3.11.0.CR1

Major changes

• #38448 - Initial Observability extension - devservices, devresources, LGTM
• #39836 - Infinispan Cache Extension
• #40273 - Allow quarkus:run to launch DevServices
• #40309 - WebSockets Next: client endpoints
• #40539 - Support for OIDC session expired page

Complete changelog

• #2815 - quarkus-hibernate-orm entity manager merge of detached entity does not work
• #26445 - OpenTelemetry Collector for DevServices
• #28473 - Move MongoDB Client Tracing to OpenTelemetry
• #29571 - Infinispan - unable to cache uni values with @CacheResult annotation
• #31214 - Dedicated DDL user for liquibase migrations to avoid DDL permissions for app datasource user
• #31896 - Integrate Infinispan with the Quarkus Cache
• #37735 - Extra INFO log in Hibernate ORM HHH10005004: Stopping BeanContainer : %s
• #38298 - Mixing auth-mechanizms fails TestSecurity tests
• #38448 - Initial Observability extension - devservices, devresources, LGTM
• #38722 - entityManager.merge does not work in some cases
• #39194 - Remove ProfileManager
• #39233 - Update MicroProfile Config to 3.1
• #39361 - Support custom Liquibase credentials
• #39375 - Avoid throwing a RuntimeException when parsing an invalid XML body using JAXB
• #39419 - Fixed concurrency bug in StartupContext
• #39503 - Improve JAXB Exception handling
• #39510 - Update default values for salt & iteration index
• #39571 - Bump com.google.api.grpc:proto-google-common-protos from 2.36.0 to 2.37.1
• #39590 - WebSockets Next: compression configuration
• #39685 - Bump resteasy.version from 6.2.7.Final to 6.2.8.Final
• #39688 - Ensure augmented SecurityIdentity is used in SecurityEvents and move configuration-based roles-mapping to authentication phase
• #39741 - Bump Strimzi Oauth Client version in bom from 0.14.0 to 0.15.0
• #39767 - Kafka Snappy library fails to load when restarting Quarkus in the same JVM
• #39836 - Infinispan Cache Extension
• #39862 - websocket-next extension should be able to automatically broadcast pings
• #39894 - Bump grpc.version from 1.62.2 to 1.63.0
• #39908 - Isolate testThatNewResourcesAreServed in FlakyDevMojoIT
• #40024 - Skeleton unit tests for annotation processor
• #40031 - Allow not JAX-RS parameters within resource methods
• #40033 - Improve loading of classes in RunnerClassLoader
• #40041 - Notify radcortez on config issues
• #40045 - Bump kubernetes-client-bom from 6.11.0 to 6.12.1
• #40059 - Support path-based authentication with @TestSecurity annotation
• #40066 - Rename webjars-locator to web-dependency-locator
• #40078 - Support JWT key property for the OIDC client authentication
• #40086 - Adding possibility to supply the jwt private key as a string
• #40089 - Qute: i18n for enum
• #40101 - Qute: type-safe messages - add test for localized enum
• #40102 - Upgrade to Hibernate ORM 6.5 / Hibernate Reactive 2.3
• #40106 - Incubating implementation of a more efficient ApplicationModel resolver for Maven projects
• #40109 - Introduce workflow for testing GraalVM variants
• #40115 - Exclude wallpapers from the preview
• #40117 - Remove support for the SecurityManager
• #40126 - Bump com.gradle.develocity from 3.17.1 to 3.17.2 in /devtools/gradle
• #40130 - Make test release workflow more consistent with release
• #40132 - Infinispan client guide mentions removed quarkus-test-infinispan-client
• #40136 - Qute type-safe messages: add convenient way to localize enum constants
• #40139 - quarkus-azure-functions-3.9.3 - ERROR [io.qua.dev.dep.DevUIProcessor] failed to process extension descriptor - class java.lang.String cannot be cast to class java.util.List
• #40140 - quarkus-funqy-http-3.9.3 - ERROR [io.qua.dev.dep.DevUIProcessor] failed to process extension descriptor - class java.lang.String cannot be cast to class java.util.List
• #40146 - WebSockets Next: configuration updates
• #40155 - @Blocking on a standard grpc service run on a single thread
• #40157 - Remove explicitly ignored split packages
• #40161 - Bump com.gradle:develocity-maven-extension to 1.21.2
• #40163 - Collect and expose info about dependencies of each artifact in ApplicationModel
• #40173 - Allow concurrent invocation of blocking gRPC services by removing global ordering
• #40183 - WebSockets Next: avoid unnecessary bean lookups
• #40191 - Add mongo commands to otel span attributes
• #40192 - Allow Panache bytecode enhancers to benefit from class transformers caches
• #40193 - WebSockets Next: avoid possible data race in a test
• #40195 - ServerRequestFilter Example if-else bug
• #40196 - quarkus.log.file.path set to a deeply nested target/.../target/quarkus.log
• #40197 - VertxCoreProcessor and HibernateValidatorProcessor bytecode transformers are safe to be cached
• #40198 - Bump wildfly-elytron.version from 2.3.1.Final to 2.4.1.Final
• #40199 - Bump flyway.version from 10.10.0 to 10.11.1
• #40200 - Bump org.mvnpm:lit from 3.1.2 to 3.1.3
• #40202 - Fix List/String reading from yaml in Dev UI
• #40203 - Deprecate 'eager transformers'
• #40204 - Bump Gradle version to 8.7
• #40207 - WebSockets Next: send ping message from the server automatically
• #40208 - ArC: implement CDI 4.1
• #40211 - Add another BouncyCastle FIPS test
• #40213 - quarkus build fails: Could not resolve dependencies for project io.quarkus:quarkus-integration-test-webjars-locator:jar:999-SNAPSHOT
• #40214 - Use new webjars-locator name in integration test
• #40222 - Enhancement Request: Provide a fixed order for OpenAPI security responses
• #40224 - Deprecate old AppArtifact* API
• #40225 - Update SmallRye Config to 3.8.1
• #40228 - Fixed order for default OpenAPI security responses
• #40231 - Bump org.mvnpm:es-module-shims from 1.8.3 to 1.9.0
• #40235 - When verifying image metrics, return all failures instead of just the first one
• #40237 - Allow two star role-name in web-fragment.xml as described in servlet spec
• #40238 - Run CI when title starts with WIP
• #40242 - Avoid deeply nesting log file when running tests
• #40246 - Don't log connection closed exceptions as ERROR in websockets-next
• #40251 - Remove quarkus-test-infinispan-client doc mention in Infinispan
• #40262 - Bump org.mvnpm:lit-html from 3.1.2 to 3.1.3
• #40263 - Bump org.eclipse.microprofile.reactive.messaging:microprofile-reactive-messaging-tck from 3.0 to 3.0.1
• #40268 - State cookies (q_auth) keeps piling up in code flow
• #40270 - Introduce DevServices in quarkus:run Maven goal
• #40271 - Bump Elasticsearch/OpenSearch versions for tests/devservices to 8.13/2.13
• #40273 - Allow quarkus:run to launch DevServices
• #40276 - Split dependabot into two groups
• #40280 - Change quarkus-webjars-locator relocation message
• #40281 - Revert "Split dependabot into two groups"
• #40286 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.12.2 to 4.12.6
• #40289 - Support for the OIDC session-expired page
• #40296 - Bump elasticsearch-opensource-components.version from 8.13.1 to 8.13.2
• #40298 - Align web-dependency-locator with some of the web-bundler features
• #40304 - Allow Snappy to be loaded from a shared classloader
• #40309 - WebSockets Next: client endpoints
• #40316 - Allow configuring OIDC state cookie age
• #40318 - SecurityConfig marked as Runtime, but used in Static Init
• #40320 - Bump com.google.api.grpc:proto-google-common-protos from 2.37.1 to 2.38.0
• #40323 - Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.0 to 3.0.1
• #40327 - Initialize SecurityEventHelper in RESTEasy Classic filter when runtime config is ready
• #40330 - Remove old and unused screenshots from docs
• #40332 - Improve documentation of configuration properties with type Map<String, NotAConfigGroup>
• #40334 - Revert "Move setDefaultProperties in the static init"
• #40335 - Improve documentation of configuration properties with type Map<String, NotAConfigGroup>
• #40339 - Update the status of the Reactive Rename ADR to 'accepted'
• #40348 - Adding rate limit docs
• #40352 - Bump org.wiremock:wiremock-standalone from 3.5.2 to 3.5.4
• #40353 - Bump flyway.version from 10.11.1 to 10.12.0
• #40364 - Qute: move tests from src/test/java17 to src/test/java
• #40377 - Bump net.alchim31.maven:scala-maven-plugin from 4.8.1 to 4.9.0
• #40378 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.12.6 to 4.13.0
• #40379 - Bump scala.version from 2.13.13 to 2.13.14
• #40382 - Bump org.mvnpm:lit-element from 4.0.4 to 4.0.5
• #40392 - Classloader improvements: introducing quarkus-classloader-commons and benchmarking infrastructure
• #40397 - WebSockets Next: get rid of extensions/websockets-next/server directory
• #40399 - Getting annotation on intercepted static method returns null
• #40402 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.103 to 0.0.105
• #40407 - Dev UI: Small cosmetic update to Web dependency locator screen
• #40411 - Qute: add integration test for test templates
• #40421 - Bump com.google.errorprone:error_prone_annotations from 2.26.1 to 2.27.1
• #40424 - Bump com.gradle:common-custom-user-data-maven-extension from 1.13 to 2
• #40428 - Add test security attribute type handling
• #40435 - WebSockets Next: javadoc clarifications
• #40441 - Arc - copy over annotations when transforming intercepted static methods
• #40450 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 24.3.10 to 24.3.11
• #40451 - Bump org.checkerframework:checker-qual from 3.42.0 to 3.43.0
• #40452 - Bump com.google.api.grpc:proto-google-common-protos from 2.38.0 to 2.39.0
• #40463 - Application thinks quarkus.http.host is set to 0.0.0.0 in dev mode but it's set to localhost
• #40467 - Add note for default HTTP host in WSL
• #40481 - Initial version of Dev UI Dependencies menu item
• #40482 - Bump org.bouncycastle:bc-fips from 1.0.2.4 to 1.0.2.5
• #40483 - Bump com.google.guava:guava from 33.1.0-jre to 33.2.0-jre
• #40484 - Fix test issue
• #40485 - WebSockets Next: add test for virtual threads
• #40486 - Add Warning Log for 503 Responses Due to Thread Pool Exhaustion
• #40491 - WebSockets Next: fix flaky BasicConnectorTest
• #40493 - add Liquibase config option allowDuplicatedChangesetIdentifiers
• #40498 - Upgrade to Jandex 3.1.8
• #40504 - Quarkus 3.10 doesn't load configs for profile other than the one it was used in the build phase
• #40506 - Micrometer performance improvements - vert.x
• #40508 - Micrometer performance improvements on the vert.x package
• #40511 - Bump org.jetbrains.kotlin:kotlin-gradle-plugin-api from 1.9.23 to 1.9.24 in /devtools/gradle
• #40515 - Bump com.gradle:quarkus-build-caching-extension from 1.0 to 1.1
• #40516 - Always record original default values
• #40521 - Path param annotated with @Encoded are not url encoded by the quarkus-rest-client-jackson anymore
• #40522 - Add @Encoded test in rest-client-jackson
• #40535 - WebSockets Next: make it possible to specify the close status code/reason
• #40539 - Support for OIDC session expired page
• #40545 - WebSockets Next: support close status code/reason
• #40556 - Enroll gastaldi in the lottery
• #40557 - More classloaders cleanup
• #40560 - WebSockets Next: fix flaky ClientEndpointTest
• #40563 - Bump com.gradle.develocity from 3.17.2 to 3.17.3 in /devtools/gradle
• #40564 - Remove deprecated classloader helpers
• #40565 - Bump org.jetbrains.kotlinx:kotlinx-coroutines-bom from 1.8.0 to 1.8.1
• #40566 - Bump elasticsearch-opensource-components.version from 8.13.2 to 8.13.4
• #40568 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.6.0 to 3.7.0
• #40570 - Bump com.gradle:develocity-maven-extension from 1.21.2 to 1.21.3
• #40584 - Bump com.fasterxml.jackson:jackson-bom from 2.17.0 to 2.17.1
• #40594 - Add an 'march' property to native configuration
• #40603 - Add configuration option for liquibase.allowDuplicatedChangesetIdentifiers
• #40606 - Bump org.apache.groovy:groovy from 4.0.20 to 4.0.21
• #40607 - Bump jakarta.authorization:jakarta.authorization-api from 2.1.0 to 3.0.0
• #40608 - Bump com.nimbusds:nimbus-jose-jwt from 9.37.3 to 9.39
• #40612 - Bump org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.8.0 to 1.8.1
• #40615 - Dev UI: Replaced internal components with Qomponent
• #40618 - ArC: custom context can get CurrentContextFactory during instantiation
• #40619 - WebSockets Next: improve the concurrency limiter
• #40620 - ArC: initial documentation of CDI pitfalls with reactive programming
• #40624 - Honor -DquicklyDocs in junit5-virtual-threads
• #40626 - WebSockets Next: improve HandshakeRequest and header constants javadoc
• #40627 - Polish code with ResettableSystemProperties
• #40630 - Reviewed some Quarkus core classes
• #40642 - Bump org.bouncycastle:bctls-fips from 1.0.18 to 1.0.19 in /bom/application
• #40643 - Bump flyway.version from 10.12.0 to 10.13.0
• #40645 - Bump picocli.version from 4.7.5 to 4.7.6
• #40646 - Bump net.alchim31.maven:scala-maven-plugin from 4.9.0 to 4.9.1
• #40647 - Bump org.mockito:mockito-core from 5.11.0 to 5.12.0