3.9.5

Complete changelog

• #40026 - Fix LICENSE reference in ci-actions-incremental.yml
• #40042 - CaffeineCache metrics are doubled
• #40055 - Unable to compile qute codestart to native on windows
• #40087 - Adapt new behavior of System.console() since JDK22
• #40127 - Adapt new behavior of System.console() since JDK22
• #40135 - Update kafka doc: Emitter
• #40141 - Fix license URL in JReleaser config
• #40145 - Do not increment metrics on CaffeineCache#getIfPresent call
• #40158 - Qute: ultimate fix for the problem with registering NativeImageResourceBuildItem correctly on Windows
• #40166 - Bump io.smallrye.beanbag:smallrye-beanbag-maven from 1.4.0 to 1.4.1
• #40168 - DOC: Using the rest client - Fix rest-client-jackson add extension name
• #40171 - Quarkus docs using deprecated io.quarkus.test.junit.mockito.InjectMock
• #40172 - Updates quarkusdocs to replace deprecated injectMock
• #40185 - Fix a compilation problem in the SmallRye GraphQL guide
• #40188 - Bump BouncyCastle version to 1.78.1
• #40194 - Minor compilation issue in SmallRye GraphQL page
• #40218 - Bump Quarkus HTTP to 5.2.2.Final
• #40243 - unexpected stacktraces about missing Http1xServerResponse and RecordParserImpl vertx classes in native build
• #40244 - Quarkus Rest AbstractJsonMessageBodyReader with wrong case-sensitive content-type header handling
• #40249 - Move reinitialization of vertx classes out of NettyProcessor
• #40255 - Make resteasy-reactive AbstractJsonMessageBodyReader handle MediaType case insensitive
• #40257 - Reset relocations for runtime dependencies
• #40267 - ArC: prevent NPE when EagerInstanceHandle.UNAVAILABLE is closed
• #40275 - Align bootstrap and the rest on the same Slf4j version

3.10.0

Complete changelog

• #40047 - Conflicting warnings when building an uberjar with deprecated property quarkus.package.type=uber-jar
• #40108 - Bump smallrye-reactive-messaging.version from 4.20.0 to 4.21.0
• #40111 - Bump smallrye-jwt version to 4.5.1
• #40120 - Prevent double-warning when using deprecated properties
• #40159 - Logging Guide: Remove duplicated statements
• #40180 - WebSockets Next: produce ExecutionModelAnnotationsAllowedBuildItem
• #40184 - Fix resource registration for native compilation

3.9.4

Complete changelog

• #39802 - Make sure pathFilter is applied to workspace module content tree
• #39944 - Support configuring SyslogHandler max message length
• #39958 - Add maxLength configuration option to SysLog
• #39960 - MessageBundle naming issue
• #39978 - Hot Reloading conflicts with Maven Flatten Plugin
• #39982 - Parameter to skip Maven goal executions before quarkus:dev, skipping flatten plugin by default
• #39987 - Update OpenTelemetry exporter link
• #39990 - Fix MessageBundle key/file name resolver algorithm
• #39992 - () breaks title in devui
• #39995 - Go back to raw Maven read/write for bootstrap
• #40000 - Signed JARs may be modified during a native build
• #40001 - Un-sign modified dependency JARs when filtering
• #40002 - Fix url encoding issue for Dev UI Page with unusual chars
• #40019 - Changing Accept Header in PreMatching filter isn't considered by MessageBodyWriter
• #40022 - Take MediaType set in pre-match filter into account during serialization
• #40028 - Collect only runtime static resources for native builds
• #40038 - Updates to Infinispan 15.0.1.Final
• #40051 - Clarify REST Client multipart support
• #40063 - Fix typo in cassandra.adoc
• #40067 - Qute: fix NativeImageResourceBuildItem registration on Windows
• #40073 - Explain how logging can be configured in the smallrye-graphql-client guide
• #40074 - Applying the QE feedback to the Logging guide
• #40083 - @Startup on @Produces method
• #40096 - ArC: skip warning about invalid startup for producer methods
• #40105 - Docs: update deploying-to-openshift.adoc for build option
• #40107 - Update datasource yaml config in docs

3.8.4

Complete changelog

• #25101 - [CI] - quarkus-devtools-compat + Quarkus main
• #27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
• #39282 - Add missing headers configuration for InputStream handling
• #39299 - Hibernate ORM: package-info is ignored when specifying scan packages
• #39344 - Avro schemas aren't generated in isolation
• #39345 - Isolate Avro schema code generation when using multiple schema files
• #39385 - smallrye-health should hande the case when Vert.x current context is null
• #39394 - Handle null Vert.x context in smallrye-health
• #39467 - Fix codestarts compatibility with older CLI
• #39468 - ChainBuildException - Cycle detected after #39352 PR
• #39470 - Remove the old MetricBuildItem SPI
• #39471 - Update to Vert.x 4.5.5
• #39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
• #39476 - Fix the broken link to the OIDC client reference doc
• #39496 - Gradle build cache prevents source packages to be installed to local Maven repository
• #39513 - @SecureField in members of the response class isn't applied
• #39530 - Update profile section in building-native-image.adoc
• #39564 - Fix Quarkus REST Jackson @SecureField detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays
• #39578 - Update quarkus-project-develocity-extension to 1.0.7
• #39586 - RestMulti is not sending headers if there is no content
• #39587 - Properly use headers from RestMulti when the multi is empty
• #39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
• #39661 - Fix property name in OIDC docs
• #39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
• #39702 - Bring back erroneously removed @BuildStep
• #39706 - Use --no-daemon when calling gradle update
• #39715 - Update Hibernate ORM package/class processing rules
• #39764 - Update to Vert.x 4.5.7
• #39807 - Explain in the docs how to map the X509 CN attribute to roles
• #39819 - Netty update caused failure when building image with GraalVM for JDK 17
• #39822 - Bump JDK version to 17 as an aws lambda runtime in aws-lambda related extensions
• #39826 - Move the import of smallrye-common-bom higher up
• #39830 - Fix native compilation for Netty and Mutiny
• #39831 - No build time init of classes used in UnsafeAccessedFieldBuildItem
• #39840 - Add js-scriptengine and collections as parent first artifacts
• #39886 - Bump the recommended-java-version to 21
• #39911 - Update - Only consider recipes when generating the list of recipes
• #39928 - Fix small typo in WRITING REST SERVICES WITH QUARKUS REST doc
• #40015 - Some dev services are restarted on dev mode restart
• #40057 - Fix datasource devservices restarting
• #40079 - [3.8] Do not record local sources in runtime config defaults
• #40082 - Rewrite footnotes for downstream documentation
• #40104 - [3.8] Prevent smallrye-graphql-schema-builder from leaking into runtime deps

3.10.0.CR1

Major changes

• #36504 - Allow authentication mechanism selection for a REST endpoint with annotation
• #37816 - Optional support for the OIDC session cookie dir encryption
• #39295 - Move package config to an interface
• #39415 - Extension for the Hibernate Search Standalone Pojo Mapper with Elasticsearch
• #39793 - Support for verifying OIDC JWT claims with custom Jose4j Validator
• #39812 - Support resolving of static OIDC tenants based on token issuers
• #40056 - Add OIDC TokenCertificateValidator

Complete changelog

• #10267 - LDAP Security - Don't re-authenticate on every request
• #14851 - Quarkus keycloak authorization usability improvements.
• #26182 - Hibernate Search Standalone Pojo Mapper: Hibernate Search without Hibernate ORM / datasource
• #34664 - Provide a way to specify HttpAuthenticationMechanism per JAX-RS resource
• #35952 - Get management interface resolved port when quarkus.management.test-port set to 0
• #36504 - Allow authentication mechanism selection for a REST endpoint with annotation
• #37676 - Bump com.microsoft.azure.functions:azure-functions-java-library from 2.2.0 to 3.1.0
• #37700 - Bump com.amazonaws:aws-lambda-java-events from 3.11.3 to 3.11.4
• #37785 - Consider using direct JWE encryption of the OIDC session cookie
• #37816 - Optional support for the OIDC session cookie dir encryption
• #37875 - Restart and other hotkey in devui
• #38026 - Missing security requirement on operation level, declared @RolesAllowed in implementing class derived from a generated openapi java interface
• #38373 - Webauthn improvements : docs, customisable cookies, virtual thread support
• #38535 - OIDC Tenant Resolution for web-app applications does not explain that the session cookie has a tenant id recorded
• #38696 - OIDC Multitinancy by actual answer from teenant
• #38940 - Offer a way to block inside custom SecurityContext.isUserInRole with resteasy-reactive
• #39011 - quarkus-redis-client tracing
• #39015 - Bump org.wiremock:wiremock-standalone from 3.4.1 to 3.4.2
• #39061 - RunOnVirtualThread should avoid using Netty FastThreadLocals
• #39104 - Use followOutput for lra-coordinator container
• #39156 - Add the ability to ask for devservices to use the shared network
• #39170 - Bump actions/upload-artifact and download-artifact to v4
• #39182 - WebSockets Next: detect incorrect path parameter usage
• #39269 - Simplify configuration based mapping of token roles to deployment-specific SecurityIdentity
• #39295 - Move package config to an interface
• #39322 - [Mandrel 23.0] hibernate-orm-panache-kotlin native integration tests fail with 23.0 build and 23.1.2 sdk.
• #39339 - Simplify configuration based mapping of token roles to deployment-specific SecurityIdentity
• #39348 - Remove message to avoid using testNative until proven it works
• #39391 - AuthenticationSuccessEvent event is not created on successful authorization using FormAuthenticationMechanism
• #39395 - Invalid warnings about SQL Server version "0.0.0" on startup
• #39406 - Improve documentation for AMQP client options about setting a heartbeat
• #39407 - Fix update-version.sh script
• #39414 - Deploy relocations for snapshots
• #39415 - Extension for the Hibernate Search Standalone Pojo Mapper with Elasticsearch
• #39417 - OIDC TenantConfigResolver and TenantResolver are called even if the tenant id is already resolved
• #39424 - Bump org.asciidoctor:asciidoctorj from 2.5.11 to 2.5.12
• #39425 - Support for verifying OIDC JWT claims with custom Jose4j Validator
• #39446 - WebSockets Next: add endpoints to the DevUI's 404 page
• #39456 - Bump com.google.errorprone:error_prone_annotations from 2.25.0 to 2.26.1
• #39457 - Quarkus OpenTelemetry Rest Client Span Name with Route (URL Path Template)
• #39459 - Add key listeners to the log in Dev UI
• #39462 - WebSockets Next: detect incorrect path parameter usage
• #39464 - WebSockets Next: add basic Dev UI
• #39465 - WebSockets Next: add convenient way to handle the subprotocol header
• #39469 - Easy way to add deployment methods in Dev UI
• #39473 - Upgrade to Jandex 3.1.7
• #39481 - Push project version to RESTEasy Reactive TCK
• #39483 - Add ApplicationArchive.getResolvedDependency()
• #39484 - WebSockets Next: add basic Dev UI
• #39486 - Improve OIDC named tenant-specific configuration exceptions and make sure userinfo/token verification is enforced for named tenants
• #39489 - Opentelemetry Redis Instrumentation
• #39490 - Updates to Schema programmatic API in Infinispan
• #39492 - Optimize OIDC tenant id resolution
• #39493 - Fire SecurityEvent on Form authentication login success
• #39499 - Bump com.unboundid:unboundid-ldapsdk from 6.0.11 to 7.0.0
• #39500 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.102 to 0.0.103
• #39507 - RestEasy Jackson test fails in certain time zones
• #39509 - Update Flyway to 10.10.0
• #39512 - Move Keycloak Authorization Enforcer Tenant config to runtime and improve usability with aggregated policy enforcer paths
• #39518 - Migrate Elytron Security extensions from config classes to @ConfigMapping
• #39524 - Handle trailing/leading spaces in all relevant datasource configuration properties
• #39534 - Use URL path template when tracing REST clients where possible
• #39535 - Bump smallrye-config.version from 3.7.0 to 3.7.1
• #39537 - Bump org.apache.groovy:groovy from 4.0.19 to 4.0.20
• #39538 - Bump com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2 from 2.15.1 to 2.15.2
• #39539 - Bump com.google.guava:guava from 33.0.0-jre to 33.1.0-jre
• #39540 - Bump org.commonmark:commonmark from 0.21.0 to 0.22.0
• #39542 - WebSockets Next: attempt to diagnose BroadcastOnOpenTest
• #39551 - RestEasy Jackson test fails in certain time zones
• #39552 - Fix formatter-maven-plugin build cache misses
• #39553 - Consider...

3.2.12.Final

Complete changelog

• #36736 - Manage Jose4j dependency in the bom
• #39383 - Typo at OIDC Client Mutual TLS config properties
• #39580 - Fix directory name in vertx.adoc
• #39679 - Bump mime4j version to 0.8.11
• #39692 - Recommend podman desktop
• #39734 - Fix typo in podman.adoc
• #39801 - Manage mime4j core, dom and storage jars in the bom

3.9.3

Complete changelog

• #39731 - Fix StorkClientRequestFilter exception handling
• #39796 - document @Inject ScheduledExecutorService
• #39807 - Explain in the docs how to map the X509 CN attribute to roles
• #39839 - Removing quarkus-panache-common annotation processor from docs
• #39857 - SmallRye GraphQL Client: Added MP's Input.class to the index
• #39868 - Add property to force cache-control: no-store on: quarkus.smallrye-health
• #39871 - Routing for index.html fails with 404 for directories
• #39872 - Use cache-control header to make sure health checks aren't cached
• #39876 - OIDC Dev UI screen is blank after the user authentication
• #39878 - Ensure that index.html works in any directory in native mode
• #39880 - Mention ScheduledExecutorService in scheduler reference doc
• #39896 - Revert removal of redirect in Dev UI Deep links
• #39897 - Fix Servlet/Rest ExceptionMapper
• #39913 - Add more non-platform extensions to dev services guide + make guide guide-ier
• #39929 - Adjust some user-visible references to RESTEasy Reactive
• #39938 - Update of the SmallRye GraphQL 2.8.2
• #39956 - Docs OIDC Client - Inconsistent variable naming, OidcClientCreator example

3.9.2

Complete changelog

• #38964 - Add smallrye metrics capability
• #39668 - Recompute cache when the redis connection pool is exhausted
• #39705 - WebSockets Next: error handlers part 1
• #39717 - OIDC code flow access token verification is enforced even if the application code does not use it as JWT
• #39718 - Enforce OIDC code flow access token verification only if JWT is in the application code
• #39725 - Setting the correct CodeFlowVerifyAccessTokenDisabledTest test class name
• #39742 - Fix a remaining reference to quarkus.resteasy-reactive. prefix
• #39746 - ScheduledExecutorService: cannot remove future task from the scheduler
• #39763 - WebSockets Next: error handlers part 2
• #39766 - Properly handle array class types to be looked up
• #39770 - Improve the multipart encoded mode handling in the rest client
• #39776 - Cannot build native image after 3.9.1 upgrade - missing configuration properties but they exist
• #39777 - Bean Param init issue - java.lang.NoClassDefFoundError: io/quarkus/generated/int$quarkusrestparamConverter$
• #39790 - Add quarkus-credentials-deployment where it's missing
• #39794 - Bump org.jboss.threads:jboss-threads from 3.6.0.Final to 3.6.1.Final
• #39797 - Docs: fix typo in OIDC tenant resolution by configuration
• #39798 - Update documentation for QUARKUS AND GRADLE - Development mode: quarkusDev#workingDir has been deprecated
• #39804 - Always record profiles
• #39823 - Ensure ParameterConverter is loaded from the TCCL
• #39829 - Use quarkusDev#workingDirectory
• #39835 - Bump maven-model-helper to 36

3.9.1

Complete changelog

• #25682 - Dev Services for Postgresql not working with Rancher
• #36736 - Manage Jose4j dependency in the bom
• #36737 - Add OpenAPI Filter usage to documentation
• #39088 - Solve POM formatting issues when creating project/adding extension/removing extension
• #39224 - WebSockets Next: support method parameter injection
• #39313 - prod-profile configuration pollutes test profile in integration tests
• #39371 - Avoid resolving plugin command after the first option
• #39382 - Preserve POM format when extensions are added/removed
• #39385 - smallrye-health should hande the case when Vert.x current context is null
• #39388 - Hibernate runtime property persisting after build
• #39394 - Handle null Vert.x context in smallrye-health
• #39426 - Do not record active profile configuration name if a profile one exists
• #39443 - Use Quarkus wide version of jna-platform in azure-functions
• #39496 - Gradle build cache prevents source packages to be installed to local Maven repository
• #39513 - @SecureField in members of the response class isn't applied
• #39528 - (Doc issue) Getting token using blocking or non blocking calls
• #39544 - OidcClient: Getting exception when trying to use tokenHelper
• #39546 - Make maxParameters of MultiPartUploadHandler configurable
• #39549 - Make max parameters of multipart handling configurable
• #39564 - Fix Quarkus REST Jackson @SecureField detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays
• #39572 - Remove mvnpm and webjars from the 404 page
• #39574 - Add a section about openapi filters in the doc
• #39576 - Fix semconv-stability.opt-in property name
• #39578 - Update quarkus-project-develocity-extension to 1.0.7
• #39579 - Don't run CDI interceptors on class-level exception mappers
• #39580 - Fix directory name in vertx.adoc
• #39581 - The http metrics provide a path instead of REDIRECTION and NOT_FOUND when possible
• #39583 - Keep the URIs in the metrics tag if they match a client or server pattern
• #39586 - RestMulti is not sending headers if there is no content
• #39587 - Properly use headers from RestMulti when the multi is empty
• #39589 - Only Add OTel Security Events when span is recording
• #39594 - Redis: add documentation for replicas usage
• #39595 - Update one of OIDC certificate chain tests to use TenantConfigResolver
• #39598 - ClassNotFoundException for beanparam class with generics in external artifact
• #39599 - JsonObject is empty when used with resteasy-reactive
• #39604 - Do not record local sources in runtime config defaults.
• #39615 - Allow JsonObject and JsonArray to be used in any POJO for JSON handling
• #39623 - Type not consistent in sample code
• #39626 - Update parameter type to be consistent across the doc
• #39628 - Bump smallrye-jwt.version from 4.4.0 to 4.5.0
• #39630 - Bump smallrye-reactive-messaging.version from 4.18.0 to 4.19.0
• #39638 - Avoid all caching in DevModeClient
• #39642 - WebSocket Next: endpoint callback arguments injection
• #39645 - Improve the OIDC Client Quickstart document
• #39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
• #39656 - Bump maven-model-helper to 35
• #39661 - Fix property name in OIDC docs
• #39679 - Bump mime4j version to 0.8.11
• #39682 - Fix postgres datasource devservice not working with rancher-desktop on mac arm
• #39691 - Fix dev-mode issue with generated classes for Quarkus REST converters
• #39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
• #39702 - Bring back erroneously removed @BuildStep
• #39706 - Use --no-daemon when calling gradle update

3.9.0

Complete changelog

• #25101 - [CI] - quarkus-devtools-compat + Quarkus main
• #27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
• #39144 - WebSockets Next: documentation
• #39315 - @ConfigMapping handling of Maps is not compatible with old config classes
• #39344 - Avro schemas aren't generated in isolation
• #39345 - Isolate Avro schema code generation when using multiple schema files
• #39363 - Initial version of the WebSocket Next documentation
• #39413 - Refresh documentation (and some tests) of the Hibernate Search + ORM extension
• #39427 - Enforce authorization code flow access token verification if JsonWebToken is injected
• #39428 - Enforce OIDC UserInfo acquisition if UserInfo is injected
• #39441 - RESTEasy Reactive dependency added to deployment classpath of nearly all Quarkus apps
• #39445 - Remove Quarkus REST deployment dependency from Vertx HTTP deployment
• #39447 - Save concat indy allocations on JarResource::getResourceURL
• #39454 - Bump org.jboss.threads:jboss-threads from 3.5.1.Final to 3.6.0.Final
• #39458 - Enforce OIDC UserInfo acquisition and authorization code flow access token verification if UserInfo and JsonWebToken beans are injected
• #39467 - Fix codestarts compatibility with older CLI
• #39468 - ChainBuildException - Cycle detected after #39352 PR
• #39470 - Remove the old MetricBuildItem SPI
• #39471 - Update to Vert.x 4.5.5
• #39472 - Update SmallRye Config to 3.7.0
• #39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
• #39476 - Fix the broken link to the OIDC client reference doc
• #39477 - Adjust toggle names in OTel InstrumentBuildTimeConfig
• #39479 - 3.9.0.CR2: NoClassDefFoundError: io/quarkus/security/spi/runtime/SecurityEvent
• #39480 - Fix security spi dependency on OTel
• #39487 - Allow occasional pin events in ShouldNotPin
• #39491 - Ignore the split access and refresh token cookies for resolving the tenant
• #39519 - OpenTelemetry - respect proxy settings in VertxGrpcExporter and VertxHttpExporter
• #39522 - Fix typos in rest doc
• #39530 - Update profile section in building-native-image.adoc
• #39531 - Use SmallRye Commons Inet
• #39533 - Class loader leak in configuration
• #39536 - Bump org.postgresql:postgresql from 42.7.2 to 42.7.3
• #39541 - Update SmallRye Config to 3.7.1
• #39543 - Enable proxy configuration for OpenTelemetry exporters
• #39562 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.7.0 to 3.7.1 in /devtools/gradle