Hi, Spring fans! In this installment, Josh Long (@starbuxman) talks to Paketo contributor Daniel Mikusa about buildpacks, Paketo, containers, UPX, and so much more

Hi, Spring fans! In this installment, the first of a series, Josh Long looks at the venerable @Controller annotation and its use supporting Model 2 MVC-style web applications.

Dear Spring Community,

I am happy to announce the 4.12.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

important updates to the Spring Tools 4 for Eclipse distribution

• embedded runtime upgraded to JDK17 (across all distributions, including Apple Silicon)
• Java 17 support available (via separate add-on)
• early-access builds for upcoming Eclipse 2021-12 release available
• early-access builds for Apple Silicon platform (ARM M1) available

additional changes

• (Eclipse) fixed: Alway Download sources and javadoc when I open sts (distribution includes latest m2e 1.18.2 release now) (#692)
• (Eclipse) fixed: docker integration doesn't work on Apple Silicon (#684)
• (Eclipse) fixed: Annoying error message on every eclipse startup if CF destination is not reachable (#688)
…

When we got the results back from the latest State Of Spring survey, 67% of you said you would like to see better support for service discovery and configuration management on Kubernetes.

With the release of Spring Cloud 2021.0.0-M3, we are taking a big step forward to addressing both of these concerns!

Spring Cloud Kubernetes has offered a DiscoveryClient implementation since its inception. However, the implementation required the application to have permissions to use the Kubernetes API server. This proved to be a major barrier for many Spring Cloud user’s, as Kubernetes administrators…

On behalf of the community, I am pleased to announce that Spring Cloud OpenFeign versions 2.2.10.RELEASE, 3.0.5 and 3.1.0-M4 have been released.

These are primarily security releases with fixes for the CVE-2021-22044.

Applications using type-level @RequestMappingannotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to @RequestMapping-annotated interface methods. Although a response is not returned for a request sent in this way, it does reach the corresponding server-side endpoint.

The practice of using a type-level @RequestMapping on a Feign client…

The recently released Spring Boot 2.5.6 and 2.4.12 releases contain fixes for the following security vulnerabilities:

• CVE-2021-22096 for the Spring Framework
• CVE-2021-22047 for Spring Data REST
• CVE-2021-22097 for Spring AMQP

In addition, Spring Cloud OpenFeign has released versions 3.0.5 and 2.2.10, based on the same Spring Boot versions, and containing a fix for the following security vulnerability:

• CVE-2021-22044 for Spring Cloud OpenFeign

Please, review the reports and upgrade!

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you?

I'm doing well, as always. I literally just wrapped up presenting a fun session at the Russian Joker conference all about Spring and GraphQL. I got a ton of great questions from an enthusiastic audience. Thanks so much for joining me, everyone. I've got to get to other meetings, though, so let's get this wonderful week in Spring out of the way!

• Spring Tips: refreshable configuration with Spring Cloud Bus, and the Spring Cloud Config Monitor
• In last week's A Bootiful Podcast, I talked to RabbitMQ and Weaveworks founder Alexis Richardson about RabbitMQ, Pivotal, Spring, Kubernetes, and FluxCD
• A great article that @Javinpaul linked me to: What is @PropertySource in Spring Framework?
• fellow Java Champion Andres Almiray has just released a very cool sample Spring Boot application demonstrating some features of the JReleaser project, which aims to make deploying artifacts as easy as possible.
• Want to learn Spring Boot? Check out …

Today, we are excited to announce the integration of AppDynamics in the Azure Spring Cloud for full stack observability.

Over the past 20 months, we worked with many enterprise customers to learn about the scenarios they face. Many of these customers have thousands of Spring Boot applications running in on-premises data centers. As they migrate these applications to the cloud, they need to instrument them for application performance monitoring (APM) using solutions their developers are familiar with and have been using for years. In addition, they must ensure continuity for desktop and mobile…

On behalf of the community, I am pleased to announce that the Milestone 3 (M3) of the Spring Cloud Square 0.4.0 is available today. The release can be found in Spring Milestone repository. You can check out the 0.4.0-M3 release notes for more information.

This is primarily a bugfix release. See all issues included in this release here.

The documentation for this milestone can be found here.