3.39.2
- #55234 -
quarkuscli is missing theclassnameoption - #55239 - Add resource class name to CreateApp
- #55355 - Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1
- #55360 - quarkus-container-image-buildpack fails on Windows with UnsupportedOperationException when building container image
- #55545 - Support multiple colons in
@PermissionsAllowedvalue - #55665 - Update buildpack lib to 0.0.17
- #55907 - Quarkus 3.38 Date serialization issue
- #56016 - Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.3 in /bom/application
- #56030 - WriterInterceptor not called for response mapped from exception
- #56064 -
quarkus-rest-jackson: reflection-free (de)serializers treat aMapsubclass as a bean and drop every map entry - #56126 - Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2
- #56152 - Run writer interceptors for responses mapped from exceptions thrown before the interceptor handler
- #56161 - Allow multiple colons in
@PermissionsAllowed - #56165 - OIDC Redis TokenStateManager returns null instead of failing when the token state is missing, leading to an NPE and HTTP 500
- #56173 - JarResource: cached toExternalForm() breaks relative URL resolution against CodeSource.getLocation()
- #56176 - Fix resolving sibling URL in JarResource
- #56182 - Issue using both Caffeine and Redis for caching
- #56206 - Fix dead link
- #56209 - Update preview workflow for Roq
- #56216 - Avoid early token acquisition for DeferredOidcClient
- #56223 - [3.39] Fix serialization of string-shaped dates without a pattern in reflection-free Jackson serializers
- #56224 - [3.39] Support reflection-free json serialization of a Map subtype
- #56234 - Force re-authentication when the OIDC session token state is no longer available
- #56237 - Bump org.asynchttpclient:async-http-client from 2.15.0 to 2.16.0 in /bom/application
- #56242 - Fix Redis cache backend type resolution
- #56244 - Fix docs preview: Drop invalid condition and unused mtime
- #56257 - Signals: docs - add comparison with CDI events and Vert.x EventBus
- #56278 - security-getting-started-tutorial guide style review (3.40)
- #56280 - security-authorize-web-endpoints-reference guide style review (3.40)
- #56281 - security-keycloak-authorization guide style review (3.40)
- #56282 - security-architecture guide style review (3.40)
- #56292 - Fix typo sytem -> system in the dev services databases guide
- #56293 - docs: fix typo exisits -> exists
- #56300 - Allow --path parameter on quarkus create app cli for parity with maven creation
- #56306 - Typo fixes in deploying-to-abc guides
- #56308 - [3.39] Fix reading headers in Spring Web - Quarkus REST
- #56320 - [3.39] Use composite key for token introspection and userinfo cache
- #56333 - [3.39] Upgrade SmallRye GraphQL to 2.18.5
3.39.1
- #48943 - From Quarkus 3.22, Database dev services not reused if the unit test is using a
@QuarkusTestResource - #51130 - Remote Dev fails when using hibernate-reactive extension
- #55389 - Fix
@RunOnVirtualThreadannotation in combination with blocking endpoints - #55907 - Quarkus 3.38 Date serialization issue
- #55958 - container-image-jib: no progress output while the image is pushed, because ProgressEvent is never subscribed to
- #55959 - Jib container push progress log
- #56009 - Dev UI Dev MCP endpoint hangs indefinitely (no response, no error) when a JSON-RPC request's id is a string
- #56064 -
quarkus-rest-jackson: reflection-free (de)serializers treat aMapsubclass as a bean and drop every map entry - #56070 - quarkus-spring-security may not fail the build when
@PostAuthorize,@PreFilteror@PostFilterare used - #56079 - Skip Hibernate dev integrator in remote server-side dev mode
- #56080 - MongoDB Panache: Session-commit on transaction rollback
- #56086 - [3.39] Do not set an invalid country code when generating the Quarkus Dev CA
- #56087 - [3.39] Handle string JSON-RPC ids and always respond on the Dev MCP endpoint (3.39 backport)
- #56088 - Fail the build when unsupported Spring Security annotations are used
- #56092 - [3.39] Revert "Disable the Quarkus Dev CA generation test on Windows"
- #56101 - Document that CORS cannot be configured both programmatically and with properties
- #56104 - quarkus-config-doc-maven-plugin picks up things from git worktrees that it should ignore
- #56105 - Don't descend into nested git checkouts when scanning for config-doc target directories
- #56130 - Register terminal provider SPI and defer FFM init for native images
- #56131 - docs: clean up independently maintained CORS guide
- #56132 - Redis replication with topology=static does not respect host ordering - Set loses master/replica order
- #56158 - REST Client:
@RestClienton the interface fails the build with a duplicate annotation since 3.32 - #56159 - Ignore a
@RestClientqualifier placed on the REST Client interface - #56166 - Fix MongoDB Panache committing sessions after a JTA transaction timeout
- #56177 - Bump io.micrometer:micrometer-bom from 1.17.0 to 1.17.1
- #56183 - Redis: make sure the configured hosts are ordered
- #56192 - Do not rebuild the application for every launch of a QuarkusMainTest
- #56197 - Upgrade aesh, aesh-readline, fix ffm downcall and customizers
- #56204 - Switch to JavaParser for generating build items doc
3.39.0
- #56072 - [3.39] Revert "Enable reflection-free Jackson serializers by default"
- #55738 - Make sure
MicrometerRegistryProviderBuildItemhas a stable collection order - #55756 - Datasource guide style review (3.40)
- #55834 -
@Scheduledmethod can run before@InjectMockis installed in@QuarkusTest - #55891 - Scheduler: document halted start mode as a testing workaround
- #55902 - Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1
- #55911 - "ScheduledJobStarted" CDI Event for a scheduled job.
- #55914 - Fire
StartedExecutionCDI event for scheduled jobs - #55947 - Update to Kotlin 2.4.10
- #55980 - Bump Gradle from 9.6.0 to 9.7.0
- #55988 - Embedding cyclone DX SBOM fails with minikube extension since 3.38.0.CR1 because of org.jline:jline-parent:4.0.0 dependency
- #55991 - Document implicit transactions for blocking SmallRye GraphQL resolvers when JTA is available
- #55995 - Bump org.bouncycastle:bc-jdk18on-bom from 1.85 to 1.85.2
- #55997 - Bump eu.maveniverse.maven.njord:extension3 from 0.9.9 to 0.9.10
- #56001 - Document implicit transactions for blocking SmallRye GraphQL resolvers
- #56002 - Use testcontainers' oracle-free instead of oracle-xe
- #56008 - DevUI: use bean class as source for synthetic observers
- #56019 - Fix jline dependency
- #56020 - [3.39] Add quarkus-extension.json
- #56041 - Preserve the configured order of REST compression media types
- #56042 - Make sure
JacksonDeserializerFactory#DeserializationData'sconstructorFieldshas a stable order - #56043 - Record WebSocket endpoint security checks in a stable order
- #56051 - Do not use maps with unstable iteration order in
OidcGraphQLClientIntegrationProcessor - #56052 - Make sure map returned from
WebSocketProcessor#collectEndpointSecurityChecksis stable and immutable - #56053 - Make sure
ctorFieldsinJacksonDeserializerFactory#deserializeObjectFieldsis immutable - #56054 - [3.39] Backport doc categories work to 3.39
- #56072 - [3.39] Revert "Enable reflection-free Jackson serializers by default"
3.38.3
- #34749 - Openshift manifest generator does not detect commit id in "detached HEAD" state
- #55437 - Bump org.junit:junit-bom from 6.1.1 to 6.1.2 in /devtools/gradle
- #55875 - Tree shake break with liquibase extension, if no changelog file exists
- #55918 - Quarkus dev mode fails on macOS when GNU stty precedes BSD stty in PATH
- #55924 - Make sure liquibase extensions don't fail on missing change logs
- #55948 - Bump org.junit:junit-bom from 6.1.2 to 6.1.3
- #55954 - Bump org.junit:junit-bom from 6.1.2 to 6.1.3 in /devtools/gradle
- #55967 - Correct typo in catalog overrides
- #55983 - Avoid eagerly initializing the full map of System#getProperties when not necessary
- #55985 - Fall back to the basic console when terminal initialization fails in dev mode
- #55990 - [3.x] Bump dekorate to 4.1.11
- #56021 - quarkus-logging-json 3.36.x and above removes MDC information when choosing ECS format
- #56024 - Disable tree-shake in test mode
- #56033 - Keep MDC and NDC data in the ECS log format
- #56038 - [3.x] Fix native image build failure on aarch64 when using BC FIPS Poly1305-AES
- #56047 - [3.38] Revert "Bump org.bouncycastle:bc-jdk18on-bom from 1.84 to 1.85"
- #56066 - Pass String array arguments of the invoked secured method to
@PermissionChecker - #56067 - Do not set an invalid country code when generating the Quarkus Dev CA
- #56077 - Apply CliSettings customizers in CliRunner single-command execution path
3.38.2
- #55116 - Tight loop for AbstractResteasyReactiveContext due to race condition
- #55169 - Changing how connection closure is handled to avoid a race condition
- #55269 - [Quarkus Continuous Test] - Nested class not picked when using with quarkus test -Dtest flag
- #55298 - Fix test selection for nested test classes
- #55554 - Bump to Vert.x 4.5.31
- #55560 - [3.x] maven native integration tests fail after #55461
- #55584 - Qute localization breaks with too many entries
- #55587 - Add presence checks on substituted Netty classes
- #55653 - Fix VerifyError for large Qute message bundles
- #55675 - Serialization issue in rest endpoints when class has empty constructor
- #55684 - Use most suitable constructor for deserialization in reflection-free Jackson serializers
- #55760 - Upgrade Yasson from 3.0.4 to 3.0.5
- #55771 - Bump org.bouncycastle:bctls-fips from 2.1.23 to 2.1.24
- #55809 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10
- #55818 - Quarkus REST sub-resource server exception mapper returning NPE for JSON object
- #55844 - Quarkus REST: fix NPE when serializing JSON entity from sub-resource server exception mapper
- #55848 - Combining multiple ReflectiveClassBuildItem might lose the publicConstructors element
- #55849 - Merge isPublicConstructors() when a reflective class is registered twice
- #55861 - Bump org.bouncycastle:bc-jdk18on-bom from 1.84 to 1.85
- #55864 - Bump org.junit:junit-bom from 6.1.1 to 6.1.2
- #55865 - Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3
- #55866 - Bump commons-codec:commons-codec from 1.22.0 to 1.22.1
- #55867 - ArC: fix client proxy name collision for producers
- #55868 - Allow generation of reflection-free Jackson serializers for JPA entity not doing lazy loading
- #55872 - Fix Dev UI MCP Tools and Resources pages crashing when Dev MCP is disabled
- #55887 - OIDC: malformed bearer token (empty or dots-only) causes NoSuchElementException in OidcCommonUtils.getJwtContentPart -> HTTP 500 instead of 401
- #55905 - Guard against a JWT with no parts in OidcCommonUtils and OidcUtils
- #55906 - Use AbstractConnection to prevent input loss, upgrade aesh to 3.16.8
- #55908 - Fix PathTreeBuilder.getExcludes() returning the includes list
- #55912 - Tree Shaker breaks hibernate filters
- #55913 - [3.x] Bump to Vert.x 4.5.32 and Netty 4.1.137.Final
- #55927 - Make sure package-info.class isn't treated as a regular class during tree-shaking
- #55941 - Bump Keycloak version to 26.7.1 and Keycloak Client version to 26.0.12
- #55951 - [3.38] Fix native image regression caused by Netty 4.1.136 SslContext API change
3.39.0.CR1
- #55629 - [3.x] Add post-quantum cryptography (PQC) support to TLS registry
- #47598 - Quarkus REST issue with
UriInfoand matrix parameters - #48889 - Introduce another Qute escape expression for built items
- #48940 -
@RunOnVirtualThreadis not working properly with use-separate-server=false - #50123 - 3.26.2 with gradle doesn't see sources generated by quarkus-openapi-generator
- #51205 - Fine grained
reactive/blockingproperty for specific persistence Units - #52765 - Document how an extension can be marked as deprecated in quarkus-extension.yaml
- #53855 - Extension can be marked as deprecated in quarkus extension
- #54539 - Quarkus Data: order/sort tweaks
- #54610 - Quarkus data rename package and types
- #54694 - Move Order/Sort to PanacheQuery.sort() in quarkus-data-hibernate
- #54822 - Version Gradle file dependencies by content hash instead of
lastModified - #54826 - Startup regression SmallRyeOpenApiProcessor.prepareDocuments
- #55004 - Enable new inliner for native mode?
- #55041 - Fix gRPC
@RunOnVirtualThreadhalf-close race under load - #55194 - Fix UriInfo matrix parameter handling in RESTEasy Reactive
- #55226 - container image deplolyment group - getEffectiveGroup does not account for a
@character - #55242 - Bump kubernetes-client-bom from 7.7.0 to 7.8.0
- #55250 - Sanitize derived group name in container image build
- #55312 - [3.x] Upgrade pulsar client 4.2.3
- #55358 - Quickstarts compilation: test against 3.x branch instead
- #55382 - Allow per-persistence-unit control of blocking/reactive Hibernate ORM bootstrap
- #55390 - Add conditional test execution based on application properties
- #55398 - Upgrade sshd to 2.19.0
- #55435 - HibernateProcessorUtil: Add removed method to avoid API breakage
- #55439 - librariesOnly option to include only library components in generated SBOMs
- #55457 - Support build-time-only configuration to disable all runtime config source loading
- #55465 - Add quarkus.config.fixed-at-build-time to freeze all config at build time
- #55482 - Enable native mode SingleCallsiteInliner by default
- #55507 - Clear/reset integration-test boot failure state after class change and failed start
- #55511 - Correct test to tolerate containers being shut down at the end of a test
- #55532 - Fix Gradle compilation against code generated by custom providers
- #55538 - Skip building the OpenAPI document eagerly on startup
- #55541 - Fix typos and duplicated text in guide summaries
- #55563 - Bump MINIMUM GraalVM version to 25.0
- #55596 - Hibernate ORM entity enhancement fails for AdditionalPersistenceUnitBuildItem entities not on the augmentation classloader
- #55597 - Hibernate ORM: fallback to TCCL when loading entities from additional persistence units
- #55598 - [3.x] SmallRye GraphQL 2.18.4 + test for max query depth
- #55606 - Keyclok Admin link works only in the DevUI OIDC card
- #55607 - ArC: use thread-safe list for synthetic injection points
- #55612 - Add support for setting Agroal
readOnlyon pool config - #55613 - Add JDBC read only config option
- #55619 - Gradle:
local-projectsin the serialized application model is nondeterministic across Gradle JVMs, busting the build cache - #55626 - [3.x] Fix native image regression caused by Netty 4.1.136 SslContext API change
- #55629 - [3.x] Add post-quantum cryptography (PQC) support to TLS registry
- #55635 - DEV UI: fix sub-menu link from dynamic URL method
- #55645 - Hibernate ORM: allow to configure dialect for additional PUs
- #55647 - Serialize application model set-valued fields in a deterministic order
- #55656 - Harden aesh tests for Windows and slow CI environments
- #55663 - Optional access to application host ports from Keycloak Container
- #55667 - Update DB2 image from 12.1.0.0 to 12.1.5.0
- #55668 - Enhancements around build time dependencies in CycloneDX SBOMs
- #55704 - Enforce that only a single OIDC authentication mechanism is configured
- #55720 - Use dev services and implicit schema-management more broadly in h2-based tests
- #55725 - CI - Reuse build artifacts in PQC CI
- #55749 - Deprecate quarkus.hibernate-orm.blocking in favor of per-PU jdbc.enabled/reactive.enabled
- #55755 - Logging guide style review (3.40)
- #55791 - [3.x] Quarkus REST - Fix unbounded multipart part-header accumulation
- #55797 - [3.x] Fix path normalization
- #55877 - OIDC:
KubernetesServiceClientAssertionProviderdoes not proactively refresh a Kubernetes client assertion - #55885 - OIDC: fix periodic bearer token refresh from filesystem
- #55921 - Qute: support multi-pipe CDATA delimiters
- #55938 - [3.x] Bump smallrye-reactive-messaging.version from 4.36.0 to 4.37.0