include:

  • Support for GET requests to the startup endpoint
  • Security improvements to the info endpoint
  • Preliminary support for Java 16
  • Spring Integration 5.5.0 M1
  • Spring Data 2021.0.0 M1
  • Spring Security 5.5.0 M1
  • Spring Session 2021.0.0 M1
  • Spring HATEOAS 1.3.0 M1
  • Numerous other dependency upgrades
Read more

Bootiful Application Monitoring with Azure Spring Cloud

This is a guest post authored by our friend, Microsoft’s Asir Vedamuthu Selvasingh

Hi, Spring fans! We are excited to announce that Application Performance Monitoring (APM) is now fully integrated into Azure Spring Cloud, powered by Application Insights.

Azure Spring Cloud is jointly built, operated, and supported by Microsoft and VMware. It is a fully managed service for Spring Boot applications that lets you focus on building the applications that run your business without the hassle of managing infrastructure.

Read more

YMNNALFT: Dimensional Metrics Accumulation with Micrometer

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I’ve spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

It’s 3 AM. Do you know where your production KPI Metrics are? You can’t improve that you can’t measure, and metrics are an important part of this. Without metrics, we’re utterly and hopelessly lost, trapped in a spiraling death-march project with no sign or hope of any improvement! Tremble, ye wretched and miserable developer! Without metrics, we’re blind, and there’s nothing funny about that, so instead, here’s a photo of my daughter’s adorable little guinea pig, Kai:

Read more

This Week in Spring - January 19th, 2021

Hi, Spring fans! Welcome to another installment of This Week in Spring! We’ve got a lot to cover so let’s get to it.

Read more

YMNNALFT: Easy RPC with RSocket

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I’ve spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

Integrating two services separated by a common, potentially volatile, and overwhelmed network is one of the most challenging computer science problems.

Read more

What's new in Spring Boot 2.4

Speaker: Phil Webb (@phillip_webb)

Sorry for the small font! You might want to watch this at a computer in full screen.

Timecodes

Use the timecodes below if you want to jump to a specific part of the presentation:

Intro

  • 00:27 - Creating a Demo App

Upgrading

  • 07:24 - Version Number Changes
  • 08:29 - JUnit Vintage Engine
  • 09:07 - Legacy Config Data Mode
  • 10:48 - Logback Property Changes and Property Migrator

New Features

  • 13:51 - Java 15 and Startup Logging
  • 15:03 - Constructor Binding @ConfigurationProperties Updates
  • 18:11 - ApplicationStartup Metrics (Flight Recorder and JSON)
  • 24:49 - Changes to Application properties/yaml
  • 30:46 - Using ‘spring.config.import’
  • 34:46 - Importing Files Without an Extension
  • 35:28 - Origin Chains
  • 38:34 - Config Tree Support (Kubernetes Volume Mounted Secrets)
  • 40:51 - Supporting Custom Config Data Import Types
  • 42:57 - Docker and Buildpack Updates
  • 46:09 - Publishing to a Private Docker Registry
Read more