Dear Spring Community,

I am happy to announce the 4.10.0 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

major changes to the Spring Tools 4 for Eclipse distribution

• updated to Eclipse 2021-03 release

reminder

• the Eclipse-based distribution of the Spring Tools 4 requires a JDK11 (or newer) to run on
• ships with an embedded JDK15 runtime, no need to install or configure a specific JDK to run the IDE on anymore

additional changes

• (Spring Boot) enhancement: .sts4 dir location now configurable (#601)
• (Spring Boot) fixed: sometimes live hovers do not disappear (#609)
• (Eclipse) fixed: debugger didn't connect automatically to apps deployed to docker from the boot dashboard
• (Eclipse) fixed: STS 4.8.0 template proposals invalid (#579)
• (Eclipse) fixed: Fresh sts-4.9.0 starts with errors - no way to add Task repository (#606)
• (Eclipse) fixed: Error on installing Mylyn JIRA Connector in STS 4.9.0 (#599)
• (Eclipse) fixed: Duplicate com.sun.xml.bind installed screw other plugins (#588)
• (Eclipse) update: remove WTP-based HTML tooling from Spring Tools 4 distribution (#572…

The following is a guest post from the maintainers of the Spring Cloud AWS project.

On behalf of the Spring Cloud AWS team and the community around Spring Cloud AWS, I am happy to share that we have just released Spring Spring Cloud AWS 2.3 - a version that is compatible with Spring Boot 2.4 and Spring Cloud 2020.0.

This release contains a new integration with Cognito and a bunch of small improvements, fixes, and changes that we believe will make working with Spring Cloud AWS more pleasurable.

I believe the most surprising change is that now you need to include a separate Spring Cloud AWS BOM in your pom.xml…

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.3.5 is available now.

Spring Framework 5.3.5 includes 39 fixes and improvements and covers support for JDK 16 (which is scheduled for GA today), in preparation for JDK 17 LTS in September.

Stay tuned for follow-up Spring Boot releases later this week.

Project Page | GitHub | Issues | Documentation

On behalf of the community, I’m pleased to announce the release of Spring Security 5.5.0-M3! You can find the complete details in the release notes and the highlights below:

OAuth 2.0

gh-8975 - Add BearerTokenAuthenticationConverter

SAML

gh-9317 - Add setMetadataFilename method to Saml2MetadataFilter

gh-9310 - Throw Saml2AuthenticationException in Saml2AuthenticationTokenConverter on deflation or decoding error

ACL

gh-9425 - Allow ACL to be owned by GrantedAuthoritySid

Kotlin

gh-9319 - Kotlin DSL extension for rememberMe

Web

gh-9387 - Improve HttpSessionSecurityContextRepository performance

Project Site | Reference | …

Dear Spring community,

On behalf of the team and everyone who contributed, it is my pleasure to announce 1.0.4.RELEASE version for Spring Integration Zip extension.

CVE-2021-22114

The UnZipTransformer doesn’t cover all the cases for Zip Slip Vulnerability and some particular zip entry names may still end up outside of working directory.

The updated fix has been released in the spring-integration-zip-1.0.4.RELEASE version together with some other bug fixes and improvements. We also have published a new advisory for CVE-2021-22114.

Credit: Trung Pham, Viettel Cyber Security.

Everybody who’s…

Continuing our monthly milestone release cadence, I am pleased to announce that the second milestone of Spring Boot 2.5 has been released and is available from our milestone repository. This release adds a number of new features and bug fixes.

Highlights of this milestone include:

• Layered WARs support for use with Docker
• Custom Buildpack Builder Support
• Jetty 10 Support
• Early Support for Gradle 7

We've also made some significant behind-the-scenes changes to do with the way that schema.sql and data.sql files are processed. If you use those features, please try the milestone and let us know if…

For all users building hypermedia based API, I’d like to announce that we shipped Spring HATEOAS 1.3 M2. We ship two major themes with the release:

• Revised support for HAL-FORMS and most of the additional property attributes derived from types or JSR-303 annotations. For details checkout the revamped section of the references docs or a more complete example.

• We significantly revamped the way we register the media type conversion within the WebMVC infrastructure. This is a response to challenges in selecting the best media type to render in certain Accept header edge conditions. This change should be a non-issue but it would be great if you could test the new setup for a spin and report any glitches you potentially encounter.

…

On behalf of the team and everyone who has contributed, I’m happy to announce that Spring Initializr 0.10.0 has been released and is now available from Maven Central.

This release includes 27 fixes, improvements and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

For full upgrade instructions and new and noteworthy features please see the release notes.

GitHub | Issues | Documentation | Stack Overflow | Gitter

On behalf of the team, I’m pleased to announce Spring Data service releases 2020.0 SR5, Neumann SR7, Moore SR13 and the 4th Milestone of the upcoming 2021.0 iteration.

The attentive reader might have noticed that 2021.0 M3 and 2020.0 SR4 have been hiding out of sight. Well, a tiny glitch made us redo those releases right away for an upgrade without surprises.

For your convenience Spring Boot will pick up the artifacts with its upcoming releases.

2021.0 M4

• Spring Data Commons 2.5 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JDBC 2.2 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 2.5 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 3.2 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 3.2 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Geode 2.5 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 6.1 M4 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 2.5 M4 - Artifacts - Javadoc - Documentation - …