Greetings Spring & Apache Geode/Pivotal GemFire community.

It is my pleasure to announce the release of Spring Session for Apache Geode & Pivotal GemFire 2.0.3.RELEASE. This release aligns with Spring Session core 2.0.3.RELEASE and Spring Data Kay-SR7.

Of course, Spring Session core 2.0.4.RELEASE and Spring Data Kay-SR8 are already available and you can expect another release of Spring Session for Apache Geode/Pivotal GemFire in early July. This is an intermediate release with:

• Upgrades to Gradle 4.8, using Spring Build Conventions Gradle Plugin 0.0.16.RELEASE.

• Updated dependencies (as noted above).

• Switched dependency management to Spring Boot’s Dependency BOM, based on Spring Boot 2.0.2.RELEASE to better align with the Spring ecosystem of projects and 3rd party dependencies.

…

Hi Spring fans! Welcome to another wonderful and wild This Week in Spring! This week I'm in Amsterdam, NL (visiting customers); London, UK (for both the London Java Community Java User Group talk and the SpringOne Tour event); Paris, FR (for the first JHipster Conf); Krakow, PL (for Devoxx Poland) and then it's off to Sao Paolo, BR (for the Spring Connect show). If you're in any of those places, say hi!

• Spring Cloud Finchley.RELEASE is available. This is the big one! It's finally here! The final piece of the reactive puzzle. This release culminates an almost year long journey from Spring…

The new Spring Cloud Finchley GA release is jam-packed with good stuff and represents a major milestone in the journey to reactive microservices. I couldn't possibly list everything so I refer you to the fresh-from-the-oven release announcement by Spencer Gibb. Instead, in this post, I want to focus on the road we have taken to reactive Spring Cloud.

We released Spring Framework 5 in September 2017. This was the first release to introduce new Reactive programming support to help build more robust, scalable services. It builds upon the Pivotal Reactor project, our reactive streams compatible reactive runtime. Spring Framework 5 also includes a ton of new features, and I won't try to list them all, either, choosing instead to focus on reactive support here. What is reactive programming? Why does it matter…

Hi Spring fans! We're at the end of another season of Spring Tips. I'll be back in a few months with even more Spring Tips, and we'll continue our journey through aspects of the ecosystem large and small. This season, as with all seasons, has been fun for me to put together. It is a mix of brand new stuff and older stuff that we get to review in a new light. As always, I do these for you and am always eager to hear about what regions of Springdom you'd like illuminated.

Anyway, here's a recap of the things we've looked at in previous installments from seasons 1-4. Enjoy!

Season 1

• Functional Reactive Endpoints with Spring Framework 5.0
• Spring Integration
• The Kotlin Programming Language
• Circuit Breakers
• Spring Aware Beans
• Spring Cloud Stream
• Spring Cloud Data Flow
• Cloud Foundry
• JTA
• Bootiful Dashboards
• Demystifying Bootiful Magic
…

On behalf of the community, I am pleased to announce that the General Availability (RELEASE) of the Spring Cloud Finchley Release Train is available today. The release can be found in Maven Central. You can check out the Finchley release notes for more information.

Lifecycle Announcements for Release Train Versions

The Camden release train has reached end-of-life status. The Dalston release train will reach end-of-life status in December 2018. The Edgware release train will follow the end-of-life cycle of the Spring Boot 1.5.x line.

Notable Changes in the Finchley Release Train

Spring Cloud…

I am pleased to announce that Spring IO Platform Brussels-SR11 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.8
• Spring Boot 1.5.14
• Spring Cloud Connectors 1.2.6
• Spring Data Ingalls SR13
• Spring Framework 4.3.18
• Spring Integration 4.3.17
• Spring Security 4.2.7
• Spring Session 1.3.3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

I am pleased to announce that Spring IO Platform Cairo-SR2 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 2.0.4
• Spring Boot 2.0.3
• Spring Cloud Connectors 2.0.2
• Spring Data Kay SR8
• Spring Framework 5.0.7
• Spring Integration 5.0.6
• Spring Kafka 2.1.7
• Spring Security OAuth2 2.2.2
• Spring Security 5.0.6
• Spring Session Apple SR3

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

The following CVEs have been published today:

• CVE-2018-11039: Cross Site Tracing (XST) with Spring Framework
• CVE-2018-11040: JSONP enabled by default in MappingJackson2JsonView

Fixes for those vulnerabilities have been released with Spring Framework 5.0.7 & 4.3.18, Spring Boot 1.5.14 and Spring Boot 2.0.3.

Please, review the information in the CVE reports and upgrade immediately.

On behalf of the Reactor team, I have the pleasure of announcing a first shipment of Reactor goodness this week: Reactor Bismuth-SR10 is out ?

Stay tuned for a Reactor Californium milestone later this week ??‍♂️

Reactor Bismuth-SR10

The latest maintenance BOM of the 3.1.x line, Bismuth-SR10, is out. It includes two new artifacts (click on the version numbers to see the release notes on GitHub):

• reactor-core 3.1.8.RELEASE
• reactor-netty 0.7.8.RELEASE

One update considerations though: Flux.last() used to skip throwing a NoSuchElementException on some category of empty sources (Flux or Mono that are Callable, like Flux.empty()). This is a bug…