The following CVEs have been published today:

1. CVE-2018-15756 for Spring Framework 5.1.1, 5.0.10, and 4.3.20.
2. CVE-2018-15758 for Spring Security OAuth 2.3.4, 2.2.3, 2.1.3, and 2.0.16.

Please, review the information, including affected project versions, in the CVE reports and upgrade immediately.

Spring Boot Users: Spring Boot 2.0.6 and 1.5.17, released earlier today, contain the fixes for the above vulnerabilities.

Bienvenidos a todos a la segunda edición de Spring Noticias en Español!!

Como siempre, envíame noticias de tus logros en @mkheck en Twitter, [email protected], o [email protected] y los compartiré con la comunidad.

Para esta edición, aquí tienes unos artículos muy interesantes:

• Este artículo (en dos partes!) combina dos amores míos: Spring Boot y Kotlin! Otra tutorial excelente por Profesor P sobre crear una aplicación CRUD con REST en Kotlin y Spring Boot:

  • 1ra parte

  • 2ra parte

• Me encanta esta serie intensiva por Carlos Salazar en el blog Codesolt sobre como crear y probar una aplicación web con Spring Framework 4:

  • Tutorial Spring REST 1/9 – Construcción de proyecto Web en Spring 4 con Maven

  • Tutorial Spring REST 2/9 – Configuración de un servicio REST con Spring 4

  • Tutorial Spring REST 3/9 – Configurar OAUTH2 en un proyecto REST de Spring 4

  • Tutorial Spring REST 4/9 – Configuración de Hibernate Validator con Spring 4

  • Tutorial Spring REST 5/9 – Acceso a bases de datos SQL con Spring 4 y JPA

  • Tutorial Spring REST 6/9 – Configuración de Swagger 2 en Spring 4

  • Tutorial Spring REST 7/9 – Testing en Servicios REST con JUnit

  • Tutorial Spring REST 8/9 – Tomcat embebido en Maven

  • Tutorial Spring REST 9/9 – Probando tu servicio REST desde Postman

    …

Hi Spring fans! Welcome to another installment of This Week in Spring! This week I'm in Toronto, Canada, where I've been speaking to customers and at a meetup, then it's off to St. Petersburg, Russia for the epic Joker conf 2018. As usual, we've got a ton to cover so let's get to it!

• Check out this new version of the legendary Spring Petclinic, based on the new Spring Data JDBC
• Spring Security OAuth 2.3.4, 2.2.3, 2.1.3, 2.0.16 Released
• Rossen Stoyanchev has just announced the publication, and resolution for, two CVEs affecting Spring - READ THIS!
• Spring Boot 2.0.6
• Spring Session Apple SR6 Released
• Spring Security 5.1.1, 5.0.9, and 4.2.9 Released
• Spring Boot 1.5.17
• Some nice posts here for the Spanish-language readers
• Spring Data Lovelace SR1, Kay SR11, and Ingalls SR16 released
• Spring Framework 5.1.1, 5.0.10 and 4.3.20 available now
• …

Hi Spring fans! This week I'm in sunny San Francisco for the epic SpringOne Tour San Francisco event. I'm also heads down preparing for the rush of travel ahead of me. Starting on the 14th, I'll start four weeks of travel, bringing the message far-and-wide to Toronto, St. Petersburg, Brussels, San Francisco, Hartford, Paris, Beijing, Tokyo, Singapore, Seoul, Hong Kong, and.. I forget.. but there's more! I'm so looking forward to seeing you all at each and everyone of those places!

I also loved this tweet from Pivotal today for me:

Josh we're working on putting a Spring signal on the roof. pic.twitter.com/OInXwcte6Y

— Pivotal (@pivotal) October 9, 2018

Anyway, there's SO MUCH to cover so let's get to it!

• Spring Cloud Open Service Broker 3.0.0.M1 released
• Spring Cloud Open Service Broker 2.1.0.M1 released
• This is pretty cool! we're excited to announce, along with Heroku and the Cloud Native Computing Foundation, that the Cloud Natives Buildpacks technology was accepted int he CNCF!
• Hola mundo! Read Spanish? Know someone who does? You might appreciate this curated list of interesting reading, en Español!
• Happy Ada Lovelace day! As you know, we name each Spring Data release train after a prominent computer scientist. This one is named for Ada Lovelace, an English mathematician and writer, she was chiefly known for her work on Charles Babbage's proposed mechanical general-purpose computer, the Analytical Engine. Once you're done reading more into this hero and this self described "poetical scientist", you might also read up on the new features our current Spring Data Lovelace release train…

Bienvenidos a todos a la edición inaugural de Spring Noticias en Español!!

Primero, una introducción. El español es el segundo o cuarto idioma más hablado en el mundo, de acuerdo a las estadísticas…​y Spring es la marca más popular de Java en el mundo. Hasta ahora, no ha existido una manera consistente de compartir los proyectos (videos, artículos, etc.) entre la comunidad de Spring de hispanohablantes. Todos juntos, podemos cambiar eso!

Periódicamente, publicaré noticias de tus proyectos escritos o grabados en español aquí. Ayúdame a extender tu voz y compartir tus conocimientos por todo el…

I take the opportunity of a short stop between SpringOne platform where I gave the first talk about Spring Fu and Kotlinconf to give an overview of the evolution of this project, summarize the current status and share what could be the next steps.

Early June, I announced a new experimental project named Spring Fu, with the goal to experiment on a new kind of API to configure Spring applications using Kotlin DSL and functional configuration.

Today, I am proud to announce a new experimental project: Spring Fu. It is a @Kotlin micro-framework that makes it easy to create lightweight Spring-powered applications with functional APIs instead of annotations. We are looking for feedback. https://t.co/R15wJ1gD8K pic.twitter.com/ScljoPZ8rW

— Sébastien Deleuze (@sdeleuze) June 8, 2018

I must admit I was not expecting the huge wave of feedback that followed, and I would like to thank the Spring community for such warm welcome. I have…

Whew! What a week! I'm exhausted! I've been running around visting one customer after another this week and it's only Tuesday! My brain is still a smoldering hole from the craziness of last week's epic SpringOne Platform 2018 event in Washington DC, and needless to say there's a ton of new things to investigate and tons of videos to be available to the audience soon. This week is a wee bit more tame, so without further ado, let's get to it!

I don't know where you are in the world as you read this but I hope you'll join me 17:00 BST, for my appearance at the vJUG where I'll be looking at Bootiful Testing…

With Spring Data Lovelace just released in its generally available version last week, it is time to have a brief walk through the new features we have added. The release train is pretty packed with features. In this blog post, I cover the more general ones. Advanced, store-specific news is covered in the following blog posts:

• Jens Schauder introducing Spring Data JDBC

• Jens again on how to model aggregates with Spring Data JDBC

• Christoph Strobl on MongoDB

• Mark Paluch on Spring Data for Apache Cassandra & Redis

Read up on those? Alright, then let’s get started on the more general items…

The past year has seen a lot of enhancements brought to the NoSQL Store including a bunch of new features and extended capabilities. We collaborated closely with the driver team at MongoDB, so the release already ships with decent support for sessions, change streams, schema validation, and (of course) transactions.

The most interesting new feature is probably MongoDB 4.0’s support for Multi-Document Transactions. If you have followed this blog before, you have probably read our Hands on Guide that explains both ClientSessions (which are the main building block) and transactions themselves. In short, SpringData provides you with everything you need to leverage Spring managed transaction support in your project. To use it, declare MongoTransactionManager…