Releases: quarkusio/quarkus
Releases Β· quarkusio/quarkus
3.9.1
Complete changelog
- #25682 - Dev Services for Postgresql not working with Rancher
- #36736 - Manage Jose4j dependency in the bom
- #36737 - Add OpenAPI Filter usage to documentation
- #39088 - Solve POM formatting issues when creating project/adding extension/removing extension
- #39224 - WebSockets Next: support method parameter injection
- #39313 - prod-profile configuration pollutes test profile in integration tests
- #39371 - Avoid resolving plugin command after the first option
- #39382 - Preserve POM format when extensions are added/removed
- #39385 - smallrye-health should hande the case when Vert.x current context is null
- #39388 - Hibernate runtime property persisting after build
- #39394 - Handle null Vert.x context in smallrye-health
- #39426 - Do not record active profile configuration name if a profile one exists
- #39443 - Use Quarkus wide version of jna-platform in azure-functions
- #39496 - Gradle build cache prevents source packages to be installed to local Maven repository
- #39513 -
@SecureField
in members of the response class isn't applied - #39528 - (Doc issue) Getting token using blocking or non blocking calls
- #39544 - OidcClient: Getting exception when trying to use tokenHelper
- #39546 - Make maxParameters of MultiPartUploadHandler configurable
- #39549 - Make max parameters of multipart handling configurable
- #39564 - Fix Quarkus REST Jackson
@SecureField
detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays - #39572 - Remove mvnpm and webjars from the 404 page
- #39574 - Add a section about openapi filters in the doc
- #39576 - Fix semconv-stability.opt-in property name
- #39578 - Update quarkus-project-develocity-extension to 1.0.7
- #39579 - Don't run CDI interceptors on class-level exception mappers
- #39580 - Fix directory name in vertx.adoc
- #39581 - The http metrics provide a path instead of REDIRECTION and NOT_FOUND when possible
- #39583 - Keep the URIs in the metrics tag if they match a client or server pattern
- #39586 - RestMulti is not sending headers if there is no content
- #39587 - Properly use headers from RestMulti when the multi is empty
- #39589 - Only Add OTel Security Events when span is recording
- #39594 - Redis: add documentation for replicas usage
- #39595 - Update one of OIDC certificate chain tests to use TenantConfigResolver
- #39598 - ClassNotFoundException for beanparam class with generics in external artifact
- #39599 - JsonObject is empty when used with resteasy-reactive
- #39604 - Do not record local sources in runtime config defaults.
- #39615 - Allow JsonObject and JsonArray to be used in any POJO for JSON handling
- #39623 - Type not consistent in sample code
- #39626 - Update parameter type to be consistent across the doc
- #39628 - Bump smallrye-jwt.version from 4.4.0 to 4.5.0
- #39630 - Bump smallrye-reactive-messaging.version from 4.18.0 to 4.19.0
- #39638 - Avoid all caching in DevModeClient
- #39642 - WebSocket Next: endpoint callback arguments injection
- #39645 - Improve the OIDC Client Quickstart document
- #39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
- #39656 - Bump maven-model-helper to 35
- #39661 - Fix property name in OIDC docs
- #39679 - Bump mime4j version to 0.8.11
- #39682 - Fix postgres datasource devservice not working with rancher-desktop on mac arm
- #39691 - Fix dev-mode issue with generated classes for Quarkus REST converters
- #39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
- #39702 - Bring back erroneously removed
@BuildStep
- #39706 - Use --no-daemon when calling gradle update
3.9.0
Complete changelog
- #25101 - [CI] - quarkus-devtools-compat + Quarkus main
- #27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
- #39144 - WebSockets Next: documentation
- #39315 -
@ConfigMapping
handling of Maps is not compatible with old config classes - #39344 - Avro schemas aren't generated in isolation
- #39345 - Isolate Avro schema code generation when using multiple schema files
- #39363 - Initial version of the WebSocket Next documentation
- #39413 - Refresh documentation (and some tests) of the Hibernate Search + ORM extension
- #39427 - Enforce authorization code flow access token verification if
JsonWebToken
is injected - #39428 - Enforce OIDC UserInfo acquisition if
UserInfo
is injected - #39441 - RESTEasy Reactive dependency added to deployment classpath of nearly all Quarkus apps
- #39445 - Remove Quarkus REST deployment dependency from Vertx HTTP deployment
- #39447 - Save concat indy allocations on JarResource::getResourceURL
- #39454 - Bump org.jboss.threads:jboss-threads from 3.5.1.Final to 3.6.0.Final
- #39458 - Enforce OIDC UserInfo acquisition and authorization code flow access token verification if UserInfo and JsonWebToken beans are injected
- #39467 - Fix codestarts compatibility with older CLI
- #39468 - ChainBuildException - Cycle detected after #39352 PR
- #39470 - Remove the old MetricBuildItem SPI
- #39471 - Update to Vert.x 4.5.5
- #39472 - Update SmallRye Config to 3.7.0
- #39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
- #39476 - Fix the broken link to the OIDC client reference doc
- #39477 - Adjust toggle names in OTel InstrumentBuildTimeConfig
- #39479 - 3.9.0.CR2: NoClassDefFoundError: io/quarkus/security/spi/runtime/SecurityEvent
- #39480 - Fix security spi dependency on OTel
- #39487 - Allow occasional pin events in ShouldNotPin
- #39491 - Ignore the split access and refresh token cookies for resolving the tenant
- #39519 - OpenTelemetry - respect proxy settings in VertxGrpcExporter and VertxHttpExporter
- #39522 - Fix typos in rest doc
- #39530 - Update profile section in building-native-image.adoc
- #39531 - Use SmallRye Commons Inet
- #39533 - Class loader leak in configuration
- #39536 - Bump org.postgresql:postgresql from 42.7.2 to 42.7.3
- #39541 - Update SmallRye Config to 3.7.1
- #39543 - Enable proxy configuration for OpenTelemetry exporters
- #39562 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.7.0 to 3.7.1 in /devtools/gradle
3.9.0.CR2
Complete changelog
- #30450 - Infinispan Extension: Allow InjectMock for RemoteCache
- #33008 - info extension should have link to ui in devui tile
- #39240 - Bump org.mockito:mockito-bom from 5.10.0 to 5.11.0
- #39302 - Adds RemoteCache
@InjectMock
support in Infinispan - #39367 - Improve OIDC client reference document
- #39389 - Updates to Infinispan 15 release
- #39398 - Fix incorrect REST artifactId because PR was stale and using old one
- #39408 - Autogenerated application with
oidc-db-token-state-manager
fails to be built - #39409 - Reduce the allocation pressure on ConfigDiagnostic.unknownProperties
- #39421 - Bump org.apache.logging.log4j:log4j-api from 2.23.0 to 2.23.1
- #39422 - Bump com.github.javaparser:javaparser-core from 3.25.8 to 3.25.9
- #39423 - Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2
- #39429 - Dev UI: Info card now links to page
- #39432 - Fix OIDC DB token state validation when no reactive SQL client present
- #39435 - Upgrade to SmallRye GraphQL 2.8.1
- #39444 - Save regexp Pattern allocation on config name renaming
3.8.3
Complete changelog
- #25453 - Mutiny is not compatible with quarkus opentelemetry
- #31497 - Enabled micrometer.binder.http-server should also capture parameterized sub-resources
- #39047 - Reactive pg datasource with enabled health check opens more connections than configured
- #39145 - Hibernate schema validation is flaky and fails due missing tables (while the tables are present)
- #39162 - Add mapping to a Map<String, ConfigObject> in the documentation
- #39178 - Update grpc-service-implementation.adoc
- #39192 - Make HTTP templates for observability work with subresources
- #39197 - Qute is not adding the right NativeImageResourceBuildItem when using a custom template root
- #39204 - Update partial extension names to include full extension names
- #39216 - Unwrap processing exception from REST Client when returning a Uni
- #39223 - Fix WithSpan uni and multi
- #39225 - Upgrade to Mutiny 2.5.8
- #39242 - e quarkus-azure-functions-http generationg function.json with missing method.
- #39245 - dev-ui shows wrong property for rest-client
- #39251 - Make mutiny version of pool use the already configured vertx pool
- #39252 - Explicitly set all HTTP methods for Azure Functions
- #39255 - Fix config key for dev-ui
- #39257 - Quarkus 3.8.1: Use GraalVM sdk 23.1.2 over 23.0.1
- #39260 - Bump GraalVM SDK version to 23.1.2
- #39265 - Properly support sending InputStream in REST Client
- #39266 - ./mvnw --file $(pwd)/./pom.xml broken since quarkus 3.7.1
- #39270 - Update the title of dev-ui.adoc
- #39271 - Update the title of dev-ui.adoc and fix minor typos
- #39294 - Qute: add correct NativeImageResourceBuildItem for custom template root
- #39309 - Normalize POM path
- #39310 - Wrong reference on list of injected beans
- #39311 - Be more consistent with extension names in datasource.adoc
- #39316 - Empty container-group not allowed in Quarkus 3.8.2
- #39319 - org.graalvm.js:js was renamed to org.graalvm.polyglot:js-community
- #39337 - Fix rest-client-mutiny mention in the docs
- #39350 - Exception when building application with a lot of dependencies, String too large to record error
- #39352 - Make Hibernate / Micrometer integration run after schema creation
- #39353 - Allow config empty values in the Gradle worker
- #39354 - Add note about pre-matching filters execution model
- #39368 - Submodule on second level fails to find itself in dev mode
- #39372 - Replace
org.graalvm.sdk:graal-sdk
dependency withorg.graalvm.sdk:nativeimage
- #39379 - Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1
- #39383 - Typo at OIDC Client Mutual TLS config properties
- #39386 - Update to Brotli4J 1.16.0
- #39402 - ArC: fix creation of synthetic beans
- #39411 - Fix typo in Building my first extension
- #39418 - Use the value of project/default-codestart from the platform descriptor as the default codestart instead of a hardcoded value
- #39430 - Fix misleading error message when REST Client interface has been indexed
- #39434 - Qute: fix the NoRestartTemplatesDevModeTest on Windows
- #39437 - Make sure the current project location isn't overridden by other modules with the same groupId and artifactId
- #39440 - graal-sdk in 23.1.x brings in
org.graalvm.polyglot
which causes a couple of issues (wrap up) - #39442 - Exclude org.graalvm.polyglot:polyglot from graal-sdk
3.2.11.Final
Complete changelog
- #35659 - Fix File handling as a JAX-RS body parameter
- #37153 - Bump smallrye-jwt version to 4.4.0
- #38233 - Bump resteasy.version from 6.2.6.Final to 6.2.7.Final
- #38236 - Adding a decorator causes bytecode error
- #38362 - Register JDBC RowSet required bundle
- #38370 - Include RowSet properties file in native image
- #38429 - Replace {project-name} attribute in document title for downstream
- #38430 - Avoid dots in config doc ids as it's causing issues for downstream
- #38580 - Make the Forwarded Parser syntax parsing case-insensitive
- #38648 - More documentation adjustments for new downstream tooling
- #38649 - Use [[anchor]] format consistently
- #38748 - Sanitize app.dekorate.io/vcs-url kubernetes annotation
- #38755 - Log when a RestEasy Reactive client close method is called
- #38785 - ArC: fix interception when some methods return void
- #38865 - Update commons-compress version to mitigate CVE-2024-25710
3.9.0.CR1
Major changes
- #34493 - Add CLI command for Config
- #37680 - index.html (welcome page) now dynamic
- #38541 - Support OIDC Client JWT Bearer authentication
- #38603 - Introduce
@ClientBasicAuth
annotation - #38608 - Allow TLS certificate reloading for the HTTP server
- #39142 - Initial version of the new declarative WebSocket server API
- #39159 - Big Quarkus REST rename
- #39206 - Improve graceful shutdown
- #39301 - Rename SmallRye Reactive Messaging extensions to Messaging
Complete changelog
- #1120 - Panache - Sort properties injected in the query should be escaped somehow
- #1499 - Improve index.html welcome page
- #5236 - Move handling of NotFound http code from resteasy to the vertx-http extension
- #7963 - test Fault Tolerance in dev mode
- #8392 - Hyperlink Rest Resources on 404 page
- #15926 - Hot Reload for TLS Keystore
- #16833 - quarkus scheduler does not await termination of scheduledExecutor
- #20024 - Support
Multi<Byte>
andMulti<byte[]>
for octet stream in Rest Client Reactive - #21248 - Clean up JDK 18 workarounds
- #25453 - Mutiny is not compatible with quarkus opentelemetry
- #26308 - Panache - load page with join fetch
- #29172 - Integrate FileVault Utils with Quarkus CLI
- #31157 - websocket extension should implement ping/pong
- #31414 - Exclude banned dependency commons-logging in the BOM
- #31497 - Enabled micrometer.binder.http-server should also capture parameterized sub-resources
- #33173 - Quarkus Gradle Plugin: tests with encrypted configuration
- #33495 - OIDC tenant resolution policy
- #34435 - Upload schema to backup cluster in cross site
- #34493 - Add CLI command for Config
- #35410 - Regression 3.3.0 config quarkus.config.locations with vault
- #35812 - Quarkus 3 -> PanacheRepoqueries SemanticException
- #36102 - Clarify
quarkus.config.locations
and multiple profiles documentation - #36458 - Enhance OIDC token propagation filters to select named OIDC clients
- #36496 - Panache simplfied query + CTE with
- #36581 - Support of Embedded and ManyToOne nested object projection + Support of
@ProjectedFieldName
on class fields - #36594 - Support of Embedded and XXXToOne nested object projection + Support of
@ProjectedFieldName
on class fields - #36836 - Re-enable MP Tracing TCK
- #36994 - OIDC AccessToken can lead to AmbiguousResolutionException
- #37285 - Path-matching HTTP Security policy should secure exact path matches for both present and missing ending path separator
- #37485 - OIDC multi-tenancy
@Tenant
annotation not selecting tenant - #37488 - Quarkus Maven Plugin doc parameters are broken
- #37622 - Enable caching for quarkus:build and declare dependencies as inputs
- #37645 - Docs: security-authentication-mechanisms Guide
- #37680 - index.html (welcome page) now dynamic
- #37782 -
ExtensionDescriptorMojoTest
fails on a pristine computer - #37809 - [Quarkus main] integration test 'main' fails in native mode: QuarkusTestCallbacksITCase.testCallbackContextIsNotFailed
- #37901 - OpenAPI filters run twice when storing
- #37920 - Fixes create and update goals docs
- #38008 - Export security events as OTel Events
- #38070 - Avoid executing OpenAPI build filters twice on build
- #38071 - Bump com.google.api.grpc:proto-google-common-protos from 2.28.0 to 2.30.0
- #38118 - Rename reflection-config.json into reflect-config.json and resources-config.json into resource-config.json
- #38127 - Reset junit test's extension failed state for each test class
- #38166 - Bump grpc.version from 1.59.1 to 1.61.0
- #38186 - Update native configuration file best practices
- #38217 - JAXB - Ignore
@XmlTransient
fields/methods when marking hierarchy for reflection - #38242 - Removed Panache marker and annotation processor in favour of Jandex use-site indexing
- #38248 - Infinispan, upload schemas on backup clusters
- #38258 - Fix typos and formatting in ADR-0002
- #38274 - Add details about relocations into README and/or CONTRIBUTING
- #38288 - Bump com.fasterxml:classmate from 1.6.0 to 1.7.0
- #38293 - Apply polish to REST Client read timeout handling
- #38294 - Remove Consul entry from MAINTAINERS.adoc
- #38309 - Dev UI wraps code viewer content in
<!---->
HTML comments (on Safari and Chrome, but not Firefox) - #38312 - Bump com.google.errorprone:error_prone_annotations from 2.24.0 to 2.24.1
- #38313 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.12.0 to 4.12.2
- #38321 - Configuration ignored when using config maps and the prefix conflicts with a "static" config group
- #38327 - Updated docs for Panache marker removal
- #38339 - Bump org.apache.groovy:groovy from 4.0.17 to 4.0.18
- #38341 - Building with relocations
- #38344 - Apply some more cleanup now that baseline is JDK 17
- #38345 - Documentation for quarkus.test.profile not mentioning multi-profile support?
- #38360 - Bump org.mockito:mockito-bom from 5.8.0 to 5.9.0
- #38377 - Migration path for the new HTTP semantic conventions
- #38379 - QuarkusComponentTest: support test method parameter injection
- #38380 - Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 in /devtools/gradle
- #38382 - Fix documentation for profiles
- #38383 - Bump org.mockito:mockito-core from 5.9.0 to 5.10.0
- #38385 - Bump org.assertj:assertj-core from 3.25.1 to 3.25.2
- #38403 - Update Gizmo to 1.8.0
- #38408 - Remove an indent not to make it unnecessary section
- #38414 - Assorted JAX-RS security fixes - CVE-2023-6267 and CVE-2023-5675
- #38415 - Add com.gradle Maven extensions to Dependabot
- #38416 - Add build cache for format...
3.8.2
Complete changelog
- #19849 - Reactive rest client invoke MessageBodyReader.isReadable with null value of annotations parameter
- #27999 - quarkus.datasource."datasource-name".jdbc.min-size not honored if max-lifetime is set
- #35993 - Event-loop thread blocked when connecting to an unavailable OIDC server
- #37984 - Custom SecretsKeyHandler not found after update to 3.6.4
- #38007 - Failure to resolve encrypted configuration properties with the Gradle plugin
- #38392 - Application.properties string substitution does not work when using gradle variables
- #38424 - application-test.yml is not utilized during tests executed during gradle build
- #38435 - Fix CLI not recognizing installed plugins
- #38900 - Bump Smallrye Reactive Messaging from 4.16.2 to 4.17.0
- #38971 - Clarify that
quarkus.profile
cannot be set from a profile aware file - #38988 - Do not expand configuration for Gradle cache
- #38989 - cert chain public key resolver thumbprints
- #39001 - Update to Vert.x 4.5.4 and Netty 4.1.107
- #39021 - Upgrade to testcontainers 1.19.6
- #39023 - Remove selector field from generated Job manifest in docs
- #39041 - JAX-RS seeOther does not work with IPv6
- #39046 - Make sure Response and RestResponse work properly with IPv6 addresses
- #39057 - Skip analysis of plugin executions with phases post quarkus:dev preparing for dev mode launch
- #39059 - Exception in blocking graphql query is wrapped
- #39063 - Fix the OIDC token verification failure with the inlined cert chain
- #39067 - Updates to Infinispan 14.0.25.Final
- #39068 - Optionally run DNS lookup for OIDC server requests on worker thread
- #39069 - Do not fail UPX if compression level is not given
- #39070 - Doc: add Pulsar in Dev Services Overview
- #39072 - Update to Agroal 2.3
- #39078 - Unwrap actual GraphQL data fetching exception if it is wrapped
- #39093 - Fix cross-references in the Vert.x Reference Guide
- #39094 - Emphasize the need to add quarkus-junit5-mockito as a dependency to use mock injection
- #39102 - Properly pass annotations to MessageBodyReader in REST Client
- #39120 - Startup fails with Kafka Stream if topics for topics check not defined when check is disabled
- #39121 - Do not fail on resolve kafka streams topics when topics check disabled
- #39122 - Use bcrypt password mapper in elytron-security-jdbc docs
- #39123 - Quarkus Dev Services passes wrong volume path to Docker on Windows
- #39130 - When building images with jib the fast-jar-lib layer is always changed
- #39136 - Fix wrong volume host path being used on Windows
- #39147 - Keep the timestamps when copying jars and building JIB layers
- #39160 - Fail on conflicting deployment kinds
- #39168 - Remove misleading note from jacoco.enabled
- #39169 - Unable to produce multiple synthetic beans of same type having different identifiers
- #39179 - Allow setting the SettingsDecrypter when initializing a Maven artifact resolver
- #39181 - ArC: fix BeanConfiguratorBase#read()
- #39201 - Bump quarkus-http.version from 5.2.0.Final to 5.2.1.Final
- #39203 - Fix typo in testing Getting Started guide example
3.8.1
Complete changelog
- #5314 - Subresouce init resource failed when using
ResourceContext.getResource
- #36427 - Keycloak admin client fail with "authHeader" is null when using classic extensions
- #37065 - Azure Functions Http: missing HTTP method definitions for delete and patch
- #37779 - No healthcheck for default Agroal datasource if
quarkus.datasource.db-kind
is not set - #37962 - Can't specify custom quarkus.profile when running tests
- #38557 - Overwriting application configuration does not work with .env File
- #38798 - Using custom header in REST client together with
@NotBody
annotated argument results in warning from EndpointIndexer - #38880 - CronJob deployment doesn't work due to
selector
field - #38881 - Remove selector field if it's empty from manifest
- #38891 - Reduce message log level
- #38895 - Make VertxGrpcExporter more robust
- #38899 - Fix Keycloak Admin Client Classic when used with the RESTEasy JSON-B and REST Client JSON-B extensions
- #38901 - OidcProvider throws NPE when certificate chain is configured with OIDC server which has no JWK keys at the startup
- #38909 - Bump org.postgresql:postgresql from 42.7.1 to 42.7.2
- #38923 - Allow all HTTP methods in Azure functions
- #38925 - Improve shutdown of VertxHttpExporter and VertxGrpcExporter
- #38927 - Use supplier in order to properly have mutiny retry
- #38928 - quarkus-quartz: CDIAwareJob destroys instance of Quartz Job too early when Job is a
@Dependent
bean - #38932 - Fix NPE when OIDC token must be verified with the chain with OIDC server returning no JWKs
- #38934 - Agroal Data Source Health check failing for reactive data source
- #38935 - Upgrade to Mutiny 2.5.7
- #38938 - Propagate user.dir to Gradle worker
- #38944 - Bump smallrye-open-api.version from 3.9.0 to 3.10.0
- #38949 - Postgresql bump causing detection of instance Random/SplittableRandom
- #38952 - Properly pass errors from JsonRPC backends to Dev UI
- #38953 - Unwrap the actual failure from JsonRPC if it's wrapped
- #38955 - Try to get more disk space
- #38957 - Quartz - fix
@Dependent
job creation/destruction when there is a re-fire - #38958 - Runtime reinitialize org.postgresql.util.PasswordUtil$SecureRandomHolder
- #38959 - Agroal - Only generate health checks for JDBC datasources
- #38978 - Bump org.mariadb.jdbc:mariadb-java-client from 3.3.2 to 3.3.3
- #38979 - Propagate quarkus.test.profile to Gradle worker
- #38986 - Add missing brace in property expression
- #38990 - Quarkus 3.7.4 java.lang.ClassNotFoundException when running devsevices with gradle
- #38995 - Take client methods into account in server endpoint indexer
- #38997 - Add hint about exporter collector protocol on generic gRPC error
- #38999 - Remove JetBrains
@Nullable
from RESTEasy Reactive code - #39006 - Bump Keycloak version to 23.0.7
- #39020 - Make VertxHttpExporter more robust
- #39022 -
JAVA_APP_DIR
should be set for container images - #39024 - Set JAVA_APP_DIR env var when necessary
- #39028 - Make Sub Resources unremovable beans
- #39029 - Update to Brotli 1.14.0
- #39031 - Add commons-codec to Dev Services dependencies
3.8.0
3.7.4
Complete changelog
- #37608 - gRPC starter app is using legacy approach, single HTTP server should be used instead
- #38236 - Adding a decorator causes bytecode error
- #38504 - NPE on oidc-client when quarkus.oidc-client.grant-options.password.password not provided
- #38533 - 'Unable to find a JDBC driver' for Hibernate Reactive after updating to 3.7.1
- #38683 - Build time performance regression and bigger native binaries when migrating from 3.5 to 3.6 or 3.7
- #38688 - Making sure deployment modules excluded in POM files aren't pulled in by the Gradle plugin
- #38721 - Java 21:
@VirtualThreadUnit
produces very slow tests - #38763 - Enable an injection of the OIDC code flow access token verificaton material
- #38767 - Fail early if OIDC client password grant is misconfigured
- #38771 - Adds an implementation note about
@VirtualThreadUnit
limitations - #38775 - Use the right MongoDB ClientSession interface
- #38776 - OidcRequestFilter with OidcEndpoint applied to all endpoints
- #38777 - OIDC Code flow access token verification goes ahead even if the ID token verification has failed
- #38779 - Fix OidcEndpoint annotation processing
- #38784 - Fix guide URL in RESTEasy Client extension
- #38785 - ArC: fix interception when some methods return void
- #38798 - Using custom header in REST client together with
@NotBody
annotated argument results in warning from EndpointIndexer - #38800 - Don't warn about
@NotBody
use in@GET
methods in REST Client - #38802 - Multipart form data is interpreted as a file although it's not a file
- #38803 - OIDC server is erroneously shown as not available
- #38810 - Expand types which are considered text in multipart handling
- #38815 - Support security identity propagation in VT
- #38816 - Propagate Vert.x context on all ExecutorService methods for VirtualThreadExecutor
- #38817 - Mocking Singleton does not work even when using
@MockitoConfig
(convertScopes = true) - Bean produced from factory method - #38818 - Allow
RunAndCheckMojoTestBase
subclasses to override how much memory extension tests are allowed - #38819 - Add response text to the OIDC bootstrap log errors
- #38821 - Configure SISU bean filtering for the bootstrap Maven resolver
- #38824 - Memory leak when using FT Fallback with dependent beans
- #38833 - Keycloak Admin Client Reactive error id: 9009f9b4-1d58-4011-9ff2-49b87bb59ddd-1: java.lang.NullPointerException: Cannot invoke "String.startsWith(String)" because "authHeader" is null
- #38836 - Fix Keycloak Admin Client Reactive Jackson reader provider priority so that the client can work when the JSONB REST client extension is present
- #38837 - Quarkus create new project fails when -DnoCode is used and artifactId is not set properly
- #38843 - Check the code flow access token after ID token
- #38844 - Fix copy/paste typo
- #38849 - Ensure that generated project GAV is always set
- #38851 - Kafka integration tests fail with latest Mandrel/GraalVM 24.1-dev builds
- #38853 - [3.7] Perform security checks on inherited endpoints before payload deserialization in the RESTEasy Reactive
- #38855 - Make registration of OAuthBearerValidatorCallbackHandler conditional
- #38858 - Testing: fix
@MockitoConfig
(convertScopes=true) with auto-producers - #38859 - Fix warning when launching dev mode specifying quarkus-maven-plugin GAV on the command line
- #38865 - Update commons-compress version to mitigate CVE-2024-25710
- #38866 - Sporadic error in custom readiness check using
keycloak-admin-client
:IllegalStateException: Client is closed
- #38868 - Add config flag to disable jacoco
- #38882 - Quartz - prevent memory leak when Job instance is a
@Dependent
bean - #38886 - Ignore
ValidationSchema
that results in registering all models - #38888 - SmallRye Health: terminate request context properly
- #38889 - Kafka reactive messaging extension incompatible with Micrometer Prometheus extension for Quarkus 3.7.*
- #38890 - Log resolved OIDC tenant id and how the bearer token is found
- #38894 - Disable messaging observation by default for backwards compatibility
- #38897 - Attempt to fix flaky DependentBeanJobTest