chore(deps): update all non-major dependencies (!51) · Merge requests · Matthias Benkard / MulkCMS 2

Renovate Bot requested to merge renovate/all-minor-patch into master Jan 09, 2024

This MR contains the following updates:

Package	Type	Update	Change
flow-bin (changelog)	devDependencies	minor	`^0.225.0` -> `^0.233.0`
org.postgresql:postgresql (source)	build	patch	`42.7.1` -> `42.7.3`
org.liquibase.ext:liquibase-hibernate5 (source)	build	minor	`4.25.1` -> `4.27.0`
org.liquibase:liquibase-maven-plugin (source)	build	minor	`4.25.1` -> `4.27.0`
io.hypersistence:hypersistence-utils-hibernate-62	compile	patch	`3.7.0` -> `3.7.3`
org.hibernate.orm:hibernate-envers (source)	build	patch	`6.4.1.Final` -> `6.4.4.Final`
org.hibernate.orm:hibernate-core (source)	build	patch	`6.4.1.Final` -> `6.4.4.Final`
com.blazebit:blaze-persistence-bom (source)	import	patch	`1.6.10` -> `1.6.11`
com.diffplug.spotless:spotless-maven-plugin	build	minor	`2.41.1` -> `2.43.0`
io.quarkus:quarkus-maven-plugin	build	minor	`3.6.4` -> `3.9.2`
io.quarkus:quarkus-universe-bom	import	minor	`3.6.4` -> `3.9.2`
org.apache.maven.plugins:maven-compiler-plugin	build	minor	`3.12.1` -> `3.13.0`

Release Notes

flowtype/flow-bin

pgjdbc/pgjdbc

`v42.7.3`

Changed

chore: gradle config enforces 17+ MR #3147

Fixed

fix: boolean types not handled in SimpleQuery mode MR #3146
- make sure we handle boolean types in simple query mode
- support uuid as well
- handle all well known types in text mode and change else if to switch
fix: released new versions of 42.2.29, 42.3.10, 42.4.5, 42.5.6, 42.6.2 to deal with NoSuchMethodError on ByteBuffer#position when running on Java 8

`v42.7.2`

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

Changed

fix: Use simple query for isValid. Using Extended query sends two messages checkConnectionQuery was never ever set or used, removed MR #3101
perf: Avoid autoboxing bind indexes by @bokken in MR #1244
refactor: Document that encodePassword will zero out the password array, and remove driver's default encodePassword by @vlsi in MR #3084

Added

feat: Add PasswordUtil for encrypting passwords client side MR #3082

liquibase/liquibase

`v4.27.0`

Compare Source

Liquibase 4.27.0 contains several New Capabilities and Notable Enhancements for Liquibase Pro users: DATABASECHANGELOGHISTORY table, Quality Checks Chains, Rollback Reports See the Liquibase 4.27.0 Release Notes for the complete set of release information.

`v4.26.0`

Compare Source

[!IMPORTANT] Liquibase 4.26.0 contains several Notable Changes for Liquibase Pro users: Advanced IF conditionals, Simpler Regex-based pattern checks, and Checks Run Reports.

[!NOTE] See the Liquibase 4.26.0 Release Notes for the complete set of release information.

vladmihalcea/hypersistence-utils

`v3.7.3`

================================================================================

"java.lang.ClassCastException: class [Ljava.lang.String; cannot be cast to class [B" thrown when using multiLoad with Hibernate 6.4 #700

`v3.7.2`

================================================================================

Expecting BasicPluralJavaType for array class [Ljava.util.UUID;, but got `com.vladmihalcea.hibernate.type.array.internal.UUIDArrayTypeDescriptor error with Hibernate 6.4 #698

`v3.7.1`

================================================================================

Add support for Hibernate 6.4 #685

Remove hypersistence-utils-hibernate-5 module #693

hibernate/hibernate-orm

`v6.4.4.Final`

Compare Source

`v6.4.3.Final`

Compare Source

`v6.4.2.Final`

Compare Source

Blazebit/blaze-persistence

`v1.6.11`

Compare Source

10/01/2024 - Release tag Resolved issues

New features

Special case mappings with limit of 1 to use = instead of IN predicate
Added support for extended GraphlQL types, for example support DateTime (please read Backwards-incompatible changes below )

Bug fixes

Fix over-fetching of entity view data with dynamic fetches
Fix Spring 6.1 compatibility
Fix Hibernate 6.4.0.Final compatibility
Disallow repository sorting by anything other than entity or entity view attribute paths

Backwards-incompatible changes

If you use the GraphQL integration and you are loading the graphql-java-extended-scalars, you might need to migrate your LocalDataTime EntityViews to OffsetDateTime. Dates will no longer be represented as String in the GraphQl-Schema, but as DateTime.

diffplug/spotless

`v2.43.0`

Added

Support custom rule sets for Ktlint. (#1896)

Fixed

Fix Eclipse JDT on some settings files. (#1864 fixes #1638)

Changes

Bump default ktlint version to latest 1.0.0 -> 1.0.1. (#1855)
Add a Step to remove semicolons from Groovy files. (#1881)

`v2.42.0`

Added

Support for biome. The Rome project was renamed to Biome. The configuration is still the same, but you should switch to the new biome tag / function and adjust the version accordingly. (#1804).
Support for google-java-format's skip-javadoc-formatting option. (#1793)
Support configuration of mirrors for P2 repositories in Maven DSL (#1697).
New line endings mode GIT_ATTRIBUTES_FAST_ALLSAME. (#1838)

Fixed

Fix support for plugins when using Prettier version 3.0.0 and newer. (#1802)
Fix configuration cache issue around external process started '/usr/bin/git --version'. (#1806)

Changes

Bump default flexmark version to latest 0.64.0 -> 0.64.8. (#1801)
Bump default ktlint version to latest 0.50.0 -> 1.0.0. (#1808)

quarkusio/quarkus

`v3.9.2`

Compare Source

Complete changelog

#38964 - Add smallrye metrics capability
#39668 - Recompute cache when the redis connection pool is exhausted
#39705 - WebSockets Next: error handlers part 1
#39717 - OIDC code flow access token verification is enforced even if the application code does not use it as JWT
#39718 - Enforce OIDC code flow access token verification only if JWT is in the application code
#39725 - Setting the correct CodeFlowVerifyAccessTokenDisabledTest test class name
#39742 - Fix a remaining reference to quarkus.resteasy-reactive. prefix
#39746 - ScheduledExecutorService: cannot remove future task from the scheduler
#39763 - WebSockets Next: error handlers part 2
#39766 - Properly handle array class types to be looked up
#39770 - Improve the multipart encoded mode handling in the rest client
#39776 - Cannot build native image after 3.9.1 upgrade - missing configuration properties but they exist
#39777 - Bean Param init issue - java.lang.NoClassDefFoundError: io/quarkus/generated/intquarkusrestparamConverter
#39790 - Add quarkus-credentials-deployment where it's missing
#39794 - Bump org.jboss.threads:jboss-threads from 3.6.0.Final to 3.6.1.Final
#39797 - Docs: fix typo in OIDC tenant resolution by configuration
#39798 - Update documentation for QUARKUS AND GRADLE - Development mode: quarkusDev#workingDir has been deprecated
#39804 - Always record profiles
#39823 - Ensure ParameterConverter is loaded from the TCCL
#39829 - Use quarkusDev#workingDirectory
#39835 - Bump maven-model-helper to 36

`v3.9.1`

Compare Source

Complete changelog

#25682 - Dev Services for Postgresql not working with Rancher
#36736 - Manage Jose4j dependency in the bom
#36737 - Add OpenAPI Filter usage to documentation
#39088 - Solve POM formatting issues when creating project/adding extension/removing extension
#39224 - WebSockets Next: support method parameter injection
#39313 - prod-profile configuration pollutes test profile in integration tests
#39371 - Avoid resolving plugin command after the first option
#39382 - Preserve POM format when extensions are added/removed
#39385 - smallrye-health should hande the case when Vert.x current context is null
#39388 - Hibernate runtime property persisting after build
#39394 - Handle null Vert.x context in smallrye-health
#39426 - Do not record active profile configuration name if a profile one exists
#39443 - Use Quarkus wide version of jna-platform in azure-functions
#39496 - Gradle build cache prevents source packages to be installed to local Maven repository
#39513 - @SecureField in members of the response class isn't applied
#39528 - (Doc issue) Getting token using blocking or non blocking calls
#39544 - OidcClient: Getting exception when trying to use tokenHelper
#39546 - Make maxParameters of MultiPartUploadHandler configurable
#39549 - Make max parameters of multipart handling configurable
#39564 - Fix Quarkus REST Jackson @SecureField detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays
#39572 - Remove mvnpm and webjars from the 404 page
#39574 - Add a section about openapi filters in the doc
#39576 - Fix semconv-stability.opt-in property name
#39578 - Update quarkus-project-develocity-extension to 1.0.7
#39579 - Don't run CDI interceptors on class-level exception mappers
#39580 - Fix directory name in vertx.adoc
#39581 - The http metrics provide a path instead of REDIRECTION and NOT_FOUND when possible
#39583 - Keep the URIs in the metrics tag if they match a client or server pattern
#39586 - RestMulti is not sending headers if there is no content
#39587 - Properly use headers from RestMulti when the multi is empty
#39589 - Only Add OTel Security Events when span is recording
#39594 - Redis: add documentation for replicas usage
#39595 - Update one of OIDC certificate chain tests to use TenantConfigResolver
#39598 - ClassNotFoundException for beanparam class with generics in external artifact
#39599 - JsonObject is empty when used with resteasy-reactive
#39604 - Do not record local sources in runtime config defaults.
#39615 - Allow JsonObject and JsonArray to be used in any POJO for JSON handling
#39623 - Type not consistent in sample code
#39626 - Update parameter type to be consistent across the doc
#39628 - Bump smallrye-jwt.version from 4.4.0 to 4.5.0
#39630 - Bump smallrye-reactive-messaging.version from 4.18.0 to 4.19.0
#39638 - Avoid all caching in DevModeClient
#39642 - WebSocket Next: endpoint callback arguments injection
#39645 - Improve the OIDC Client Quickstart document
#39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
#39656 - Bump maven-model-helper to 35
#39661 - Fix property name in OIDC docs
#39679 - Bump mime4j version to 0.8.11
#39682 - Fix postgres datasource devservice not working with rancher-desktop on mac arm
#39691 - Fix dev-mode issue with generated classes for Quarkus REST converters
#39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
#39702 - Bring back erroneously removed @BuildStep
#39706 - Use --no-daemon when calling gradle update

`v3.9.0`

Compare Source

Complete changelog

#25101 - [CI] - quarkus-devtools-compat + Quarkus main
#27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
#39144 - WebSockets Next: documentation
#39315 - @ConfigMapping handling of Maps is not compatible with old config classes
#39344 - Avro schemas aren't generated in isolation
#39345 - Isolate Avro schema code generation when using multiple schema files
#39363 - Initial version of the WebSocket Next documentation
#39413 - Refresh documentation (and some tests) of the Hibernate Search + ORM extension
#39427 - Enforce authorization code flow access token verification if JsonWebToken is injected
#39428 - Enforce OIDC UserInfo acquisition if UserInfo is injected
#39441 - RESTEasy Reactive dependency added to deployment classpath of nearly all Quarkus apps
#39445 - Remove Quarkus REST deployment dependency from Vertx HTTP deployment
#39447 - Save concat indy allocations on JarResource::getResourceURL
#39454 - Bump org.jboss.threads:jboss-threads from 3.5.1.Final to 3.6.0.Final
#39458 - Enforce OIDC UserInfo acquisition and authorization code flow access token verification if UserInfo and JsonWebToken beans are injected
#39467 - Fix codestarts compatibility with older CLI
#39468 - ChainBuildException - Cycle detected after #39352 MR
#39470 - Remove the old MetricBuildItem SPI
#39471 - Update to Vert.x 4.5.5
#39472 - Update SmallRye Config to 3.7.0
#39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
#39476 - Fix the broken link to the OIDC client reference doc
#39477 - Adjust toggle names in OTel InstrumentBuildTimeConfig
#39479 - 3.9.0.CR2: NoClassDefFoundError: io/quarkus/security/spi/runtime/SecurityEvent
#39480 - Fix security spi dependency on OTel
#39487 - Allow occasional pin events in ShouldNotPin
#39491 - Ignore the split access and refresh token cookies for resolving the tenant
#39519 - OpenTelemetry - respect proxy settings in VertxGrpcExporter and VertxHttpExporter
#39522 - Fix typos in rest doc
#39530 - Update profile section in building-native-image.adoc
#39531 - Use SmallRye Commons Inet
#39533 - Class loader leak in configuration
#39536 - Bump org.postgresql:postgresql from 42.7.2 to 42.7.3
#39541 - Update SmallRye Config to 3.7.1
#39543 - Enable proxy configuration for OpenTelemetry exporters
#39562 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.7.0 to 3.7.1 in /devtools/gradle

`v3.8.3`

Compare Source

Complete changelog

#25453 - Mutiny is not compatible with quarkus opentelemetry
#31497 - Enabled micrometer.binder.http-server should also capture parameterized sub-resources
#39047 - Reactive pg datasource with enabled health check opens more connections than configured
#39145 - Hibernate schema validation is flaky and fails due missing tables (while the tables are present)
#39162 - Add mapping to a Map<String, ConfigObject> in the documentation
#39178 - Update grpc-service-implementation.adoc
#39192 - Make HTTP templates for observability work with subresources
#39197 - Qute is not adding the right NativeImageResourceBuildItem when using a custom template root
#39204 - Update partial extension names to include full extension names
#39216 - Unwrap processing exception from REST Client when returning a Uni
#39223 - Fix WithSpan uni and multi
#39225 - Upgrade to Mutiny 2.5.8
#39242 - e quarkus-azure-functions-http generationg function.json with missing method.
#39245 - dev-ui shows wrong property for rest-client
#39251 - Make mutiny version of pool use the already configured vertx pool
#39252 - Explicitly set all HTTP methods for Azure Functions
#39255 - Fix config key for dev-ui
#39257 - Quarkus 3.8.1: Use GraalVM sdk 23.1.2 over 23.0.1
#39260 - Bump GraalVM SDK version to 23.1.2
#39265 - Properly support sending InputStream in REST Client
#39266 - ./mvnw --file $(pwd)/./pom.xml broken since quarkus 3.7.1
#39270 - Update the title of dev-ui.adoc
#39271 - Update the title of dev-ui.adoc and fix minor typos
#39294 - Qute: add correct NativeImageResourceBuildItem for custom template root
#39309 - Normalize POM path
#39310 - Wrong reference on list of injected beans
#39311 - Be more consistent with extension names in datasource.adoc
#39316 - Empty container-group not allowed in Quarkus 3.8.2
#39319 - org.graalvm.js:js was renamed to org.graalvm.polyglot:js-community
#39337 - Fix rest-client-mutiny mention in the docs
#39350 - Exception when building application with a lot of dependencies, String too large to record error
#39352 - Make Hibernate / Micrometer integration run after schema creation
#39353 - Allow config empty values in the Gradle worker
#39354 - Add note about pre-matching filters execution model
#39368 - Submodule on second level fails to find itself in dev mode
#39372 - Replace org.graalvm.sdk:graal-sdk dependency with org.graalvm.sdk:nativeimage
#39379 - Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1
#39383 - Typo at OIDC Client Mutual TLS config properties
#39386 - Update to Brotli4J 1.16.0
#39402 - ArC: fix creation of synthetic beans
#39411 - Fix typo in Building my first extension
#39418 - Use the value of project/default-codestart from the platform descriptor as the default codestart instead of a hardcoded value
#39430 - Fix misleading error message when REST Client interface has been indexed
#39434 - Qute: fix the NoRestartTemplatesDevModeTest on Windows
#39437 - Make sure the current project location isn't overridden by other modules with the same groupId and artifactId
#39440 - graal-sdk in 23.1.x brings in org.graalvm.polyglot which causes a couple of issues (wrap up)
#39442 - Exclude org.graalvm.polyglot:polyglot from graal-sdk

`v3.8.2`

Compare Source

Complete changelog

#19849 - Reactive rest client invoke MessageBodyReader.isReadable with null value of annotations parameter
#27999 - quarkus.datasource."datasource-name".jdbc.min-size not honored if max-lifetime is set
#35993 - Event-loop thread blocked when connecting to an unavailable OIDC server
#37984 - Custom SecretsKeyHandler not found after update to 3.6.4
#38007 - Failure to resolve encrypted configuration properties with the Gradle plugin
#38392 - Application.properties string substitution does not work when using gradle variables
#38424 - application-test.yml is not utilized during tests executed during gradle build
#38435 - Fix CLI not recognizing installed plugins
#38900 - Bump Smallrye Reactive Messaging from 4.16.2 to 4.17.0
#38971 - Clarify that quarkus.profile cannot be set from a profile aware file
#38988 - Do not expand configuration for Gradle cache
#38989 - cert chain public key resolver thumbprints
#39001 - Update to Vert.x 4.5.4 and Netty 4.1.107
#39021 - Upgrade to testcontainers 1.19.6
#39023 - Remove selector field from generated Job manifest in docs
#39041 - JAX-RS seeOther does not work with IPv6
#39046 - Make sure Response and RestResponse work properly with IPv6 addresses
#39057 - Skip analysis of plugin executions with phases post quarkus:dev preparing for dev mode launch
#39059 - Exception in blocking graphql query is wrapped
#39063 - Fix the OIDC token verification failure with the inlined cert chain
#39067 - Updates to Infinispan 14.0.25.Final
#39068 - Optionally run DNS lookup for OIDC server requests on worker thread
#39069 - Do not fail UPX if compression level is not given
#39070 - Doc: add Pulsar in Dev Services Overview
#39072 - Update to Agroal 2.3
#39078 - Unwrap actual GraphQL data fetching exception if it is wrapped
#39093 - Fix cross-references in the Vert.x Reference Guide
#39094 - Emphasize the need to add quarkus-junit5-mockito as a dependency to use mock injection
#39102 - Properly pass annotations to MessageBodyReader in REST Client
#39120 - Startup fails with Kafka Stream if topics for topics check not defined when check is disabled
#39121 - Do not fail on resolve kafka streams topics when topics check disabled
#39122 - Use bcrypt password mapper in elytron-security-jdbc docs
#39123 - Quarkus Dev Services passes wrong volume path to Docker on Windows
#39130 - When building images with jib the fast-jar-lib layer is always changed
#39136 - Fix wrong volume host path being used on Windows
#39147 - Keep the timestamps when copying jars and building JIB layers
#39160 - Fail on conflicting deployment kinds
#39168 - Remove misleading note from jacoco.enabled
#39169 - Unable to produce multiple synthetic beans of same type having different identifiers
#39179 - Allow setting the SettingsDecrypter when initializing a Maven artifact resolver
#39181 - ArC: fix BeanConfiguratorBase#read()
#39201 - Bump quarkus-http.version from 5.2.0.Final to 5.2.1.Final
#39203 - Fix typo in testing Getting Started guide example

`v3.8.1`

Compare Source

Complete changelog

#5314 - Subresouce init resource failed when using ResourceContext.getResource
#36427 - Keycloak admin client fail with "authHeader" is null when using classic extensions
#37065 - Azure Functions Http: missing HTTP method definitions for delete and patch
#37779 - No healthcheck for default Agroal datasource if quarkus.datasource.db-kind is not set
#37962 - Can't specify custom quarkus.profile when running tests
#38557 - Overwriting application configuration does not work with .env File
#38798 - Using custom header in REST client together with @NotBody annotated argument results in warning from EndpointIndexer
#38880 - CronJob deployment doesn't work due to selector field
#38881 - Remove selector field if it's empty from manifest
#38891 - Reduce message log level
#38895 - Make VertxGrpcExporter more robust
#38899 - Fix Keycloak Admin Client Classic when used with the RESTEasy JSON-B and REST Client JSON-B extensions
#38901 - OidcProvider throws NPE when certificate chain is configured with OIDC server which has no JWK keys at the startup
#38909 - Bump org.postgresql:postgresql from 42.7.1 to 42.7.2
#38923 - Allow all HTTP methods in Azure functions
#38925 - Improve shutdown of VertxHttpExporter and VertxGrpcExporter
#38927 - Use supplier in order to properly have mutiny retry
#38928 - quarkus-quartz: CDIAwareJob destroys instance of Quartz Job too early when Job is a @Dependent bean
#38932 - Fix NPE when OIDC token must be verified with the chain with OIDC server returning no JWKs
#38934 - Agroal Data Source Health check failing for reactive data source
#38935 - Upgrade to Mutiny 2.5.7
#38938 - Propagate user.dir to Gradle worker
#38944 - Bump smallrye-open-api.version from 3.9.0 to 3.10.0
#38949 - Postgresql bump causing detection of instance Random/SplittableRandom
#38952 - Properly pass errors from JsonRPC backends to Dev UI
#38953 - Unwrap the actual failure from JsonRPC if it's wrapped
#38955 - Try to get more disk space
#38957 - Quartz - fix @Dependent job creation/destruction when there is a re-fire
#38958 - Runtime reinitialize org.postgresql.util.PasswordUtil$SecureRandomHolder
#38959 - Agroal - Only generate health checks for JDBC datasources
#38978 - Bump org.mariadb.jdbc:mariadb-java-client from 3.3.2 to 3.3.3
#38979 - Propagate quarkus.test.profile to Gradle worker
#38986 - Add missing brace in property expression
#38990 - Quarkus 3.7.4 java.lang.ClassNotFoundException when running devsevices with gradle
#38995 - Take client methods into account in server endpoint indexer
#38997 - Add hint about exporter collector protocol on generic gRPC error
#38999 - Remove JetBrains @Nullable from RESTEasy Reactive code
#39006 - Bump Keycloak version to 23.0.7
#39020 - Make VertxHttpExporter more robust
#39022 - JAVA_APP_DIR should be set for container images
#39024 - Set JAVA_APP_DIR env var when necessary
#39028 - Make Sub Resources unremovable beans
#39029 - Update to Brotli 1.14.0
#39031 - Add commons-codec to Dev Services dependencies

`v3.8.0`

Compare Source

Complete changelog

#35686 - Sporadic "Failed to export spans. The request could not be executed. Full error message: Stream was closed"

`v3.7.4`

Compare Source

Complete changelog

#37608 - gRPC starter app is using legacy approach, single HTTP server should be used instead
#38236 - Adding a decorator causes bytecode error
#38504 - NPE on oidc-client when quarkus.oidc-client.grant-options.password.password not provided
#38533 - 'Unable to find a JDBC driver' for Hibernate Reactive after updating to 3.7.1
#38683 - Build time performance regression and bigger native binaries when migrating from 3.5 to 3.6 or 3.7
#38688 - Making sure deployment modules excluded in POM files aren't pulled in by the Gradle plugin
#38721 - Java 21: @VirtualThreadUnit produces very slow tests
#38763 - Enable an injection of the OIDC code flow access token verificaton material
#38767 - Fail early if OIDC client password grant is misconfigured
#38771 - Adds an implementation note about @VirtualThreadUnit limitations
#38775 - Use the right MongoDB ClientSession interface
#38776 - OidcRequestFilter with OidcEndpoint applied to all endpoints
#38777 - OIDC Code flow access token verification goes ahead even if the ID token verification has failed
#38779 - Fix OidcEndpoint annotation processing
#38784 - Fix guide URL in RESTEasy Client extension
#38785 - ArC: fix interception when some methods return void
#38798 - Using custom header in REST client together with @NotBody annotated argument results in warning from EndpointIndexer
#38800 - Don't warn about @NotBody use in @GET methods in REST Client
#38802 - Multipart form data is interpreted as a file although it's not a file
#38803 - OIDC server is erroneously shown as not available
#38810 - Expand types which are considered text in multipart handling
#38815 - Support security identity propagation in VT
#38816 - Propagate Vert.x context on all ExecutorService methods for VirtualThreadExecutor
#38817 - Mocking Singleton does not work even when using @MockitoConfig(convertScopes = true) - Bean produced from factory method
#38818 - Allow RunAndCheckMojoTestBase subclasses to override how much memory extension tests are allowed
#38819 - Add response text to the OIDC bootstrap log errors
#38821 - Configure SISU bean filtering for the bootstrap Maven resolver
#38824 - Memory leak when using FT Fallback with dependent beans
#38833 - Keycloak Admin Client Reactive error id: 9009f9b-1d58-4011-9ff2-49b87bb59ddd-1: java.lang.NullPointerException: Cannot invoke "String.startsWith(String)" because "authHeader" is null
#38836 - Fix Keycloak Admin Client Reactive Jackson reader provider priority so that the client can work when the JSONB REST client extension is present
#38837 - Quarkus create new project fails when -DnoCode is used and artifactId is not set properly
#38843 - Check the code flow access token after ID token
#38844 - Fix copy/paste typo
#38849 - Ensure that generated project GAV is always set
#38851 - Kafka integration tests fail with latest Mandrel/GraalVM 24.1-dev builds
#38853 - [3.7] Perform security checks on inherited endpoints before payload deserialization in the RESTEasy Reactive
#38855 - Make registration of OAuthBearerValidatorCallbackHandler conditional
#38858 - Testing: fix @MockitoConfig(convertScopes=true) with auto-producers
#38859 - Fix warning when launching dev mode specifying quarkus-maven-plugin GAV on the command line
#38865 - Update commons-compress version to mitigate CVE-2024-25710
#38866 - Sporadic error in custom readiness check using keycloak-admin-client: IllegalStateException: Client is closed
#38868 - Add config flag to disable jacoco
#38882 - Quartz - prevent memory leak when Job instance is a @Dependent bean
#38886 - Ignore ValidationSchema that results in registering all models
#38888 - SmallRye Health: terminate request context properly
#38889 - Kafka reactive messaging extension incompatible with Micrometer Prometheus extension for Quarkus 3.7.*
#38890 - Log resolved OIDC tenant id and how the bearer token is found
#38894 - Disable messaging observation by default for backwards compatibility
#38897 - Attempt to fix flaky DependentBeanJobTest

`v3.7.3`

Compare Source

Complete changelog

#36341 - The API method KafkaStreams#cleanUp() is not applicable when use @Produces to build the topology
#37091 - Fix VertxGrpcExporter reponse status handling
#37911 - Store since JavaDoc tag in the configuration metadata, so that Quarkiverse projects can render it in their documentation if they like
#38055 - Make annotation app.quarkus.io/vcs-uri optional in Kubernetes extension
#38079 - Make OidcTestSecurityIdentityAugmentor faster by making privateKey's generation final and static
#38196 - Use Vert.x pool with Jackson
#38477 - Add disabled workflow to deploy snapshots in Quarkiverse extensions
#38489 - OIDC authentication.extra-params not added to dev-services auth request
#38602 - QuarkusComponentTest: @TestConfigProperties not applicable to method (override multiple config properties)
#38607 - Gradle: fix IllegalStateException when resolving project deps
#38613 - RabbitMQ Health Checks cannot be disabled from 3.7+
#38615 - Updates to Infinispan 14.0.24.Final
#38619 - Pass extra authentication params in the OIDC DevUI code flow redirect URL
#38626 - Bump org.junit.jupiter:junit-jupiter from 5.10.1 to 5.10.2
#38650 - UI doesn't work correct with umlauts
#38653 - Enforce Dev UI charset to UTF-8
#38655 - Allow for multiple TestConfigProperty annotations on methods
#38656 - Upgrade the Mutiny Vert.x bindings to 3.9.0
#38658 - Configure a REST Client ClientLogger vía CDI
#38662 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.5.2 to 3.5.4 in /devtools/gradle
#38663 - ContainerRequestContext.getUriInfo().getMatchedURIs() IndexOutOfBoundsException
#38664 - Bump Smallrye RM from 4.16.0 to 4.16.1
#38670 - Make ClientLogger beans unremovable
#38671 - Redis Client: improve documentation for sentinel and cluster
#38672 - Remove WATCH Command in absence of Optimistic Locking
#38673 - Fix OidcRequestFiler typo in security docs
#38674 - Improve flaky test
#38675 - Correct example generated yaml in extension metadata docs
#38676 - OpenAPI does not fill roles in SecurityScheme in schema
#38680 - Log how Keycloak devservice maps resources
#38681 - Upgrade to Hibernate ORM 6.4.4.Final / bytebuddy 1.14.11
#38686 - Make GraphQL Metrics End when Exceptional
#38692 - Bump com.gradle:gradle-enterprise-maven-extension from 1.20 to 1.20.1
#38693 - Bump commons-codec:commons-codec from 1.16.0 to 1.16.1
#38694 - OpenAPI: remove check that avoids running auto-security at build
#38703 - RESTEasy Reactive Multipart struggles with non-file binary uploads
#38705 - Kafka Streams fire event after created and before scheduling the start
#38706 - Elasticsearch container reuse creates a new container on each run
#38709 - Don't provide empty paths when using a root prefix
#38710 - Avoid Vert.x GraphQL deprecation warning
#38712 - Bump Smallrye RM from 4.16.1 to 4.16.2
#38713 - Only configure shared network for Elasticsearch/OpenSearch containers where necessary
#38714 - Don't assume that multipart part without filename is always text
#38728 - Encode Kafka messages with UTF8
#38730 - Accept-Header in hibernate validator's ResteasyReactiveLocaleResolver is resolved case-sensitive
#38732 - Quarkus should still allow to create project with Java 11 (for older streams and other platforms)
#38733 - Allow Java 11 as LTS for older streams and other platforms
#38738 - Make accept header check in validation case insensitive
#38748 - Sanitize app.dekorate.io/vcs-url kubernetes annotation
#38755 - Log when a RestEasy Reactive client close method is called
#38756 - Bump Keycloak version to 23.0.6
#38760 - Set COMPILE_ONLY flag on relevant dependencies that appear on DEPLOYMENT_CP and RUNTIME_CP

`v3.7.2`

Compare Source

Complete changelog

#37807 - SSL requests hang when returning a CompletableFuture
#38101 - smallrye-openapi property oidc-open-id-connect-url might not be fixed at build time
#38231 - OpenAPI: Always run OpenIDConnectSecurityFilter at runtime
#38310 - Add note about the two quarkus-extension files
#38394 - quarkus-cache: "keyGenerator" destroyed, even if it is annotated with "Singleton"
#38397 - Use actions/setup-java GPG key feature
#38411 - Cache: only dependent CacheKeyGenerator beans are destroyed after use
#38422 - nested configurations in extension: sub-property is seen as nested entity.
#38431 - quarkus.oidc-token-propagation-reactive.enabled-during-authentication does not work correctly in the code flow
#38442 - Make sure the code flow access token is propagated during the authentication
#38444 - Fix request hanging condition
#38451 - Remove workaround for HHH-17683 in Panache
#38479 - Stricter and false positive env variables validation after upgrade to 3.7.0
#38483 - Add a tool to check cross references
#38488 - Update to Vert.x 4.5.2
#38495 - Add org.graalvm.regex:regex to runnerParentFirstArtifacts
#38499 - Alpn property not work in rest client reactive
#38500 - Make quarkus.rest-client.alpn work in programmatically created client
#38506 - lombok warning when building with 3.7.1
#38514 - Alpn property not work for single rest client reactive
#38516 - Add missing alpn config key handling from named config
#38521 - Panache sorting no longer works for embedded fields in Quarkus 3.7.1
#38525 - Fix typo in RedisClientConfig JavaDoc
#38527 - Revert "Escape column names with backticks in order by clause of hql query"
#38543 - LinksProcessor ID field error for native class HalCollectionWrapper
#38545 - Enhance Adding extension section in cli-tooling documentation page
#38546 - Add globbing pattern to cli-tooling.adoc
#38548 - Bump smallrye-open-api from 3.8.0 to 3.9.0
#38549 - Upgrade actions/setup-java to v4
#38550 - Upgrade checkout and java-setup actions to version v4
#38558 - Upgrade to Hibernate ORM 6.4.3.Final
#38580 - Make the Forwarded Parser syntax parsing case-insensitive
#38582 - Config property expects to have hyphen before digit
#38596 - Add missing entry in BOM for Hibernate Search outbox-polling relocation
#38597 - LinksProcessor ID field error for native class HalCollectionWrapper
#38605 - ArC: RequestContext - implement the activity check consistently
#38606 - Activating DEBUG for io.quarkus.oidc results in FORMAT_FAILURE
#38610 - Update SmallRye Config to 3.5.4
#38611 - Redis Client: add support for new configuration options
#38612 - Fix the OIDC debug message format bug
#38616 - AppCDS containerized generation runs with UID 1000 which can clash with an existing user with UID 1000 on the host
#38620 - Set quarkus-oidc-token-propagation-reactive status to stable
#38633 - Move Dev UI locking back to Quarkus BOM
#38636 - Update Vert.x to version 4.5.3
#38638 - Update activemq-artemis-broker container to 1.0.25
#38644 - Fix AppCDS generation when using podman
#38648 - More documentation adjustments for new downstream tooling
#38649 - Use [[anchor]] format consistently

`v3.7.1`

Compare Source

Complete changelog

#37532 - Warning that annotation processing is enabled when using JDK 21 in DEV mode and Java files change
#38018 - Openshift extension fails to pull images, it creates, when quarkus.container-image.group property is used
#38263 - Hibernate Reactive with Oracle after bump to 2.2.1 throws casting exception - cannot cast DeleteOrUpsertOperation to OptionalTableUpdate
#38326 - Cross-Site Request Forgery (CSRF) prevents JSON-Bodies to be deserialized
#38356 - Quartz extension issue with parameters batchTriggerAcquisitionMaxCount and batchTriggerAcquisitionFireAheadTimeWindow
#38364 - extension-maven-plugin does not support reproducible builds
#38365 - Make sure extension metadata properties are not including timestamps
#38367 - Bump Hibernate Reactive from 2.2.1.Final to 2.2.2.Final
#38372 - Use UpdateDependencyVersionOperation first to update Quarkus version
#38375 - Make it easier to get the default OIDC metadata
#38378 - JPA meta model generation fails in 3.7.0.CR1
#38396 - Update Gradle Maven extensions
#38406 - Don't assume module that has child modules is the parent of those modules
#38407 - Bump io.smallrye.reactive:mutiny from 2.5.1 to 2.5.5
#38409 - Use simpler collection creation idioms in code example
#38410 - Make sure that @WithFormRead doesn't break body handling
#38417 - Bump com.gradle.enterprise from 3.16.1 to 3.16.2 in /devtools/gradle
#38418 - Bump testcontainers.version from 1.19.3 to 1.19.4
#38420 - Timestamps in jdp files prevent reproducible extension builds
#38421 - Store ConfigItem Javadocs in jdp files without timestamps
#38427 - Fix static JPA metamodel generated for Panache classes
#38428 - Add resolve names annotation to OpenShift Deploymnets
#38429 - Replace {project-name} attribute in document title for downstream
#38430 - Avoid dots in config doc ids as it's causing issues for downstream
#38432 - Bump org.jboss.resteasy.spring:resteasy-spring-web from 3.1.0.Final to 3.1.1.Final
#38441 - Upgrade to Mutiny 2.5.6
#38445 - Wrong logging of SpringCloudConfig server URL when using labels
#38446 - Append label instead of replacing whole Spring Cloud config URI
#38459 - Fix quarkus.hibernate-search-orm.elasticsearch.version-check.enabled not appearing in docs
#38465 - RestEasy Reactive sends SameSite cookie param with wrong case
#38466 - Use proper case for SameSite cookie
#38467 - MySQL Connector 8.3
#38468 - Ignore annotation process warning when restarting dev mode
#38470 - Scheduler: fix usage of some Quartz int config properties
#38480 - Allow custom OIDC client filters to force a new token acquisition

`v3.7.0`

Compare Source

Complete changelog

#28326 - Add RoutingContext to SecurityIdentity for mTLS authentication
#35099 - Use a non-blocking handler for SmallRye Health Status
#35390 - Keycloak Devservice should also provide configuration for admin client
#36438 - Should security-web-authn guide and quickstart use Hibernate Reactive by default?
#36441 - Unable to use dynamic named queries on hibernate-orm
#36633 - JPA refresh with PESSIMISTIC_WRITE ignored for lazy loaded entity
#36958 - Licensing mismatch
#37265 - Support for de-activating a datasource at runtime (application startup)
#37352 - Unblock SmallRye Health exposed routes
#37457 - currentVertxRequest.getCurrent in a SecurityIdentityAugmentor became null since 3.2.9 with GraphQL
#37753 - Javadoc edits for quarkus-oidc.adoc
#37921 - quarkus dev broken for command mode arguments
#37961 - Fix quarkus dev broken for command mode arguments
#38058 - Fix command line arguments being squashed
#38103 - Make sure we can do a GET with a CSRF token cookie and still obtain the token
#38108 - Add runtime configuration property quarkus.datasource.active
#38176 - Keycloak admin client combined with devservices
#38238 - Improve locales IT
#38240 - Make the route build item truly final
#38247 - Incorrect web links Quarkus Hibernate Reactive Rest Data Panache
#38249 - Fixed deprecation warnings caused by QuarkusPlugin
#38251 - Using Qute asHtmlAttributes is escaping the quotes in the output
#38254 - Document how Keycloak Admin Client and Dev Service can use the same port for testing
#38255 - Qute: fix UserTagSectionHelper.Arguments.asHtmlAttributes()
#38264 - transitive @Transactional binding not supported by io.quarkus.narayana.jta.runtime.interceptor.TransactionalInterceptorBase
#38265 - Fixes incorrect rel=self web link
#38266 - Make RoutingContext available during SecurityIdentity augmentation
#38267 - Bump resteasy-microprofile.version from 2.1.4.Final to 2.1.5.Final
#38270 - Bump org.mockito:mockito-core from 5.8.0 to 5.9.0
#38277 - ArC: consolidate handling of transitive interceptor bindings
#38278 - Skip test truststores creation with -Dquickly*
#38280 - Qute asHtmlAttributes is including it as key="key" but should not
#38282 - Apply more fixes the Locales IT
#38283 - Upgrade to Hibernate ORM 6.4.2.Final
#38286 - Bump Keycloak version to 23.0.4
#38295 - Qute: improvements and fixes of UserTagSectionHelper.Arguments
#38299 - Migrate Security WebAuth guide to Hibernate ORM
#38304 - DevUI: Show source editor when config file is empty
#38305 - Remove wrong LGPL headers within some classes of the Hibernate ORM extension
#38307 - Upgrade to Mutiny 2.5.4
#38311 - Bump io.smallrye.reactive:mutiny-bom from 2.5.3 to 2.5.4
#38320 - Support image from local docker daemon for jib build base image
#38324 - Support using tars and docker daemon as base image for Jib
#38332 - Upgrade sshd from 2.10.0 to 2.12.0
#38342 - Improve datasource tracing
#38346 - Update dockerfiles and set api server url in kuberneters and docker integration tests
#38350 - Empty duplicated context in OutgoingInterceptor with Quarkus 3.7.0.CR1
#38353 - Upgrade to Mutiny 2.5.5
#38355 - Bump Smallrye Reactive Messaging version from 4.15.0 to 4.16.0
#38357 - Hibernate DDL is created twice
#38358 - Hibernate DDL created twice

`v3.6.9`

Compare Source

Complete changelog

#38460 - [3.6] Exception introduced by recent CVE fixes

`v3.6.8`

Compare Source

Complete changelog

#38370 - Include RowSet properties file in native image
#38369 - Ensure that response body of unsuccessful SSE request can be read
#38362 - Register JDBC RowSet required bundle
#38347 - Bump to Netty 4.1.106.Final
#38325 - SSE RESTEasy Reactive if an error occurs, cannot retrieve the body

`v3.6.7`

Compare Source

Complete changelog

#38323 - Fix entity-manager retrieval in spring-data-jpa
#38319 - spring-data-jpa repository save exception with multiple persistence units
#38257 - Update qute-reference.adoc
#38245 - Recommend quarkus.jib.jvm-additional-arguments rather than quarkus.jib.jvm-arguments in docs
#38233 - Bump resteasy.version from 6.2.6.Final to 6.2.7.Final
#38229 - Ensure the refreshed CSRF cookie retains the original value
#38227 - Add dependency management for org.hibernate:hibernate-jpamodelgen
#38225 - CSRF Token is refreshed on every request
#38224 - Revert "Fixing Jaxb unmarshalling error with native compilation"
#38220 - Bug fix: Correct broken links in 3.6 Bearer token authentication tutorial
#37477 - Make hibernate-jpamodelgen easier to apply to Quarkus 3.7+ projects

`v3.6.6`

Compare Source

Complete changelog

#38200 - Fix a code example in RESTEasy Reactive doc
#38184 - Add necessary Vertx dependency to quarkus-cache
#38177 - ConfigRecorder: fix value changed check with null build-time values
#38157 - Unable to build native project depending on "quarkus-cache" without Vert.x dependency since 3.5.2
#38141 - [Gradle] make quarkusRun depend on quarkusBuild
#38124 - Add missing methods to ReactiveMongoCollection
#38114 - quarkus-mongodb-client ReactiveMongoCollection expose the Updates with Aggregation Pipeline method
#38111 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.101 to 0.0.102
#38102 - Fix Build Scan conditional publication
#38095 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.2.2 to 3.3.3
#38093 - doc: mention registration is per extension not per repo
#38082 - Add exclude and additional option to AssembleDownstreamDocumentation
#37643 - Fix JAXB unmarshalling error when compiling to native
#37633 - Netty requires more classes to be runtime initialized
#37379 - Gradle quarkusRun does not keep the server up
#36479 - JAXB unmarshalling fails in native mode

`v3.6.5`

Compare Source

Complete changelog

#38099 - [3.6] Upgrade to Hibernate ORM 6.2.18.Final
#38092 - Always set ssl and alpn for non-plain-text with Vert.x gRPC channel
#38083 - Make Picocli version providers unremovable classes
#38077 - picocli should be able to mark its annotation dependent classes as unremovable
#38069 - [3.6] ArC: fix and optimize the ContextInstances abstraction
#38062 - Add companion classes to Kotlin reflective hierarchy registration
#38049 - Don't warn about missing JSON when returning String
#38044 - RestEasy Reactive warns when the endpoint returns JSON as String
#38038 - Scheduler: add hint for Scheduled.ApplicationNotRunning skip predicate
#38006 - Set the correct port properties for HTTPS
#38001 - Fix the status is a couple extensions documentation pages
#37997 - Mention exit handler parameter variant of Quarkus.run
#37996 - Don't fail if config is not a directory
#37993 - Register JsonSubTypes.Type values for native mode
#37987 - Do not expand config properties for Gradle Workers
#37957 - Serialization failure in native mode when Kotlin companion object used
#37953 - Update Strimzi container images in docs
#37942 - Records with polymorphic types sent from native clients received with no data
#37941 - Missing "extension-status" tag in guides
#37932 - Fix typo in getting-started-testing.adoc
#37929 - doc how to handle "Failed to load config value of type class java.lang.String for: some-key"
#37928 - CSRFFilter should have set the attribute csrf-token, but it is null after upgrade to 3.6.4
#37919 - Bump org.bouncycastle:bctls-fips from 1.0.17 to 1.0.18
#37903 - Quarkus fails to start if config is not a directory
#37893 - Upgrade to Kotlin 1.9.22
#37873 - Choose correct level field value and type to avoid non-resolution error
#37866 - RR client: fix chunking between \n\n in SSEParser
#37865 - Update jboss-logmanager to 3.0.4.Final
#37757 - Fixes stork path param resolution in REST Client
#37725 - Reset CSRF cookie to minimize a risk of failures due to its expiry
#37713 - PathParam containing "/" character are not well encoded as "%2F" when using reactive rest client with Stork
#37625 - SSE with rest-client-reactive may lose message content when it incorrectly breaks the message delimiter (\n\n)
#37598 - Native image build fails with -Dquarkus.log.min-level=ALL
#37273 - Environment variable is not read
#36946 - CSRF cookie should be refreshed on each request
#36919 - Quarkus 3.4.x+ forces ASCII logging out to console instead of abiding by environment/system default as it had previously
#35659 - Fix File handling as a JAX-RS body parameter
#22844 - Gradle tests (with JBoss LogManager setup) output duplicate unformatted messages