3.7.0.CR1

Major changes

• #38066 - Drop Okhttp/Okio from BOM
• #38029 - Allow applications using quakus-info to contribute data to the /info using CDI
• #37891 - Split OIDC session cookie if its size is more than 4KB
• #37794 - Update SmallRye Config to 3.5.1
• #37730 - Introduce LinkedIn OIDC provider
• #37472 - Provide a way to observe security events
• #37269 - Support certificate role mappings
• #37152 - Support token verification with the inlined certificate chain
• #36978 - Upgrade to Hibernate ORM 6.4, Hibernate Search 7.0, Hibernate Reactive 2.2
• #36945 - Support Micrometer @MeterTag
• #35065 - Add Hibernate Search management endpoint

Complete changelog

• #38233 - Bump resteasy.version from 6.2.6.Final to 6.2.7.Final
• #38232 - Bump wildfly-elytron.version from 2.2.2.Final to 2.2.3.Final
• #38229 - Ensure the refreshed CSRF cookie retains the original value
• #38227 - Add dependency management for org.hibernate:hibernate-jpamodelgen
• #38225 - CSRF Token is refreshed on every request
• #38224 - Revert "Fixing Jaxb unmarshalling error with native compilation"
• #38218 - Make subject configurable in OidcWiremockTestResource
• #38214 - Introduce a way to ignore mixing REST stacks errors
• #38213 - AWS Lambda Rest: split the amazon-lambda-rest integration module
• #38211 - Add trustAll to QuarkusRestClientBuilder
• #38209 - Bump com.github.javaparser:javaparser-core from 3.25.6 to 3.25.8
• #38208 - Bump io.smallrye.reactive:smallrye-mutiny-vertx-core from 3.7.2 to 3.8.0
• #38207 - Bump elasticsearch-opensource-components.version from 8.11.3 to 8.11.4
• #38206 - Add configurations for base image layer and application layer cache in Jib build
• #38201 - Update Maven Surefire plugin to 3.2.5
• #38195 - Fix Arc request context state restoration on Vert.x duplicated context which allows to support security events in gRPC
• #38193 - Infinispan Client, tests skip if test-containers is not set
• #38192 - Remove leading and trailing space from k8s labels
• #38190 - Rename RESTEasy Classic client extensions to resteasy-client
• #38188 - ADR for removal of reactive when reactive is not a requirement
• #38185 - Make sure quarkus.http.filter headers don't remove existing headers
• #38175 - Resouce name with whitespaces
• #38168 - Bump io.micrometer:micrometer-bom from 1.12.1 to 1.12.2
• #38167 - Bump org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable from 1.6.0 to 1.9.22
• #38165 - Use smallrye-reactive-messaging-bom
• #38162 - Bump Hibernate ORM to 6.4.1.Final and Hibernate Reactive to 2.2.1.Final
• #38161 - Add metrics when the connections limit is set
• #38159 - Investigate request context activation/deactivation in grpc interceptor
• #38155 - Using http filter config is disabling CORS options
• #38153 - SmallRye GraphQL 2.7.0
• #38149 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.4.4 to 3.5.2 in /devtools/gradle
• #38148 - Support Liberica NIK GraalVM version parsing
• #38145 - Use RestEasy Reactive instead of classic in the extension's IT
• #38143 - New Route SPI not requiring Vert.x HTTP
• #38136 - Introduce option to create uncompressed jars
• #38134 - Bump version.cdi-tck from 4.0.12 to 4.0.13
• #38131 - Use headers set in PreMatching filter during media type negotiation
• #38130 - Changing Accept Header in PreMatching filter doesn't affect routing
• #38128 - Allow for creation of non-compressed jars
• #38126 - Bump kubernetes-client-bom from 6.9.2 to 6.10.0
• #38121 - ArC: introduce quarkus.arc.optimize-contexts=auto
• #38117 - Keep static instance field and delete unused field in substitution
• #38116 - Support ManyToOne queries in Panache REST resource
• #38113 - Bump org.assertj:assertj-core from 3.24.2 to 3.25.1
• #38110 - Bump org.apache.logging.log4j:log4j-api from 2.22.0 to 2.22.1
• #38107 - Arc - Decide whether req. context is active based on validity of its ContextState
• #38106 - Fix swallowed failures in Reactive SQL Client tests
• #38104 - Bump smallrye-reactive-messaging.version from 4.14.0 to 4.15.0
• #38100 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
• #38091 - Support Java Records in bytecode recorders
• #38089 - OpenTelemetry: fine-grained instrumentation enablement
• #38087 - Fix NPE and otel quickstart test
• #38084 - NPE when disabling OpenTelemetry
• #38081 - Add quarkus version annotation to kubernetes resources
• #38075 - Docs: Add documentation for ClientMultipartForm class introduced in for creating custom Multipart for Rest-Client-Reactive.
• #38072 - Bump apicurio-registry.version from 2.5.7.Final to 2.5.8.Final
• #38068 - Bump dekorate to 4.1.2
• #38067 - gRPC client over TLS not working
• #38066 - Drop Okhttp/Okio from BOM
• #38065 - ArC: deprecate ArcInitConfig.Builder.setOptimizeContexts()
• #38064 - Add custom Kotlin serializers for ValidationReport and Violation
• #38063 - Do not wait for daemon threads when building docs
• #38059 - Fix Reactive Messaging Extension multiple different Emitter injections check
• #38056 - Bump OTel to 1.32.0
• #38054 - Kafka fails with mutiple emitters on same channel
• #38048 - Docs: Final edits, Style enhancements, Vale checks
• #38034 - Update to Vertx 4.5.1
• #38031 - Expose an API for programmatically creating multipart requests in reactive REST Client
• #38029 - Allow applications using quakus-info to contribute data to the /info using CDI
• #38027 - Update SmallRye Config to 3.5.2
• #38025 - Add priority to OpenApiFilter to specify order of execution for multiple OASFilters
• #38024 - Docs: Final edits, Style enhancements, Vale checks
• [#38023](http...

3.6.6

Complete changelog

• #38200 - Fix a code example in RESTEasy Reactive doc
• #38184 - Add necessary Vertx dependency to quarkus-cache
• #38177 - ConfigRecorder: fix value changed check with null build-time values
• #38157 - Unable to build native project depending on "quarkus-cache" without Vert.x dependency since 3.5.2
• #38141 - [Gradle] make quarkusRun depend on quarkusBuild
• #38124 - Add missing methods to ReactiveMongoCollection
• #38114 - quarkus-mongodb-client ReactiveMongoCollection expose the Updates with Aggregation Pipeline method
• #38111 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.101 to 0.0.102
• #38102 - Fix Build Scan conditional publication
• #38095 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.2.2 to 3.3.3
• #38093 - doc: mention registration is per extension not per repo
• #38082 - Add exclude and additional option to AssembleDownstreamDocumentation
• #37643 - Fix JAXB unmarshalling error when compiling to native
• #37633 - Netty requires more classes to be runtime initialized
• #37379 - Gradle quarkusRun does not keep the server up
• #36479 - JAXB unmarshalling fails in native mode

3.6.5

Complete changelog

• #38099 - [3.6] Upgrade to Hibernate ORM 6.2.18.Final
• #38092 - Always set ssl and alpn for non-plain-text with Vert.x gRPC channel
• #38083 - Make Picocli version providers unremovable classes
• #38077 - picocli should be able to mark its annotation dependent classes as unremovable
• #38069 - [3.6] ArC: fix and optimize the ContextInstances abstraction
• #38062 - Add companion classes to Kotlin reflective hierarchy registration
• #38049 - Don't warn about missing JSON when returning String
• #38044 - RestEasy Reactive warns when the endpoint returns JSON as String
• #38038 - Scheduler: add hint for Scheduled.ApplicationNotRunning skip predicate
• #38006 - Set the correct port properties for HTTPS
• #38001 - Fix the status is a couple extensions documentation pages
• #37997 - Mention exit handler parameter variant of Quarkus.run
• #37996 - Don't fail if config is not a directory
• #37993 - Register JsonSubTypes.Type values for native mode
• #37987 - Do not expand config properties for Gradle Workers
• #37957 - Serialization failure in native mode when Kotlin companion object used
• #37953 - Update Strimzi container images in docs
• #37942 - Records with polymorphic types sent from native clients received with no data
• #37941 - Missing "extension-status" tag in guides
• #37932 - Fix typo in getting-started-testing.adoc
• #37929 - doc how to handle "Failed to load config value of type class java.lang.String for: some-key"
• #37928 - CSRFFilter should have set the attribute csrf-token, but it is null after upgrade to 3.6.4
• #37919 - Bump org.bouncycastle:bctls-fips from 1.0.17 to 1.0.18
• #37903 - Quarkus fails to start if config is not a directory
• #37893 - Upgrade to Kotlin 1.9.22
• #37873 - Choose correct level field value and type to avoid non-resolution error
• #37866 - RR client: fix chunking between \n\n in SSEParser
• #37865 - Update jboss-logmanager to 3.0.4.Final
• #37757 - Fixes stork path param resolution in REST Client
• #37725 - Reset CSRF cookie to minimize a risk of failures due to its expiry
• #37713 - PathParam containing "/" character are not well encoded as "%2F" when using reactive rest client with Stork
• #37625 - SSE with rest-client-reactive may lose message content when it incorrectly breaks the message delimiter (\n\n)
• #37598 - Native image build fails with -Dquarkus.log.min-level=ALL
• #37273 - Environment variable is not read
• #36946 - CSRF cookie should be refreshed on each request
• #36919 - Quarkus 3.4.x+ forces ASCII logging out to console instead of abiding by environment/system default as it had previously
• #35659 - Fix File handling as a JAX-RS body parameter
• #22844 - Gradle tests (with JBoss LogManager setup) output duplicate unformatted messages

3.6.4

Complete changelog

• #37808 - CLI - Rework how missing commands are detected
• #37803 - Dev mode: add null checks to TimestampSet.isRestartNeeded()
• #37798 - Only update ~/.docker/config.json if it exists
• #37787 - Take priority into account in ConfigurationImpl
• #37775 - Docs: fix typo in rabbitmq reference documentation
• #37770 - Add SequencedCollection to BANNED_INTERFACE_TYPES
• #37768 - Running application build with JDK21 and target Java 17 crash with NoClassDefFoundError: java/util/SequencedCollection
• #37731 - Query logging is being done in io.quarkus.mongodb.panache.common.runtime.MongoOperations
• #37723 - Do not use CSRF cookie as the next token value
• #37717 - Docs: Fix incorrect link reference in Cross-Site Request Forgery Prevention guide
• #37714 - Remove the driver property in the documentation for Cloud SQL
• #37710 - Use NoStackTraceException in metrics
• #37677 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.100 to 0.0.101
• #37654 - Make sure dev mode is properly written in doc
• #36848 - CSRF Token with HMAC signature gets double signed

3.6.3

Complete changelog

• #37690 - Regression in 3.6.2: ConfigDiagnostic NullPointerException: Cannot invoke "java.lang.CharSequence.toString()" because "s" is null
• #37688 - Do not use build cache when releasing
• #37669 - OIDC: Fix DEV UI startup when OIDC or Keycloak Dev Services is disabled
• #37667 - Disabling of Dev Services for Keycloak leads to startup error
• #37651 - Fix GraalVM version checker in order to accept other implementations
• #37563 - Consistent file URI for folders and jars
• #37559 - Quarkus throws NPE when trying to match unknown config files

3.6.2

Complete changelog

• #37686 - Use standard URL when updating the website
• #37653 - Improve error message in REST Client when no matching readers found
• #37640 - Handle expireAfterWrite properly in the redis-cache config
• #37639 - Logging docs include build time config reference
• #37638 - Add scope tag to all injected MP Metrics
• #37623 - Add quarkus-funqy-amazon-lambda-deployment to the quarkus-bom
• #37617 - SmallRye GraphQL 2.6.1
• #37611 - Fix configuration of custom port for Elasticsearch dev services
• #37610 - Elasticsearch devservice port incorrect binding
• #37605 - Fix type in HeartbeatFilter example of rest-client-reactive doc
• #37599 - Bump kafka3.version from 3.6.0 to 3.6.1
• #37594 - Bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.6.1 to 1.6.2
• #37590 - Microprofile Metric Missing "Scope" Tag Only When Using Constructor Injection
• #37588 - Update the import.cypher script to use newer syntax
• #37581 - Support using commas to add extensions with CLI
• #37570 - Prevent concurrently running Jacoco ReportCreators to avoid report corruption
• #37565 - ArC: prevent duplicate bean discovery & detect duplicate bean identifiers
• #37564 - Invalid documentation for 'quarkus extension add'
• #37557 - Make docs/sync-web-site.sh recoverable
• #37553 - Register OpenAPI custom filters for reflection
• #37549 - Bump commons-io:commons-io from 2.15.0 to 2.15.1
• #37546 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.99 to 0.0.100
• #37545 - Bump org.junit.jupiter:junit-jupiter from 5.10.0 to 5.10.1
• #37536 - Fix != expression in @PreAuthorize check
• #37535 - Fix Snappy note about native
• #37526 - Spring security annotatiton PreAuthorize process equals and not equals in the same way
• #37520 - Properly match unknown config files for Windows
• #37513 - Save pathParamValues encoded and perform decoding when requested
• #37505 - Bump org.jboss.logmanager:log4j2-jboss-logmanager from 1.1.1.Final to 1.1.2.Final
• #37496 - Quarkus 3.6.0 generate wrong jacoco xml
• #37493 - upgrading from quarkus 3.5.3 to 3.6.0 java.lang.IllegalArgumentException: A case block for the string value already exist
• #37479 - Redis Cache ttl default value invalid setting
• #37357 - Runtime OpenAPI filters are not registered for reflection
• #37298 - Bump Keycloak version to 23.0.0
• #37187 - Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
• #37129 - Bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.6.0 to 1.6.1
• #37128 - Bump org.junit:junit-bom from 5.10.0 to 5.10.1
• #37035 - Register methods of RESTeasy reactive parameter containers for reflection
• #36986 - Native not index method with SSE and throw NoSuchMethodException
• #36813 - config-yaml warning - unrecognized configuration file on Windows
• #36773 - "Unrecognized configuration file" when using YAML
• #35960 - PathParam URL encoded in quarkus-resteasy-reactive since quarkus 3.2.x

3.6.1

Complete changelog

• #37486 - Revert "Unlist quarkus-resteasy-qute and quarkus-resteasy-reactive-qute"
• #37478 - Qute resteasy change in 3.6.0
• #37454 - Config: detect injected config value mismatch for missing values
• #37453 - Fix Panache bytecode enhancement for @Embeddable records
• #37449 - Update Apache Maven to 3.9.6
• #37447 - Add Content-Range header to 206 Partial Content file response
• #37444 - Injecting ConfigProperty of type Optional<List> not working in the native mode
• #37436 - Respect comma escapes in property value for @RolesAllowed.
• #37428 - Fix various minor issues in quarkus update
• #37426 - Fix typo configMapRefKey -> configMapKeyRef
• #37421 - Scheduler: register ApplicationNotRunning as bean even if quartz is used
• #37417 - Build fails when using the Quartz extension and @Scheduled(..., skipExecutionIf = Scheduled.ApplicationNotRunning.class)
• #37415 - Make Truffle from GraalVM 23.1 work in all Quarkus modes
• #37401 - Print correct profiles in native image
• #37400 - Improve reliability when downloading builder images from Quay.io
• #37398 - Revert "Build cache - Upload quarkus-ide-launcher-999-SNAPSHOT.jar"
• #37395 - Update Gradle to 8.5
• #37393 - Disable new Http2RSTFloodProtectionConfigTest on Windows
• #37392 - Update gradle to 8.5 and backport if possible to finish Java 21 dependencies
• #37384 - Stop disabling unsafe in netty at native-executable runtime
• #37382 - Update MAX_LTS_SUPPORTED_BY_KOTLIN to 21
• #37367 - Documentation: security auth mechanism guide must also list runtime form auth properties alongside build-time ones
• #37366 - Documentation: Fix OIDC credentials reference to secret key
• #37364 - Improve Docker Desktop detection
• #37361 - Do not fail the request in OidcClient filters if OidcClient is disabled
• #37360 - Disable OidcClientFilter at runtime for simpler application testing
• #37359 - Fix incorrect log dependency
• #37354 - Update Boucycastle to 1.77 and Boucycastle FIPS to 1.0.2.4
• #37351 - Upgrade to Jandex 3.1.6
• #37350 - Unlist quarkus-resteasy-reactive-qute and quarkus-resteasy-qute
• #37347 - Runtime (re)initialize Netty's PlatformDependent classes
• #37318 - Use batch mode for update-version.sh
• #37317 - Avoid asking for GPG passphrase on CI
• #37314 - Fix deprecated dev-v1 url with dev-ui in a few places
• #37300 - Prepare docs/sync-web-site.sh for automated releases
• #37294 - Fix the major version of Java 21
• #37292 - Bump testcontainers to 1.19.3 and use docker-java-bom
• #37291 - Bump org.jetbrains.kotlin:kotlin-gradle-plugin-api from 1.9.20 to 1.9.21 in /devtools/gradle
• #37280 - Bump Microsoft SQL Server JDBC driver to 12.4.2
• #37279 - Bump Microsoft SQL Server JDBC driver to 12.4.2
• #37271 - Docs: add keywords to Vert.x guides
• #37270 - Vert.x: report exception for blocking message consumer methods
• #37268 - Reactive REST Client: check for ClientRequestFilter when skipping @Provider auto-discovery
• #37252 - Use the default tenant resolver if the custom one does not resolve a tenant
• #37251 - Add a test showing how OIDC ID token can be propagated
• #37247 - Update kindcontainer to 1.4.4
• #37244 - Always execute a JPA password action
• #37228 - Add classes from additional JPA model build items to pre-generate proxies
• #37224 - Qute: dev mode - debug a problem with no-restart-template
• #37222 - RuntimeException in vertx is silently swallowed for blocking ConsumeEvents
• #37177 - QUARKUS_PROFILE=dev and '-Dquarkus.profile=dev' not working for native image
• #37108 - Warning about build time generated proxy for entity OutboxEvent in Hibernate Search
• #36892 - Update Kotlin to version 1.9.21, Mockito to 5.7.0
• #36747 - NoSuchMethodException when reading @Embeddable record
• #36735 - Failure to bump BouncyCastle FIPS version to 1.0.2.4 due to a native build failure
• #36242 - Quarkus cannot load Truffle/polyglot languages with the custom class loader.
• #17839 - Invalid memory configuration for netty maxDirectMemory in native image

3.6.0

Major changes

• #37241 - Make improvements to REST Client SSE handling

Complete changelog

• #37242 - Support Docker Desktop for building native executables
• #37241 - Make improvements to REST Client SSE handling
• #37240 - Updates Infinispan to 14.0.21.Final
• #37238 - Build cache - Only store if the access key is around
• #37236 - Api to read minimum and recommended Java versions from catalog metadata
• #37221 - Image updates (including Java 21 base image)
• #37218 - Fix OpenTelemetry trace exclusion of endpoints served from the management interface
• #37213 - Add basic Range header support
• #37205 - Resteasy-reactive Partial Content support (Range: bytes http header)
• #37204 - Allow to define allowed roles as configuration expressions inside @SecureField annotation
• #37201 - Fixed sample code for KotlinModule initialization
• #37198 - Some minor refinements for build scans
• #37193 - AccessDeniedException error with build using native image on linux with Docker Desktop
• #37185 - Removed DependencyFlags.REMOVED
• #37170 - Fix snapshots following a collision of pull requests
• #37166 - Support custom Authorization schemes for OIDC bearer tokens
• #37162 - Bump org.apache.commons:commons-text from 1.10.0 to 1.11.0
• #37161 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.97 to 0.0.99
• #37158 - Bump com.unboundid:unboundid-ldapsdk from 6.0.9 to 6.0.10
• #37153 - Bump smallrye-jwt version to 4.4.0
• #37149 - Bump com.squareup.okio:okio from 1.17.2 to 1.17.6 in /bom/application
• #37107 - Rest client able to get full SSE event
• #37101 - Remove smallrye-opentracing from native tests modules in CI
• #37094 - Bump jakarta.json:jakarta.json-api from 2.1.2 to 2.1.3
• #37092 - Bump mongo-client.version from 4.11.0 to 4.11.1
• #37067 - SmallRye GraphQL 2.6 + custom scalar registration
• #37053 - Clarify dynamic Environment Variables name conversion
• #37004 - Move failsafe config to the root instead of in an execution
• #36976 - Error in JBossLoggerFinder during integration test
• #36804 - @SecureField add expression support
• #36801 - Add note that endpointdisabled does not work native
• #36746 - Allow using a random test port within Google Cloud Function tests
• #35476 - Random test port does not work together with google-cloud-functions extensions

3.5.3

Complete changelog

• #37215 - Use LinkedHashMap for parts map to ensure user input order
• #37214 - MultipartFormDataOutput should use an ordered map instead of a HashMap
• #37210 - [3.5] Fix and adjust Quarkiverse extension template
• #37209 - Build cache - Additional tweaks
• #37206 - recognize quarkus.tls.trust-all property by keycloak-admin-client extension
• #37174 - Ignore files coming from quarkus-ide-launcher jar
• #37130 - Do not report unused deprecated runtime props with default value as used
• #37102 - Fix filter per extension in dev ui
• #37073 - Use 3.2 as the example stream for update-quarkus.adoc
• #37072 - Deprecated runtime configuration properties with default value are reported even though never used
• #37046 - Adjust Quarkiverse Antora doc templates a bit
• #36961 - Fix GraphQL WebSocket handling occurring before authorization

2.13.9.Final

Complete changelog

• #37225 - [2.13] Handle duplicated context in the CacheResultInterceptor
• #37136 - (2.13) graphql websocket fixes
• #36852 - Remove erroneous preview status from cache doc
• #36839 - [2.13] Manage Jose4j dependency in the bom
• #36548 - [2.13] Bump sshd-common to 2.10.0
• #36405 - [2.13] - Update to Netty 4.1.100
• #36345 - (2.13) Upgrade Avro to 1.11.3
• #36241 - Update Snappy to version 1.1.10.5
• #35654 - (2.13) Upgrade Gradle to 7.6.3
• #35633 - Make hibernate reactive status clear in docs
• #34953 - Generated docs: move DOM manipulation to build time
• #34331 - Update to netty 4.1.94
• #34214 - Add smallrye-jwt test confirming RSA-OAEP encrypted token with RSA 1_5 set in headers is rejected
• #34067 - Bump snappy-java from 1.1.8.4 to 1.1.10.1 in /bom/application
• #33978 - Generated docs should generate mvn create app command with Quarkus version and not stream version
• #33684 - Bump guava from 31.1-jre to 32.0.0-jre
• #31518 - Prevent ContextNotActiveException during invalid config validation if resteasy-reactive module is present
• #31434 - Invalid config value prevents app to startup with invalid stacktrace instead of validation error message