Spring Cloud Task 2.2.5 includes fixes for the following vulnerability:

CVE-2020-5428 In applications using Spring Cloud Task 2.2.4.RELEASE and below, may contain code that is vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Users of Spring Cloud Task 2.2.4.RELEASE and below are encouraged to upgrade to Spring Cloud Task 2.2.5.RELEASE or 2.3.0.

On behalf of the team and everyone that contributed, I am pleased to announce that the first milestone of Spring Boot 2.5 has been released and is available from our milestone repository. This release closes over 130 issues and pull requests.

Highlights of this first milestone include:

• Support for GET requests to the startup endpoint
• Security improvements to the info endpoint
• Preliminary support for Java 16
• Spring Integration 5.5.0 M1
• Spring Data 2021.0.0 M1
• Spring Security 5.5.0 M1
• Spring Session 2021.0.0 M1
• Spring HATEOAS 1.3.0 M1
• Numerous other dependency upgrades

For a complete list of changes and upgrade instructions, please see the Spring Boot 2.5 Release Notes on the wiki and the updated reference documentation…

Hi, Spring fans! In this installment Josh Long (@starbuxman) talks to Spring Tools lead Martin Lippert (@martinlippert) about sustainability in software, specifically, and I.T., generally.

• the slides to Martin's talk Sustainability in Software Engineering, as presented at EclipseCON 2020
• and here is the video for that talk

This is a guest post authored by our friend, Microsoft's Asir Vedamuthu Selvasingh

Hi, Spring fans! We are excited to announce that Application Performance Monitoring (APM) is now fully integrated into Azure Spring Cloud, powered by Application Insights.

Azure Spring Cloud is jointly built, operated, and supported by Microsoft and VMware. It is a fully managed service for Spring Boot applications that lets you focus on building the applications that run your business without the hassle of managing infrastructure.

APM in Azure Spring Cloud offers in-depth performance monitoring for your…

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I've spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

It's 3 AM. Do you know where your production KPI Metrics are? You can't improve that you can't measure, and metrics are an…

Hi, Spring fans! Welcome to another installment of This Week in Spring! We've got a lot to cover so let's get to it.

• What’s new in Spring Boot 2.4
• A Bootiful Podcast - Spring Cloud Stream lead Oleg Zhurakousky
• YMNNALFT: Easy RPC with RSocket
• YMNNALFT: Express Yourself with SpEL
• Check out the Sentry Spring Boot starter
• Developing Spring Boot applications with Kotlin on Google Cloud
• JEP draft: Primitive Objects (Preview)
• @__jpr has integrated Hotwire into a Spring Boot environment
• New Loom Early Access Build
• No matter what the usecase, Azure has your Java apps covered
• On the JetBrains Blog: Results of the First Kotlin Multiplatform Survey
• Spring Boot 2.2.13 available now
• Spring Boot 2.3.8 available now
• …

Welcome to another installment of You May Not Need Another Library For That (YMNNALFT)! I've spent a lot of time since 2016 illuminating (or trying to, anyway!) some of the more enormous opportunities in the Spring ecosystem in my Spring Tips videos. Today, however, I come to you in a different spirit, wanting to focus on the little, sometimes hidden, gems that do fantastic things and that might spare you an additional third-party dependency and its implied complexity.

Integrating two services separated by a common, potentially volatile, and overwhelmed network is one of the most challenging…

Speaker: Phil Webb (@phillip_webb)

Sorry for the small font! You might want to watch this at a computer in full screen.

Timecodes

Use the timecodes below if you want to jump to a specific part of the presentation:

Intro

• 00:27 - Creating a Demo App

Upgrading

• 07:24 - Version Number Changes
• 08:29 - JUnit Vintage Engine
• 09:07 - Legacy Config Data Mode
• 10:48 - Logback Property Changes and Property Migrator

New Features

• 13:51 - Java 15 and Startup Logging
• 15:03 - Constructor Binding @ConfigurationProperties Updates
• 18:11 - ApplicationStartup Metrics (Flight Recorder and JSON)
• 24:49 - Changes to Application properties/yaml
• 30:46 - Using 'spring.config.import'
• 34:46 - Importing Files Without an Extension
• 35:28 - Origin Chains
• 38:34 - Config Tree Support (Kubernetes Volume Mounted Secrets)
• 40:51 - Supporting Custom Config Data Import Types
• 42:57 - Docker and Buildpack Updates
• 46:09 - Publishing to a Private Docker Registry
…

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast. This week, Josh Long (@starbuxman) talks to Spring Cloud Stream lead Oleg Zhurakousky (@z_oleg).