On behalf of the community, I am pleased to announce that Spring Cloud OpenFeign versions 2.2.10.RELEASE, 3.0.5 and 3.1.0-M4 have been released.

These are primarily security releases with fixes for the CVE-2021-22044.

Applications using type-level @RequestMappingannotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to @RequestMapping-annotated interface methods. Although a response is not returned for a request sent in this way, it does reach the corresponding server-side endpoint.

The practice of using a type-level @RequestMapping on a Feign client…

The recently released Spring Boot 2.5.6 and 2.4.12 releases contain fixes for the following security vulnerabilities:

• CVE-2021-22096 for the Spring Framework
• CVE-2021-22047 for Spring Data REST
• CVE-2021-22097 for Spring AMQP

In addition, Spring Cloud OpenFeign has released versions 3.0.5 and 2.2.10, based on the same Spring Boot versions, and containing a fix for the following security vulnerability:

• CVE-2021-22044 for Spring Cloud OpenFeign

Please, review the reports and upgrade!

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you?

I'm doing well, as always. I literally just wrapped up presenting a fun session at the Russian Joker conference all about Spring and GraphQL. I got a ton of great questions from an enthusiastic audience. Thanks so much for joining me, everyone. I've got to get to other meetings, though, so let's get this wonderful week in Spring out of the way!

• Spring Tips: refreshable configuration with Spring Cloud Bus, and the Spring Cloud Config Monitor
• In last week's A Bootiful Podcast, I talked to RabbitMQ and Weaveworks founder Alexis Richardson about RabbitMQ, Pivotal, Spring, Kubernetes, and FluxCD
• A great article that @Javinpaul linked me to: What is @PropertySource in Spring Framework?
• fellow Java Champion Andres Almiray has just released a very cool sample Spring Boot application demonstrating some features of the JReleaser project, which aims to make deploying artifacts as easy as possible.
• Want to learn Spring Boot? Check out …

Today, we are excited to announce the integration of AppDynamics in the Azure Spring Cloud for full stack observability.

Over the past 20 months, we worked with many enterprise customers to learn about the scenarios they face. Many of these customers have thousands of Spring Boot applications running in on-premises data centers. As they migrate these applications to the cloud, they need to instrument them for application performance monitoring (APM) using solutions their developers are familiar with and have been using for years. In addition, they must ensure continuity for desktop and mobile…

On behalf of the community, I am pleased to announce that the Milestone 3 (M3) of the Spring Cloud Square 0.4.0 is available today. The release can be found in Spring Milestone repository. You can check out the 0.4.0-M3 release notes for more information.

This is primarily a bugfix release. See all issues included in this release here.

The documentation for this milestone can be found here.

Hi, Spring fans! In this installment, we'll look at fully refreshable configuration using the Spring Cloud Config Server, Spring Cloud Bus, and Spring Cloud Config Monitor.

Update (2021-10-26): This release contains a fix for a security issue. Please, read the related announcement.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.3.12 is available now.

Spring Framework 5.3.12 is a follow-up of the recent 5.3.11 release fixing 2 regressions in time for the Spring Boot releases.

Project Page | GitHub | Issues | Documentation

Update (2021-10-26): Multiple Spring projects included in this release contain fixes for security issues. Please, read the related announcement.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.4.12 has been released and is now available from Maven Central.

This release includes 36 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

Update (2021-10-26): Multiple Spring projects included in this release contain fixes for security issues. Please, read the related announcement.

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.5.6 has been released and is now available from Maven Central.

This release includes 43 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…