On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.3.4 and 5.2.13 are available now.

Spring Framework 5.3.4 includes 62 fixes and improvements. Spring Framework 5.2.13 includes 18 selected fixes and improvements.

Stay tuned for follow-up Spring Boot releases later this week.

Project Page | GitHub | Issues | Documentation

On behalf of the community, I’d like to announce the availability of the Spring Vault service release 2.3.1.

This release ships with mostly bugfixes, dependency upgrades, and selected features.

For a complete list of changes, see the 2.3.1 changelog.

Project Page | GitHub | Issues | Release 2.3.1 on GitHub | Documentation for 2.3.1 | Stack Overflow

On behalf of the community, I’m pleased to announce the release of Spring Security 5.4.4 (release notes), 5.3.8 (release notes), and 5.2.9 (release notes). These releases deliver bug fixes along with some minor improvements. Users are encouraged to update to the latest patch release.

Project Site | Reference | Help

NOTE: There was an issue releasing 5.4.3 and 5.3.7 which caused us to need to release 5.4.4 and 5.3.8.

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 0.1.0.

You can download it from repo.spring.io and Maven Central by using the module coordinates:

compile 'org.springframework.security.experimental:spring-security-oauth2-authorization-server:0.1.0'

For additional details on this new project, see the initial announcement and project page.

The main features delivered in this release are:

• OpenID Connect Core 1.0 — Authorization Code Flow

• OpenID Connect Discovery 1.0 — OpenID Provider Configuration

• JSON Web Token (JWT) headers and claims customizer

…

On behalf of the community, I am pleased to announce that the Service Release 10 (SR10) of the Spring Cloud Hoxton Release Train is available today. The release can be found in Maven Central. You can check out the Hoxton release notes for more information.

Notable Changes in the Hoxton Release Train

See all issues included in this release here.

This was primarily a bug fix and documentation release. Hoxton.SR10 is compatible with Spring Boot 2.3.x and 2.2.x.

Fix for CVE-2021-22113

This release contains the fix for CVE-2021-22113. Please find the report here.

Spring Cloud Commons

• Random algorithm added for Spring Cloud LoadBalancer
• Sticky implementation added for Spring Cloud LoadBalancer
• Backported standalone RetryableLoadBalancerExchangeFilterFunction
• Added the possibility to refetch the instances for health-check in Spring Cloud LoadBalancer
…

Dear Spring Community,

Today it’s my pleasure to announce releases of Spring Integration for Amazon Web Services extension versions 2.3.5.RELEASE & 2.4.0, and Spring Cloud Stream Binder for AWS Kinesis versions 2.0.4.RELEASE & 2.1.0.

These releases can be downloaded from Maven Central, JCenter:

compile "org.springframework.integration:spring-integration-aws:2.3.5.RELEASE"

If you don’t use Kinesis Binder. Or via Binder dependency:

compile "org.springframework.cloud:spring-cloud-stream-binder-kinesis:2.0.4.RELEASE"

Mostly these versions have bug fixes and some community feedback refinements…

On behalf of the community, I am pleased to announce that Service Release 1 of the Spring Cloud 2020.0 Release Train (2020.0.1) is available today. The release can be found in Maven Central. You can check out the 2020.0 release notes for more information.

Notable Changes in the 2020.0.0 Release Train

This release was primarliy for bug fixes and dependency upgrades.

See this page for a list of Known Issues.

See the wiki for a list of all breaking changes in this release train.

See all of the included issues and pull requests at the Github project.

Spring Cloud Config

All of the known issues…

Spring Cloud Data Flow team is pleased to announce the release of 2.7.1.

2.7.1 is a maintenance release fixing following issues:

• UI bug fixes
• Cloudfoundry Java Client has been updated to 4.13.0 fixing its memory leak
• Using Spring Boot 2.3.7 and Cloud Hoxton.SR9
• Spring Cloud Task updated to 2.2.5
• Dataflow server contains fixes for docker, metrics and some endpoints
• More detailed list can be found from GitHub 2.7.1

There is also releases for GitHub 2.6.5 and GitHub 2.5.4 with updated Spring Cloud Task.

These releases fixes CVE-2020-5427.

We've switched Pre-packaged Applications in our import links to point to 3.x…

Spring Cloud Task 2.2.5 includes fixes for the following vulnerability:

CVE-2020-5428 In applications using Spring Cloud Task 2.2.4.RELEASE and below, may contain code that is vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Users of Spring Cloud Task 2.2.4.RELEASE and below are encouraged to upgrade to Spring Cloud Task 2.2.5.RELEASE or 2.3.0.