chore(deps): update all non-major dependencies (!58) · Merge requests · Matthias Benkard / MulkCMS 2

Renovate Bot requested to merge renovate/all-minor-patch into master Sep 30, 2024

This MR contains the following updates:

Package	Type	Update	Change
flow-bin (changelog)	devDependencies	minor	`^0.247.0` -> `^0.261.0`
org.postgresql:postgresql (source)	build	patch	`42.7.4` -> `42.7.5`
org.liquibase:liquibase-maven-plugin (source)	build	minor	`4.29.2` -> `4.31.1`
org.jsoup:jsoup (source)	compile	patch	`1.18.1` -> `1.18.3`
net.java.dev.jna:jna	compile	minor	`5.15.0` -> `5.16.0`
io.hypersistence:hypersistence-utils-hibernate-62	compile	minor	`3.8.2` -> `3.9.2`
org.hibernate.orm:hibernate-envers (source)	build	patch	`6.6.1.Final` -> `6.6.8.Final`
org.hibernate.orm:hibernate-core (source)	build	patch	`6.6.1.Final` -> `6.6.8.Final`
com.blazebit:blaze-persistence-bom (source)	import	patch	`1.6.12` -> `1.6.14`
com.diffplug.spotless:spotless-maven-plugin	build	minor	`2.43.0` -> `2.44.3`
io.quarkus:quarkus-maven-plugin	build	minor	`3.15.1` -> `3.19.0`
io.quarkus:quarkus-universe-bom	import	minor	`3.15.1` -> `3.18.4`
org.apache.maven.plugins:maven-compiler-plugin	build	minor	`3.13.0` -> `3.14.0`

Release Notes

flowtype/flow-bin

`v42.7.5`

Added

ci: Test with Java 23 MR #3381

Fixed

regression: revert change in fc60537 MR #3476
fix: PgDatabaseMetaData implementation of catalog as param and return value MR #3390
fix: Support default GSS credentials in the Java Postgres client MR #3451
fix: return only the transactions accessible by the current_user in XAResource.recover MR #3450
feat: don't force send extra_float_digits for PostgreSQL >= 12 fix Issue #3432 MR #3446
fix: exclude "include columns" from the list of primary keys MR #3434
perf: Enhance the meta query performance by specifying the oid. MR #3427
feat: support getObject(int, byte[].class) for bytea MR #3274
docs: document infinity and some minor edits MR #3407
fix: Added way to check for major server version, fixed check for RULE MR #3402
docs: fixed remaining paragraphs MR #3398
docs: fixed paragraphs in javadoc comments MR #3397
fix: Reuse buffers and reduce allocations in GSSInputStream addresses Issue #3251 MR #3255
chore: Update Gradle to 8.10.2 MR #3388
fix: getSchemas() MR #3386
fix: Update rpm postgresql-jdbc.spec.tpl with scram-client MR #3324
fix: Clearing thisRow and rowBuffer on close() of ResultSet Issue #3383 MR #3384
fix: Package was renamed to maven-bundle-plugin MR #3382
fix: As of version 18 the RULE privilege has been removed MR #3378
fix: use buffered inputstream to create GSSInputStream MR #3373
test: get rid of 8.4, 9.0 pg versions and use >= jdk version 17 MR #3372
Changed docker-compose version and renamed script file in instructions to match the real file name MR #3363
test:Do not assume "test" database in DatabaseMetaDataTransactionIsolationTest MR #3364
try to categorize dependencies MR #3362

liquibase/liquibase

`v4.31.1`

Compare Source

Liquibase 4.31.1 is a patch release

[!IMPORTANT] Liquibase 4.31.1 patches vulnerability found in Snowlake driver (CVE-2025-24789) and resolves issue with logicalfilepath reported in 4.31.0 (see 4.31.0 Release Notes)

[!NOTE] See the Liquibase 4.31.1 Release Notes for the complete set of release information.

Notable Changes

[OSS]

logicalfilepath bug: in 4.31.0, the parent logicalfilepath value will be used in DBCL/DBCLH as the changelogfilepath value, as a result the changesets from the included changelogs that were deployed with the changelog level logicalFilePath in version 4.31.0 will be considered new and will be redeployed in the latest versions. 4.31.1 fixes this behavior and deployed changesets will not be redeployed.

[MRO] Changelog

🐛 Bug Fixes 🛠️

DAT-19579: The changesets from the included changelogs that were deployed with the changelog level logicalFilePath in version 4.31.0 will be considered new and will be redeployed in the latest versions https://github.com/liquibase/liquibase/pull/6716 @filipelautert

[OSS] Changelog

🐛 Bug Fixes 🛠️

(#6664) Don't ignore logicalFilePath when including changelogs @filipelautert
(#6716) fix filename in dbcl incorrectly generated during 4.31.0 (#6712) @filipelautert

🤖 [OSS] Security, Driver and Other Updates

Snowflake vulnerability update CVE-2025-24789

Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. Liquibase now includes a version with the fixed issue 3.22.0.

Full Changelog: https://github.com/liquibase/liquibase/compare/v4.31.0...v4.31.1

Get Certified

Learn all the Liquibase fundamentals from free online courses by Liquibase experts and see how to apply them in the real world at https://learn.liquibase.com/.

Read the Documentation

Please check out and contribute to the continually improving docs, now at https://docs.liquibase.com/.

Join the Community

Our community has built a lot. From extensions to integrations, you’ve helped make Liquibase the amazing open source project that it is today. Keep contributing to making it stronger:

Contribute code Make doc updates Help by asking and answering questions Join our Discord server Sign up to provide feedback to the product team

Thanks to everyone who helps make Liquibase better!

File Descriptions

Liquibase CLI -- Includes open source + commercial functionality
liquibase-x.y.z.tar.gz -- Archive in tar.gz format
liquibase-x.y.z.zip -- Archive in zip format
liquibase-windows-x64-installer-x.y.z.exe -- Installer for Windows
Primary Libraries - For embedding in other software
- liquibase-core-x.y.z.jar – Base Liquibase library (open source)
- liquibase-commerical-x.y.z.jar – Additional commercial functionality
liquibase-additional-x.y.z.zip – Contains additional, less commonly used files
- Additional libraries such as liquibase-maven-plugin.jar and liquibase-cdi.jar
- Javadocs for all the libraries
- Source archives for all the open source libraries
- ASC/MD5/SHA1 verification hashes for all files

`v4.31.0`

Compare Source

[!NOTE] See the Liquibase 4.31.0 Release Notes for the complete set of release information.

`v4.30.0`

Compare Source

[!IMPORTANT] Liquibase 4.30.0 contains new capabilities and notable enhancements for Liquibase OSS and Pro users including Anonymous Analytics and deprecation of the MacOS dmg installer. [!NOTE] See the Liquibase 4.30.0 Release Notes for the complete set of release information.

jhy/jsoup

`v1.18.3`

Bug Fixes

When serializing to XML, attribute names containing -, ., or digits were incorrectly marked as invalid and removed. 2235

`v1.18.2`

Improvements

Optimized the throughput and memory use throughout the input read and parse flows, with heap allocations and GC down between -6% and -89%, and throughput improved up to +143% for small inputs. Most inputs sizes will see throughput increases of ~ 20%. These performance improvements come through recycling the backing byte[] and char[] arrays used to read and parse the input. 2186
Speed optimized html() and Entities.escape() when the input contains UTF characters in a supplementary plane, by around 49%. 2183
The form associated elements returned by FormElement.elements() now reflect changes made to the DOM, subsequently to the original parse. 2140
In the TreeBuilder, the onNodeInserted() and onNodeClosed() events are now also fired for the outermost / root Document node. This enables source position tracking on the Document node (which was previously unset). And it also enables the node traversor to see the outer Document node. 2182
Selected Elements can now be position swapped inline using Elements#set(). 2212

Bug Fixes

Element.cssSelector() would fail if the element's class contained a * character. 2169
When tracking source ranges, a text node following an invalid self-closing element may be left untracked. 2175
When a document has no doctype, or a doctype not named html, it should be parsed in Quirks Mode. 2197
With a selector like div:has(span + a), the has() component was not working correctly, as the inner combining query caused the evaluator to match those against the outer's siblings, not children. 2187
A selector query that included multiple :has() components in a nested :has() might incorrectly execute. 2131
When cookie names in a response are duplicated, the simple view of cookies available via Connection.Response#cookies() will provide the last one set. Generally it is better to use the Jsoup.newSession method to maintain a cookie jar, as that applies appropriate path selection on cookies when making requests. 1831
When parsing named HTML entities, base entities should resolve if they are a prefix of the input token (and not in an attribute). 2207
Fixed incorrect tracking of source ranges for attributes merged from late-occurring elements that were implicitly created (html or body). 2204
Follow the current HTML specification in the tokenizer to allow < as part of a tag name, instead of emitting it as a character node. 2230
Similarly, allow a < as the start of an attribute name, vs creating a new element. The previous behavior was intended to parse closer to what we anticipated the author's intent to be, but that does not align to the spec or to how browsers behave. 1483

java-native-access/jna

`v5.16.0`

Compare Source

==============

Features

#1626: Add caching of field list and field validation in Structure along with more efficient reentrant read-write locking instead of synchronized() blocks - @BrettWooldridge

Bug Fixes

#1618: Fix calls to jnidispatch on Android with 16KB page size - @Thomyrock

vladmihalcea/hypersistence-utils

`v3.9.2`

================================================================================

Upgrade TSID library to 2.1.4 #765

`v3.9.1`

================================================================================

Allow the Iso8601MonthType to persist data into tinyint and smallint columns #762

The JavaDoc of MutableType class mentions immutable object types #751

`v3.9.0`

================================================================================

Remove PostgreSQLIntervalType from HibernateTypesContributor #750

Add support for SortedSet in ListArrayType #749

Allow PostgreSQLCITextType entity attributes to be used in the LIKE query clause #743

Add support for GraalVM native image #740

`v3.8.3`

================================================================================

Fix Hibernate 6.6 JSON mapping on Oracle BLOB column type #742

hibernate/hibernate-orm

New features

None yet

Bug fixes

Fix Hibernate ORM 6 integration issue with element collections containing embeddables

Backwards-incompatible changes

None yet

`v1.6.13`

Compare Source

04/11/2024 - Release tag Resolved issues

New features

Add parameter and JSON path support for JSON_GET() function

Bug fixes

Fix integration issues with Hibernate ORM 6.6 and Quarkus 3

Backwards-incompatible changes

None yet

diffplug/spotless

`v2.44.0`

Added

New static method to DiffMessageFormatter which allows to retrieve diffs with their line numbers (#1960)
Gradle - Support for formatting shell scripts via shfmt. (#1994)

Fixed

Fix empty files with biome >= 1.5.0 when formatting files that are in the ignore list of the biome configuration file. (#1989 fixes #1987)
Fix a regression in BufStep where the same arguments were being provided to every buf invocation. (#1976)

Changed

Use palantir-java-format 2.39.0 on Java 21. (#1948)
Bump default ktlint version to latest 1.0.1 -> 1.1.1. (#1973)
Bump default googleJavaFormat version to latest 1.18.1 -> 1.19.2. (#1971)
Bump default diktat version to latest 1.2.5 -> 2.0.0. (#1972)

quarkusio/quarkus

`v3.19.0`

Compare Source

`v3.18.4`

Compare Source

Complete changelog

#41272 - Files with åäö in there name gets an inputstream that is null in MultipartForm uploads
#45285 - Add quarkus.openshift.cron-job.timezone property
#45961 - quarkus-spring-di: @Bean("foo") is not transformed into the proper @Named("foo") annotation
#46140 - Spring DI - Fix behavior with named beans
#46142 - Add more options for the token expiry time calculation done by OIDC client
#46147 - Byte array responses break if quarkus-amazon-lambda-http is used
#46203 - Improve text format handling in Amazon Lambda
#46222 - Add OIDC client access token expires in skew
#46233 - WebSockets Next: make it possible to configure max frame size
#46242 - Add time zone property for kubernetes and openshift cron jobs
#46251 - Quarkus Hibernate ORM - Jboss logger instantiation issue
#46260 - @QuarkusTest fails when Nexus repository requires login (401 Unauthorized) (does not use existing Maven security credentials)
#46269 - Avoid creating a timer when reconnectDelay is set to Max
#46271 - Maven Resolver: fix discovering settings-security.xml
#46284 - Only check filters once for calls to getResourceMethod
#46292 - Simplify pattern used introduced in #46284
#46296 - Use proper call to Logger#getMessageLogger
#46297 - Fix a few misplaced @WithConverter
#46303 - Upgrade to Jandex 3.2.7
#46304 - Fix keycloak client timeout error message: quarkus.oidc.devui.web-client-timeout -> quarkus.keycloak.devservices.web-client-timeout
#46344 - Update mime4j to 0.8.12

`v3.18.3`

Compare Source

Complete changelog

#40374 - Error when executing persist() method with an entity having bidirectional one-to-one relationships in Hibernate Reactive with Panache
#45948 - Removal of public method in a minor release breaking semantic versioning with utter lack of warnings or anything
#45949 - Restore two JWT decoding methods in OidcUtils
#46005 - Qute TemplateGlobal throws error on live reload
#46014 - Qute: fix template global class generation in the dev mode #2
#46035 - QuarkusTest TestProfile pollutes environment of QuarkusComponentTest
#46039 - Upgrade to Jandex 3.2.4
#46040 - OpenTelemetry extension traces health endpoints when a custom root-path is configured
#46046 - Execute simple JUnit tests and @QuarkusComponentTest first
#46088 - Fix typo remove extra bracket
#46099 - OpenTelemetryLogHandler - Do not read config for each publish
#46102 - Live reload classloader memory leak when using hibernate-envers with a custom revision entity
#46106 - Bump maven-dependency-plugin in docs
#46107 - For synthetic injection points, target can be null
#46108 - @Observes @BeforeDestroyed(?Scoped.class) does not work in the same bean and the same scope
#46111 - Could not determine the canonical constructor when quarkus.rest.jackson.optimization.enable-reflection-free-serializers=true
#46113 - Remove non-existing value "OPTIONAL", fix typo
#46115 - Bump to Vert.x Mutiny bindings 3.18.1
#46125 - Change timing of @Initialized and @BeforeDestroyed events so that they can be observed from a bean within given context
#46135 - Upgrade to Jandex 3.2.5
#46136 - Error occurs on tests with @Nested classes and QuarkusMainLauncher
#46141 - Replace outdated hostname v1 property for keycloak dev service in shared networks
#46150 - Overcome augmentation issue with @Nested QuarkusMainTest
#46154 - Docs: Fix some more weaknesses
#46156 - Reflection-free Serialization issue when first accessed vs. second access or if multiple methods
#46170 - Configuration custom converters fail on primitive type arrays since Quarkus v3.18
#46171 - Fix config converter loading issue when arrays are used
#46179 - Upgrade to Hibernate ORM 6.6.7.Final
#46181 - Simplify and fix building the list of framework endpoints
#46186 - Bump io.micrometer:micrometer-bom from 1.14.3 to 1.14.4
#46189 - Upgrade to Hibernate Reactive 2.4.5.Final
#46190 - Bump the version of kindContainer from 1.4.7 to 1.4.8
#46191 - Bump version of kindcontainer from 1.4.7 to 1.4.8
#46194 - Bump to Vert.x 4.5.13 and Netty 4.1.118.Final
#46211 - Avoid using generated Jackson serializers for subclasses
#46219 - Bump io.smallrye:jandex from 3.2.5 to 3.2.6

`v3.18.2`

Compare Source

Complete changelog

#44569 - SmallRye OpenAPI outputs Chinese garbled characters in Json
#44645 - NullPointerException from Hibernate ORM when there is a problem establishing a connection
#45385 - IllegalArgumentException when parsing Accept Header
#45776 - Bump to Mutiny 2.8.0 and the Mutiny Vert.x bindings 3.18.0
#45789 - [resteasy-reactive] [3.8.6] Header not reset between request
#45847 - Netty metric with dynamic tag cause time series leak
#45868 - QuarkusTestResource not working with QuarkusMainLauncher
#45877 - Replace the id label with a name label for Netty allocator
#45910 - Clarify usage of quarkus-keycloak-admin-rest-client and quarkus-keycloak-admin-resteasy-client
#45926 - Release the Config from the TCCL when setting the Quarkus config
#45933 - Native tests fail in Gradle-based Quarkus project when module has no classes in src/main/java
#45934 - Dev UI: make sure add button works when log is open
#45935 - Clear SystemProperties set by QuarkusMainIntegrationTestExtension
#45938 - Be more defensive about sources Path in integration tests
#45943 - OpenApiFilter without Runstage causes NPE
#45945 - Properly get default value when handling OpenApiFilters
#45950 - Correctly handle REST field injection
#45956 - Improve content about running the application in the JWT guide
#45967 - Use Maven log in quarkus:run
#45971 - Fix incorrect response code when media type is invalid
#45976 - Add remote address to gRPC spans
#45985 - BlockingNotAllowedException when using rest client since quarkus 3.18.1
#45991 - Bump com.gradle.plugin-publish from 1.3.0 to 1.3.1 in /devtools/gradle
#45992 - [REGRESSION] - quarkus.rest.jackson.optimization.enable-reflection-free-serializers=true broken in 3.18
#45993 - Bump smallrye-open-api.version from 4.0.7 to 4.0.8
#45996 - ConfigMapping broken for extensions with smallrye-config-crypto since 3.9.1
#45999 - Quarkus 3.18 and Flyway 11: Bring back cleanOnValidationError
#46002 - Fix generated Jackson deserializer for a record with an empty constructor
#46006 - Don't prematurely close an InputStream returned by the REST Client
#46008 - QuarkusIntegrationTest: publishing a random port in the started container no longer works
#46009 - Updates to Infinispan 15.0.13.Final
#46016 - Quarkus 3.18.1 does not allow overwriting lists from application.yaml with lists supplied in environment variables
#46018 - integration-tests/hibernate-reactive-mssql is not being run (and does not build)
#46020 - Runtime values from mapping without expansion
#46031 - Fix Javadoc/MD syntax issues
#46032 - Update SmallRye Config to 3.11.2
#46033 - Implement 'cleanOnValidationError' for Flyway 11
#46036 - In container build output is not executable anymore
#46041 - Upgrade Hibernate ORM to 6.6.6.Final
#46043 - Fix and restore hibernate-reactive-mssql tests
#46044 - Recalculate config property names during tests
#46049 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.11.1 to 3.11.2 in /devtools/gradle
#46055 - Ensure that the copied native executable has the executable permission when copied from the host to the container image.

`v3.18.1`

Compare Source

Complete changelog

#44484 - Quarkus Build with Maven Artefact Resolver Configuration Options
#45358 - quarkus-smallrye-openapi generates unused schemas
#45359 - Ensure there are no jdbc spans if otel sdk is disabled
#45489 - DevUI: Add search for Arc tables
#45562 - Consistent report of unknown properties between JVM and Native mode
#45650 - ClassNotFound during static init build step corrupts delayed logging
#45708 - OpenAPI schema adding "enum" : [ null ] when field description is added
#45771 - Qute: fix template global class generation in the dev mode
#45774 - LGTM tests are stalling (or are too slow for the timeout, I don't know)
#45783 - Redis cache implementation should not use KEYS command
#45794 - Maven Resolver: initialize Maven properly, especially the local repository
#45799 - Fix PathTreeClassPathElement#toString() implementation
#45801 - Fix documentation for connecting to multiple devservice databases
#45802 - Bump smallrye-open-api.version from 4.0.6 to 4.0.7
#45803 - Bump com.gradle:develocity-maven-extension from 1.23 to 1.23.1
#45810 - Update default openapi version in doc
#45813 - Update URL of swapi-graphql.netlify.app GraphQL endpoint
#45815 - Properly order tests annotated with @WithTestResource
#45819 - Improve docs for Hibernate ORM with Kafka to suggest more efficient approaches
#45822 - Adjust timeouts for LGTM container and tests
#45828 - Redis Cache: replace the KEYS command with SCAN in invalidation
#45829 - Upgrade to Vert.x 4.5.12 and Netty 4.1.117.Final
#45835 - Fix static file path decoding in vertx-http
#45838 - PermissionChecker makes RestMulti builder being ignored
#45841 - Bump mongo-client.version from 5.3.0 to 5.3.1
#45842 - Unable to build native image on Macbook Pro M4 Pro
#45848 - Quarkus REST: Run security checks that require method arguments in a non-blocking manner before secured methods are invoked
#45850 - Reviewed enable_build_properties information
#45851 - Use explicit String.concat in OTelDurationConverter
#45858 - Update OpenAPI documentation with default version 3.1.0
#45860 - quarkus main build fails on windows
#45861 - gRPC: Perform authentication when gRPC server runs on the same server and root path is different than '/'
#45863 - 3.18 regression: quarkus.uuid is the same for every run in native images
#45864 - Ensure that quarkus.uuid is not determined at native image build time
#45876 - Pass container-runtime-options to native-image --version as well
#45878 - 3.18 regression Quarkus quarkus-maven-plugin with failsafe and quarkus.test.arg-line
#45880 - Upgrade to SmallRye GraphQL 2.12.1
#45888 - Consider quarkus.test.arg-line as a string
#45890 - Disable kubernetes-service-binding testing on Windows
#45894 - Dev UI does not open if http is disabled
#45911 - Make sure console shortcuts use https when http is disabled
#45913 - Fix generate ca command in tls guide

`v3.18.0`

Compare Source

Complete changelog

#29646 - Exceptions on dev mode reload (with multiple inbound requests?)
#36510 - quarkus.otel.traces.suppress-non-application-uris not working with quarkus.management.enabled
#45266 - Using quarkus.swagger-ui.plugins
#45300 - Fix how Vert.x routes are identified in metrics and OpenTelemetry
#45609 - Allow null for query parameters in Kotlin panache
#45613 - Use VertxLogDelegateFactory for internal Vert.x logging
#45620 - Improvements to the Grafana LGTM dashboards
#45625 - Hot reload fails when using BeanParam
#45627 - Returing a file from Quarkus REST endpoint with Uni leads to Vert.x error now that Vert.x Pump was replaced
#45628 - OIDC: document and use OidcTestClient to get access token from Dev Services for OIDC
#45629 - Fix missing addChannel flag usage
#45630 - Fix file handling in REST Client
#45645 - NamedLogHandlersBuildItem causes stderr "Handler is linked to a category but not configured"
#45648 - Enable public access to OidcProviderClientImpl#getWebClient
#45652 - Test config creation sometimes delegates to instance variable and sometimes to superclass, causing (v v minor) chaos
#45653 - Speed up flaky OTel test
#45670 - Don't allow requests into restarting application
#45674 - Update drools.adoc
#45690 - Observability LGTM dev service filling up logs with services starting
#45693 - Bump grpc.version from 1.69.0 to 1.69.1
#45698 - Add support for java.time.YearMonth as JAX-RS parameter
#45699 - Add support for java.time.YearMonth as JAX-RS parameter
#45700 - Add props change to LGTM re-load test
#45705 - Do not check log categories without named handlers
#45707 - Fix @BeanParam handling during hot reload
#45717 - Add response to HttpServerMetricsTagsContributor.Context
#45722 - Adjust Caffeine extension description to drop Java 8 mention
#45730 - Bump resteasy-microprofile.version from 3.0.0.Final to 3.0.1.Final
#45734 - Fix wait strategy usage, Grafana should not know about LGTM
#45735 - Enable new scripts config in Swagger UI
#45744 - Add HTTP response to HttpServerMetricsTagsContributor.Context
#45772 - Remove quarkus-extension-processor from cache-runtime-spi

`v3.17.8`

Compare Source

Complete changelog

#43326 - Hibernate-Reactive: ClassCastException EmbeddableInitializerImpl to ReactiveInitializer
#44440 - Replacement in logs (log formatting) doesn't work in OpenTelemetry Logging
#45188 - @JoinColumns breaks on Hibernate Reactive
#45472 - java.util.NoSuchElementException: SRCFG00011: Could not expand value platform.quarkus.native.builder-image in property quarkus.native.builder-image
#45555 - RESTEasy Reactive: ClientBuilder and Client should not share the same Configuration instance
#45565 - If certificate reloading is enabled, mTLS stop functioning after the reload
#45578 - Fix: trust store config is overwritten by key store config while certificate reloading
#45593 - Copy Configuration when building a JAX-RS Client
#45612 - Fix typo
#45614 - Replace JavaVersion.VERSION_11 with JavaVersion.VERSION_21 in kotlin guide
#45637 - Gradle - Correctly pass platform.quarkus.* properties
#45640 - Fix Otel logging message formatting
#45646 - Getting Started with Security updates
#45656 - Document injecting of CDI request scoped beans during authentication and authorization
#45657 - Update to HTTP error outputs in Getting Started with Security
#45658 - Mark quarkus-oidc-client-registration as experimental in doc
#45662 - java.lang.IllegalStateException: Too many recursive interceptor actions after switching to quarkus-rest-client from quarkus-rest-reactive-client
#45676 - Quarkus reports a NoSuchMethod hiding the real cause when it fails to start
#45677 - Add missing @ConfigItem to FilterConfig
#45681 - Gradle - Resolve platform properties when possible
#45682 - decodeAsXPendingSummary NPE on r.get(1) or r.get(2)
#45687 - Redis Client: fix NPE when constructing XPendingSummary
#45716 - Avoid recursive interceptor lookups when the REST Client full name matches the simple name
#45731 - Bump hibernate-orm.version from 6.6.4.Final to 6.6.5.Final
#45756 - Bump hibernate-reactive.version from 2.4.3.Final to 2.4.4.Final

`v3.17.7`

Compare Source

Complete changelog

#10264 - elytron security: define role mapper (was: ldap security - role mapper)
#44047 - Demote Agroal's "JDBC resources leaked" warnings to DEBUG
#44540 - FORMAT_FAILURE when using Log.error(Object,Throwable)
#44565 - Ensure that all our handlers extend ExtHandler
#44773 - OpenAPI Extension (smallrye) produces wrong schema for Flow based return types
#45150 - OpenAPI Extension Misses Jackson Annotations on Methods that Return a Parameterized Type
#45167 - Long.parseLong Error with Redis Client Instrumentation
#45224 - PermissionChecker does not handle list of permission correctly
#45364 - Don't treat colon as a permission-to-action separator in @PermissionChecker value attribute
#45419 - Fix typos in deploying-to-kubernetes.adoc
#45424 - Bump smallrye-open-api.version from 4.0.5 to 4.0.6
#45439 - OpenTelemetry: fix the Redis instrumenter in case of a tainted connection
#45467 - Add FAQ about thread dumps in native reference guide
#45471 - Update code to get Mandrel version from native executable
#45482 - Execute the MongoDB Connection Health Check on Startup
#45486 - Remove yq installation step from GitHub Actions workflows
#45487 - Fix Quarkus platform BOM version info collection for analytics
#45509 - Parallelize bean scanning in SmallRyeFaultToleranceProcessor
#45512 - Add a cache for class proxies in BytecodeRecorderImpl
#45517 - Make scheduler timezone documentation consistent with javadoc
#45518 - Remove erroneous state tracking from client readers/writers
#45523 - Fix Mongo health checks
#45536 - Quarkus REST - Use ByteBufInputStream instead of copying bytes
#45564 - fix: possible NPE if data has not been set yet
#45576 - Revert "[oracle-jdbc] Remove unnecessary conditionals from @BuildSteps in the Oracle JDBC extension"
#45583 - Adjust logging level for JDBC resource leak warnings
#45586 - Elytron security LDAP: Document and test mapping of LDAP groups to SecurityIdentity roles

`v3.17.6`

Compare Source

Complete changelog

#36688 - Unable to use Panache Sort.Direction enum as method parameter for GraphQL query
#39137 - RESTEasy resource with constructor or field injection failing with RESTEASY003190
#44550 - GraphQL Typesafe client with sources in a dependency
#44590 - Change the JsonRPC Service for OIDC to use recorder
#44929 - Error in secured post-multipart interface with large files
#44959 - Ensure request body is consumed so that multipart requests with large payloads never hang when exception happens before body is consumed
#44960 - Page count fails when using a sort specification in a Panache query with a SELECT DISTINCT statement in Quarkus 3.17
#45104 - Bump com.gradle:develocity-maven-extension from 1.22.2 to 1.23
#45199 - Bump gradle/develocity-actions from 1.2 to 1.3
#45204 - Uber-Jar file name suffix issue for disabling it
#45205 - Update Quarkus Parameter for Disabling Uber-JAR File Name Suffix
#45220 - Messaging RunOnVirtualThreads fix on class annotation
#45235 - Upgrade to Hibernate ORM 6.6.4 / Reactive 2.4.3
#45253 - Assorted @WithTestResource fixes
#45254 - Typo in Proxy Configuration Guidance
#45260 - Typo in ProxyConfig
#45261 - Update Develocity extension to 1.1.9
#45284 - Add gRPC capability
#45297 - RESTEasy - Mention you cannot inject @Context elements in constructors
#45298 - Add Panache Sort enums in index for SmallRye GraphQL
#45305 - Docs: Correct sentence in Simplified MongoDB with Panache
#45335 - swapi.dev is down, use swapi.tech
#45351 - Fixed an issue where annotations were not part of the Jandex index, if given in an external JAR
#45387 - Docs: Correct sentence in Using the MongoDB Client
#45390 - Fix typo in default LGTM dashboards
#45392 - Fix metric scale on dashboard
#45397 - Bump commons-codec:commons-codec from 1.17.1 to 1.17.2
#45401 - Use swapi.tech for The Star Wars API calls
#45402 - Update SmallRye Health to 4.1.1

`v3.17.5`

Compare Source

Complete changelog

#44974 - Rest Client metrics show real value in uri attribute instead of path parameter placeholders when used with @Url
#44989 - REST Client not sending headers from shared configKey
#45002 - REST Client using configKey resolves wrong config
#45004 - Update documentation for handling proxies in native-mode
#45010 - Properly create REST Client template path when @Url is used
#45022 - Upgrade to quarkus-http 5.3.4
#45034 - Revert MariaDB driver to 3.4.1
#45044 - Priority of REST Client Config changed to Quarkus FQN, config key, simple name
#45066 - Update OIDC MTLS test to use generated certificates
#45072 - Prioritize OIDC mechanism when inclusive authentication is disabled to simplify using mTLS and OIDC together
#45084 - A NoSuchMethodException is raised when a REST resource is called with a single JsonObject argument in native build
#45095 - Generate certificates in the OIDC integration test
#45097 - Ensure that jakarta json types can be deserialized in native mode
#45108 - Logstash conf file fix
#45126 - Bump org.hibernate.validator:hibernate-validator from 8.0.1.Final to 8.0.2.Final
#45130 - Conflicting open telemetry and flyway dependencies
#45136 - Break build cycle between OTel, logging and Flyway
#45143 - Update OIDC bearer doc with a section about response filters
#45161 - Fix local proxy handling in REST Client module
#45162 - Improve documentation for handling proxies in native-mode
#45172 - Docs: Correct word form in Native Applications Tips
#45173 - Unable to use custom handlers for HTTP OPTIONS method in subresources
#45174 - Unable to use custom handlers for HTTP OPTIONS method in subresources
#45190 - Fix matrix computation for Ubuntu 24

`v3.17.4`

Compare Source

Complete changelog

#40328 - Support for springdoc-openapi annotations in quarkus-smallrye-openapi
#44035 - smallrye-openapi scan for @ServerExceptionMapper annotation
#44627 - OpenAPI Extension Fails to Generate Schema for Generic Type that Uses Jackson JsonUnwrapped
#44804 - ElytronPasswordIdentityProvider does not forward attributes from SecurityIdentity
#44853 - Quarkus Vertx GRPC Client should respect "max-inbound-message-size" property
#44855 - Respect max message size property fo Quarkus GRPC client (44853)
#44896 - Copy attributes from Elytron SecurityIdentity to Quarkus SecurityIdentity
#44914 - LogManager error of type GENERIC_FAILURE
#44919 - Register Kotlin's empty set for reflection
#44923 - Spring Cloud Configuration ordinal customization
#44931 - Reduce log level of OTel side exporter classes
#44932 - Grpc client interceptors are not registered when injected via constructor
#44936 - Make sure OidcRequestContextProperties are always modifiable
#44938 - Keycloak devservice can be started indirectly if quarkus-oidc uses quarkus.oidc.provider
#44946 - Bump org.jboss.logmanager:jboss-logmanager from 3.1.0.Final to 3.1.1.Final
#44952 - Spring Cloud Configuration ordinal customization
#44954 - Bump io.smallrye.common:smallrye-common-bom from 2.8.0 to 2.9.0
#44961 - Fix InjectionPointModifier for repeated annotations on method parameters; add grpc test
#44975 - Quarkus Generator for gradle projects generates broken GitHub-Workflow
#44980 - Don't start Keycloak Dev Service for OIDC client and other extensions when OIDC extension is configured with a known social provider
#44983 - Fix ci.yml for Gradle projects
#44986 - Minor OIDC updates
#44990 - PermissionChecker method sometimes receives unaugmented SecurityIdentity even though augmentor did run successfully
#44996 - Bump smallrye-open-api.version from 4.0.4 to 4.0.5
#45003 - Fix code indentation
#45007 - Properly substitute {quarkus-version} in native-reference.adoc
#45008 - Improve Dev Services network output in dev mode when typing c
#45012 - Use final SecurityIdentity augmented with all the augmentors in @PermissionChecker methods
#45016 - Correct dependency notation in documentation for observability-devservices-lgtm.adoc
#45024 - Document @Url usage in REST Client
#45026 - Build with devservices failed because download of redpanda leads to 404
#45028 - Move from vectorized/redpanda images to redpandadata/redpanda

`v3.17.3`

Compare Source

Complete changelog

#44471 - JDK 24 new console is causing a serious regression in startup
#44599 - Build fails with "Method too large" exception
#44624 - Split creation of the Set to match unknown properties to avoid MethodTooLargeException
#44653 - Dev console "crashes" with Java 23
#44708 - Fix invalid proxy setting when the port ends with a whitespace
#44761 - Re-enable OIDC wiremock tests once a new certificate chain is available
#44791 - Add OpenPGP's Bouncycastle library to application's BOM
#44795 - Fix typo with classes() method
#44796 - Default to old console if user has not set it
#44797 - Quarkus Qute broken in 3.16
#44798 - Drop mentions of quarkus.ssl.native=false in Hibernate Search guides
#44808 - Use CertificateGenerator in OIDC Wiremock tests
#44811 - quarkus.jacoco.excludes doesn't work since 3.17.0
#44817 - Qute: fix regression in perf optimization of ReflectionValueResolver
#44820 - Fix NPE caused by PropertyName map with Mappings names
#44822 - Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2
#44834 - Fix off-by-one error in exception decoration code
#44838 - Update SmallRye Config to 3.10.2
#44853 - Quarkus Vertx GRPC Client should respect "max-inbound-message-size" property
#44866 - Qute message bundle using enum uppercase with words separated by underscores
#44883 - Qute message bundles: fix localization of enums
#44886 - Custom openapi.yml under META-INF not merged after upgrade to 3.17.x
#44892 - Bump smallrye-open-api.version from 4.0.3 to 4.0.4

`v3.17.2`

Compare Source

Complete changelog

#7462 - Hibernate fails on complex orphanDelete=true cases and bump version upon merge calls involving entities without change
#35980 - Health UI access wrong health endpoint with management interface
#43056 - Double Array Hibernate @JdbcTypeCode(SqlTypes.ARRAY) causes NullPointerException with 6.6.0.Final
#43296 - AssertionError in EntityInitializerImpl.resolveInstanceSubInitializers after upgrading to 3.14
#43845 - Exemplars are not recorded for metric http_server_requests*
#44016 - Micrometer exemplars on HTTP
#44117 - TestProfile's getEnabledAlternatives CDI BEAN leaks to unrelated TestProfile's test
#44261 - Improve Qute documentation
#44391 - Upgrade to Hibernate ORM 6.6.3.Final
#44454 - Hibernate FetchNotFoundException
#44511 - NPE during custom bean invocation via PreAuthorize annotation in Quarkus RESTEasy
#44543 - Fix buildpack docker host handling for macos
#44564 - A NoSuchMethodException is raised when a rest resource is called with a Jakarta Reader/Writer interceptor defined
#44568 - @AuthorizationPolicy is not compatoble with kotlin suspend functions
#44576 - Cannot build TODO demo app on windows into uber-jar since quarkus 3.16.1
#44584 - Fix wrong web endpoint path for resource on Windows
#44586 - Bump smallrye-fault-tolerance.version from 6.6.2 to 6.6.3
#44589 - Copyedits for style, security-jwt.adoc
#44592 - Docs: dev mode differences - remove the link for old Dev UI
#44594 - Google Cloud Function gen 2 is now the default
#44599 - Build fails with "Method too large" exception
#44602 - Qute docs improvement
#44603 - Copyedits for style, security-jwt-build.adoc
#44608 - Bump testcontainers.version from 1.20.3 to 1.20.4
#44610 - Qute: Unexpected primitive equality
#44613 - Register method for reflection when read or write interceptors exist
#44615 - Qute: if section - adjust the evaluation rules for equality operators
#44638 - Clean up effects of test profiles when @QuarkusMainTest completes
#44641 - NoClassDefFoundError in ShutdownTask when running BuildMetricsTest
#44646 - Failing to apply @SecureField to a generic with nested objects.
#44647 - Do not add host:port to Health path in Health UI
#44649 - Register jakarta.json.spi.JsonProvider service provider
#44667 - Pass secured method arguments into security checks for @PreAuthorize security annotation on SpringWeb endpoints
#44668 - Support @AuthorizationPolicy on suspended Kotlin endpoint methods
#44669 - Quarkus REST Jackson: Improve detection of generic fields annotated with the @SecureField and allow to explicitly enable secure serialization
#44674 - Qute: Rendering Timeout Instead of Throwing TemplateException for Missing Keys in {#let} and {#set} Constructs
#44677 - Properly reset Quarkus populated Jackson ObjectMapper
#44678 - Fix glob to regex convertion to properly handle **/*.suffix
#44679 - Config Doc - Improve HTML Javadoc -> Asciidoc conversion
#44682 - Qute: fix handling of missing properties in strict mode
#44684 - Remove line
#44685 - Add documentation for @WithTestResource to getting started testing
#44698 - Bump hibernate-search.version from 7.2.1.Final to 7.2.2.Final
#44704 - Fix TLS config Javadoc typo
#44709 - Fix leftover -reactive properties references in REST client guide
#44754 - Fix retry count in remote dev mode error message
#44760 - Temporarily disable OIDC wiremock tests using expired certificates
#44768 - Address leftovers in testing docs from #44685

`v3.17.1`

Compare Source

`v3.17.0`

Compare Source

Complete changelog

#9335 - Bug using a maven classifier in dev mode
#43608 - Dependency warning spam during build
#44216 - Increased build-time RSS usage in micrometer-prometheus integration test after moving Kubernetes to @ConfigMapping
#44246 - Runtime property being resolved at build time
#44286 - Clarify JFR configuration when using OTel Metrics
#44448 - Reduce allocation in matching of unknown properties
#44452 - quarkus-hal omits link params from response entity
#44467 - WebSockets Next: clarify connector API docs/javadoc
#44475 - Improve test reliability
#44477 - Update to Quartz 2.5.0 and drop Jakarta transformation workaround
#44479 - TestSecurity#permissions using SecurityIdentityAugmentor only work with proactive auth
#44481 - Bump smallrye-open-api from 4.0.2 to 4.0.3
#44483 - Bump com.gradle.develocity from 3.18.1 to 3.18.2 in /devtools/gradle
#44487 - Support configuring quarkus.bootstrap.effective-model-builder as a POM property
#44497 - Mutiple starts of Quarkus during Test execution (works in 3.15.1)
#44499 - Improve test reliability II
#44500 - Kafka serializer cannot be autodetected when injecting an Instance
#44501 - Support title and type fields when generating HAL links
#44503 - Enforce the platform constraints when resolving the Quarkus bootstrap Gradle resolver dependencies
#44504 - WebSockets Next: support arrays as valid return types of callbacks
#44512 - SmallRye Fault Tolerance: upgrade to 6.6.2
#44526 - Support Serde detection for Instance injection of Messaging channels
#44532 - Consider resources from @TestProfile when checking for restart
#44535 - Allow @PermissionChecker methods to authorize secured methods when @TestSecurity annotation is applied and conditionally apply SecurityIdentityAugmentors
#44536 - Fix typo, use common ID syntax
#44541 - Removing unused configuration of the application model in QuarkusBuildTasks
#44558 - Reference extension maturity matrix from extensions FAQ
#44560 - Correct javadoc of ReflectiveHierarchyBuildItem
#44567 - Render ConfigMapping elements properly in the Dev UI Configuration editor
#44572 - Remove customizer mappings from runtime recording Config
#44577 - Application does not start after update from 3.15.2 to 3.16.3 due to open api processor

`v3.16.4`

Compare Source

Complete changelog

#37040 - The flyway extension generates Kubernetes resources as if quarkus.flyway.enabled was a runtime property
#42446 - Add explanation/concept for extension maturity model
#44367 - Gradle 3.16 fails with missing required property additionalForcedProperties
#44399 - Declaring explicitly the build service in the QuarkusBuildTask
#44433 - Reflection free serializers ArrayIndexOutOfBoundsException
#44438 - Gradle buildForkOptions no longer used since quarkus 3.16.1
#44457 - Support for short and uncommon field names like set, get, and is
#44468 - Use QUARKUS_FLYWAY_ACTIVE instead of QUARKUS_FLYWAY_ENABLED env in Kubernetes resources
#44472 - Kotlin native Jackson serialization regression: EmptyList & EmptyMap missing
#44480 - Fix nullpointer on null code websockets-next
#44493 - Using BuildForkOptions in QuarkusBuildTask
#44494 - Register Kotlin's empty list and map for reflection
#44505 - Log in smallrye-jwt and oauth2 extensions when no bearer access token is available
#44507 - Fixed Timestamp not being set for otel log signals
#44509 - Updates to Infinispan 15.0.11.Final
#44515 - Coordinated Vert.x 4.5.11 upgrades
#44531 - Correct image file name to resolve broken image
#44537 - Update smallrye-jwt to 4.6.1
#44545 - Wrong index of ParameterizedType argument of Map when register type to be generated in JacksonCodeGenerator
#44571 - Update CacheJsonRPCService.java reference
#44574 - Grammar corrections for en-us

`v3.16.3`

Compare Source

Complete changelog

#43392 - Quarkus does not decompress Brotli requests in native mode
#44118 - QuarkusMainTest always run even TestProfile's tags do not match
#44147 - Avoid duplication descriptors in PlatformImportsImpl
#44329 - Do not run the Gradle tests when using -DquicklyDocs and add some useful workflow tips
#44335 - Allow for using RuntimeDelegate SPI in native mode
#44336 - Do not try to list synthetic injection points in "inactive bean" errors
#44339 - Remove use of Json in OIDC
#44341 - Scheduler: fix OffLoadingInvoker
#44345 - Update opentelemetry-tracing.adoc
#44348 - Enable Brotli decompression
#44352 - Make sure the result from QCL.getElementsWithResource(name) does not include duplicates
#44353 - Small improvements to the Google Cloud Function guides
#44366 - Qute: generation of qute-i18n-examples doesn't handle localized enums
#44371 - Make @QuarkusMainTest respect quarkus.test.profile.tags
#44384 - quarkus-grpc: Generate proto files from dependencies no longer works since Quarkus 3.16
#44385 - Qute: fix generation of qute-i18n-examples
#44388 - Fix some invalid configuration cases for doc generation and fail the build if some description are missing
#44398 - Fix Keycloak DevService property doc typo
#44400 - jbang devmode not honoring properties
#44412 - QuteErrorPageSetup does not support templates that are not backed by a file
#44415 - Propagate Runtime properties in JBang Dev mode
#44416 - QuteErrorPageSetup: support templates that are not backed by a file
#44417 - Reflection-Free-Serializers issue with 3.16.2
#44421 - Fix deserialization of null maps in reflection-free Jackson deserializers
#44425 - Bump resteasy.version from 6.2.10.Final to 6.2.11.Final
#44426 - Bump io.micrometer:micrometer-bom from 1.13.6 to 1.13.7
#44432 - Forcing initializing compilejava if empty

`v3.16.2`

Compare Source

Complete changelog

#34824 - AmazonLambdaRecorder Handler Discovery Erroneously Considers Decorators
#38086 - Documentation about RecordCodecProvider in MongoDB with Panache
#42149 - Upgrade Postgres 16
#44039 - WebSockets Next: create a new event loop context for each client
#44132 - Update getting-started-reactive.adoc
#44149 - Fix Config Error Screen
#44152 - Do not throw NPE in AfterAll interceptor if application didn't start
#44155 - Amazon Lambda - Support decorators
#44156 - Make OidcRequestContextProperties modifiable
#44178 - Bump com.fasterxml.jackson:jackson-bom from 2.18.0 to 2.18.1
#44183 - Properly apply the update recipes in version order
#44184 - Add Support for Trusted Proxy Detection on Forwarded Requests
#44185 - Repeating @PermissionsAllowed annotations totally disable method authentication
#44189 - Small improvements to the Deploying to Google Cloud guide
#44190 - ResteasyReactiveProcessor#setupEndpoints reports duplicate endpoints when a rest client matches a resource
#44191 - Update PostgreSQL image to 17
#44201 - Broken link
#44202 - Broken link?
#44203 - Make OidcRequestContextProperties modifiable
#44204 - Fix broken doc links
#44207 - Bump bouncycastle.version from 1.78.1 to 1.79
#44209 - Bump io.quarkus.develocity:quarkus-project-develocity-extension from 1.1.6 to 1.1.7
#44221 - Add extension description for websockets next
#44227 - Add stork-configuration-generator as an annotationProcessorPath
#44229 - ContainerResponseFilter with @Priority(Integer.MIN_VALUE) will be actually invoked with max priority
#44232 - Quartz: use a more reasonable default for quarkus.quartz.thread-count
#44235 - 3.16: @WithTestResource starts all test resources (regression)
#44237 - Properly implement priority of ContainerResponseFilter
#44238 - Refactor SecurityTransformerUtils to consider repeated annotations
#44239 - Replace oidc auth facebook screenshots with generic ones
#44244 - Bump quarkiverse-parent to 18
#44245 - Delete disabled job
#44248 - Ignore client interfaces when detecting duplicate endpoints
#44263 - Quarkus Dev UI - Clicking on gRPC - Services - service implementation class Uncaught exception received by Vert.x
#44277 - Dev UI Open in IDE make sure lineNumber is in quotes
#44279 - Limit MATCHING_RESOURCES TestResources to the test that declares them
#44281 - Included pages within a fragment ignores rendered=false property.
#44298 - Qute: fix rendered=false if a fragment includes nested fragment
#44300 - When testing request payload is populated with string "null" if enable-reflection-free-serializers enabled
#44309 - Avoid deserializing null nodes in reflection free Jackson serialization
#44316 - Duplicated field serialization using the generated reflection free Jackson serializers
#44317 - Avoid duplicated field serialization in reflection free Jackson serializers
#44321 - Use Java 21 by default in the Deploying to Google Cloud guide
#44322 - Explain in MongoDB docs that records are supported
#44324 - Take config annotation when trying to match test resources

`v3.16.1`

Compare Source

Complete changelog

#37216 - Building my first extension missing test result in failure
#43825 - BeanArchiveProcessor#build threw an exception: Local name must not be null
#43854 - Hardcoded reference to Quinoa in qute template for quarkiverse projects
#43888 - Bump io.micrometer:micrometer-bom from 1.13.5 to 1.13.6
#43930 - Clarify tech preview status of OTel logs and metrics in docs
#43980 - Failing devservices-containing @QuarkusIntegrationTest for container-image.build=true on MacOS
#43997 - Some Native tests don't run due to failsafe true
#44051 - Fix hardcoded URL in generated codestart.yml
#44058 - Bump com.google.cloud.tools:jib-core from 0.27.0 to 0.27.2
#44063 - Undertow: ignore missing servlet class in web.xml
#44069 - Recently added ReflectionFreeSerializationTest is very unstable
#44072 - Fix NoClassDefFoundError when using vertx without http
#44076 - Replace oidc auth google screenshots with generic ones
#44080 - Generating Jackson serializers for concrete classes only
#44081 - Run ChainedLocalRepositoryManagerTest in offline mode to avoid querying Central for test artifacts
#44086 - Replace oidc auth microsoft screenshots with generic ones
#44098 - Upgrade to Jandex 3.2.3
#44120 - Fix Elasticsearch DevService network for @QuarkusIntegrationTest for docker-image-building
#44125 - 3.16.0: ExtendedQuarkusVertxHttpMetrics not found in tests
#44126 - Resources should be found from the classpath instead in web dep locator
#44128 - Safer lookup and generate static resources for web dep locator
#44139 - Remove Failsafe plugin config in AWT testing
#44141 - Codestarts - Do not reference ITs module if extension without ITs
#44159 - Upgrade Caffeine to 3.1.8
#44161 - Add a capability for OIDC client extension

`v3.16.0`

Compare Source

Complete changelog

#42064 - Self changes of column names to non-exist column names by PanacheJpaUtil#getFastCountQuery
#43036 - quarkus plug sync no longer removes plugins provided by extensions
#43191 - quarkus plugin sync is broken
#43192 - Fix Quarkus plugin syncing
#43483 - Add GraphQL Footer Log in Dev UI
#43631 - Quarkus REST fails to write polymorphic type property in JSON
#43700 - Use generic return type of method to construct proper Jackson writer
#43801 - Kafka snappy conversion fails on native aarch64 for missing native library
#43852 - ClassCastException when using OpenTelemetry and max-connections property
#43882 - WebSockets Next: Security cleanup
#43895 - Don't pass '--enable-monitoring=heapdump' unconditionally on windows
#43896 - Don't pass '--enable-monitoring=heapdump' unconditionally on windows
#43898 - ArC: register synthetic injection points in a separate phase
#43905 - Move snappy native library resource registration to a feature
#43917 - Realign JUnit versions and update to 5.10.5
#43919 - Fix Class Cast Exception when using OpenTelemetry and max-connections property
#43944 - NPE in Qute on hot-reload (with generated templates)
#43953 - Qute message bundles: change the way message templates are loaded
#43963 - Use original query case for fast count queries
#43964 - Remove outdated section about DNS in Mongo
#43967 - Upgrade to Hibernate Commons Annotations 7.0.3.Final
#43988 - Add dev-mode setting for forcing the use of C2
#43994 - Check expiry of the cached OIDC token introspections
#43996 - Add RESTEasy Class Multipart capability
#44029 - Replace oidc authentication for github screenshots with generic ones
#44032 - Avoiding forcing resolution when configuring QuarkusApplicationModelTask

`v3.15.3`

Compare Source

Complete changelog

#37040 - The flyway extension generates Kubernetes resources as if quarkus.flyway.enabled was a runtime property
#43392 - Quarkus does not decompress Brotli requests in native mode
#43676 - Undertow CacheResourceManager can cause frequent GC
#43694 - Undertow - Only load resources that are known
#43875 - Qute: fix evaluation of section parameters
#43944 - NPE in Qute on hot-reload (with generated templates)
#43953 - Qute message bundles: change the way message templates are loaded
#43980 - Failing devservices-containing @QuarkusIntegrationTest for container-image.build=true on MacOS
#44098 - Upgrade to Jandex 3.2.3
#44120 - Fix Elasticsearch DevService network for @QuarkusIntegrationTest for docker-image-building
#44126 - Resources should be found from the classpath instead in web dep locator
#44128 - Safer lookup and generate static resources for web dep locator
#44184 - Add Support for Trusted Proxy Detection on Forwarded Requests
#44281 - Included pages within a fragment ignores rendered=false property.
#44298 - Qute: fix rendered=false if a fragment includes nested fragment
#44348 - Enable Brotli decompression
#44352 - Make sure the result from QCL.getElementsWithResource(name) does not include duplicates
#44366 - Qute: generation of qute-i18n-examples doesn't handle localized enums
#44385 - Qute: fix generation of qute-i18n-examples
#44468 - Use QUARKUS_FLYWAY_ACTIVE instead of QUARKUS_FLYWAY_ENABLED env in Kubernetes resources
#44471 - JDK 23 new console is causing a serious regression in startup
#44505 - Log in smallrye-jwt and oauth2 extensions when no bearer access token is available
#44509 - Updates to Infinispan 15.0.11.Final
#44515 - Coordinated Vert.x 4.5.11 upgrades
#44564 - A NoSuchMethodException is raised when a rest resource is called with a Jakarta Reader/Writer interceptor defined
#44576 - Cannot build TODO demo app on windows into uber-jar since quarkus 3.16.1
#44584 - Fix wrong web endpoint path for resource on Windows
#44592 - Docs: dev mode differences - remove the link for old Dev UI
#44613 - Register method for reflection when read or write interceptors exist
#44653 - Dev console "crashes" with Java 23
#44678 - Fix glob to regex conversion to properly handle **/*.suffix
#44703 - [3.15] Upgrade to Hibernate ORM 6.6.3.Final
#44704 - Fix TLS config Javadoc typo
#44709 - Fix leftover -reactive properties references in REST client guide
#44754 - Fix retry count in remote dev mode error message
#44761 - Re-enable OIDC wiremock tests once a new certificate chain is available
#44788 - Bump org.jboss.logmanager:jboss-logmanager from 3.0.6.Final to 3.1.0.Final
#44795 - Fix typo with classes() method
#44796 - Default to old console if user has not set it
#44808 - Use CertificateGenerator in OIDC Wiremock tests
#44834 - Fix off-by-one error in exception decoration code
#44914 - LogManager error of type GENERIC_FAILURE
#44939 - Docs: Fix missing groupId in rest-virtual-threads.adoc
#44946 - Bump org.jboss.logmanager:jboss-logmanager from 3.1.0.Final to 3.1.1.Final
#44975 - Quarkus Generator for gradle projects generates broken GitHub-Workflow
#44983 - Fix ci.yml for Gradle projects
#45003 - Fix code indentation
#45007 - Properly substitute {quarkus-version} in native-reference.adoc
#45016 - Correct dependency notation in documentation for observability-devservices-lgtm.adoc
#45026 - Build with devservices failed because download of redpanda leads to 404
#45028 - Move from vectorized/redpanda images to redpandadata/redpanda
#45114 - Register for reflection Pageable class
#45153 - Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4

`v3.15.2`

Compare Source

Complete changelog

#36336 - @CacheResult on legacy @RegisterRestClient throws CCE on 3.4.2
#37430 - Docs: OpenID Connect (OIDC) and OAuth2 Client and Filters Reference Guide
#40007 - Add ability to hide rest endpoints from OpenAPI schema / Swagger
#41813 - Keycloak container consumes too much memory in devmode
#42064 - Self changes of column names to non-exist column names by PanacheJpaUtil#getFastCountQuery
#42237 - Warning about failing to index Spring class on reload
#42238 - Transfer-Encoding header is set twice
#42425 - Fetchgraph does not prevent Hibernate from fetching lazy one-to-one relationships
#42520 - FAQ (frequently asked questions) documentation for extensions
#43036 - quarkus plug sync no longer removes plugins provided by extensions
#43191 - quarkus plugin sync is broken
#43192 - Fix Quarkus plugin syncing
#43245 - ArC: fix the situation when a framework bean uses an application decorator
#43290 - Using reusable workflows in Quarkiverse release process
#43307 - Enum values are not displayed in extension documentation
#43319 - Unable to run application with kafka-stream on aarch64 built using native builder image
#43326 - Hibernate-Reactive: ClassCastException EmbeddableInitializerImpl to ReactiveInitializer
#43347 - Bump microprofile-reactive-streams-operators.version from 3.0 to 3.0.1
#43348 - Bump hibernate-orm.version from 6.6.0.Final to 6.6.1.Final, hibernate-reactive.version from 2.4.0.Final to 2.4.1.Final
#43352 - Use ChainedLocalRepositoryManager to support -Dmaven.repo.local.tail
#43364 - Issue with multiform data rest client on Quarkus 3.14
#43373 - Application hangs on https=http port check failure
#43376 - Properly fail when both http and https servers started on port
#43383 - Add Javadoc for DevMojo#jvmArgs
#43420 - Use varargs for localRepositoryTail
#43422 - HTTP HEAD to @GET endpoint of (reactive) Jakarta RESTful web services sub resource returns 405
#43424 - Migrating to 3.13.0 results in failure on quarkus reactive routes
#43425 - Avoid SecurityContextOverrideHandler NPE when user provided custom JAX-RS security context and Quarkus Security is not present
#43437 - Make media type optional for InputStream when using multipart in REST Client
#43439 - WebSockets Next: ignore non-websocket connections
#43440 - Support @HEAD and @OPTIONS in sub-resources
#43459 - Make sure Transfer-Encoding set by a Resource is honored
#43471 - ConcurrentModificationException when Quarkus Micrometer extension is used
#43472 - Can't perform augmentation when using gRpc extension
#43473 - quarkus:update fails on Windows with quarkus-cli
#43474 - Improper defaults in KubernetesClientBuildConfig
#43475 - Inherit defaults from Fabric8 kubernetes client defaults
#43489 - Qute Generated ValueResolver for interface default methods
#43490 - Bump kubernetes-client-bom from 6.13.3 to 6.13.4
#43498 - Qute: improve docs/javadoc about value resolvers ordering
#43501 - Update quarkus-spring-api to 6.1.SP4
#43502 - OpenTelemetry instrumentation still active after quarkus.otel.sdk.disabled=true
#43515 - Check whether a dependency has resolved paths before setting a component path
#43518 - Mailer: default mailer beans are not registered if only mail template record is used
#43519 - Quiet down logs of observability DevResources
#43524 - Mailer: register default mailer beans correctly
#43531 - Remove deprecated RunOptions mention in the transactions docs
#43532 - Fixed trust all option after reload (TlsRegistry)
#43534 - The WebSocket Dev UI widget does not connect for nested classes
#43535 - Disable instrumentation according with SDK config
#43536 - Quarkus Update - Replace \ by / in rewriteFile path on Windows
#43551 - Stacktrace container overflows in error page
#43552 - Add overflow-x scroll
#43560 - WebSockets Next: fix Dev UI for nested endpoint class
#43568 - Improve GitHub Actions cache usage
#43574 - Update Maven Archetype Plugin to 3.3.0
#43583 - Generated ID token can be attempted to be verified as if it was issued by the OIDC/OAuth2 provider
#43585 - Check self-signed ID token when access token is verified
#43591 - Qute: fix reload of templates backed by build item
#43592 - Add note about ExceptionMapper<ValidationException> in validation guide
#43593 - Openapi-swaggerui guide - reference MicroProfile OpenAPI Core configuration
#43601 - Keycloak container consumes too much memory in devmode
#43602 - Qute: fix generated ValueResolvers
#43624 - Properly test for existence of OtlpMeterRegistry
#43628 - Undertow: UnsupportedOperationException using servlet filter in SSL
#43629 - Updates Infinispan to 15.0.9.Final
#43632 - Split Quarkiverse release into two workflows
#43633 - Config Doc - Expand enums even if tooltip is not supported
#43645 - Bump Micrometer to 1.13.5
#43653 - Qute: fix generated ValueResolver for default methods with params
#43680 - Bump to Quarkus HTTP 5.3.3
#43681 - JBangIntegration needs some TLC ASAP
#43697 - Bump org.hibernate.reactive:hibernate-reactive-core from 2.4.1.Final to 2.4.2.Final
#43701 - Keycloak devservice restarts with every update in devmode
#43718 - Fix faulty class loader
#43733 - AppCDS docs on usage with JIB are slightly misleading
#43762 - Add quarkus.hibernate-orm.database.version-check.enabled
#43779 - Manage angus-mail in the bom
#43782 - Move rocksdb native library resource registration to a feature
#43784 - [rest-client] @RestForm does not work with a Map
#43789 - Writing a Dev Service doc fixes
#43791 - Add equals and hashcode method to MemorySize configuration class to fix unnecessary Keycloak Dev Service reloading
#43805 - Add io.netty.versions.properties to native image resources
#43825 - BeanArchiveProcessor#build threw an exception: Local name must not be null
#43827 - Prefer hosting-independent URL for quarkiverse docs
#43832 - Cache: fix CacheInterceptor in case of non-ArC interceptor bindings
#43852 - ClassCastException when using OpenTelemetry and max-connections property
#43854 - Hardcoded reference to Quinoa in qute template for quarkiverse projects
#43855 - Properly handle Map of form params in REST Client
#43857 - Updates to Infinispan 15.0.10.Final
#43876 - Not up-to-date documentation in guide for using Cloud SQL with native executables
#43879 - Adding some additional conditionals for the TLS guide
#43884 - Tweaking the Datasource guide content conditionals
#43901 - Update Google Cloud SQL guide
#43909 - Use the correct event type CertificateUpdatedEvent in TLS Registry reference
#43918 - CI - Do not populate the cache for MRs as we won't store it
#43919 - Fix Class Cast Exception when using OpenTelemetry and max-connections property
#43928 - Application of the QE feedback for the Datasource guide
#43946 - Update appcds.adoc
#43962 - Fix typo in rest-client doc
#43963 - Use original query case for fast count queries
#43967 - Upgrade to Hibernate Commons Annotations 7.0.3.Final
#43970 - Small fixes for OIDC client guides
#43976 - Fix AsciiDoc links syntax
#43977 - Wording fix in HTTP reference
#43978 - MultiStage Docker instructions needed chmod ./mvnw
#43997 - Some Native tests don't run due to failsafe true
#44010 - Jacoco report incomplete when using surefire plugin argLine property
#44020 - Docs typo fixes - specificed, agrument
#44038 - Docs typo fix - use proper SmallRye, RESTEasy and PostgreSQL names
#44043 - Docs typo fixes
#44051 - Fix hardcoded URL in generated codestart.yml
#44056 - Jacoco doc argLine with late property evaluation
#44062 - Update security-architecture.adoc
#44063 - Undertow: ignore missing servlet class in web.xml
#44070 - Unwrap tooltips in the downstream configuration reference docs
#44072 - Fix NoClassDefFoundError when using vertx without http
#44085 - Missing space in code example for OpenTracing to OpenTelemetry mapping
#44091 - Update security-vulnerability-detection.adoc
#44125 - 3.16.0: ExtendedQuarkusVertxHttpMetrics not found in tests
#44132 - Update getting-started-reactive.adoc
#44139 - Remove Failsafe plugin config in AWT testing
#44149 - Fix Config Error Screen
#44161 - Add a capability for OIDC client extension
#44163 - Fix OIDC Bearer tutorial link name
#44164 - Add information about 'from' in mailer docs
#44183 - Properly apply the update recipes in version order
#44185 - Repeating @PermissionsAllowed annotations totally disable method authentication
#44221 - Add extension description for websockets next
#44232 - Quartz: use a more reasonable default for quarkus.quartz.thread-count
#44238 - Refactor SecurityTransformerUtils to consider repeated annotations
#44263 - Quarkus Dev UI - Clicking on gRPC - Services - service implementation class Uncaught exception received by Vert.x
#44277 - Dev UI Open in IDE make sure lineNumber is in quotes
#44363 - [3.15 LTS] Avoid duplicated field serialization in reflection free Jackson serializers
#44430 - Hibernate: Silence DB connection info logging
#44525 - [3.15] Realign Infinispan version to 15.0.8.Final

quarkusio/quarkus-platform

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Feb 21, 2025 by Renovate Bot

chore(deps): update all non-major dependencies

Release Notes

Added

Fixed

Liquibase 4.31.1 is a patch release

Notable Changes

[OSS]

[MRO] Changelog

🐛 Bug Fixes 🛠️

[OSS] Changelog

🐛 Bug Fixes 🛠️

🤖 [OSS] Security, Driver and Other Updates

Snowflake vulnerability update CVE-2025-24789

Get Certified

Read the Documentation

Join the Community

File Descriptions

Bug Fixes

Improvements

Bug Fixes

Features

Bug Fixes

New features

Bug fixes

Backwards-incompatible changes

New features

Bug fixes

Backwards-incompatible changes

Added

Fixed

Changed

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Complete changelog

Configuration

Merge request reports