Dear Spring Community!

Today, together with Google team, it’s my pleasure to announce the First Release Candidate of Spring Cloud for Google Cloud Platform project of version 1.0.

The artifacts available from Spring Milestone repository via BOM:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-gcp-dependencies</artifactId>
            <version>1.0.0.RC1</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies…

On behalf of the community, I am pleased to announce that the General Availability (RELEASE) of the Spring Cloud Finchley Release Train is available today. The release can be found in Maven Central. You can check out the Finchley release notes for more information.

Lifecycle Announcements for Release Train Versions

The Camden release train has reached end-of-life status. The Dalston release train will reach end-of-life status in December 2018. The Edgware release train will follow the end-of-life cycle of the Spring Boot 1.5.x line.

Notable Changes in the Finchley Release Train

Spring Cloud…

I am pleased to announce that Spring IO Platform Brussels-SR11 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.8
• Spring Boot 1.5.14
• Spring Cloud Connectors 1.2.6
• Spring Data Ingalls SR13
• Spring Framework 4.3.18
• Spring Integration 4.3.17
• Spring Security 4.2.7
• Spring Session 1.3.3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

I am pleased to announce that Spring IO Platform Cairo-SR2 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 2.0.4
• Spring Boot 2.0.3
• Spring Cloud Connectors 2.0.2
• Spring Data Kay SR8
• Spring Framework 5.0.7
• Spring Integration 5.0.6
• Spring Kafka 2.1.7
• Spring Security OAuth2 2.2.2
• Spring Security 5.0.6
• Spring Session Apple SR3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

The following CVEs have been published today:

• CVE-2018-11039: Cross Site Tracing (XST) with Spring Framework
• CVE-2018-11040: JSONP enabled by default in MappingJackson2JsonView

Fixes for those vulnerabilities have been released with Spring Framework 5.0.7 & 4.3.18, Spring Boot 1.5.14 and Spring Boot 2.0.3.

Please, review the information in the CVE reports and upgrade immediately.

On behalf of the Spring Data team, I'd like to announce the availability of the Ingalls SR13 and Kay SR8 service releases. The Ingalls service release ships on top of the just-released Spring Framework 4.3.18 and in preparation of the upcoming Spring Boot 1.5.14 release. The Kay service release picks up Spring Framework 5.0.7 and will be picked up by Spring Boot 2.0.3, for your convenience.

Both releases ship with 119 tickets fixed in total and are recommended upgrades to all users of the Ingalls and Kay release trains. You can find all details within the linked changelogs.

Ingalls SR 13

• Spring Data Commons 1.13.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 1.11.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 1.5.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 4.2.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 1.2.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Solr 2.1.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Gemfire 1.9.13 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 1.10.13 - Artifacts - Javadoc - Documentation - …

On behalf of the team, I am pleased to announce that Spring Boot 1.5.14 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 1.5.14 includes 42 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

This post was authored by Vedran Pavić

On behalf of the community I’m pleased to announce the release of Spring Session BOM Apple-SR3. This release includes an update of Spring Session core modules (which include Data Redis, Hazelcast and JDBC) to 2.0.4.RELEASE.

The following table provides an overview of all the included modules and their respective versions:

Module

Version

Spring Session Core

2.0.4.RELEASE

Spring Session Data GemFire

2.0.2.RELEASE

Spring Session Data Geode

2.0.2.RELEASE

Spring Session Data MongoDB

2.0.2.RELEASE

Spring Session Data Redis

2.0.4.RELEASE

Spring Session Hazelcast

On behalf of the team, I am pleased to announce that Spring Boot 2.0.3 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 2.0.3 includes 99 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …