On behalf of the entire team I’d like to announce the availability of three service releases for Spring Data release trains: Lovelace SR6, Kay SR14, and Ingalls SR20.

The releases are recommended upgrades as they contain fixes for a CVE in Spring Data JPA.

Spring Boot 2.1.4, 2.0.9, and 1.5.20 already pull in the above Spring Data versions, including the fixes that were released last week, and are now also available for use.

Here’s the content of the releases:

Spring Data Lovelace SR6

• Spring Data Commons 2.1.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JDBC 1.0.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 2.1.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Solr 4.0.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 2.1.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 2.1.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Gemfire 2.1.6 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 5.1.6 - Artifacts - Javadoc - Documentation - …

The Spring Cloud Data Flow team is pleased to announce the release of 2.0.2 GA of Data Flow. Follow the Getting Started guides for running on Local, Cloud Foundry, and Kubernetes.

This is a minor release with mostly bug fixes and documentation enhancements.

Here are the highlights of this release:

• Improved documentation

  • Docs update for enabling Kafka on Helm Chart

  • Improved architecture diagrams

  • Getting started guide improvements

• Bug fixes on Spring Cloud Data Flow, Spring Cloud Data Flow UI, and Spring Cloud Deployer implementations

Stay in touch…​

As always, we welcome feedback and contributions, so please reach out to us on Stackoverflow or GitHub or via Gitter…

On behalf of the team and everyone that contributed, I am pleased to announce that the first milestone of Spring Framework 5.2 has been released and is available from our milestone repository. This release closes over 140 issues and pull requests.

This first milestone is packed with features and fixes, including:

• Many core container improvements, from parsing annotation data with the new MergedAnnotations API to @Configuration class optimizations
• Support for Kotlin coroutines
• New WebMvc.fn programming model in the spring-webmvc module providing a functional alternative to annotated controllers that's built on the Servlet API. Now spring-webmvc like spring-webflux offers both functional and annotation-based programming models.
• Performance improvements in Spring MVC and Spring WebFlux to reduce overhead in request mapping, media type parsing, CORS checks, and more
• RSocket support including response handling via annotated @MessageMapping methods and performing requests via RSocketRequester…

On behalf of Spring Integration team I am pleased to announce that the 1.1.0.RELEASE for the Spring Integration Extension for SMB is available.

It can be downloaded from Maven Central, JCenter, and our release repository:

compile "org.springframework.integration:spring-integration-smb:1.1.0.RELEASE"

I would like to thank Gregory Bragg for awesome contribution to this project in regards to update it to the latest client library version to support SMB v2 & 3!

You can learn more about this extension on its GitHub page.

Any feedback, feature ideas, critics, bug reports and questions are welcome…

Hi Spring fans! Welcome to another wild-and-wacky week of This Week in Spring! I'm in Johannesburg, South Africa where I both spoke at the SpringOne Tour South Africa event and at the Johannesburg Java User Group. Had tons of fun on safari visiting (from the safety of a good deal of distance and an SUV) the utterly astonishing and beautiful - majestic - wildlife here. I can't stress that last part enough. The animals here are so, so, SO breathtaking. I got as close as I ever want to get to an elephant that was like a small house with eyes. Utterly massive! It towered over buses. When you go…

Hi Spring fans! In this week's episode Josh talks to Microsoft's Kylie Liang and Theresa Nguyen about the Microsoft Java and Spring integrations, the Java ecosystem, open-source, and more.

• Kylie (right) on Twitter (@liangkylie)
• Theresa (left) on Twitter (@RockClimberT)
• Josh on Twitter (@starbuxman)
• The "Spring Tips" screencast introducing the Spring and Microsoft Azure integration

We have released Spring Security 4.2.12, 5.0.12, and 5.1.5 to address CVE-2019-3795: Insecure Randomness with SecureRandomFactoryBean. Users are encouraged to update immediately.

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Boot 2.1.4 has been released and is now available from repo.spring.io and Maven Central.

This is a maintenance release that includes a number of important dependency updates and bug fixes.

Since 1.5 will be end of life in august, all users should now be considering an upgrading to Spring Boot 2.1.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

I am pleased to announce that Spring IO Platform Brussels-SR17 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.13
• Spring Boot 1.5.20
• Spring Cloud Connectors 1.2.8
• Spring Data Ingalls SR20
• Spring Framework 4.3.23
• Spring Integration 4.3.20
• Spring Retry 1.2.4
• Spring Security 4.2.12
• Spring Security JWT 1.0.10
• Spring Security OAuth 2.0.17
• Spring Web Services 2.4.5

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | …