quarkus - 米舟开源

quarkusio/quarkus

Watch

Star

Fork

简介统计版本

3 days ago

quarkus

quarkusio

4.0.0.Beta2

Major changes

#54900 - Add OIDC Client attestation authentication
#57391 - Introduce JFR events to REST Client

Complete changelog

#2003 - Document how to create a multi-module Maven project
#21866 - Support import.sql or similar facility for data population when not using Hibernate to create the schema
#29462 - DevUI CORS - hostname dns reverse lookup use-case
#32850 - be able to set root log level via dev ui
#33564 - Allow the FastBootEntityManagerFactoryBuilder to use a custom SessionFactoryBuilder that can decorate the Hibernate SessionFactory
#39300 - Remove kubernetes client split package check
#40490 - OIDC and OIDC-CLIENT extensions should consider JVM HTTP proxy configuration
#40882 - Transaction-Scoped observer on transaction end sometimes fails if the transaction is aborted
#41668 - Quarkus recorder serialization
#42315 - reactive-messaging extension fails to lookup generic payload converter
#44726 - io.quarkus.gradle.extension is split across multiple modules
#47761 - Metrics for the quarkus-load-shedding extension
#48763 - Gradle testLogging.showStandardStreams = false ignored by Quarkus tests with JBoss LogManager
#49108 - Quarkus OpenTelemetry Metrics must have JFR monitoring option enabled
#51207 - Use parametrised tests for Hibernate ORM/Reactive interoperability
#52349 - Test classes with @Nested classes fail in dev-mode (again)
#52682 - Consider supporting OAuth2 Attestation-based Client Authentication
#52872 - Allow assigning entities to persistence units on a per-class basis
#53042 - Dependency-based service startup/shutdown actions
#53368 - Panache Next: detect and prevent being used with Panache 1
#53378 - GraalVM dynamic bootstraps registration
#53610 - Fix Gradle testLogging.showStandardStreams being ignored by Quarkus tests
#54252 - Hibernate Validator programmatic cascading constraint does not register class for Validation
#54323 - Add types of programmatic constraint mappings to validator config
#54602 - Continuous testing - Handle nested classes better
#54900 - Add OIDC Client attestation authentication
#55135 - Refactor Hibernate Reactive compatibility tests to use @ParameterizedClass
#55264 - Service start/stop infrastructure
#55548 - Module tree shaking for JLink
#55650 - XML parsers are always included in native images when using Jackson 3
#55726 - Netty's MXBean reflective access at startup to obtain the max direct memory
#55780 - Read the compareAndExchange witness correctly in ArC CurrentContextState.set
#55998 - Include the Jackson 3 DOM handlers in native images only when a DOM type is reachable
#56189 - Cache API Library
#56243 - Run Roq tests on PRs that change docs
#56264 - TLS registry: fail fast when the OpenSSL engine is requested in a native executable
#56323 - Dev container deep dependencies
#56350 - Work around transient dev services connection to podman
#56450 - Fail the build when classic Panache is used with Quarkus Data
#56543 - Split quarkus-cache into extension and API library
#56545 - Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.2 to 3.16.0
#56555 - Resolve dev service config dependency chains deeper than one level
#56567 - Bump org.eclipse.jgit:org.eclipse.jgit from 7.7.1.202607240634-r to 7.8.0.202609011348-r
#56624 - Do not register a synchronization on a transaction that is completing
#56636 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.134 to 0.0.135
#56640 - Bump apicurio-registry.version from 3.3.2 to 3.3.3
#56643 - Bump io.strimzi:strimzi-test-container from 0.116.0 to 0.117.0
#56655 - Flaky test: io.quarkus.load.shedding.NaiveLoadSheddingTest.test
#56670 - Document dev mode in multi-module Maven projects
#56672 - Bump com.gradle.plugin-publish from 2.2.0 to 2.2.1 in /devtools/gradle
#56673 - Bump com.gradle.develocity from 4.5.0 to 4.5.1 in /devtools/gradle
#56698 - Honor non-proxy-hosts and the none proxy name in the OIDC extensions
#56710 - Document how to open Dev UI through another host name
#56720 - Add Hibernate ORM data init scripts and deprecate sql-load-script
#56742 - Keep the type arguments of the ingested payload type of messaging methods
#56808 - Flaky test: io.quarkus.test.QuarkusProdModeTestConfusingLogTest.shouldWaitForAppActuallyStarted
#56813 - amazon-lambda dev mode: the hot-replacement requeue always 404s and stops the freshly restarted application
#56826 - Fix Amazon Lambda dev mode hot reload causing application shutdown
#56839 - Bump org.asynchttpclient:async-http-client from 2.16.0 to 2.16.1 in /bom/application
#56879 - Docs: the REST Client guide never names the REST Client JSON-B extension
#56880 - Add the missing guide links to the metadata of 19 extensions
#56921 - quarkus-data-hibernate.doc is now a reference guide
#56929 - Deprecate JPMSExportBuildItem
#56935 - @QuarkusTest restarts leave stale SessionFactory in static OpenedSessionsState cache → UnknownServiceException: ReactiveConnectionPool
#56939 - Swagger UI generates absolute spec URL (url: '/openapi') — broken behind a reverse proxy in K8s
#56948 - Add contribution guidelines for reproducible builds in Quarkus
#56951 - Export the Dev UI observability dashboard to Grafana
#56953 - Fix Swagger UI URL behind reverse proxies
#56963 - @TestHTTPEndpoint and @TestHTTPResource ignore custom port when using quarkus-amazon-lambda-http
#56984 - Support @RestHeader with MultivaluedMap<String, String>
#56985 - Support MultivaluedMap<String, String> to collect HTTP headers
#56988 - Lock on the transaction key when registering the first interposed synchronization
#56995 - Fix the Dev UI routes page failing when a sub-router is mounted
#57000 - Use ECS field names for structured access log fields when log-format=ECS
#57009 - Warn about static resource shadowing of JAX-RS resources
#57024 - Bump org.codehaus.mojo:templating-maven-plugin from 3.1.0 to 3.1.1
#57025 - Bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10
#57026 - Add dedicated section for using the OpenSSL engine on classical TLS paths
#57031 - Stop sharing packages between the Gradle model and the Gradle plugin
#57035 - reachability-metadata.json stable order of elements
#57038 - Finish the Dev UI package split
#57045 - Occasional CI failure: testContainerReusedAcrossRuns
#57050 - Native: config validation fails at startup with MissingReflectionRegistrationError on GraalVM 25.1 and later
#57052 - Bump tools.jackson:jackson-bom from 3.1.4 to 3.1.7
#57053 - Bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20
#57054 - Bump org.codejive:java-properties from 0.0.7 to 0.0.8
#57055 - Bump kafka.version from 4.2.1 to 4.2.2
#57056 - Bump com.h2database:h2 from 2.4.240 to 2.5.252
#57061 - Add IBM Bob to Dev MCP settings
#57062 - Create Semeru SCC when quarkus.package.jar.aot.phase is auto or absent and the JVM is Semeru
#57063 - Redis client: <default> client is created twice when RedisDataSource is injected ("Gauge redis.pool.queue.size has been already registered")
#57064 - WebSockets Next: fix NPE during security identity update
#57066 - Use the module names that dependencies now provide
#57069 - Let quarkus-vertx-utils use Vert.x internals in a jlink image
#57072 - Create the Redis client only once per client name
#57073 - Add JSON-B alternatives to the REST client guide
#57080 - WebSockets Next: client onClose not called when the close handshake times out ("Invalid status code: 1006")
#57081 - WebSockets Next: BasicWebSocketConnector adds a '/' to the base URI path when no path is set
#57085 - Do not try running validation on unconstrained configs
#57088 - Upgrade OTel SDK to 1.65.0
#57089 - OIDC protected resource metadata response has no Content-Type
#57094 - Set Content-Type on OIDC protected resource metadata response
#57099 - WebSockets Next: Do not append a trailing slash to the BasicWebSocketConnector base URI
#57103 - Fix incorrect references and typos in documentation
#57109 - Config doc uses the default prefix when compiled with the Eclipse compiler (ECJ)
#57110 - Config doc: identify annotation members by simple name
#57111 - Update Jackson customization documentation
#57113 - WebSockets Next: correct close reason when connection is closed abruptly
#57118 - Clear Hibernate Reactive session caches on shutdown
#57119 - Disable Semeru on CI
#57131 - REST Client NPEs when invoked from a duplicated Vert.x context with no context locals set
#57132 - Avoid NPE when the REST Client is invoked from a bare duplicated context
#57135 - Keycloak Authorization: validate non-proxy-hosts not used during application startup
#57136 - Keycloak Authorization: move build time config to build module and address deprecations in Keycloak Admin
#57139 - Use ECS field names for structured access log fields in ECS format
#57140 - Remove the unclosed Gradle conditional from the update guide
#57141 - Prevent duplicate HTTP security policy checks across normalization forms
#57144 - Add TLS registry capability for extensions relying on its SPI
#57145 - Document how JVM options that add modules affect the AOT cache
#57148 - Bump SmallRye Certificate Generator to version 1.1.3
#57149 - Move to ubuntu-slim for small, administrative tasks
#57151 - Switch Develocity URL to develocity.quarkus.io and use DEVELOCITY_ACCESS_KEY
#57154 - Register Vert.x ClientMultipartFormUpload for runtime initialization
#57156 - Remove stale Apicurio Registry GraalVM substitutions
#57159 - Allow assigning entities to persistence units on a per-class basis
#57161 - Bump org.mockito:mockito-bom from 5.21.0 to 5.24.0
#57162 - Netty: Open package sun.nio.ch from java.base module
#57164 - Update Kotlin to 2.4.20
#57166 - Update Narayana LRA to 2.0.1.Final
#57171 - Bug fixes found when developing parallel start
#57174 - Service start/stop is breaking build reproducibility
#57179 - Migrate hibernate-orm deployment tests from RESTEasy Classic to Quarkus REST
#57180 - Unwatch Redis cache keys when value loading fails
#57181 - OTel tracing set to 100% in tests
#57185 - Build(deps): Bump org.mvnpm:type-fest from 5.8.0 to 5.10.0
#57186 - Bump org.eclipse.microprofile.openapi:microprofile-openapi-api from 4.2-RC4 to 4.2-RC5
#57187 - Bump org.eclipse.microprofile.health:microprofile-health-tck from 4.0.1 to 4.0.2
#57189 - Build(deps-dev): Bump com.google.guava:guava from 33.7.1-jre to 33.7.2-jre
#57191 - Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0
#57192 - Use Maven wrapper in preview workflow
#57194 - Bump and migrate to Vert.x 5.2.2 and Netty 4.2.19
#57199 - Update system-stubs-jupiter to 2.1.8
#57202 - @ConfigMapping from a dependency is ignored when an extension config root is indexed before it (regression in 4.0.0.Beta1)
#57203 - Keep discovering config mappings after an indexed extension config root
#57204 - Extract quarkus-flyway-common and add MongoClientSchemaReadyBuildItem
#57205 - Create the OIDC Redis token state manager bean without a recorder
#57206 - Register the SmallRye Health startup work as services
#57209 - Fix argument order in SortedNullSafeMap two-entry factory method
#57210 - Update Develocity extension to 1.4.0
#57211 - Update Elytron to 2.9.4
#57220 - Remove bytecode recorders from: extensions/smallrye-health
#57224 - Remove bytecode recorders from: extensions/keycloak-admin-resteasy-client
#57225 - Drop stale patch code to fix docs CI
#57226 - Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0
#57229 - Bump org.eclipse.microprofile.config:microprofile-config-tck from 3.1.1 to 3.1.2
#57231 - OidcClient cache ignores changes in additional params
#57234 - Bring back preview.yml to ubuntu-latest
#57236 - Set up a JDK before publishing Develocity build scans
#57240 - JAR tree-shaking removes classes referenced only from an invokedynamic call site type (NoClassDefFoundError with vertx-core LoadBalancer)
#57241 - Tree-shaking: keep classes referenced from invokedynamic call site descriptors
#57245 - Hibernate ORM: a zipped sql-load-script makes packaged applications fail to start
#57246 - Support zipped Hibernate ORM SQL load scripts in packaged applications
#57247 - Bug fix: Any unknown class loader should be considered the run time class loader
#57250 - Bump at.yawk.lz4:lz4-java from 1.11.1 to 1.11.4 in /bom/application
#57252 - Upgrade snappy-java to 1.1.10.11
#57253 - Quarkus 4.0.0.Beta1: Dev UI resources stay pending over HTTP/2 (TLS)
#57255 - Reproducibility issue - BuildStep#getId() included in bytecode
#57257 - MongoDB with Panache: multi-field PanacheQL update (a = ?1 and b = ?2) fails since 3.37 because and is bound as $and inside $set
#57262 - Fix multi-field PanacheQL updates in MongoDB with Panache
#57269 - Fix incorrect references and typos in kafka guide
#57273 - Remove bytecode recorders from: extensions/mailer
#57274 - Go back to ubuntu-latest for develocity-publish-build-scans.yml
#57277 - DevUI errors
#57279 - Bump com.gradle:develocity-maven-extension from 2.5.0 to 2.6.0
#57282 - Bump org.bouncycastle:bctls-fips from 2.1.24 to 2.1.25
#57288 - Reproducibility: use the class name for default step ID
#57293 - Remove bytecode recorders from: extensions/kubernetes-config
#57294 - Remove bytecode recorders from: extensions/kubernetes-client
#57295 - Remove bytecode recorders from: extensions/kafka-client
#57296 - Remove bytecode recorders from: extensions/jaxb
#57297 - Remove bytecode recorders from: extensions/narayana-lra
#57298 - Remove bytecode recorders from: extensions/kafka-streams
#57299 - Remove bytecode recorders from: extensions/avro
#57300 - Remove bytecode recorders from: extensions/micrometer-opentelemetry
#57301 - Remove bytecode recorders from: extensions/observation
#57302 - Create the mailer beans without a recorder
#57305 - Correct the SPIFFE JWT source value in the OIDC client reference
#57306 - Fix a bug and a race with service-to-recorder bridging
#57307 - Register the Kafka client startup work as services
#57308 - Bind the JAXB classes through a service
#57309 - Register the Narayana LRA startup work as services
#57310 - Create the Kafka Streams support bean without a recorder
#57313 - Fix Dev UI websocket NPE when the JSON-RPC codec is not initialized yet
#57320 - Services: captured inaccessible classes produce an error
#57321 - Dynamically load classes when necessary
#57323 - Bump com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3
#57324 - Bump org.eclipse.microprofile.health:microprofile-health-api from 4.0.1 to 4.0.2
#57326 - Bump asm.version from 9.10.1 to 9.11
#57327 - Bump eu.maveniverse.maven.scalpel:extension3 from 0.4.2 to 0.4.3
#57333 - Bump elasticsearch-opensource-components.version from 9.4.7 to 9.4.8
#57335 - Bump to Vert.x 5.1.10 and Netty 4.2.19.Final
#57336 - Remove bytecode recorders from: extensions/keycloak-admin-rest-client
#57340 - Use branch instead of commit to identify PR
#57344 - ArC can create two client proxies for one bean during start-up, and QuarkusMock then reaches only one of them
#57345 - Stop ignoring split packages in the Kubernetes client
#57346 - RESTEasy Reactive multipart parser: malformed body throws message-less RuntimeException (500 instead of 400); boundary state machine AIOOBE in ParseState.entity
#57347 - Register the Keycloak admin RESTEasy client startup work as services
#57348 - Prevent concurrent creation of multiple client proxies in ArC
#57354 - Migrate Micrometer OpenTelemetry from recorders to services
#57355 - Fix flaky dev services container reuse tests by choosing a free port at runtime
#57356 - Fix NPE in Undertow exception handling when a 500 error page is mapped
#57357 - Register the Avro startup work as services
#57358 - Register the Kubernetes Config secrets warning as a service
#57360 - Create the Kubernetes resource classes bean with a bean creator
#57361 - Create the ObservationRegistry bean without a recorder
#57363 - Return 400 for malformed multipart body instead of 500 (RESTEasy Reactive)
#57368 - security-jpa-reactive native test fails despite LambdaStrategy.ANONYMOUS_CLASS
#57369 - Notify area/panache and area/data owners on pull requests
#57371 - [graal/master] Generated Quarkus Feature throws NoSuchMethodError: registerBuildTimeIndyIncludeList
#57372 - Add focused Hibernate ORM processor tests
#57373 - RESTEasy Classic allocates response buffers from a second Netty allocator
#57376 - Remove deprecated QuarkusUnitTest and flatten hierarchy
#57377 - Prevent ResteasyReactiveRecorder from capturing TCCL in anonymous lambda
#57378 - Use the public GraalVM bootstrap registration API in GraalVM 25.4
#57379 - Correct three errors in the SmallRye Health guide
#57381 - Maven 3.10.0 breaks workspace bootstrap when the platform version is supplied on the command line
#57385 - Correct the Ansible JDK default and the Jib working directory note
#57386 - Register the Keycloak admin REST client startup work as services
#57391 - Introduce JFR events to REST Client
#57392 - Update to Flyway 13
#57393 - Deprecate or remove the ignored Hibernate ORM log-session-metrics configuration
#57394 - Manage guava in application BOM
#57395 - Allow setting the root log level in the Dev UI
#57396 - Hibernate Reactive Panache: since 3.38, @WithSession / @WithTransaction / Panache.withSession() open the session (and BEGIN) at method invocation instead of at Uni subscription
#57397 - Use Netty's default allocator for RESTEasy Classic response buffers
#57400 - Deprecate JPMSExportBuildItem and unify native-image exports
#57401 - Remove Jackson Databind from Vertx
#57402 - Deprecate quarkus.hibernate-orm.log-session-metrics property
#57403 - Upgrade protoc & protobuf-java to 4.35.1
#57406 - Build(deps): Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
#57407 - Build(deps): Bump rest-assured.version from 6.0.1 to 6.1.0
#57409 - Build(deps): Bump de.thetaphi:forbiddenapis from 3.10 to 3.11
#57410 - Build(deps): Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.10 to 25.3.2
#57411 - Build(deps): Bump org.checkerframework:checker-qual from 4.2.3 to 4.3.1
#57415 - Build(deps): Bump org.commonmark:commonmark from 0.30.0 to 0.30.1
#57422 - Security JPA Reactive: restore the anonymous class lambda strategy
#57426 - Fix jlink image startup after the service graph and client proxy changes
#57427 - Let Quarkus REST build responses in a jlink image
#57428 - Let WebSockets Next use Mutiny and Vert.x internals in a jlink image
#57429 - Applications packaged with quarkus-jlink fail to start on main
#57430 - Quarkus REST cannot build responses in a jlink image
#57431 - WebSockets Next endpoints fail to instantiate in a jlink image
#57438 - Add mdc.key-overrides to rename MDC entries in JSON logs
#57439 - Open the Panache session when the Uni is subscribed
#57441 - Quarkus 3.40 - QuarkusTestProfile - disableApplicationLifecycleObservers is ignored
#57442 - Polish Observability in Dev UI
#57445 - Update the guides for the Java 21 minimum
#57447 - Remove bytecode recorders from: extensions/amazon-lambda-http
#57449 - Remove bytecode recorders from: extensions/observability-devservices
#57450 - Remove bytecode recorders from: extensions/jdbc/jdbc-oracle
#57451 - Remove bytecode recorders from: extensions/jackson
#57453 - Replace recorders in Jackson with service registration
#57454 - Update recorder-to-services skills to be more succinct and complete
#57455 - Honor custom test port for @TestHTTPResource with Amazon Lambda HTTP
#57458 - Service conversion: redis-client
#57460 - Remove bytecode recorder from extensions/jdbc/jdbc-oracle
#57461 - Remove bytecode recorder from extensions/observability-devservices
#57463 - Honor QuarkusTestProfile#disableApplicationLifecycleObservers
#57464 - Classloader Leak: Array-valued test resource meta-annotations create a separate application/classloader per test class
#57465 - Classloader Leak: Fix reload group identifier for array-valued test resource annotations
#57472 - Remove bytecode recorders from: extensions/keycloak-authorization
#57473 - Build(deps): Bump org.htmlunit:htmlunit from 5.5.0 to 5.6.0
#57474 - Build(deps-dev): Bump org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0
#57476 - Build(deps): Bump com.fasterxml:classmate from 1.7.1 to 1.8.0
#57477 - Keycloak Authorization: remove bytecode recorder
#57479 - REST Client calls fail in a jlink image: io.quarkus.rest.client does not link org.jboss.resteasy.reactive.client.impl
#57482 - Qute applications cannot be packaged with quarkus-jlink: duplicate module name io.quarkus.qute
#57483 - Document that disabling native monitoring stops the JFR-based JVM metrics
#57484 - Basic authentication with embedded users rejects valid credentials in a jlink image
#57485 - Give quarkus-qute its own module name
#57486 - Applications with Hibernate Validator cannot be packaged with quarkus-jlink: Module java.money not found
#57487 - Only pass JDK modules to jlink as JDK modules
#57488 - [#57122] Set the Amazon Lambda HTTP configuration from a service
#57491 - Let REST Client calls work in a jlink image
#57492 - Let the Elytron password provider find its implementations in a jlink image
#57494 - Update the security and vulnerability disclosure policies
#57495 - Service start/stop: reproducibility issue
#57496 - Polish the Dev UI observability dashboard
#57497 - Fix Javadoc of LambdaTransliterator
#57502 - Deprecate LastShutdownTasks
#57503 - Make sure retained service values are reproducible
#57504 - Fix typo in OIDC logout URL parameter name
#57505 - Remove bytecode recorders from: extensions/logging-gelf
#57506 - Remove bytecode recorders from: extensions/logging-json
#57508 - Remove bytecode recorders from: extensions/signals
#57510 - Remove bytecode recorders from: extensions/quartz
#57511 - Remove bytecode recorders from: extensions/google-cloud-functions
#57512 - Remove bytecode recorders from: extensions/funqy/funqy-server-common
#57516 - Documentation improvements relating to services
#57517 - Fix capabilities section in writing-extensions guide
#57518 - Move OpenTelemetry ITs to Quarkus REST
#57519 - Bump org.mvnpm:dompurify from 3.4.16 to 3.4.17
#57520 - Add Hibernate ORM extension unit tests
#57522 - Another wave of service fixes
#57527 - Modularize value-registry
#57528 - Services: add support for capturing date/time/tz and related types
#57531 - [#57122] Provide the GELF log handler as a logging service
#57532 - [#57122] Provide the JSON log formatters as logging services
#57534 - [#57122] Create the signals context bean from a service
#57535 - [#57122] Select the Google Cloud Functions delegates from a service
#57536 - [#57122] Build the Funqy function registry from a service
#57537 - Fix dev-mode error page stack trace overflowing on default load
#57538 - OIDC Client: cache token requests based on additional params
#57541 - Security fixes
#57554 - Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.3 to 3.0.4
#57555 - Bump org.mvnpm:marked from 17.0.5 to 18.1.1
#57559 - Make sure interpolation of user and system properties is enabled for local POMs
#57563 - Use a native Dev MCP URL for Zed
#57566 - Give QuarkusProdModeTestConfusingLogTest a realistic connect timeout
#57572 - OIDC web-app: an empty session cookie counts as a session, and deleted cookies get Expires=<now>, so a quick re-sign-in loops in Linux WebKit
#57573 - Make OIDC token propagation filters use TokenHelper to exchange tokens
#57575 - Fix JsonReader accepting malformed Unicode escapes
#57576 - Remove bytecode recorder from extensions/quartz
#57578 - OIDC: treat empty session cookies as missing cookies
#57581 - [Gizmo] Security JPA Reactive: use Gizmo's optimized lambda strategy
#57583 - Use Gizmo's optimized lambda strategy for the generated main class?
#57584 - Use Gizmo's optimized lambda strategy for the generated main class
#57586 - OIDC Token Propagation: cache exchange tokens
#57588 - jlink image is written relative to the working directory and the launcher is always named my-app
#57589 - [Code TODO] Derive the jlink launcher name from the build
#57590 - Remove the obsolete http2Disable workaround in OpenShiftClientProducer
#57591 - Remove the obsolete http2Disable workaround from OpenShiftClientProducer
#57592 - Enable the commented-out OpenAPI test for RESTEasy param annotations on resource fields
#57593 - Test RESTEasy param annotations on resource fields and properties in OpenAPI
#57597 - Security JPA fails the build when @Username, @Password or @Roles are inherited from a generic superclass
#57598 - Resolve the type of Security JPA identity fields inherited from a generic superclass
#57599 - REST Client: allow setting the read timeout for a single request
#57601 - Quarkus Maven packages are without licenses
#57602 - NullPointerException in WebXmlParsingBuildStep when web-fragment.xml conflicts with existing mime mapping
#57603 - Fix NPE in Undertow when a web-fragment.xml conflicts with existing web metadata
#57605 - Update to SmallRye GraphQL 3.0.0.Beta9
#57606 - Add @dmlloyd to area/core
#57607 - Align manifest entries between jar and source jar
#57608 - Bump org.jboss.threads:jboss-threads from 3.10.1 to 3.11.0
#57609 - Bump rest-assured.version from 6.1.0 to 6.2.0
#57610 - Bump flyway.version from 13.10.0 to 13.10.3
#57612 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.3.2 to 25.3.3
#57614 - Remove bytecode recorders from: extensions/amazon-lambda/common-deployment
#57615 - Remove bytecode recorders from: extensions/amazon-lambda/deployment
#57616 - Remove bytecode recorders from: extensions/cache/kotlin
#57617 - Remove bytecode recorders from: extensions/virtual-threads
#57618 - Remove bytecode recorders from: extensions/narayana-jta
#57619 - Remove bytecode recorders from: extensions/smallrye-reactive-messaging-pulsar
#57620 - Remove bytecode recorders from: extensions/resteasy-classic/resteasy-common
#57635 - [#57122] Register the Kotlin cache method handler as a service
#57636 - [#57122] Create the RESTEasy injector factory in a service
#57637 - [#57122] Initialize the Lambda object mapper and context readers in services
#57638 - [#57122] Set up Narayana JTA and the recovery manager in services
#57639 - [#57122] Set up the virtual thread executor in a service
#57640 - [#57122] Create the Pulsar schema beans without a recorder
#57641 - [#57122] Register the Amazon Lambda handlers and poll loop as services
#57642 - Allow overriding REST Client timeouts and redirects for a single request
#57643 - Explain pull request review prioritization in CONTRIBUTING.md
#57645 - Vert.x 5 gRPC migration leftovers:
#57646 - Qute: An empty CDATA section {||} used to parse and now fails in 3.40
#57647 - Update WorkloadJsonWebToken to get the issuer
#57648 - Qute: fix parsing of empty unparsed character data {||}
#57654 - Bump org.mvnpm:flag-icons from 7.5.0 to 7.6.0
#57661 - Fail the OpenShift container image build if the upload failed
#57663 - Ensure async gRPC client callbacks always run on a duplicated Vert.x context when on event-loop
#57668 - Remove bytecode recorders from: extensions/aesh/deployment
#57672 - Remove bytecode recorders from: extensions/datasource
#57673 - Remove bytecode recorders from: extensions/netty
#57674 - Remove bytecode recorders from: extensions/resteasy-classic/resteasy-client
#57675 - Remove bytecode recorders from: extensions/resteasy-reactive/rest-common
#57679 - [#57122] Set up the RESTEasy Reactive blocking operation support in a service
#57680 - [#57122] Create the DataSourceSupport bean from a service
#57682 - [#57122] Create the Aesh context from a service
#57683 - [#57122] Create the Netty event loop groups in services
#57684 - [#57122] Set up the RESTEasy client builder resolver and provider factory in services
#57688 - A couple minor OpenTelemetry improvements
#57689 - Jar tree shaking removes classes that are only referenced by dynamic constants
#57690 - Service class captures always go through Bootstraps.loadClass because the accessibility check uses the simple class name
#57691 - Follow dynamic constants when tree shaking jars
#57692 - Emit public class captures as class constants
#57698 - Set Jackson versions to 3.1.8 and 2.21.8
#57699 - Update webauthn4j to 0.31.11.RELEASE for Jackson 3 update
#57703 - Allow the FastBootEntityManagerFactoryBuilder to use a custom SessionFactoryBuilder that can decorate the Hibernate SessionFactory
#57710 - Remove bytecode recorders from: extensions/resteasy-reactive/rest-servlet
#57711 - Remove bytecode recorders from: extensions/resteasy-reactive/rest-links
#57713 - Remove bytecode recorders from: extensions/liquibase/liquibase
#57717 - Drop the product qualifier from the datasource guide title
#57721 - Fix Quarkus banner being displayed twice at startup
#57723 - [#57122] Run the Liquibase migrations from a service
#57724 - [#57122] Initialize the REST links provider from a service
#57729 - [#57122] Instantiate the RESTEasy Reactive servlet and filter without a recorder
#57731 - JaxrsProvidersToRegisterBuildItem is gratuitously mutated after publication
#57732 - Drop the trailing "in Quarkus" from two guide titles
#57733 - Avoid mutating JaxrsProvidersToRegisterBuildItem
#57734 - Fix main regression about injecting BARTF configs
#57736 - Strip -emergency from branch names before using them as version folder
#57738 - Fix LoggingJsonProcessor build failure over injecting a runtime config inside a build step
#57745 - Replace deprecated destroyer call
#57762 - Start/stop infra way of consuming config triggers annotation lookups at runtime
#57765 - Quarkus 4 Jackson reflection-free-serializer null-for-primitives
#57766 - Fix JDK 25 PQC test faiures
#57778 - Fix errors in the web endpoint authorization guide
#57782 - Update RESTEasy Jackson Provider to 1.0.1.Final
#57785 - Closing a REST Client twice logs "Error running RestClientClosingTask"
#57786 - Skip the REST Client closing tasks when the client is already closed
#57787 - Bump smallrye-reactive-messaging.version from 5.0.0-RC1 to 5.0.0-RC2
#57790 - Fix REST Jackson deserialization to honor FAIL_ON_NULL_FOR_PRIMITIVES
#57803 - Bump com.mysql:mysql-connector-j from 26.7.0 to 26.10.0
#57805 - Bump io.fabric8:maven-model-helper from 41 to 42
#57806 - Fix NPEs in GCF extension
#57817 - Bump com.gradle:develocity-maven-extension from 2.6.0 to 2.6.1
#57822 - Agent skills miss the eager-service, build-cache, QuarkusUnitTest and review-update rules
#57824 - Reactive Routes: malformed JSON in a @Body parameter results in 500 instead of 400
#57826 - Return 400 for malformed JSON in reactive route @Body parameters
#57827 - Malformed application/x-www-form-urlencoded and multipart/form-data request bodies result in 500 instead of 400
#57828 - Reactive Routes: invalid value for a converted @Param results in 500 instead of 400
#57829 - Return 400 for malformed form-urlencoded and multipart bodies
#57830 - Return 400 for invalid reactive route parameter values
#57832 - Document the eager-service, build-cache, QuarkusUnitTest and PR update rules in the agent skills
#57836 - Deprecated API in test code and Maven sample projects produces warnings on every CI run
#57837 - Replace deprecated API in the REST Client tests and the Maven sample projects
#57841 - Prefer SmallRyeConfig APIs instead of MP Config
#57847 - Load Shedding: many improvements
#57849 - Bump io.rest-assured:rest-assured from 6.0.1 to 6.3.0
#57855 - Include the prefix in ConfigLookup to avoid reflection lookup
#57856 - Update SmallRye Config to 4.1.0
#57861 - Respect run-time CPUs, heap and Netty properties in native for the adaptive allocator and event loops
#57867 - Add hibernate-orm-tenancy/discriminator to native test run
#57869 - Register missing Envers entities for reflection
#57893 - Dev mode error page fails to render with SRCFG00015 when the application fails to start
#57894 - Fix config lookups that run when no config is registered for the class loader

12 days ago

quarkus

quarkusio

3.40.1.1

Complete changelog

12 days ago

quarkus

quarkusio

3.27.6.1

Complete changelog

12 days ago

quarkus

quarkusio

3.33.4.1

Complete changelog

2026-10-01 00:51:43

quarkus

quarkusio

4.0.0.Beta1

Major changes

#55117 - Prepare for UBI 10
#55145 - Micrometer Observation API Support
#55147 - Set the minimum Java version to Java 21
#55180 - Introduce SPIFFE client extension
#55215 - Rework native transport
#55297 - Port Jackson to version 3
#55356 - Rest Client - Add support for Unix domain socket connections
#55433 - Use prometheus client v1 on Micrometer
#55515 - Support Jakarta REST 4
#55542 - Support Kotlin suspend functions with @CacheResult
#55624 - [4.x] Wire post-quantum (PQC) key exchange through the TLS registry
#55723 - Detect datasource and persistence unit needs from configuration, extension requests, and extension-specific metadata (entities, ...)
#55736 - Support for OAuth Client ID Metadata Document
#55765 - Integrate Hibernate 8 into Quarkus
#55768 - Jakarta REST 4 EntityPart support for server and client
#55838 - Make OpenTelemetry Metrics and Logs Stable and ON by default
#55926 - ArC: implement CDI 5.0
#56377 - Dev UI observability
#56475 - Update SmallRye Config to 4.0.0
#56856 - WebSockets Next: add max-pending-messages back-pressure
#56979 - Enable quarkus-awt on macOS
#56982 - Update Kubernetes Client to 8.0.0 and Dekorate to 5.0.0

Complete changelog

#14051 - Spring Web @RequestHeader(Map<String,String>) throws RuntimeException
#21440 - Allow large file download and upload using the Reactive REST Client.
#22182 - CLI: add support for RSA command
#23407 - Structured Access Logs
#23746 - Quarkus cache does not work with kotlin suspend functions
#24019 - In io.quarkus.jackson.ObjectMapperCustomizer, use JsonMapper instead of ObjectMapper
#28755 - Using Caffeine cach with RequestScoped bean can lead to error
#29911 - Support for Micrometer's Observation API
#31320 - RESTEasy Reactive doesn't support java.time.OffsetDateTime
#32606 - Quarkus Caching - Allow per item expiry time.
#33090 - Test failure: quarkus-integration-test-logging-gelf fails with podman
#33093 - Test failure with podman: Quarkus - Micrometer - Deployment
#33094 - Test failure with podman: JDBC - Oracle - Deployment
#33105 - Test failure with Podman: Quarkus - Integration Tests - JPA - MySQL
#33312 - Port conflict undetected when having both http and lambda
#33346 - Quarkus Resteasy-reactive Client and InputStream as parameter causing a BlockingOperationNotAllowedException
#33454 - Postgres containers failing to start with docker maven plugin and then not being cleaned up in podman CI runs
#33461 - Warn in case the code uses old javax.ws annotations
#34429 - Enable only JSON export for Micrometer without changing the prometheus metrics doesn't work
#35028 - Dev UI v2 does not use custom pages when changing deployment module path location
#35234 - Include message when throwing InvalidKeySpecException in BcryptUtil.matches()
#35799 - Support native transports in native executables
#35972 - NPE when testing POST APIGatewayV2HTTPEvent to lambda
#36782 - CORS guide should cover debugging tips
#36880 - TransactionScoped beans are destroyed after the JTA transaction is commited/rolled back
#38343 - quarkus-amazon-lambda-http extension can fail to identify content-type value and thus fails to adjust isBase64Encoded in the final response
#39710 - Need to integrate with the new Vert.x Local Data SPI
#41016 - Move GraalVM config from current *.json config files to reachability-metadata.json starting with GraalVM / Mandrel for JDK 25
#41499 - Dev UI clash with any other WebJarUtilBuildItem when in the same artifact
#41522 - Change default OpenTelemetry protocol to http/protobuf
#41883 - Configproperty value containing '$$' will be '$' as string
#42226 - [Resteasy] rely also on AnnotationStore when processing BeanParam
#42807 - Resteasy Reactive doesn't fully recognize the bean param when it's in generic interface
#42987 - Property quarkus.http.limits.max-form-attribute-size behaviour
#43127 - Support to list all multipart uploads but without storing them locally
#43705 - RequestParam Map<String, String> not supported by quarkus-spring
#43760 - Allow to populate Spring @RestQuery Map<String, String> with request parameter values
#43998 - RESTEasy Reactive shouldn't forcefully append a charset attribute when media-type is application/json
#44340 - document on https://quarkus.io/guides/cli-tooling ability to use non central repos
#44832 - Lack of devservice license acceptance should suggests adding container-license-acceptance.txt to the right place in dev mode
#45005 - Support the selection of X-Forwarded-For value
#45855 - Full support for gRPC server metrics
#45922 - CLI error messages are confusing when there is an error in the command
#46345 - control over proxy protocol
#46498 - HTTP compression min size
#46629 - Validate that the management port is distinct
#46645 - CLI - incorrect project folder name
#47005 - Cancelling a request with a chunked response results in IllegalStateException: UT000127: Response has already been sent
#47211 - Add support for @MeterTags : Allow multiple MeterTag annotations for multiple tags from same target
#47405 - quarkus-container-image-openshift doesn't respect quarkus.container-image.insecure property
#47431 - GET endpoint QueryParam truncated to 1024 elements
#47531 - Add the ability to specify http and https hosts independently
#47674 - devui list installed trying to resolve -redhat artifacts in a project with no -redhat dependency
#47796 - Use Session/StatelessSession "delegates"/"proxies" from the upstream Hibernate project
#48925 - Quarkus redis support for ACL by adding username variable
#49026 - Enforce dependency on devservices runtime module
#49068 - Take advantage of AggregatedDataSourceBuildTimeConfigBuildItem for reactive datasources
#49353 - QuarkusTestExtension fails to run @AfterAll with multiple levels of nested test classes and per-class test instance lifecycle
#49502 - AWS Lambda Extension no longer supports containerized .jvm builds
#49530 - Add username option to RedisClientConfig
#49686 - Document quarkusIntTest
#49962 - java.net.SocketException in SHUTDOWN phase while AWS Lambda (Quarkus + GraalVM) is connected with AwsAppConfigExtension
#50303 - feat: improve secrets role in quarkus-kubernetes-config
#50414 - Port AWT Extension to MacOS
#50850 - Quarkus update does not update <surefire-plugin.version> in pom.xml
#51198 - Better detection of when a persistence unit is needed and better reporting of when a non-existing PU is referenced
#51268 - Better error message when using ORM/HR with no DB driver
#51364 - @QuarkusTest with quarkus-amazon-lambda-rest does not map REST resources paths and throws 404 for any call.
#51435 - Introduce a ModuleExportBuildItem to let extensions control --add-exports needs for the runtime
#51630 - [REST Client] @Url is ignored and Quarkus requires a static configuration instead.
#51872 - io.quarkus.oidc.client.filter is split across multiple modules
#51894 - Implement better hashCode/equals for standard AnnotationLiteral
#52036 - Update to Jackson 3
#52101 - Reduce number of created ReflectiveClassBuildItem instances
#52649 - quarkus-micrometer-opentelemetry metrics duration must use seconds
#52712 - Solve deprecation in quarkus-smallrye-openapi
#52791 - docs: ConsoleCommandBuildItem
#52945 - Kafka Streams extension improvements and bug fixes
#53075 - Set OTel trace sampling to 10% by default
#53277 - Provide (reasonable) defaults for quarkus.datasource.db-version
#53291 - Move io.quarkus.arc.deployment.OpenTelemetrySdkBuildItem out of the ArC extension into the core
#53293 - Panache Next projection failing with Kotlin's value class
#53546 - native-image: New reachability-metadata.json
#53606 - Auto-configure GCP Error Reporting compatibility when using json logging GCP log format
#53862 - Quarkus 4 should use the Netty pooled allocator on VirtualThread(s) too
#54011 - Netty 4.2 and shared Arenas performance issues
#54078 - Add AI skill for quarkus-oidc-client
#54101 - Add AI skill for quarkus-oidc-client
#54226 - Introduce a better way of testing prometheus metrics
#54261 - Improve secret access scoping in quarkus-kubernetes-config
#54272 - Add success-only option to quarkus.http.filter
#54279 - Default database versions quarkus.datasource.db-version to a recent stable version
#54283 - No way to read the application name from configuration
#54394 - Correct SupplierMap putAll
#54435 - Testcontainers still start even when QuarkusTests are disabled via JUnit tags
#54440 - Use JFR events to trace the shutdown sequence
#54464 - Rework the native image guide.
#54477 - Provide a working example for quarkus.native.additional-build-args build parameter to access several environment variables
#54486 - Documentation issues with Hibernate guides
#54653 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.24.0 to 4.33.0
#54666 - Allow extensions to provide multiple codestarts via extra-names
#54670 - Bump OpenTelemetry to 1.62.0 (CVE-2026-45292)
#54676 - Signals - propagate security identity to receivers
#54677 - Signals - propagate OTel trace context to receivers
#54693 - Fix Panache DTO projection and Jackson serialization for Kotlin value classes
#54696 - Wrong JDBC URL for devservices/testcontainers with IPv6 enabled in Container runtime
#54718 - Fix Dev Services connection URLs when when dev container reports IPv6 container hosts
#54722 - Add structured access log fields to the JSON log formatter
#54741 - Introduce ExactlyOnce annotation to simplify Kafka exactly-once processing
#54779 - Align extension metadata schema and docs (in an automated way)
#54782 - Gradle plugin: Avoid resolving deployment classpaths during task graph calculation
#54803 - Fix dead quickstart links in stork-registration.adoc
#54842 - Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5
#54856 - Preserve Maven artifact type in the resolver
#54862 - [4.0] HttpServerOptions.setUseSemicolonAsQueryParamDelimiter missing in Vert.x 5.1.2
#54877 - Provide an index of guides and scripts to make sure it's complete
#54879 - Bump io.strimzi:strimzi-test-container from 0.115.0 to 0.116.0
#54895 - Add nightly scheduled CI workflow to run reproducibility tests
#54937 - Remove config proxy mechanism required for old @ConfigRoot classes from ExtensionLoader
#54947 - Reverse filter proprities when using readBody/withFormRead
#54953 - LGTM devservice overrides explicitly-configured OTLP endpoint in dev mode
#54976 - Picocli: remove Gizmo 1 dependency
#54977 - Narayana JTA: migrate from Gizmo 1 to Gizmo 2
#54978 - JSON-B: migrate from Gizmo 1 to Gizmo 2
#54979 - gRPC DevUI: migrate from Gizmo 1 to Gizmo 2
#54980 - OIDC client: migrate from Gizmo 1 to Gizmo 2
#54983 - REST client config: migrate from Gizmo 1 to Gizmo 2
#54984 - SmallRye Reactive Messaging: migrate from Gizmo 1 to Gizmo 2
#54985 - Security: migrate from Gizmo 1 to Gizmo 2
#54986 - Security JPA: migrate from Gizmo 1 to Gizmo 2
#54995 - Bump org.htmlunit:htmlunit from 5.1.0 to 5.2.0
#54996 - Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.4.2
#54998 - Bump org.commonmark:commonmark from 0.28.0 to 0.29.0
#55002 - Add @Timed service level objective support
#55033 - Explicitly disable LGTM Dev Services with any of the OTel endpoint user-provided configuration
#55036 - [4.0] Improve Vert.x SQL client options coverage in reactive datasource config
#55047 - RoutingUtils.assumeCdiRequestContext logs "CDI request context owner has changed" at DEBUG even when the owner is unchanged
#55054 - ArC: make SuppressConditionGeneratorBuildItem public
#55060 - ArC: make SuppressConditionGeneratorBuildItem public
#55074 - Avoid "owner has changed" logging when owner is unchanged
#55089 - Split @ConfigMapping and @ConfigProperties processing, and the generation of config classes from runtime aspects
#55094 - Remove the deprecated Scala Extension
#55097 - Bump io.quarkus:quarkus-documentation-rag-maven-plugin from 0.0.5 to 0.0.7
#55117 - Prepare for UBI 10
#55124 - Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.0 to 1.0.1
#55125 - Bump eu.maveniverse.maven.scalpel:extension3 from 0.3.4 to 0.3.7
#55129 - [quarkus-confluent-registry-avro] 3.37.0 regression: startup fails with apicurio.registry.url required even when devservices disabled
#55130 - [main only] Client authentication is not required after first TLS config reload
#55136 - Introduce Spiffe Client extension
#55139 - Quarkus Mailer: support for rotating credentials
#55144 - [Mandrel 25.0 --future-defaults=all] All quarkus native integration tests fail since Jun 27, 2026
#55145 - Micrometer Observation API Support
#55147 - Set the minimum Java version to Java 21
#55150 - Reactive Pg Client: add direct SSL support
#55152 - Fix dead link in smallrye graphql Javadoc
#55153 - Fix dev mode startup when only Confluent schema registry URL is set
#55154 - Drop the gRPC xDS documentation
#55155 - Reactive MSSQL Client: add TDS 8.0 protocol support
#55156 - Reenable the doc build for main
#55170 - Bump SmallRye GraphQL to 3.0.0.Beta4
#55180 - Introduce SPIFFE client extension
#55190 - Update Hibernate ORM docs to use Session instead of EntityManager
#55202 - Upgrade OTel SDk to 1.62.0
#55203 - Bump com.gradle:develocity-maven-extension from 2.4.2 to 2.5.0
#55209 - Bump com.gradle.develocity from 4.4.3 to 4.5.0 in /devtools/gradle
#55211 - Fix client-auth reset to NONE after TLS config reload
#55213 - Break up Dev UI into standalone devjsonrpc, devmcp, and devui modules
#55215 - Rework native transport
#55224 - Bump elasticsearch-opensource-components.version from 9.4.1 to 9.4.3
#55228 - Malformed Accept header causes unguarded IllegalArgumentException (500) when no route has been matched
#55230 - Add Flow.Publisher to GraphQL auto-transactional reactive type detection
#55233 - Gradle: Declare local state for cacheable Quarkus app parts
#55237 - Gradle: Declare extension descriptor task inputs
#55240 - Update Spring extensions for Spring Framework 7 / Spring Data 4 compa…
#55244 - Add official Jakarta REST TCK 4.0.1 runner
#55245 - Bump org.checkerframework:checker-qual from 4.2.0 to 4.2.1
#55246 - Bump org.mvnpm:linkify-it from 5.0.1 to 5.0.2
#55247 - Bump org.apache.logging.log4j:log4j-api from 2.26.0 to 2.26.1
#55248 - Bump org.mvnpm:markdown-it from 14.2.0 to 14.3.0
#55249 - Bump org.mvnpm.at.hpcc-js:wasm from 2.34.2 to 2.34.4
#55251 - devcontainer fails to load
#55252 - fix(devcontainer): modernize devcontainer to supported baseline
#55253 - Add Gradle component variant regression tests
#55265 - Fix malformed Accept header causing 500 when no route is matched
#55268 - Add apply-on-success option to quarkus.http.filter
#55273 - Enhance SPIFFE client to fetch X509 workload certificate identifiers
#55290 - Gradle IT: Fix quarkus-junit module reference
#55291 - Add quarkus.http.ssl-host to bind HTTPS independently from HTTP
#55293 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.0 to 25.2.1
#55296 - Bump org.mvnpm.at.hpcc-js:wasm from 2.34.4 to 2.34.5
#55297 - Port Jackson to version 3
#55300 - Remove the custom wiring for the object mappers into Hibernate ORM (and let (ORM) create things on its own)
#55313 - Validate management port differs from main HTTP/HTTPS
#55325 - Bump org.mvnpm:es-module-shims from 2.8.1 to 2.8.2
#55330 - Bump org.mvnpm:type-fest from 5.4.4 to 5.8.0
#55333 - Disable automatic workflow approval after 10 PRs
#55337 - Change OpenTelemetry default sampling ration to 10%
#55344 - Fix false missing plugin error for quarkus create
#55349 - Use Stork latest 3.0.0
#55350 - gRPC - Add Unix domain socket support for server and client
#55354 - Bump com.google.api.grpc:proto-google-common-protos from 2.71.0 to 2.73.0
#55356 - Rest Client - Add support for Unix domain socket connections
#55364 - Polish JsonUtil
#55372 - Update SmallRye Config to 3.18.1
#55377 - Vert.x - Upgrade to Vert.x 5.1.5 and Netty 4.1.16.Final
#55383 - Nit: Tidy up grammar and drop stale 'coming soon'
#55384 - Fix remote dev file deletion handling
#55392 - Enable previously disabled test
#55419 - Deflake DrainTest
#55420 - Record output-directory metadata for native container images
#55429 - Disable flaky test
#55432 - Mark OTel Metrics and Logs as Stable
#55433 - Use prometheus client v1 on Micrometer
#55442 - Update images of MySQL, MariaDB, MongoDB and Redis
#55447 - Remove redundant check in MicroProfileRestClientEnricher
#55449 - Qute: add bean property tests for property-not-found-strategy
#55453 - SPIFFE client: support fetching of X509-SVID
#55472 - Complete quarkus-extension.yaml JSON schema and generate docs from it
#55474 - Unable to determine the status of the running process in integration test due to missing dev-service dependency
#55477 - Avoid Lambda mock event server port conflict with Vert.x HTTP in Dev Mode
#55479 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.1 to 25.2.4
#55481 - Deprecate H2DatabaseTestResource in favor of DevServices and update most ITs to avoid it
#55488 - Update Redpanda devservice version to v26.1.12
#55490 - Add opt-in histogram buckets for gRPC Micrometer metrics
#55491 - QuarkusErrorHandler logs benign HTTP/2 client stream resets (IAE: Stream no longer exists) at ERROR
#55492 - Improve logging in QuarkusErrorHandler
#55493 - Fix Lambda poll loop shutdown SocketException logging
#55495 - Fix @QuarkusIntegrationTest Dev Services result handling
#55496 - Require Gradle 9.6 for Quarkus Gradle plugins
#55499 - Allow fast-jar packaging for Amazon Lambda JVM container builds
#55504 - Fix broken WebSockets Next tests
#55506 - HTTP: Document and test compression configuration
#55515 - Support Jakarta REST 4
#55517 - Improve OidcClient TokenProvider interface
#55518 - Support named OidcClient TokenProvider injections
#55523 - Observability for Dev UI
#55526 - HTTP/3 - Fix altSvc for HTTP/1 and HTTP/1.1
#55527 - Fix exemplars after span sampling set to 10%
#55533 - Minor improvements to OIDC client authentication docs
#55534 - Update OpenTelemetry instrumentation to 1.63
#55535 - Allow to inject TokenProvider for named OIDC clients
#55542 - Support Kotlin suspend functions with @CacheResult
#55543 - Ban the use of dynamic proxies
#55544 - DEVUI: HealthCheck panels not displaying correctly
#55547 - Improve OIDC client token provider
#55550 - Fix text overflow in DevUI health check panels
#55562 - Fix flaky DrainTest
#55565 - Bump io.smallrye.common:smallrye-common-bom from 2.19.0 to 2.20.0
#55570 - Share Gradle TestKit fixtures across plugin tests
#55572 - Register all Config components for native image
#55574 - Add an example for forwarding environment variables to the native-image build
#55579 - ArC: isKotlinSuspendMethod() should throw on suspend methods with raw Continuation
#55582 - [Quarkus main] Native integration test oidc-wiremock-providers fails due to config value conversion issues
#55583 - Use Vert.x pooled allocator for virtual threads in AppendBuffer
#55585 - Test for max depth of GraphQL queries
#55604 - Add defaults to PackageConfig outputName, outputDirectory and outputTimestamp
#55605 - Dev services remain running after tests and rely on ryuk for cleanup
#55608 - Upgrade Oracle Setup Test Pilot GitHub Action to v1.0.27
#55609 - 55608 - Upgrade Oracle Setup Test Pilot GitHub Action to v1.0.27
#55615 - Support OIDC iss (issuer) query param in the redirect URL
#55616 - Support OAuth Client Id Metadata Document registration
#55617 - Verify OIDC iss (issuer) query param in the redirect URL
#55624 - [4.x] Wire post-quantum (PQC) key exchange through the TLS registry
#55625 - Prevent CodeGenerator.readConfig from mutating an immutable list
#55634 - Shared quarkus.log breaks concurrent @QuarkusIntegrationTest forks (wrong port, false readiness)
#55637 - Update to the SmallRye Certificate Generator 1.1.1
#55639 - Use a unique log file per integration-test launcher to fix concurrent fork log sharing
#55641 - Resolve deprecations in smallrye-openapi extension
#55642 - No way to overwrite RunStage of mp.openapi.filter
#55646 - OIDC and Keycloak Dev Services: remove XOR trap workaround for a config mapping workaround
#55654 - In reflection-free Jackson serializers skip deserialization of a JsonAlias having the same name of the field
#55655 - Remove value registry, not used
#55658 - Add Quarkus Data Hibernate getting started tutorial
#55660 - Validation of Content-type header for sub-resources may be omited
#55661 - Fix Netty 4.2 substitutions and support Snappy compression
#55666 - Fire SSE close listeners once when closing the broadcaster
#55670 - Centralize Container Image Names
#55673 - Integrate SPIFFE client and Keycloak dev services
#55676 - Validate @Consumes and @Produces for sub-resources
#55682 - Fix serialization of formatted date in reflection-free Jackson serializers
#55685 - Jakarta rest 4 progress
#55696 - Address small issues in the Jackson 3 migration
#55698 - Align Hibernate Reactive guide examples with session injection
#55699 - Add StatelessSession sections to the Hibernate guides
#55700 - Use most suitable constructor for deserialization in reflection-free Jackson serializers
#55705 - Fix flaky DrainTest OOM by streaming response bodies instead of buffering
#55708 - Enable Netty's FFM malloc/free path and set ignoreExpensiveClean
#55709 - Change the default http.(client|server).request.duration to s…
#55712 - Add reproducibility check for integration tests
#55715 - Remove unnecessary static init in QuarkusJacksonJsonCodec
#55718 - Projects Classic API is gone so getting rid of this config
#55722 - Fix VertxOutputStream thundering herd on HTTP/2 by using per-stream lock
#55723 - Detect datasource and persistence unit needs from configuration, extension requests, and extension-specific metadata (entities, ...)
#55724 - Add quarkus.devservices.license-acceptance config property
#55727 - Bump org.hibernate.reactive:hibernate-reactive-core from 4.5.1.Final to 4.5.2.Final in the hibernate group across 1 directory
#55729 - Unable to import in IDEA: fix unresolvable ${aesh.version} property
#55733 - Use orderKey in VertxBootstrapConsumerBuildItem for reproducibility
#55736 - Support for OAuth Client ID Metadata Document
#55740 - Add a single tenant-neutral OIDC runtime property to control optional routes
#55741 - Replace synchronized with ReentrantLock in VertxOutputStream for VT friendliness
#55743 - Fix db-version used for Oracle in native tests on Test Pilot
#55747 - cache openSsl35Available to avoid UnsatisfiedLinkError
#55750 - Set default HTTP/2 MAX_CONCURRENT_STREAMS to 128
#55752 - Fix compilation error in Vert.x HTTP test due to merging an old PR
#55754 - Fix invocation of the Arquillian lifecycle callbacks
#55758 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.4 to 25.2.6
#55761 - Enforce the requires-quarkus-core extension metadata at build time
#55762 - Compatibility validation for extensions based on Quarkus core version
#55764 - Fix flaky HibernateOrmNoWarningsTest on Oracle 19/21
#55765 - Integrate Hibernate 8 into Quarkus
#55767 - Move OpenTelemetrySdkBuildItem to core deployment module
#55768 - Jakarta REST 4 EntityPart support for server and client
#55772 - Bump org.eclipse.jgit:org.eclipse.jgit from 7.7.0.202606012155-r to 7.7.1.202607240634-r
#55773 - Bump org.json:json from 20260522 to 20260719
#55776 - OOM regression with Netty 4.2.16 under idle-after-burst load
#55781 - Dev Mode - Continuous Testing - Improve reporting for @ParameterizedTest
#55782 - Dev Mode - Continuous Testing - Issue with mockStatic
#55784 - Fix static Mockito mocks in continuous testing
#55785 - Include method names in parameterized test results
#55786 - Update reproducibility check for Jakarta REST TCK
#55787 - Update Artemis dependencies to relocated org.apache.artemis groupId
#55788 - NettyProcessor: need to carefully review the addRuntimeInitializedClass definitions
#55790 - Quarkus REST - Fix unbounded multipart part-header accumulation
#55796 - Fix path normalization
#55801 - Do not run license acceptance on Windows CI
#55802 - Do not trigger CI when adjusting reproducibility checks
#55807 - Bump org.mvnpm.at.hpcc-js:wasm from 2.34.5 to 2.35.0
#55810 - Bump org.mvnpm:es-module-shims from 2.8.2 to 2.8.4
#55811 - Bump org.apache.groovy:groovy from 5.0.6 to 5.0.8
#55813 - Bump com.mysql:mysql-connector-j from 9.7.0 to 26.7.0
#55816 - Remove deprecated fields and methods from OTel
#55823 - Polish MvnProjectBuilder
#55824 - Polish JpaJandexScavenger
#55825 - Polish LambdaHttpHandler
#55826 - Polish ResteasyReactiveProcessor
#55833 - Report reproducibility checks status to issues
#55837 - Optimize native images when the HTTP/3 extension is not present
#55838 - Make OpenTelemetry Metrics and Logs Stable and ON by default
#55839 - Warn if multiple redundant metrics systems are active
#55845 - Bump com.gradle:common-custom-user-data-maven-extension from 2.2.0 to 2.4.0
#55847 - @OpenApiFilter overrides mp.openapi.filter
#55851 - Allow listing all public methods of a class for reflection
#55853 - Use JDK 21 in .sdkmanrc
#55854 - Jackson reflection-free serializers output warnings for jakarta.persistence.Column
#55855 - Quarkus 3.38 and OpenTelemetry API usage issue detected warning in the log
#55857 - Reduce config converter reflection metadata generated by MicroProfile Config
#55862 - Bump org.apache.qpid:proton-j from 0.34.1 to 0.35.0
#55863 - Bump org.mvnpm:dompurify from 3.4.11 to 3.4.12
#55874 - Fix 3 stale native image substitutions
#55876 - OIDC Client: drop deprecated RESTEasy request filter
#55878 - Bump to Vert.x 5.1.6
#55880 - Fix exclusion of netty-codecs' reflect-config.json files
#55882 - Add Martin to be notified of Kubernetes issues
#55884 - Improve test coverage in dev services project
#55886 - Remove deprecated OTel code
#55888 - Migrate the default OpenTelemetry protocol from grpc to http/protobuf.
#55889 - [Quarkus 3.20.5 / Hibernate ORM 6.6.40.Final] quarkus.otel.logs.enabled=true fails SessionFactory build for TABLE_PER_CLASS collections
#55890 - Bump CycloneDX to 13.0.0
#55892 - Fix the noreuse test to point to the appropriate project
#55896 - Bump com.google.cloud.functions:functions-framework-api from 2.0.1 to 2.0.2
#55897 - Bump com.google.api.grpc:proto-google-common-protos from 2.73.0 to 2.74.0
#55904 - Fix Docker Compose files for Podman
#55917 - Allow to enforce DPoP proof token age
#55920 - Add container identity tracking tests to strengthen devservices coverage
#55922 - Bump org.mvnpm:dompurify from 3.4.12 to 3.4.13
#55923 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.3 to 0.9.4
#55925 - Port Gradle extension plugin tests to Jackson 3
#55926 - ArC: implement CDI 5.0
#55928 - Add test to verify containers are reused by databases, in no-profile case
#55931 - OIDC Client: drop deprecated OidcClientConfig class
#55932 - OIDC extension: add property to control optional OIDC routes
#55936 - Quarkus app fails to start from Windows mapped/network drives (drive letter stripped from jar:file: URL)
#55939 - Fix fast-jar resource URLs on Windows network drives
#55943 - HTTPS server configured via TLS registry doesn't allow to enable SNI when a single alias even though legacy option allowed it
#55946 - NullPointerException in OTLP exporter shutdown when the Vert.x client is already closed (flaky LgtmResourcesTest.testTracing)
#55949 - Bump org.commonmark:commonmark from 0.29.0 to 0.30.0
#55956 - Add quarkus-extension.json and deprecate quarkus-extension.yaml
#55957 - Guard against a null Future from client close in OTLP exporter shutdown
#55965 - Potential Vulnerabilities Due To Hidden Dependencies
#55966 - Bump smallrye-reactive-messaging.version from 5.0.0-beta4 to 5.0.0-beta5
#55968 - Add dependencies with shaded vulnerabilities to Dependabot
#55971 - Bump org.htmlunit:htmlunit from 5.2.0 to 5.4.0
#55972 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.6 to 25.2.7
#55973 - Bump eu.maveniverse.maven.scalpel:extension3 from 0.3.7 to 0.3.10
#55975 - Bump dekorate to 4.1.11
#55976 - Bump org.checkerframework:checker-qual from 4.2.1 to 4.2.2
#55977 - Bump com.google.cloud.functions.invoker:java-function-invoker from 2.0.0 to 2.0.2
#55979 - Genkey: write JWT config to application.properties and update docs
#55986 - Tests: cache ApplicationModel in QuarkusExtensionTest
#55987 - Fix .github/list-deployment-modules.sh silently failing
#55993 - Bump azure.toolkit-lib.version from 0.53.0 to 0.56.0
#55994 - Bump org.cyclonedx:cyclonedx-core-java from 13.0.0 to 13.1.0
#56000 - Install the OpenTelemetry log handler without waiting for the SDK
#56003 - Reenable the quickstarts build in main
#56004 - Unspecific NPE on application start when using RestHeader with a MultivaluedMap in a RestClient (unless parameter names are included in compiled classes)
#56005 - Native image build fails on aarch64: BC FIPS 'AESWorkingBuffer' found in image heap (runtime-init type)
#56006 - Allow class-level @NameBinding on constructor-injected RESTEasy resources
#56007 - Follow sentence case for the category titles
#56012 - Bump io.fabric8:docker-maven-plugin from 0.48.1 to 0.49.0
#56014 - Use sentence case in guide titles
#56015 - RestEasy client custom parameter types
#56017 - Handle string JSON-RPC ids and always respond on the Dev MCP endpoint
#56022 - Upgrade google-http-client-bom to 2.2.0 to match Google SDK
#56025 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.4 to 0.9.5
#56026 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.132 to 0.0.134
#56027 - quarkus-panache-mock does not mock enitities that have a superclass extending PanacheEntity or PanacheEntityBase
#56028 - Fix: Entities with MappedSuperclass not being mocked
#56031 - Fix native image build failure on aarch64 when using BC FIPS Poly1305-AES
#56032 - Inherit the parent context MDC in Vert.x contexts created for nested operations
#56034 - Avoid OpenTelemetry API usage warning from the Prometheus exemplar sampler
#56035 - Allow NotBody on annotation types
#56039 - Update Hibernate ORM examples to use Session instead of EntityManager
#56040 - Report the missing parameter name instead of failing with an NPE
#56044 - Make the generated CycloneDX SBOM reproducible
#56045 - Explain integration test container start failures caused by a missing Dev Services network
#56046 - Do not build a Quarkus application for tests JUnit excludes through tags
#56048 - Update to Java 21 in CONTRIBUTING.md
#56049 - Support org.jboss.resteasy.reactive.Separator for REST Client query parameters
#56059 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.7 to 25.2.8
#56060 - Bump io.smallrye.reactive:mutiny-zero-flow-adapters from 1.2.1 to 1.3.0
#56061 - Bump org.apache.groovy:groovy from 5.0.8 to 5.1.0
#56073 - Start the IT reproducibility checks a bit earlier
#56078 - Bump smallrye-certificate-generator to 1.1.2
#56082 - Bump org.json:json from 20260719 to 20260814
#56089 - Re-enable Develocity build scan publishing for pull requests
#56094 - Do not throw errors on missing categories given we inject them now
#56095 - Reenable workflows disabled for Vert.x 5
#56098 - SmallRye GraphQL 3.0.0.Beta6 and graphql-java 26
#56100 - Rerun more builds on RunsOn
#56107 - Keycloak admin clients: correct who owns Keycloak Dev Service when used without OIDC extension
#56108 - Docs: document JaCoCo support for QuarkusComponentTest
#56109 - Drop SecurityTransformerUtils
#56110 - Drop deprecated methods on BasicAuthenticationMechanism and FormAuthenticationMechanism
#56115 - MongoDB authSource from connection string is ignored when credentials are configured separately
#56116 - Allow MongoDB Panache to use the database from the connection string as its default
#56118 - Make sure iteration over OidcBuildTimeConfig#allowedRoutes() is stable in OidcBuildStep
#56125 - Centralize UserContextInternal cast into QuarkusHttpUser.setUser()
#56128 - Removed deprecations from test-framework modules
#56133 - Composed/meta-annotated @QuarkusTest is not registered as a CDI bean, breaking @Inject on the test class
#56135 - Remove deprecated .enable for Swagger, GraphQL, and Health UI
#56136 - Tweak Gradle plugin build properties
#56137 - Make remote-dev session updates consistent
#56138 - Report the image produced by OpenShift builds
#56143 - Add strict Javadoc verification for Gradle modules
#56146 - Register test class as bean for @QuarkusTest meta-annotation in a jar
#56150 - Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre
#56154 - Qute @MessageBundle resolution are not Accept-Language header aware for regular REST apps
#56157 - Read an InputStream entity on a worker thread when writer interceptors prevent streaming it
#56162 - Allow keeping small multipart file parts in memory
#56164 - TLS registry: Allow keystore alias when SNI enabled
#56168 - Qute: introduce injectable locale aware message bundles
#56169 - Fix some anchors in security-webauthn.adoc
#56172 - Clean up long-deprecated code in core deployment build items
#56174 - Add deprecation-cleanup skill
#56178 - Bump smallrye-config.version from 3.18.1 to 3.18.2
#56179 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.5 to 0.9.7
#56180 - Bump org.mvnpm:dompurify from 3.4.13 to 3.4.14
#56188 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.18.1 to 3.18.2 in /devtools/gradle
#56190 - Register the Lambda test base URI with the HTTP root path
#56193 - Run the JPA MySQL integration tests with Podman again
#56194 - Run the JDBC PostgreSQL and Micrometer deployment tests with Podman again
#56196 - Polish RuntimeResourceDeployment
#56198 - Remove deprecated configuration properties prior to Quarkus 3.33
#56199 - Support reflection-free json serialization of a Map subtype
#56200 - Use Vert.x ContextLocal instead of SmallRye ContextLocals data maps
#56201 - Update LGTM to 0.31.0, expose Prometheus endpoint
#56207 - Warn when both the Micrometer and OpenTelemetry metrics are active
#56210 - Fix annoying null at end of toString when there are no paths
#56212 - Explain native-image build failures by exit code
#56213 - Hint at a missing C compiler in native-image build failures
#56218 - Add quarkus.smallrye-openapi.store-schemas-directory
#56219 - Make protobuf-java a compile dependency for Pulsar extension
#56221 - Deprecate quarkus.native.enable-fallback-images
#56225 - Polish AbstractQuarkusExtensionTest
#56230 - Prevent dependabot for updating Jakarta Data
#56235 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.7 to 0.9.8
#56236 - Upgrade Jackson to 3.1.4 in BOM
#56238 - Decouple types discovery and generation of reflection-free Jackson serializers
#56247 - Test container reuse/replacement across profile changes
#56248 - Support selecting the client address from the X-Forwarded-For header
#56249 - Try to prevent unnecessary release-notes in PRs
#56253 - Fix bad mapping for Spring @RequestHeader
#56256 - Bump org.apache.groovy:groovy from 5.1.0 to 5.1.1
#56258 - Reject REST Client Response/RestResponse returned from server endpoints
#56259 - Remove deprecated code from core/processor
#56260 - Remove deprecated code from core/runtime and core/devmode-spi
#56261 - Remove deprecated code from core/deployment
#56266 - Bound remote-dev request body processing
#56269 - Honor MongoDB authSource when credentials are configured separately
#56272 - Remove deprecated code from devtools
#56273 - Remove deprecated code from independent-projects
#56274 - NoClassDefFoundError Jdk8Module for app with oidc-restclient, native build
#56276 - Native binary start fails with "BulkOfPropertiesConfiguration class is not a ConfigMapping", JVM mode works fine
#56284 - Bump org.cyclonedx:cyclonedx-core-java from 13.1.0 to 13.2.0
#56288 - Register @ConfigProperties classes for reflection
#56290 - Use MongoDB connection string database as the Panache default
#56297 - Keycloak Admin Client: use Jackson 2 modules until we get client based on Jackson 3
#56307 - Fix reading headers in Spring Web - Quarkus REST
#56312 - Bump apicurio-registry.version from 3.3.1 to 3.3.2
#56316 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.8 to 0.9.10
#56317 - Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to 3.0.3
#56318 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.8 to 25.2.9
#56319 - Use composite key for token introspection and userinfo cache
#56325 - SPIFFE client: move runtime API classes and introduce SVID specific classes
#56326 - Refresh token expiry resolution fails silently, no log when refreshTokenExpiresAt cannot be determined
#56327 - Hibernate session delegates
#56328 - Remove preview-era reflection for virtual threads now that JDK 21 is the baseline
#56329 - Include ConfigSource name when reporting unknown or deprecated configurations
#56335 - Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine
#56341 - Upgrade SmallRye GraphQL to 3.0.0.Beta7
#56344 - Improve example code for pausable channels
#56347 - CleanerJava24Linker#<clinit> taking 20% of startup CPU time
#56351 - Bump to Vert.x 5.1.7
#56352 - OTel: Wrap the shared executor so that OTel shutdown does not take an extra 5 seconds to terminate
#56355 - Improve docs for PQC
#56356 - Upgrade Oracle JDBC driver to latest version 23.26.3.0.0
#56360 - Keep WithFormRead request filter order when moving them after the body handler
#56361 - Upgrade RESTEasy to 7.0.4.Final
#56373 - Upgrade Oracle JDBC driver to latest version 23.26.3.0.0
#56375 - Rest client: add parameter-style configuration paramter for @FormParam/@RestForm
#56376 - Fix TOCTOU race in setChunked() causing flaky SSE TCK closeTest
#56377 - Dev UI observability
#56382 - Log when refresh token expiry cannot be resolved
#56384 - Bump org.htmlunit:htmlunit from 5.4.0 to 5.5.0
#56401 - rest-jackson: class-level @CustomSerialization ObjectWriter cached by return type, dropping the resource class from the key
#56410 - Add xstefank to quarkus lottery
#56417 - Further Netty startup optimizations
#56418 - Optimize removed beans resolution
#56419 - Use ReentrantLock instead of Vert.x connection as monitor in HTTP I/O classes
#56421 - Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0
#56422 - Bump org.yaml:snakeyaml from 2.6 to 2.7
#56426 - docs: document JBang run.repos for non-Central artifacts
#56427 - docs: document Gradle quarkusIntTest layout
#56433 - Ensure @CustomSerialization / @CustomDeserialization are properly cached
#56436 - Signals: propagate OpenTelemetry trace context to receivers
#56438 - Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.6.0
#56440 - Bump org.jboss.threads:jboss-threads from 3.9.2 to 3.10.1
#56443 - Avoid unnecessary reloads due to using array based values in meta-annotations for QuarkusTestResource
#56445 - Remove the old Dev Services infrastructure
#56446 - Build issue with DB2 extension on Mac OS + Podman
#56451 - Update the build plugin version properties with quarkus update
#56452 - Fix unrecognized global REST Client response decompression configuration key
#56454 - Run the Oracle tests with Podman again
#56458 - Do not report a client going away during a chunked servlet response as an error
#56460 - Qute: require the index parameter for list get/take/takeLast
#56461 - Stop non-reusable dev services when the JVM shuts down after tests
#56462 - Read a REST Client response received as a Multi according to the subscriber's demand
#56464 - Run the logging-gelf and Hibernate Reactive with Panache tests with Podman again
#56465 - Support Multi<byte[]> as a streamed REST Client request body
#56466 - Make the maximum number of decoded query parameters configurable
#56468 - Skip the DB2 Dev Services tests on arm64
#56472 - Add ways to configure form param separator in REST Client
#56473 - Remove unnecessary quarkus-extension-processor from SPI modules
#56474 - Fix some modularity config for Vert.x
#56475 - Update SmallRye Config to 4.0.0
#56476 - Bump mutiny-zero.version from 1.3.0 to 1.3.1
#56478 - Bump com.dajudge.kindcontainer:kindcontainer from 2.0.0 to 2.1.0
#56479 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.2.9 to 25.2.10
#56481 - Bump org.apache.groovy:groovy from 5.1.1 to 5.1.2
#56482 - Bump org.checkerframework:checker-qual from 4.2.2 to 4.2.3
#56483 - Polish MultipartParser
#56484 - Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19
#56488 - Use streaming parsing in generated Jackson deserializers
#56490 - Re-order and condense extension metadata docs
#56492 - QuarkusContextStorage.attach() leaves the OpenTelemetry context in thread-local storage on Vert.x event-loop threads
#56495 - Signals - collect metrics for messages, errors and bytes transferred
#56496 - Improve ServerRestHandler invocation
#56499 - Bump org.mvnpm.at.hpcc-js:wasm from 2.35.0 to 2.35.1
#56501 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.10 to 0.9.11
#56505 - Add AutoUUIDv7 class for UUID generation for Hibernate Data
#56510 - Drop the 3.x artifact relocations in Quarkus 4.0
#56516 - Add a callout list to the Publisher listing in the Quarkus Data tutorial
#56520 - native-image: New reachability-metadata.json, GraalVM/Mandrel 25+
#56525 - Fix Javadoc of quarkus.otel.traces.sampler.arg
#56528 - Signals: collect Micrometer metrics for emissions, executions and errors
#56530 - Reinstate MemorySize*
#56531 - Fix find-deprecated.sh to use committer date, not author date
#56533 - Bump to Vert.x 5.1.8
#56538 - Unify Dev Services around StartableContainer
#56546 - PQC tests - Downgrade setup-java
#56550 - SBOM entry for Quarkus Bot
#56554 - Bump com.gradle.plugin-publish from 2.1.1 to 2.2.0 in /devtools/gradle
#56557 - Polish observation extension
#56564 - Avoid storing CuratedApplication-dependent instances in static fields
#56565 - Rename some variables in QuarkusTestExtension for clarity
#56574 - Track active runtime classloaders to manage CuratedApplication lifecycle
#56578 - Convert OffsetDateTime values sent by the REST Client
#56579 - Bump Microsoft SQL Server JDBC driver to 13.6.0
#56581 - Resolve the actual type of bean parameters declared with a type variable
#56582 - Signals: provide initial security integration
#56589 - Restore the correct outer instance after nested test classes with a per-class lifecycle
#56591 - Support repeated @MeterTag annotations on a method parameter
#56598 - OIDC: enforce DPoP proof iat and exp claims
#56606 - Take annotation transformations into account for bean parameters
#56607 - Serve the JSON metrics endpoint when its path is below the Prometheus path
#56608 - ArC: @Decorator applied to a self-invocation of a decorated interface method (StackOverflowError regression since 3.35.0)
#56611 - Read the response content type case-insensitively in the Lambda HTTP handler
#56612 - Explain a missing HTTP method in the event received by the Lambda REST handler
#56615 - Report an invalid bcrypt hash passed to BcryptUtil.matches with a clear message
#56618 - Add a size limit for the individual file parts of a multipart request
#56621 - Warn about resources that still use the legacy javax.ws.rs annotations
#56629 - Polish quarkus-rest extension
#56634 - Do not cache when there is a bootstrap customizer
#56658 - Flaky test: io.quarkus.maven.it.DevMojoIT.testResourcesFromClasspath
#56661 - Explain how to find out why the CORS filter rejected a request
#56662 - Fix the PKCS#11 keystore factory example of the TLS registry reference
#56674 - Infinispan test routinely fails on MacOS
#56690 - Add a connection status attribute to the access log
#56691 - Allow a CDI REST Client with an @Url parameter to have no configured base URL
#56696 - Reject client proxies of non application-scoped beans as cache keys
#56697 - Document when @PreDestroy runs for a @TransactionScoped bean
#56701 - Keep the Kafka Streams health checks up when there is no Topology
#56707 - Allow enabling the PROXY protocol per HTTP listener
#56715 - Stop adding a charset to JSON response content types
#56723 - Add the username option to the Redis client configuration
#56734 - Key web jar results by artifact and root
#56735 - Degrade the Dev UI extension actions gracefully when the catalog is unavailable
#56741 - Fix StackOverflowError in ArC when a decorated method is declared by multiple interfaces
#56744 - Honour quarkus.container-image.insecure in the generated OpenShift image streams
#56745 - Resolve the Dev UI namespace of an extension from its extension descriptor
#56755 - Fix Infinispan tests failing on macOS with connection timeouts
#56758 - Fix CycloneDX SBOM format and pretty-print configuration
#56764 - Bump org.codehaus.mojo:properties-maven-plugin from 1.3.0 to 1.3.1
#56766 - Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0
#56767 - Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4
#56772 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.18.2 to 3.18.3 in /devtools/gradle
#56775 - Separate OIDC Dev Services IT module from Signals Security and WebSockets Next Security IT tests
#56776 - The writing-extension-devui skill points at the pre-split Dev UI JSON-RPC coordinates
#56777 - flyway is migrating sql files in sibling directories
#56778 - Point the Dev UI extension skill at the current JSON-RPC SPI coordinates
#56779 - Fix Flyway filesystem location filtering for multiple datasources
#56781 - Revert MongoDB image to mongo:7.0
#56789 - Replace javaparser with text manipulation in gRPC post-processing
#56790 - Do not use pr id file for previews
#56801 - Gizmo: bump to 2.3.0
#56803 - Bump smallrye-config.version from 3.18.2 to 3.18.3
#56804 - SmallRye Fault Tolerance: bump to 7.0.0
#56805 - Fix clearedContext in OpenTelemetryMpContextPropagationProvider
#56806 - Add per-item expiration API to the cache extension
#56812 - Fix docs preview for pull requests opened from forks
#56814 - getOuterInstances() keeps a stale entry when a nested class has both a test and a deeper nested class
#56815 - Reuse the enclosing instance when a nested test class is initialized twice
#56818 - Hibernate ORM processor refactoring
#56827 - Break up quarkus-devui-deployment into multiple runs
#56828 - Update to Scalpel 0.4.2
#56830 - Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
#56835 - Bump org.codehaus.mojo:versions-maven-plugin from 2.21.0 to 2.22.0
#56836 - Re-enable Brotli compression level configuration
#56840 - Update various bad links in javadoc and bad references to javadoc
#56843 - Add 'Command Line" category
#56844 - Add command-line category
#56846 - Upgrade RESTEasy to 7.0.5.Final
#56850 - Quarkus forgets config properties in ITs with "Instance per class"
#56851 - Break up quarkus-integration-test-aesh into multiple runs
#56852 - Upgrade to Hibernate 7.4.9.Final
#56856 - WebSockets Next: add max-pending-messages back-pressure
#56860 - Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)
#56864 - Bump smallrye-jwt version to 4.6.4
#56870 - Do not call unrecognised non-platform categories 'uncategorized'
#56871 - Deprecated jms-spi build items, moved to Quarkiverse Quarkus JMS extension
#56872 - Add ModuleExportBuildItem to complement ModuleOpenBuildItem
#56874 - Update Artemis version to 2.57.0
#56875 - Fix the guide links in the metadata of 13 extensions
#56882 - Fix the stale config prefixes in the metadata of 17 extensions
#56886 - QuarkusIntegrationTestExtension: remove postProcessTestInstance and add injection in beforeEach
#56887 - UriBuilder#path re-resolves the target method via reflection on every call, even though the result is invariant
#56889 - Improve performance of UriBuilder#path
#56890 - CDI changes require changes in SmallRye Context Propagation
#56893 - Improve testing skill with proper config method
#56896 - amazon-lambda: dev mode fails with "Key already registered quarkus.http.local-base-uri" since 3.38.0
#56897 - Reset RuntimeUpdatesProcessor#lastStartIndex on close
#56898 - Reset tasks on QuarkusClassLoader#close()
#56901 - Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2
#56904 - Add char[] overloads to BcryptUtil and deprecate the String ones
#56909 - Fix the wrong RSA key size and two editorial issues in the JWT guide
#56916 - Break up tests in quarkus-opentelemetry-deployment into multiple runs
#56917 - Add support for keyed pages for Quarkus Data reactive
#56919 - Improve handling of Vertx servers in REST Client tests
#56923 - Do not use non-existent url for schema
#56926 - Fix wording of doc preview comment so we know it is a doc preview
#56928 - Improve alt text and link labels in the security architecture guide
#56933 - REST Client: Multi response over application/x-ndjson ignores subscriber demand
#56936 - Adjust DevServicesResultBuildItem#configProvider() API
#56941 - Add option for Jackson to ignore transient
#56947 - Separate ValueRegistry names when registering Vertx HTTP and Amazon Lambda local base uri
#56954 - Rename deprecation-cleanup skill to manage-deprecations and expand it
#56955 - Prevent ExternalSelfSignedTestCase flakiness
#56957 - Bump SmallRye Context Propagation to 2.4.0. This version uses new CDI 5.0 coordinates
#56960 - Deprecate Hibernate ORM 5.6 database compatibility setting
#56969 - Fix dependabot config for jackson - use both groupIds, allow only micro updates
#56971 - Bump to latest Stork 3.0.3
#56975 - Bump elasticsearch-opensource-components.version from 9.4.3 to 9.4.7
#56977 - Read newline-delimited REST Client Multi responses on demand
#56978 - Update to SmallRye OpenAPI 4.4.0-alpha3 for Jackson 3 support
#56979 - Enable quarkus-awt on macOS
#56982 - Update Kubernetes Client to 8.0.0 and Dekorate to 5.0.0
#56983 - Dev UI buttons not clickable
#56990 - Do not use semicolon as query param delimiter by default
#56993 - Bump quarkus-documentation-rag-maven-plugin to 0.0.8
#56994 - Navigate when a Dev UI sub-menu tab is selected outside its link
#56996 - Ensure that HttpClient is closed in tests
#56997 - Use StaticInit and RuntimeInit in Quarkus REST recorders
#56999 - Drop deprecated ExchangeAttributeParser constructor
#57002 - Reintroduce legacy JsonRPCProvidersBuildItem
#57005 - Bump org.mvnpm:dompurify from 3.4.14 to 3.4.16
#57007 - Reintroduce the quarkus-junit5 relocation for a few betas
#57013 - Bump smallrye-reactive-messaging.version from 5.0.0-beta5 to 5.0.0-RC1
#57016 - Deprecate OutputFilter
#57018 - Further improve tests that use Vert.x HttpClient
#57019 - Follow-up fixes on top of the Hibernate 8 integration
#57027 - Add cursor-based (keyed) pagination support to Quarkus Data
#57029 - Improve clarity of javadoc for RunMojo
#57033 - Update CORSFilter to warn about wildcard origins in prod and allowing access to credentials
#57042 - Make preferred Instant JDBC type override test effective
#57043 - Fix version check for preview releases
#57044 - Don't require URL in REST Client when domain sockets are used
#57048 - Revert Bump org.mvnpm.at.hpcc-js:wasm from 2.35.0 to 2.35.1
#57049 - Add 3.40 LTS to guarded branches
#57051 - Implement a merge gate workflow for CI

2026-09-30 05:32:59

quarkus

quarkusio

3.40.1

Complete changelog

#48420 - Redis with "CacheResult" returns "QUEUED" under high concurrency load
#56834 - Missing RdsUtilities during Java 25 native build
#56938 - Harden AeshLauncher signal protocol and timeout diagnostics
#56942 - RestEasy Reactive logs warning when an endpoint has a void return type
#56943 - Fix MariaDB GraalVM metadata when AWS SDK is on the classpath, clean up unnecessary related build items
#56944 - Extend void check when indexing endpoints with RestEasy Reactive
#56946 - WebSockets Next: fix stalled Multi stream on decode failure with backpressure
#56958 - ForwardedProxyHandler leaks DNS UDP sockets — DnsClient never closed
#56961 - Prevent leak of DnsClient instance when resolving proxy hostnames
#56976 - Redis Client: fix error handling in blocking transaction API

2026-09-23 18:22:18

quarkus

quarkusio

3.39.5

Complete changelog

#56037 - Always complete the export when the OTLP sender is shut down
#56255 - Bump org.freemarker:freemarker from 2.3.34 to 2.3.35
#56349 - [3.39] Bump to Vert.x 4.5.33
#56573 - Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup
#56783 - Typo fixes in gRPC guides
#56796 - docs: Fix the dead Jose4J link in the JWT Build guide
#56800 - Add javadoc to AbstractSecurityIdentityAssociation
#56821 - [3.40] SmallRye Fault Tolerance: bump to 6.11.4
#56831 - [3.40] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
#56837 - Do not stack asciidoc anchors, because it does not work
#56838 - Fix malformed link
#56842 - Fix dead link for Redis sandbox
#56845 - Bump Keycloak version to 26.7.4
#56849 - [3.40] Upgrade RESTEasy to 6.2.19.Final
#56853 - [3.40] Upgrade to Hibernate 7.4.9.Final
#56857 - [3.40] WebSockets Next: add max-pending-messages back-pressure
#56861 - [3.40] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)
#56867 - [3.40] : Bump smallrye-jwt version to 4.6.4
#56884 - Invalid Java interface declaration in SmallRye GraphQL guide
#56885 - Fix interface inheritance in SmallRye GraphQL guide
#56920 - Update Elytron to 2.9.2.SP1
#56925 - aesh 3.18.1

2026-09-23 18:21:54

quarkus

quarkusio

3.40.0

Complete changelog

#56750 - Enhance CycloneDX documentation and configuration options description to stress the priority on JSON format
#56829 - [3.40] Update to Scalpel 0.4.2

2026-09-23 15:05:15

quarkus

quarkusio

3.27.6

Complete changelog

#50365 - Bump keycloak to 26.4.0 and keycloak-client to 26.0.7
#50404 - Application with quarkus-keycloak-admin-rest-client fails to compile after recent Keycloak bump
#50405 - Initialize org.keycloak.common.util.SecretGenerator at runtime for Keycloak admin client
#51596 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
#53836 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
#54872 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
#55171 - [3.27] Upgrade to Keycloak 26.0.10
#55288 - [3.x] OpenShift Client native integration test fails after #55242
#55301 - [3.27] Bump the hibernate group with 7 updates
#55319 - Fix native image build failure caused by Netty's SelfSignedCertificate
#55380 - Harden remote dev mode against path traversal and unsafe deserialization
#55403 - Fix bad link syntax and update cross-document references to use xref
#55531 - [3.27] Update to Vert.x 4.5.30 and Netty 4.1.136.Final
#55552 - [3.27] Upgrade to Jackson 2.21.5
#55557 - [3.27] Bump to Vert.x 4.5.31
#55568 - Update sync script to handle Qute site
#55622 - [3.27] Bump sshd to 2.19.0
#55671 - [3.27] Make some OIDC authentication failure messages more verbose
#55672 - [3.27] Backport changes related to raising level of some of OIDC log messages
#55683 - Bump at.yawk.lz4:lz4-java from 1.10.1 to 1.11.1 in /bom/application
#55887 - OIDC: malformed bearer token (empty or dots-only) causes NoSuchElementException in OidcCommonUtils.getJwtContentPart -> HTTP 500 instead of 401
#55905 - Guard against a JWT with no parts in OidcCommonUtils and OidcUtils
#55913 - [3.x] Bump to Vert.x 4.5.32 and Netty 4.1.137.Final
#55915 - Bump org.jsoup:jsoup from 1.15.3 to 1.23.1 in /core/processor
#55969 - [3.27] Bump the hibernate group with 7 updates
#56055 - Manage jsoup version in the bom
#56093 - Some JSoup-related cleanup
#56114 - [3.27] Set a default GraphQL query depth limit of 10 to prevent DoS
#56184 - Add missing include::_attributes.adoc[] to init-tasks and build-analytics guides
#56191 - Confine Dev UI workspace JSON-RPC operations to the project root
#56311 - [3.27] Fix reading headers in Spring Web - Quarkus REST
#56314 - Bump org.jsoup:jsoup from 1.23.1 to 1.23.2
#56322 - [3.27] Use composite key for token introspection and userinfo cache
#56334 - [3.27] Upgrade SmallRye GraphQL to 2.14.3
#56338 - [3.27] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine
#56345 - [3.27] Upgrade bouncycastle version to 1.85
#56363 - [3.27] Upgrade RESTEasy to 6.2.18.Final
#56369 - [3.27] Manage projectreactor in the bom, update to 3.8.7
#56532 - Manage zstd-jni in the bom
#56570 - [3.27] Bump to Vert.x 4.5.34
#56632 - Bump zstd-jni to 1.5.7-16
#56747 - The default GraphQL query depth of limit 10 prevents graphql-ui from running its introspection query
#56748 - Bump the default GraphQL query depth limit to 20
#56753 - [3.27] Bump Jackson to 2.21.6
#56760 - [3.27] Explicit update to Netty 4.1.138.Final
#56787 - Bump to BouncyCastle 1.86.1
#56799 - [3.27] Bump freemarker to 2.3.35
#56819 - [3.27] SmallRye Fault Tolerance: bump to 6.9.4
#56833 - [3.27] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
#56847 - [3.27] Upgrade RESTEasy to 6.2.19.Final
#56855 - [3.27] Upgrade to Hibernate 7.1.36.Final
#56859 - [3.27] WebSockets Next: add max-pending-messages back-pressure
#56863 - [3.27] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)
#56869 - [3.27] : Bump smallrye-jwt version to 4.6.4
#56888 - [3.27] Upgrade to Elytron 2.6.10.SP1
#56914 - [3.27] Bump to BouncyCastle 1.86.1

2026-09-23 14:42:46

quarkus

quarkusio

3.33.4

Complete changelog

#50123 - 3.26.2 with gradle doesn't see sources generated by quarkus-openapi-generator
#51130 - Remote Dev fails when using hibernate-reactive extension
#53350 - Cross-application AMQP Dev Services sharing broken — ContainerLocator not updated for new discovered() API
#53785 - Multi threaded maven uber jar builds on windows faill with java.nio.file.ClosedFileSystemException
#54144 - Open archive path tree interrupt workaround
#54864 - Fix cross-application Dev Services discovery in ContainerLocator
#54885 - Tests do not start
#55062 - REST Client: Content-Type header not set when provided via jakarta.ws.rs.client.Entity
#55138 - Overwrite content-type header provided via the variant of the entity
#55317 - @QuarkusTest bootstrap deadlocks during parallel deployment-dependency resolution
#55345 - Pre-init Maven resolver HTTP transport classes to avoid class loading deadlock
#55351 - Don't truncate stacktrace on OIDC authentication errors
#55357 - Do not miss Throwable in the OIDC code flow error log
#55426 - ServerExceptionMapper on sub-resource is global instead of sub-resource specific
#55427 - Make @ServerExceptionMapper in sub-resource specific to that sub-resource
#55516 - [3.33] Bump Jackson BOM to 2.21.5
#55532 - Fix Gradle compilation against code generated by custom providers
#55561 - [3.33] Bump to Vert.x 4.5.31
#55600 - [3.33] Bump to Netty 4.1.136
#55618 - Limit of 18 OpenAPI Profiles
#55620 - Fix EnumMap ClassCastException in bytecode recorder on method split
#55621 - [3.33] Bump sshd to 2.19.0
#55657 - [3.33] Enforce managed versions on direct dependencies of an application artifact provided as a JAR
#55686 - GraphQL+OIDC issue with default configuration and native
#55691 - OIDC GraphQL client: fix NPE when default OIDC client is configured and native mode
#55746 - REST Client silently drops @MatrixParam / @RestMatrix parameters
#55751 - Send @MatrixParam and @RestMatrix from the REST Client
#56030 - WriterInterceptor not called for response mapped from exception
#56066 - Pass String array arguments of the invoked secured method to @PermissionChecker
#56079 - Skip Hibernate dev integrator in remote server-side dev mode
#56152 - Run writer interceptors for responses mapped from exceptions thrown before the interceptor handler
#56173 - JarResource: cached toExternalForm() breaks relative URL resolution against CodeSource.getLocation()
#56176 - Fix resolving sibling URL in JarResource
#56195 - [3.33] Bump Micrometer to 1.16.7
#56232 - [3.33] Bump the hibernate group with 9 updates
#56251 - [3.33] Backport doc categorization work
#56292 - Fix typo sytem -> system in the dev services databases guide
#56309 - [3.33] Fix reading headers in Spring Web - Quarkus REST
#56321 - [3.33] Use composite key for token introspection and userinfo cache
#56331 - Upgrade log4j from 2.25.3 to 2.25.5
#56337 - [3.33] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine
#56339 - [3.33] Upgrade SmallRye GraphQL to 2.17.1
#56342 - [3.33] Upgrade bouncycastle version to 1.85.2
#56364 - [3.33] Upgrade RESTEasy to 6.2.18.Final
#56368 - [3.33] Manage projectreactor in the bom, update to 3.8.7
#56385 - [3.33] ArC: fix client proxy name collision for producers
#56387 - Remove blank line which breaks adoc header
#56411 - Bump the time-out to 4 minutes for NativeImageBundleIT
#56415 - [3.33] Manage httpclient5 and httpcore5 in the bom
#56428 - [3.33] Bump Log4j to 2.25.5
#56494 - [3.33] SBOM cpe attribution
#56534 - [3.33] Remove the CI job that runs k8s tests on Windows
#56569 - [3.33] Bump to Vert.x 4.5.34
#56572 - Updates to Infinispan 16.0.15
#56675 - Document method-level OIDC REST client annotations
#56752 - [3.33] Bump Jackson to 2.21.6
#56759 - [3.33] Explicit update to Netty 4.1.138.Final
#56798 - [3.33] Bump freemarker to 2.3.35
#56820 - [3.33] SmallRye Fault Tolerance: bump to 6.10.2
#56823 - [3.33] Upgrade to Elytron 2.8.5.Final
#56832 - [3.33] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
#56848 - [3.33] Upgrade RESTEasy to 6.2.19.Final
#56854 - [3.33] Upgrade to Hibernate 7.2.25.Final
#56858 - [3.33] WebSockets Next: add max-pending-messages back-pressure
#56862 - [3.33] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)
#56868 - [3.33] : Bump smallrye-jwt version to 4.6.4
#56915 - [3.33] Bump to BouncyCastle 1.86.1