I’m pleased to announce the nohttp project, which lets users find, replace, and prevent the usage of http://.

Background

Today, Jonathan Leitschuh published a blog titled Want to take over the Java ecosystem? All you need is a MITM!. The blog demonstrates that hundreds of Java libraries are downloading dependencies over HTTP. This opens the projects up to potential MITM (man in the middle) attacks.

Unfortunately, there were multiple Spring projects that were using HTTP to download dependencies. Fortunately, we uncovered no signs of a successful MITM attack. We have also addressed the issue to…

Hi Spring fans! Can you believe it? We're already almost halfway through June! Summer's nearly here! It's 97 Fahrenheit / 37 Celsius in San Francisco! That's nuts! I'm glad I'm in beautiful Amsterdam and Eindhoven, NL, beating the heat, though. What a privilege. We've got a busy week, as always, to get to so let's get to it!

• The Spring team has undertaken a massive effort to eliminate insecure HTTP URLs in favor of HTTPS. Learn how we did it (and you could too) in this blog Announcing nohttp
• A Bootiful Podcast: Spring Cloud lead Spencer Gibb on Microservices, Brazil, and more
• Hi Spring fans! In last week's installment of Spring Tips: Organizational Consistency in your Spring Boot Applications I introduced things you can do to achieve consistency in your applications including auto-configuration, building starter-dependencies, the Spring JavaFormat Maven plugin and more.
• …

Hi Spring fans! In this installment Josh Long interviews Spring Cloud lead Spencer Gibb about open-source, Brazil, microservices, Spring, his journey to the Spring team, and more.

Spencer on Twitter: @SpencerBGibb

Hi Spring fans! In this installment we look at things you might do to achieve organizational consistency in your Spring Boot applications and services.

speaker: Josh Long (@starbuxman)

Hi Spring fans! Welcome to another installment of This Week in Spring! This week I'm in.... I'm home! Look at that! I'm home for the epic SpringOne Tour San Francisco event. I'm super excited to be here in this amazing weather with an amazing community. It's been a busy week though! Last week I returned from Spain for my kid's graduation, and I am still so so proud. Tomorrow I fly to Cork, Ireland for the Cork JUG and then it's off to London for a wedding. So, lot of travel, but a bit of a lighter load :-)

We've got a lot to cover so let's get to it!

• Introducing the Pivotal Spring Runtime, offering comprehensive support for OpenJDK, Spring, and Apache Tomcat
• Java CFEnv 1.1.0.M1 Released
• In last week's A Bootiful Podcast I talked to Verónica Lopez on Go, Kubernetes, Physics, the Cloud, and More
• Introducing Spring Cloud App Broker
• CVE-2019-11269: Spring Security OAuth 2.3.6, 2.2.5, 2.1.5, 2.0.18 Released
• Webinar: Boosting Microservice Performance with Kafka, RabbitMQ, and Spring
• Spring Cloud Edgware.SR6 Released
• Spring Tips: Debugging Reactor Applications
• Spring Cloud Open Service Broker 3.0.1 Released
• …

Hi Spring fans! In this episode I talk to Go-lang and Kubernetes-legend Verónica Lopez about community, physics, distributed systems and more.

Verónica on Twitter @maria_fibonacci

We recently announced the general availability of Spring Cloud Services 3.0, which involved a major redesign of the previous architecture used in that project. As detailed in the related blog post, Spring Cloud Services has moved to the latest versions of Spring Framework and Spring Boot, and is now built on a Reactive programming model and Spring WebFlux. Two key components of this redesign are offered as open source Spring Cloud projects.

The first project is Spring Cloud Open Service Broker. This project has been available for some time; however, the recent 3.0.0 release has itself been…

Hi Spring fans! In this video we look at how to debug Reactor Applications. There are a lot of obvious ways, using the debugger and so on, but in this video we look at ways that Reactor and Reactor-ecosystem tools can help you out.

speaker: Josh Long @starbuxman

Hi Spring fans! What a week it's been since we last spoke! I was in Zurich, Switzerland; then Paris, France; then Minsk, Belarus; and now I'm in Barcelona, Spain for the epic JBCN show. I've recorded a few episodes for the podcast (✅), gave a talk (✅) and now have a workshop to deliver on Wednesday (✅). Fun week by the beach! Don't worry about me, I'll pull through..

Spring en la primavera

....And I'm not going anywhere until Thursday when I'll fly home to San Francisco, USA to see our kid graduate middle school! I'm so proud of her. What a legend.

Anywho, lot's to cover this week, so let's get to it!

• In last week's A Bootiful Podcast I talked to Twitter's Chris Thalinger on Java, Graal, JVMs, JITs, and more
• Spring Tools 4.2.2 released
• Hi Spring fans! In last week's Spring Tips I introduced the new support for transaction management in Reactive APIs, check it out: Spring Tips: Reactive Transactions
• Spring Cloud Data Flow 2.1 GA Released
• Here's why companies like Google, Square, and Atlassian are sprinting to use Kotlin, the fastest-growing programming language according to GitHub - Businessinsider India on Mobile
• Want to learn more about stream processing? Check out this talk that Tim Berglund and I did at the Kafka Summit NYC 2019 on stream processing with Spring Cloud Stream and Kafka Streams: …