3.38.3
- #34749 - Openshift manifest generator does not detect commit id in "detached HEAD" state
- #55437 - Bump org.junit:junit-bom from 6.1.1 to 6.1.2 in /devtools/gradle
- #55875 - Tree shake break with liquibase extension, if no changelog file exists
- #55918 - Quarkus dev mode fails on macOS when GNU stty precedes BSD stty in PATH
- #55924 - Make sure liquibase extensions don't fail on missing change logs
- #55948 - Bump org.junit:junit-bom from 6.1.2 to 6.1.3
- #55954 - Bump org.junit:junit-bom from 6.1.2 to 6.1.3 in /devtools/gradle
- #55967 - Correct typo in catalog overrides
- #55983 - Avoid eagerly initializing the full map of System#getProperties when not necessary
- #55985 - Fall back to the basic console when terminal initialization fails in dev mode
- #55990 - [3.x] Bump dekorate to 4.1.11
- #56021 - quarkus-logging-json 3.36.x and above removes MDC information when choosing ECS format
- #56024 - Disable tree-shake in test mode
- #56033 - Keep MDC and NDC data in the ECS log format
- #56038 - [3.x] Fix native image build failure on aarch64 when using BC FIPS Poly1305-AES
- #56047 - [3.38] Revert "Bump org.bouncycastle:bc-jdk18on-bom from 1.84 to 1.85"
- #56066 - Pass String array arguments of the invoked secured method to
@PermissionChecker - #56067 - Do not set an invalid country code when generating the Quarkus Dev CA
- #56077 - Apply CliSettings customizers in CliRunner single-command execution path
3.38.2
- #55116 - Tight loop for AbstractResteasyReactiveContext due to race condition
- #55169 - Changing how connection closure is handled to avoid a race condition
- #55269 - [Quarkus Continuous Test] - Nested class not picked when using with quarkus test -Dtest flag
- #55298 - Fix test selection for nested test classes
- #55554 - Bump to Vert.x 4.5.31
- #55560 - [3.x] maven native integration tests fail after #55461
- #55584 - Qute localization breaks with too many entries
- #55587 - Add presence checks on substituted Netty classes
- #55653 - Fix VerifyError for large Qute message bundles
- #55675 - Serialization issue in rest endpoints when class has empty constructor
- #55684 - Use most suitable constructor for deserialization in reflection-free Jackson serializers
- #55760 - Upgrade Yasson from 3.0.4 to 3.0.5
- #55771 - Bump org.bouncycastle:bctls-fips from 2.1.23 to 2.1.24
- #55809 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10
- #55818 - Quarkus REST sub-resource server exception mapper returning NPE for JSON object
- #55844 - Quarkus REST: fix NPE when serializing JSON entity from sub-resource server exception mapper
- #55848 - Combining multiple ReflectiveClassBuildItem might lose the publicConstructors element
- #55849 - Merge isPublicConstructors() when a reflective class is registered twice
- #55861 - Bump org.bouncycastle:bc-jdk18on-bom from 1.84 to 1.85
- #55864 - Bump org.junit:junit-bom from 6.1.1 to 6.1.2
- #55865 - Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3
- #55866 - Bump commons-codec:commons-codec from 1.22.0 to 1.22.1
- #55867 - ArC: fix client proxy name collision for producers
- #55868 - Allow generation of reflection-free Jackson serializers for JPA entity not doing lazy loading
- #55872 - Fix Dev UI MCP Tools and Resources pages crashing when Dev MCP is disabled
- #55887 - OIDC: malformed bearer token (empty or dots-only) causes NoSuchElementException in OidcCommonUtils.getJwtContentPart -> HTTP 500 instead of 401
- #55905 - Guard against a JWT with no parts in OidcCommonUtils and OidcUtils
- #55906 - Use AbstractConnection to prevent input loss, upgrade aesh to 3.16.8
- #55908 - Fix PathTreeBuilder.getExcludes() returning the includes list
- #55912 - Tree Shaker breaks hibernate filters
- #55913 - [3.x] Bump to Vert.x 4.5.32 and Netty 4.1.137.Final
- #55927 - Make sure package-info.class isn't treated as a regular class during tree-shaking
- #55941 - Bump Keycloak version to 26.7.1 and Keycloak Client version to 26.0.12
- #55951 - [3.38] Fix native image regression caused by Netty 4.1.136 SslContext API change
3.39.0.CR1
- #55629 - [3.x] Add post-quantum cryptography (PQC) support to TLS registry
- #47598 - Quarkus REST issue with
UriInfoand matrix parameters - #48889 - Introduce another Qute escape expression for built items
- #48940 -
@RunOnVirtualThreadis not working properly with use-separate-server=false - #50123 - 3.26.2 with gradle doesn't see sources generated by quarkus-openapi-generator
- #51205 - Fine grained
reactive/blockingproperty for specific persistence Units - #52765 - Document how an extension can be marked as deprecated in quarkus-extension.yaml
- #53855 - Extension can be marked as deprecated in quarkus extension
- #54539 - Quarkus Data: order/sort tweaks
- #54610 - Quarkus data rename package and types
- #54694 - Move Order/Sort to PanacheQuery.sort() in quarkus-data-hibernate
- #54822 - Version Gradle file dependencies by content hash instead of
lastModified - #54826 - Startup regression SmallRyeOpenApiProcessor.prepareDocuments
- #55004 - Enable new inliner for native mode?
- #55041 - Fix gRPC
@RunOnVirtualThreadhalf-close race under load - #55194 - Fix UriInfo matrix parameter handling in RESTEasy Reactive
- #55226 - container image deplolyment group - getEffectiveGroup does not account for a
@character - #55242 - Bump kubernetes-client-bom from 7.7.0 to 7.8.0
- #55250 - Sanitize derived group name in container image build
- #55312 - [3.x] Upgrade pulsar client 4.2.3
- #55358 - Quickstarts compilation: test against 3.x branch instead
- #55382 - Allow per-persistence-unit control of blocking/reactive Hibernate ORM bootstrap
- #55390 - Add conditional test execution based on application properties
- #55398 - Upgrade sshd to 2.19.0
- #55435 - HibernateProcessorUtil: Add removed method to avoid API breakage
- #55439 - librariesOnly option to include only library components in generated SBOMs
- #55457 - Support build-time-only configuration to disable all runtime config source loading
- #55465 - Add quarkus.config.fixed-at-build-time to freeze all config at build time
- #55482 - Enable native mode SingleCallsiteInliner by default
- #55507 - Clear/reset integration-test boot failure state after class change and failed start
- #55511 - Correct test to tolerate containers being shut down at the end of a test
- #55532 - Fix Gradle compilation against code generated by custom providers
- #55538 - Skip building the OpenAPI document eagerly on startup
- #55541 - Fix typos and duplicated text in guide summaries
- #55563 - Bump MINIMUM GraalVM version to 25.0
- #55596 - Hibernate ORM entity enhancement fails for AdditionalPersistenceUnitBuildItem entities not on the augmentation classloader
- #55597 - Hibernate ORM: fallback to TCCL when loading entities from additional persistence units
- #55598 - [3.x] SmallRye GraphQL 2.18.4 + test for max query depth
- #55606 - Keyclok Admin link works only in the DevUI OIDC card
- #55607 - ArC: use thread-safe list for synthetic injection points
- #55612 - Add support for setting Agroal
readOnlyon pool config - #55613 - Add JDBC read only config option
- #55619 - Gradle:
local-projectsin the serialized application model is nondeterministic across Gradle JVMs, busting the build cache - #55626 - [3.x] Fix native image regression caused by Netty 4.1.136 SslContext API change
- #55629 - [3.x] Add post-quantum cryptography (PQC) support to TLS registry
- #55635 - DEV UI: fix sub-menu link from dynamic URL method
- #55645 - Hibernate ORM: allow to configure dialect for additional PUs
- #55647 - Serialize application model set-valued fields in a deterministic order
- #55656 - Harden aesh tests for Windows and slow CI environments
- #55663 - Optional access to application host ports from Keycloak Container
- #55667 - Update DB2 image from 12.1.0.0 to 12.1.5.0
- #55668 - Enhancements around build time dependencies in CycloneDX SBOMs
- #55704 - Enforce that only a single OIDC authentication mechanism is configured
- #55720 - Use dev services and implicit schema-management more broadly in h2-based tests
- #55725 - CI - Reuse build artifacts in PQC CI
- #55749 - Deprecate quarkus.hibernate-orm.blocking in favor of per-PU jdbc.enabled/reactive.enabled
- #55755 - Logging guide style review (3.40)
- #55791 - [3.x] Quarkus REST - Fix unbounded multipart part-header accumulation
- #55797 - [3.x] Fix path normalization
- #55877 - OIDC:
KubernetesServiceClientAssertionProviderdoes not proactively refresh a Kubernetes client assertion - #55885 - OIDC: fix periodic bearer token refresh from filesystem
- #55921 - Qute: support multi-pipe CDATA delimiters
- #55938 - [3.x] Bump smallrye-reactive-messaging.version from 4.36.0 to 4.37.0
3.38.1
- #54725 - Improve Basic authentication how-to
- #54781 - Vert.x's FileSystemOptions contains constants getting defined at build time
- #54885 - Tests do not start
- #55023 - Support management interface dynamic port in integration tests
- #55062 - REST Client: Content-Type header not set when provided via jakarta.ws.rs.client.Entity
- #55138 - Overwrite content-type header provided via the variant of the entity
- #55267 - Initialize Vert.x FileSystemOptions at runtime for native image
- #55317 -
@QuarkusTestbootstrap deadlocks during parallel deployment-dependency resolution - #55345 - Pre-init Maven resolver HTTP transport classes to avoid class loading deadlock
- #55405 - Bump smallrye-open-api.version from 4.3.3 to 4.3.5
- #55498 - Remove the CI job that runs k8s tests on Windows
- #55520 - JaCoCo: also instrument classes for dev mode tests
- #55525 - JaCoCo: QuarkusExtensionTest does not contribute to coverage report
- #55549 - Copy executionMaxDelay and description in CompositeScheduler
- #55564 - Bump keycloak-client.version from 26.0.10 to 26.0.11
- #55578 - Kotlin 2.4.0: overriding a generic suspend fun in a JAX-RS resource breaks endpoint scanning
- #55588 - Bump io.rest-assured:rest-assured from 6.0.0 to 6.0.1
- #55595 - Ignore synthetic methods in RESTEasy Reactive sub-resource scan
- #55618 - Limit of 18 OpenAPI Profiles
- #55620 - Fix EnumMap ClassCastException in bytecode recorder on method split
- #55633 - Bump com.google.cloud.tools:jib-core from 0.28.1 to 0.28.2
- #55636 - Fix JaCoCo coverage for QuarkusExtensionTest
- #55640 - Enforce managed versions on direct dependencies of an application artifact provided as a JAR
- #55643 - Access log cookie masking bypassed for cookies not first in the header
- #55644 - Fix access log cookie masking to check all cookie pairs
- #55652 - quarkus-rest-jackson Reflection-free-serializers fails on deserializing JsonAlias with same value as fieldname
- #55655 - Remove value registry, not used
- #55678 -
@JsonFormat(pattern = "...") on a java.util.Date field is ignored by Reflection-free Jackson serializers - #55686 - GraphQL+OIDC issue with default configuration and native
- #55687 - quarkus-rest-jackson Reflection-free-serializers serializes
@Transientannotated methods - #55691 - OIDC GraphQL client: fix NPE when default OIDC client is configured and native mode
- #55694 - [3.x] In reflection-free Jackson serializers skip deserialization of a JsonAlias having the same name of the field
- #55701 -
@TestHTTPEndpointnot propagated to@Nestedsubclasses. - #55702 - reflection-free serializers ignore
@JsonValuedeclared on a superinterface method (multi-level) - #55703 - Make sure
@TestHTTPEndpointworks with nested classes - #55706 - [3.x] Fix serialization of formatted date in reflection-free Jackson serializers
- #55707 - Treat
@Transientas@JsonIgnorein reflection-free Jackson serializers - #55713 - Fix multi-level
@JsonValueinheritance in reflection-free serializers - #55714 - REST Client hangs forever on any 3xx response without a
Locationheader (e.g. 304 Not Modified) whenfollowRedirectsis enabled and anHttpClientRequestcustomizer is registered - #55717 - [3.x] Fix REST Client hang when a 3xx response has no Location header
- #55719 - Remove nonsensical configuration from Hibernate Search AI skill
- #55728 - Bump org.hibernate.validator:hibernate-validator from 9.1.2.Final to 9.1.3.Final
- #55737 - Fix reproducibility checks for
quarkus-rest-deployment - #55746 - REST Client silently drops
@MatrixParam/@RestMatrixparameters - #55751 - Send
@MatrixParamand@RestMatrixfrom the REST Client - #55778 -
quarkus-rest-jackson: reflection-free deserializer erases nested type arguments (Map<String, List<Foo>>elements becomeLinkedHashMap) - #55779 - Preserve nested type arguments in reflection-free Jackson deserializers
- #55794 - [3.38] Quarkus REST - Fix unbounded multipart part-header accumulation
- #55798 - [3.38] Fix path normalization
- #55800 - Upgrade aesh to 3.16.6 and register MetadataRegistry for native image
3.33.3
- #47504 - This Gauge has been already registered "mysql.queue.size"
- #50480 - Quarkus CLI fail if the offering is set but empty
- #50504 - Azure function host.json default bundle versions must be updated tu supported version
- #50572 - HibernateOrmProcessor causes Warning that package cannot be indexed due to package-info.java
- #52927 - Filter out package names before proxy generation to fix spurious warning
- #53274 - Add CLAUDE.local.md to .gitignore
- #53279 - Micrometer Prometheus: http_server_bytes_read registration fails with management interface enabled and random test port
- #53347 - Fix Azure-functions: update default ExtensionBundle to [4.0.0, 5.0.0)
- #53471 - Index does not contain the annotation definition:
io.quarkus.security.PermissionsAllowed - #53499 - Call reusable workflow for Quarkus Ecosystem CI
- #53515 - OpenAPI build failure with mp.openapi.scan.packages
- #53613 - Quarkus build with vertx-hazelcast fails after upgrade to 3.33.1
- #53737 - Handle edge-case with kapt plugin missing generated sources
- #53807 - Fix potential NPE and warn if trustall is being used in the exporter
- #53808 - Wrap shorthand admonition blocks in ==== delimiters
- #53812 - Using
@ConfigPropertywith Google Cloud Function throws Exception when executing QuarkusTest - #53824 - Use proper CL when running Google Cloud Functions
- #53836 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
- #53877 - QuarkusEntryPoint uses URLDecoder.decode() which incorrectly converts
+to space in file paths - #53885 - Fix
QuarkusEntryPointpath decoding issue - #53982 - Quarkus Liquibase
logicalFilePathin Native-Mode - #54039 -
QuarkusServerFileBodyHandlerleaks temp files when any ReaderInterceptor is registered - #54049 - Fix Liquibase native resolution when included changelogs use logicalFilePath
- #54079 - Cleanup temp files even when Jakarta REST Interceptors exist
- #54080 - Don't use
orderedexecution for@RunOnVertxContext - #54087 - Upgrade gRPC to 1.81.0, fix substitutions
- #54091 - mTLS auth mechanism throws NPE when proxy "forwarded" header indicate HTTPS in the HTTP request
- #54100 - Add condition to Quarkiverse ecosystem CI workflow
- #54122 - Use Quarkus Gauge builder
- #54188 - Update JAXB to 4.0.8
- #54199 - docs: replace Markdown xml fence with AsciiDoc source block
- #54200 - [3.33] Harden OIDC debug logs
- #54242 - Prevent NPE in mTLS auth mech when communication with a trusted proxy happens over HTTP protocol but headers indicate HTTPS
- #54264 - Fix NPE in RemoteUserAttribute with anonymous identity
- #54310 - Prometheus compression header fix
- #54313 - Fix Hibernate ORM Dev UI localization and clear HQL input on submit
- #54342 -
@ServerExceptionMapperwith generic base class drops other exception mappers at runtime - #54346 - Fix
@ServerExceptionMapperbridge method handling for generic types - #54389 - Updates to Infinispan 16.0.12.Final
- #54413 - Update documentation of
ReflectiveClassConditionBuildItem - #54423 - Fix "Kafka OAuthBearer authentication fails in native mode" again
- #54428 - Disambiguate config doc anchors for build-time properties
- #54432 - Fix platform BOM and platform metadata override ordering
- #54480 - Lambda fails serialization when returning
Record, succeeds when swapped toObject - #54484 - Properly support
java.lang.Recordas Lambda return type - #54497 - Agroal invalid connection metric has the wrong description
- #54499 - Fix wrong description for agroal.invalid.count metric
- #54525 - [3.33] Updates to Infinispan 16.0.12.Final
- #54527 - Avoid transfer progress in Quarkus Update commands
- #54585 - [3.33] Bump postgresql-jdbc.version to 42.7.11
- #54588 - Do not bytecode record the Vert.x service instances
- #54604 - With quarkus.thread-pool.queue-size set, async health work can be silently dropped
- #54609 - Don't ignore
Futurein Smallrye Health - #54673 - add config properties section to cyclonedx guide
- #54675 - Add cyclone configuration to docs
- #54689 - Basic auth may return 401 with older clients when realm is unset
- #54697 - Document Basic authentication realm compatibility
- #54708 - Updates Infinispan to 16.0.13
- #54729 - Gradle:
imageBuildandimagePushuse this output of:jandexwithout declaring dependency - #54730 - Gradle plugin: declare jandex task ordering for all tasks consuming main source set resources
- #54739 - [3.33] Bump the hibernate group with 9 updates
- #54778 - [3.33] Some lost backports
- #54798 - Fix dead links in kafka.adoc
- #54799 - Fix dead micrometer.io links in telemetry-micrometer.adoc
- #54800 - Fix dead links in dev-ui.adoc
- #54801 - Fix broken GitHub links across several guides
- #54807 - Fix dead links in security guides
- #54808 - Fix dead links in REST guides
- #54819 - Drop trailing slash that causes a 404
- #54835 - [3.33] Upgrade micrometer to 1.16.6
- #54837 - Add UnwrappedTypeResolverBuilder reflective class registration to kubernetes-client
- #54838 - Fix Javadoc of
ClientRedirectHandler - #54872 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
- #54873 - Bump io.quarkus:quarkus-fs-util from 1.4.0 to 1.4.2
- #54875 - Treat empty registry offering as unset
- #54889 - Response not handled in ContainerResponseFilter for dropped HTTP requests
- #54903 - Allow the use of
@CancellableonContainerResponseFilter - #54909 - Change log level of some OIDC log messages from debug to warn
- #55008 - Quarkus REST sub-resources return 500 for malformed content type unlike 415 from top-level resource
- #55009 - Quarkus REST: fix response status for sub-resource requests with a malformed content type
- #55018 - Enforce no duplicate POM dependencies via maven-enforcer-plugin
- #55027 - [3.33] Switch from org.fusesource.jansi to org.jline:jansi
- #55058 - [3.33] Make MultiRootPathTree.apply() consistent with accept()
- #55101 - [3.33] Update to MicroProfile API 3.1.1
- #55108 - [3.33] Bump jackson to 2.21.4
- #55172 - [3.33] Upgrade to Keycloak 26.0.10
- #55176 - Fix performance regression in AotQuarkusEntryPoint
- #55328 - Bump org.postgresql:postgresql from 42.7.11 to 42.7.13
- #55361 - Set a default GraphQL query depth limit of 10
3.38.0
- #55401 -
@RegisterForProxyis silently ignored when used more than once on the same type - #55402 - Use
getAnnotationsWithRepeatablefor handling repeatable annotations in proxy registration logic - #55469 - Updates to Infinispan 16.0.14
- #55501 - Gradle: Add Gradle-version dependent warnings
- #55536 - Fix scalpel configuration
3.37.4
- #46633 - AWS Lamdba
function.zippermission issue on Windows - #55436 - Update to Vert.x 4.5.30 and Netty 4.1.136.Final
- #55438 - Qute does not apply
property-not-found-strategywhen chaining template extension methods - #55451 - reflection-free serializers ignore
@JsonValuedeclared on a superinterface method - #55452 - Skip NOT_FOUND in value resolver to avoid locking in NOT_FOUND strings before calls to.raw
- #55455 - Embedding cyclone DX SBOM fails with relative parent pom file
- #55466 - Check
@JsonValuedeclared on a superinterface method in reflection-free Jackson serializers - #55470 - Update to Hibernate ORM 7.4.5 / Update to Hibernate Validator 9.1.2
- #55476 - Make sure MavenProjects available through the API are added to the Quarkus workspace
- #55487 -
quarkus-rest-jackson: reflection-free deserializer NPEs at build time for a polymorphic@JsonCreatorparameter - #55489 - Fall back to reflection-based deserialization when a
@JsonCreatorparameter cannot be handled - #55497 - quarkus-rest-jackson Reflection-free-serializers with
@JsonAnyGetter - #55500 - Implement
@JsonAnyGetterand@JsonAnySetteron fields in reflection-free Jackson serializers - #55513 - Set Unix permissions when copying entries into function.zip
- #55519 - quarkus-rest-jackson Reflection-free-serializers unboxing Character throws NullPointer
- #55521 - Prevent unboxing of null Character in reflecton-free Jackson serializers
3.27.5
- #51230 - ContextNotActiveException in the middle of a request handler
- #51299 - Fix CDI request context activation race when Quarkus REST and Reactive Routes are used during the same request
- #51408 - Lambda extension: Failed to start quarkus because of NoSuchMethodError
- #51410 - Merge LambdaConfig with same FQN
- #54201 - [3.27] Harden OIDC debug logs
- #54597 - Fix null Vert.x log messages showing as NULL in native mode
- #54615 - [3.27] Bump Agroal to 2.8.2
- #54639 - Memory Leak with Quarkus Rest Client in a Reactive pipeline
- #54649 - Bump to Vert.x 4.5.28 and Netty 4.1.135.Final
- #54659 - Fix memory leak in REST Client reactive pipelines
- #54738 - [3.27] Bump the hibernate group with 8 updates
- #54908 - Bump graalvm/setup-graalvm from v1.5.3 to v1.5.6
- #55006 - Bump the hibernate group across 1 directory with 7 updates
- #55026 - [3.27] Switch from org.fusesource.jansi to org.jline:jansi
- #55030 - Reduce allocation in HTTP instrumentation
- #55109 - [3.27] Bump jackson to 2.21.4
- #55163 - [3.27] Bump the hibernate group across 1 directory with 7 updates
- #55229 - Bump com.ongres.scram:scram-client from 3.2 to 3.3 in /bom/application
- #55353 - Apply DevUI CORS and Host checks to DevMCP