Hi, Spring fans! In this installment, we'll look at the fantastic Vaadin Flow library, which has recently been updated for Spring Boot 3, and how it can help you be happier.

the code is available, as usual, here

this episode features special guest Marcus Hellberg, VP developer relations from Vaadin, and my colleague Tiffany Jernigan

NO DEVELOPER ADVOCATES WERE HARMED IN THE MAKING OF THIS VIDEO

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Framework 6.0.7 and 5.3.26 versions are available now.

Spring Framework 6.0.7 ships with 28 fixes and documentation improvements, including 2 fixes for regressions. Spring Framework 5.3.26 ships with 40 fixes and documentation improvements.

Those versions fix the following CVEs:

• cve-2023-20860: Security Bypass With Un-Prefixed Double Wildcard Pattern
• cve-2023-20861: Spring Expression DoS Vulnerability

Those versions will be shipped with Spring Boot 3.0.5 and 2.7.10, to be released Thursday. In…

On behalf of the team, I am pleased to announce that Spring Framework 5.2.23.RELEASE is available now. This release has been requested by Spring Framework commercial support customers and is available on Maven Central.

Spring Framework 5.2.23.RELEASE ships with 3 fixes, including a fix for the following CVE:

• cve-2023-20861: Spring Expression DoS Vulnerability.
• 5.2.22.RELEASE was not vulnerable to cve-2023-20860, so no fix was required.

This version will not be shipped with a Spring Boot release as 2.3.x is out of commercial support. You can manually upgrade Spring Framework in your Spring Boot Maven or Gradle builds. Upgrading to a supported Spring Boot version is…

On behalf of the team, I’m pleased to announce the availability of the 3rd Milestone of the Spring Data 2023.0 release train as well as service releaes 2022.0.4 & 2021.2.10. These releases ship with improvements, including fixes for regressions.

The upcoming Spring Boot 3.0.5 and 2.7.10 releases are going to pick up the service releases for your convenience.

New features included in 2023.0.0 Milestone 3 are amongst others:

• A new scroll API to support offset and key based pagination
• Improvements in JPA query parsing for HQL and JPQL
• Support for MongoDB's explicit field level encryption
• Aggregate reference request parameters in Data REST
…

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Vault 3.0.2 and 2.3.3 versions are available now.

Spring Vault 3.0.2 ships with 7 fixes and documentation improvements Spring Vault 2.3.3 ships with 13 fixes and selected improvements.

Those versions fix the following CVE:

CVE-2023-20859: Insertion of Sensitive Information into Log Sourced from Failed Revocation of Tokens

Those versions will be shipped with Spring Cloud in the next days. Until then, please override the dependency version in your project.

For Gradle builds in build.gradle:

…

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! In this installment, Josh Long (@starbuxman) talks to Spring Batch lead Mahmoud Ben Hassine (@FMBENHASSINE) about the latest and greatest in Spring Batch.

notes

• Submit your talk to SpringOne@Explore, being held August 21-24, 2023, in lovely Las Vegas, Nevada!
• I wrote an e-book looking at how to do AOT processing with Spring Boot 3 and GraalVM. It's free - and a fairly quick read - so get it while you can!
• I streamed this interview with Mahmoud live on my channel - you can watch it there, too, if you prefer
• I wrote a blog looking at some of the amazing Kotlin DSLs in the wide and wonderful world of Spring
• I did a video introducing Spring Boot 3 over on the Jetbrains IntelliJ IDEA Youtube channel
…

Kotlin is a beautiful language that makes it trivial to take old Java libraries and make them much more concise, just by virtue of the Kotlin syntax itself. It shines, however, when you write DSLs.

Here's some inside baseball for you: the Spring teams do their level-headed best to be cohesive, to align on core themes, and to make Spring better than the sum of its parts. You see this in every major release: XML namespaces in Spring Framework 2.0. Java Config in 3.0. Conditionals and autoconfiguration when Spring Boot 1.0 first shipped alongside Spring Framework 4.0. Reactive programming with…

Dear Spring Community,

I am happy to announce the 4.18.0 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

updates to the Spring Tools 4 for Eclipse distribution

• updated to Eclipse 2023-03 release (new and noteworthy)

important highlights

• (Spring Boot): new and vastly improved content-assist for Spring Data repository query methods (thanks to contributions from @danthe1st)
• (Spring Boot): the additional reconciling of Spring Boot projects to show Spring specific validations, outdated versions and more, now reports progress, runs faster, and uses less memory - please consider using this and tell us about your experiences and if you hit issues while having this feature enabled
• (VSCode): fixed an extremely annoying issue that caused regular Java content-assist in VSCode to stop working after a short while
• (Eclipse): a bug in m2e got fixed and is included in this release, which caused resource files (e.g. application.properties) to not be copied into the target folder anymore. This works again and automatically copies your changed application.properties…

Hi, Spring fans! Happy Pi (π) day! And, welcome to another installment of This Week in Spring! It's pouring cats and dogs here in San Francisco! The news is talking about atmospheric rivers; I don't know what that means but I don't know that I want to find out. Anyway, all that to say: I'm glad as always for an opportunity to stay indoors and learn. We've got a lot to review this week so let's dive right into it!

• I did a video for our friends at Jetbrains on the IntelliJ IDEA Youtube channel and people seem to like it. Perhaps you will too? Bootiful Spring Boot 3 - YouTube In it, I look at just some of the amazing new features in Spring Boot 3.
• The SpringOne@Explore Calls for Paper is Open!
• A Bootiful Podcast: Google Cloud Java Advocate Aaron Wanjala
• API First Development with Spring Boot and OpenAPI 3.0
• Announcing Spring Cloud GCP 4.0 | Google Cloud Blog
• Build a CRUD Rest API in Java using Spring boot, Hibernate, Postgres, Docker and Docker Compose
• Did you know Java now has records? And that records are amazingly flexible? …