3.9.4

Complete changelog

• #39802 - Make sure pathFilter is applied to workspace module content tree
• #39944 - Support configuring SyslogHandler max message length
• #39958 - Add maxLength configuration option to SysLog
• #39960 - MessageBundle naming issue
• #39978 - Hot Reloading conflicts with Maven Flatten Plugin
• #39982 - Parameter to skip Maven goal executions before quarkus:dev, skipping flatten plugin by default
• #39987 - Update OpenTelemetry exporter link
• #39990 - Fix MessageBundle key/file name resolver algorithm
• #39992 - () breaks title in devui
• #39995 - Go back to raw Maven read/write for bootstrap
• #40000 - Signed JARs may be modified during a native build
• #40001 - Un-sign modified dependency JARs when filtering
• #40002 - Fix url encoding issue for Dev UI Page with unusual chars
• #40019 - Changing Accept Header in PreMatching filter isn't considered by MessageBodyWriter
• #40022 - Take MediaType set in pre-match filter into account during serialization
• #40028 - Collect only runtime static resources for native builds
• #40038 - Updates to Infinispan 15.0.1.Final
• #40051 - Clarify REST Client multipart support
• #40063 - Fix typo in cassandra.adoc
• #40067 - Qute: fix NativeImageResourceBuildItem registration on Windows
• #40073 - Explain how logging can be configured in the smallrye-graphql-client guide
• #40074 - Applying the QE feedback to the Logging guide
• #40083 - @Startup on @Produces method
• #40096 - ArC: skip warning about invalid startup for producer methods
• #40105 - Docs: update deploying-to-openshift.adoc for build option
• #40107 - Update datasource yaml config in docs

3.8.4

Complete changelog

• #25101 - [CI] - quarkus-devtools-compat + Quarkus main
• #27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
• #39282 - Add missing headers configuration for InputStream handling
• #39299 - Hibernate ORM: package-info is ignored when specifying scan packages
• #39344 - Avro schemas aren't generated in isolation
• #39345 - Isolate Avro schema code generation when using multiple schema files
• #39385 - smallrye-health should hande the case when Vert.x current context is null
• #39394 - Handle null Vert.x context in smallrye-health
• #39467 - Fix codestarts compatibility with older CLI
• #39468 - ChainBuildException - Cycle detected after #39352 PR
• #39470 - Remove the old MetricBuildItem SPI
• #39471 - Update to Vert.x 4.5.5
• #39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
• #39476 - Fix the broken link to the OIDC client reference doc
• #39496 - Gradle build cache prevents source packages to be installed to local Maven repository
• #39513 - @SecureField in members of the response class isn't applied
• #39530 - Update profile section in building-native-image.adoc
• #39564 - Fix Quarkus REST Jackson @SecureField detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays
• #39578 - Update quarkus-project-develocity-extension to 1.0.7
• #39586 - RestMulti is not sending headers if there is no content
• #39587 - Properly use headers from RestMulti when the multi is empty
• #39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
• #39661 - Fix property name in OIDC docs
• #39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
• #39702 - Bring back erroneously removed @BuildStep
• #39706 - Use --no-daemon when calling gradle update
• #39715 - Update Hibernate ORM package/class processing rules
• #39764 - Update to Vert.x 4.5.7
• #39807 - Explain in the docs how to map the X509 CN attribute to roles
• #39819 - Netty update caused failure when building image with GraalVM for JDK 17
• #39822 - Bump JDK version to 17 as an aws lambda runtime in aws-lambda related extensions
• #39826 - Move the import of smallrye-common-bom higher up
• #39830 - Fix native compilation for Netty and Mutiny
• #39831 - No build time init of classes used in UnsafeAccessedFieldBuildItem
• #39840 - Add js-scriptengine and collections as parent first artifacts
• #39886 - Bump the recommended-java-version to 21
• #39911 - Update - Only consider recipes when generating the list of recipes
• #39928 - Fix small typo in WRITING REST SERVICES WITH QUARKUS REST doc
• #40015 - Some dev services are restarted on dev mode restart
• #40057 - Fix datasource devservices restarting
• #40079 - [3.8] Do not record local sources in runtime config defaults
• #40082 - Rewrite footnotes for downstream documentation
• #40104 - [3.8] Prevent smallrye-graphql-schema-builder from leaking into runtime deps

3.10.0.CR1

Major changes

• #36504 - Allow authentication mechanism selection for a REST endpoint with annotation
• #37816 - Optional support for the OIDC session cookie dir encryption
• #39295 - Move package config to an interface
• #39415 - Extension for the Hibernate Search Standalone Pojo Mapper with Elasticsearch
• #39793 - Support for verifying OIDC JWT claims with custom Jose4j Validator
• #39812 - Support resolving of static OIDC tenants based on token issuers
• #40056 - Add OIDC TokenCertificateValidator

Complete changelog

• #10267 - LDAP Security - Don't re-authenticate on every request
• #14851 - Quarkus keycloak authorization usability improvements.
• #26182 - Hibernate Search Standalone Pojo Mapper: Hibernate Search without Hibernate ORM / datasource
• #34664 - Provide a way to specify HttpAuthenticationMechanism per JAX-RS resource
• #35952 - Get management interface resolved port when quarkus.management.test-port set to 0
• #36504 - Allow authentication mechanism selection for a REST endpoint with annotation
• #37676 - Bump com.microsoft.azure.functions:azure-functions-java-library from 2.2.0 to 3.1.0
• #37700 - Bump com.amazonaws:aws-lambda-java-events from 3.11.3 to 3.11.4
• #37785 - Consider using direct JWE encryption of the OIDC session cookie
• #37816 - Optional support for the OIDC session cookie dir encryption
• #37875 - Restart and other hotkey in devui
• #38026 - Missing security requirement on operation level, declared @RolesAllowed in implementing class derived from a generated openapi java interface
• #38373 - Webauthn improvements : docs, customisable cookies, virtual thread support
• #38535 - OIDC Tenant Resolution for web-app applications does not explain that the session cookie has a tenant id recorded
• #38696 - OIDC Multitinancy by actual answer from teenant
• #38940 - Offer a way to block inside custom SecurityContext.isUserInRole with resteasy-reactive
• #39011 - quarkus-redis-client tracing
• #39015 - Bump org.wiremock:wiremock-standalone from 3.4.1 to 3.4.2
• #39061 - RunOnVirtualThread should avoid using Netty FastThreadLocals
• #39104 - Use followOutput for lra-coordinator container
• #39156 - Add the ability to ask for devservices to use the shared network
• #39170 - Bump actions/upload-artifact and download-artifact to v4
• #39182 - WebSockets Next: detect incorrect path parameter usage
• #39269 - Simplify configuration based mapping of token roles to deployment-specific SecurityIdentity
• #39295 - Move package config to an interface
• #39322 - [Mandrel 23.0] hibernate-orm-panache-kotlin native integration tests fail with 23.0 build and 23.1.2 sdk.
• #39339 - Simplify configuration based mapping of token roles to deployment-specific SecurityIdentity
• #39348 - Remove message to avoid using testNative until proven it works
• #39391 - AuthenticationSuccessEvent event is not created on successful authorization using FormAuthenticationMechanism
• #39395 - Invalid warnings about SQL Server version "0.0.0" on startup
• #39406 - Improve documentation for AMQP client options about setting a heartbeat
• #39407 - Fix update-version.sh script
• #39414 - Deploy relocations for snapshots
• #39415 - Extension for the Hibernate Search Standalone Pojo Mapper with Elasticsearch
• #39417 - OIDC TenantConfigResolver and TenantResolver are called even if the tenant id is already resolved
• #39424 - Bump org.asciidoctor:asciidoctorj from 2.5.11 to 2.5.12
• #39425 - Support for verifying OIDC JWT claims with custom Jose4j Validator
• #39446 - WebSockets Next: add endpoints to the DevUI's 404 page
• #39456 - Bump com.google.errorprone:error_prone_annotations from 2.25.0 to 2.26.1
• #39457 - Quarkus OpenTelemetry Rest Client Span Name with Route (URL Path Template)
• #39459 - Add key listeners to the log in Dev UI
• #39462 - WebSockets Next: detect incorrect path parameter usage
• #39464 - WebSockets Next: add basic Dev UI
• #39465 - WebSockets Next: add convenient way to handle the subprotocol header
• #39469 - Easy way to add deployment methods in Dev UI
• #39473 - Upgrade to Jandex 3.1.7
• #39481 - Push project version to RESTEasy Reactive TCK
• #39483 - Add ApplicationArchive.getResolvedDependency()
• #39484 - WebSockets Next: add basic Dev UI
• #39486 - Improve OIDC named tenant-specific configuration exceptions and make sure userinfo/token verification is enforced for named tenants
• #39489 - Opentelemetry Redis Instrumentation
• #39490 - Updates to Schema programmatic API in Infinispan
• #39492 - Optimize OIDC tenant id resolution
• #39493 - Fire SecurityEvent on Form authentication login success
• #39499 - Bump com.unboundid:unboundid-ldapsdk from 6.0.11 to 7.0.0
• #39500 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.102 to 0.0.103
• #39507 - RestEasy Jackson test fails in certain time zones
• #39509 - Update Flyway to 10.10.0
• #39512 - Move Keycloak Authorization Enforcer Tenant config to runtime and improve usability with aggregated policy enforcer paths
• #39518 - Migrate Elytron Security extensions from config classes to @ConfigMapping
• #39524 - Handle trailing/leading spaces in all relevant datasource configuration properties
• #39534 - Use URL path template when tracing REST clients where possible
• #39535 - Bump smallrye-config.version from 3.7.0 to 3.7.1
• #39537 - Bump org.apache.groovy:groovy from 4.0.19 to 4.0.20
• #39538 - Bump com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2 from 2.15.1 to 2.15.2
• #39539 - Bump com.google.guava:guava from 33.0.0-jre to 33.1.0-jre
• #39540 - Bump org.commonmark:commonmark from 0.21.0 to 0.22.0
• #39542 - WebSockets Next: attempt to diagnose BroadcastOnOpenTest
• #39551 - RestEasy Jackson test fails in certain time zones
• #39552 - Fix formatter-maven-plugin build cache misses
• #39553 - Consider...

3.2.12.Final

Complete changelog

• #36736 - Manage Jose4j dependency in the bom
• #39383 - Typo at OIDC Client Mutual TLS config properties
• #39580 - Fix directory name in vertx.adoc
• #39679 - Bump mime4j version to 0.8.11
• #39692 - Recommend podman desktop
• #39734 - Fix typo in podman.adoc
• #39801 - Manage mime4j core, dom and storage jars in the bom

3.9.3

Complete changelog

• #39731 - Fix StorkClientRequestFilter exception handling
• #39796 - document @Inject ScheduledExecutorService
• #39807 - Explain in the docs how to map the X509 CN attribute to roles
• #39839 - Removing quarkus-panache-common annotation processor from docs
• #39857 - SmallRye GraphQL Client: Added MP's Input.class to the index
• #39868 - Add property to force cache-control: no-store on: quarkus.smallrye-health
• #39871 - Routing for index.html fails with 404 for directories
• #39872 - Use cache-control header to make sure health checks aren't cached
• #39876 - OIDC Dev UI screen is blank after the user authentication
• #39878 - Ensure that index.html works in any directory in native mode
• #39880 - Mention ScheduledExecutorService in scheduler reference doc
• #39896 - Revert removal of redirect in Dev UI Deep links
• #39897 - Fix Servlet/Rest ExceptionMapper
• #39913 - Add more non-platform extensions to dev services guide + make guide guide-ier
• #39929 - Adjust some user-visible references to RESTEasy Reactive
• #39938 - Update of the SmallRye GraphQL 2.8.2
• #39956 - Docs OIDC Client - Inconsistent variable naming, OidcClientCreator example

3.9.2

Complete changelog

• #38964 - Add smallrye metrics capability
• #39668 - Recompute cache when the redis connection pool is exhausted
• #39705 - WebSockets Next: error handlers part 1
• #39717 - OIDC code flow access token verification is enforced even if the application code does not use it as JWT
• #39718 - Enforce OIDC code flow access token verification only if JWT is in the application code
• #39725 - Setting the correct CodeFlowVerifyAccessTokenDisabledTest test class name
• #39742 - Fix a remaining reference to quarkus.resteasy-reactive. prefix
• #39746 - ScheduledExecutorService: cannot remove future task from the scheduler
• #39763 - WebSockets Next: error handlers part 2
• #39766 - Properly handle array class types to be looked up
• #39770 - Improve the multipart encoded mode handling in the rest client
• #39776 - Cannot build native image after 3.9.1 upgrade - missing configuration properties but they exist
• #39777 - Bean Param init issue - java.lang.NoClassDefFoundError: io/quarkus/generated/int$quarkusrestparamConverter$
• #39790 - Add quarkus-credentials-deployment where it's missing
• #39794 - Bump org.jboss.threads:jboss-threads from 3.6.0.Final to 3.6.1.Final
• #39797 - Docs: fix typo in OIDC tenant resolution by configuration
• #39798 - Update documentation for QUARKUS AND GRADLE - Development mode: quarkusDev#workingDir has been deprecated
• #39804 - Always record profiles
• #39823 - Ensure ParameterConverter is loaded from the TCCL
• #39829 - Use quarkusDev#workingDirectory
• #39835 - Bump maven-model-helper to 36

3.9.1

Complete changelog

• #25682 - Dev Services for Postgresql not working with Rancher
• #36736 - Manage Jose4j dependency in the bom
• #36737 - Add OpenAPI Filter usage to documentation
• #39088 - Solve POM formatting issues when creating project/adding extension/removing extension
• #39224 - WebSockets Next: support method parameter injection
• #39313 - prod-profile configuration pollutes test profile in integration tests
• #39371 - Avoid resolving plugin command after the first option
• #39382 - Preserve POM format when extensions are added/removed
• #39385 - smallrye-health should hande the case when Vert.x current context is null
• #39388 - Hibernate runtime property persisting after build
• #39394 - Handle null Vert.x context in smallrye-health
• #39426 - Do not record active profile configuration name if a profile one exists
• #39443 - Use Quarkus wide version of jna-platform in azure-functions
• #39496 - Gradle build cache prevents source packages to be installed to local Maven repository
• #39513 - @SecureField in members of the response class isn't applied
• #39528 - (Doc issue) Getting token using blocking or non blocking calls
• #39544 - OidcClient: Getting exception when trying to use tokenHelper
• #39546 - Make maxParameters of MultiPartUploadHandler configurable
• #39549 - Make max parameters of multipart handling configurable
• #39564 - Fix Quarkus REST Jackson @SecureField detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays
• #39572 - Remove mvnpm and webjars from the 404 page
• #39574 - Add a section about openapi filters in the doc
• #39576 - Fix semconv-stability.opt-in property name
• #39578 - Update quarkus-project-develocity-extension to 1.0.7
• #39579 - Don't run CDI interceptors on class-level exception mappers
• #39580 - Fix directory name in vertx.adoc
• #39581 - The http metrics provide a path instead of REDIRECTION and NOT_FOUND when possible
• #39583 - Keep the URIs in the metrics tag if they match a client or server pattern
• #39586 - RestMulti is not sending headers if there is no content
• #39587 - Properly use headers from RestMulti when the multi is empty
• #39589 - Only Add OTel Security Events when span is recording
• #39594 - Redis: add documentation for replicas usage
• #39595 - Update one of OIDC certificate chain tests to use TenantConfigResolver
• #39598 - ClassNotFoundException for beanparam class with generics in external artifact
• #39599 - JsonObject is empty when used with resteasy-reactive
• #39604 - Do not record local sources in runtime config defaults.
• #39615 - Allow JsonObject and JsonArray to be used in any POJO for JSON handling
• #39623 - Type not consistent in sample code
• #39626 - Update parameter type to be consistent across the doc
• #39628 - Bump smallrye-jwt.version from 4.4.0 to 4.5.0
• #39630 - Bump smallrye-reactive-messaging.version from 4.18.0 to 4.19.0
• #39638 - Avoid all caching in DevModeClient
• #39642 - WebSocket Next: endpoint callback arguments injection
• #39645 - Improve the OIDC Client Quickstart document
• #39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
• #39656 - Bump maven-model-helper to 35
• #39661 - Fix property name in OIDC docs
• #39679 - Bump mime4j version to 0.8.11
• #39682 - Fix postgres datasource devservice not working with rancher-desktop on mac arm
• #39691 - Fix dev-mode issue with generated classes for Quarkus REST converters
• #39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
• #39702 - Bring back erroneously removed @BuildStep
• #39706 - Use --no-daemon when calling gradle update

3.9.0

Complete changelog

• #25101 - [CI] - quarkus-devtools-compat + Quarkus main
• #27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
• #39144 - WebSockets Next: documentation
• #39315 - @ConfigMapping handling of Maps is not compatible with old config classes
• #39344 - Avro schemas aren't generated in isolation
• #39345 - Isolate Avro schema code generation when using multiple schema files
• #39363 - Initial version of the WebSocket Next documentation
• #39413 - Refresh documentation (and some tests) of the Hibernate Search + ORM extension
• #39427 - Enforce authorization code flow access token verification if JsonWebToken is injected
• #39428 - Enforce OIDC UserInfo acquisition if UserInfo is injected
• #39441 - RESTEasy Reactive dependency added to deployment classpath of nearly all Quarkus apps
• #39445 - Remove Quarkus REST deployment dependency from Vertx HTTP deployment
• #39447 - Save concat indy allocations on JarResource::getResourceURL
• #39454 - Bump org.jboss.threads:jboss-threads from 3.5.1.Final to 3.6.0.Final
• #39458 - Enforce OIDC UserInfo acquisition and authorization code flow access token verification if UserInfo and JsonWebToken beans are injected
• #39467 - Fix codestarts compatibility with older CLI
• #39468 - ChainBuildException - Cycle detected after #39352 PR
• #39470 - Remove the old MetricBuildItem SPI
• #39471 - Update to Vert.x 4.5.5
• #39472 - Update SmallRye Config to 3.7.0
• #39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
• #39476 - Fix the broken link to the OIDC client reference doc
• #39477 - Adjust toggle names in OTel InstrumentBuildTimeConfig
• #39479 - 3.9.0.CR2: NoClassDefFoundError: io/quarkus/security/spi/runtime/SecurityEvent
• #39480 - Fix security spi dependency on OTel
• #39487 - Allow occasional pin events in ShouldNotPin
• #39491 - Ignore the split access and refresh token cookies for resolving the tenant
• #39519 - OpenTelemetry - respect proxy settings in VertxGrpcExporter and VertxHttpExporter
• #39522 - Fix typos in rest doc
• #39530 - Update profile section in building-native-image.adoc
• #39531 - Use SmallRye Commons Inet
• #39533 - Class loader leak in configuration
• #39536 - Bump org.postgresql:postgresql from 42.7.2 to 42.7.3
• #39541 - Update SmallRye Config to 3.7.1
• #39543 - Enable proxy configuration for OpenTelemetry exporters
• #39562 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.7.0 to 3.7.1 in /devtools/gradle

3.9.0.CR2

Complete changelog

• #30450 - Infinispan Extension: Allow InjectMock for RemoteCache
• #33008 - info extension should have link to ui in devui tile
• #39240 - Bump org.mockito:mockito-bom from 5.10.0 to 5.11.0
• #39302 - Adds RemoteCache @InjectMock support in Infinispan
• #39367 - Improve OIDC client reference document
• #39389 - Updates to Infinispan 15 release
• #39398 - Fix incorrect REST artifactId because PR was stale and using old one
• #39408 - Autogenerated application with oidc-db-token-state-manager fails to be built
• #39409 - Reduce the allocation pressure on ConfigDiagnostic.unknownProperties
• #39421 - Bump org.apache.logging.log4j:log4j-api from 2.23.0 to 2.23.1
• #39422 - Bump com.github.javaparser:javaparser-core from 3.25.8 to 3.25.9
• #39423 - Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2
• #39429 - Dev UI: Info card now links to page
• #39432 - Fix OIDC DB token state validation when no reactive SQL client present
• #39435 - Upgrade to SmallRye GraphQL 2.8.1
• #39444 - Save regexp Pattern allocation on config name renaming

3.8.3

Complete changelog

• #25453 - Mutiny is not compatible with quarkus opentelemetry
• #31497 - Enabled micrometer.binder.http-server should also capture parameterized sub-resources
• #39047 - Reactive pg datasource with enabled health check opens more connections than configured
• #39145 - Hibernate schema validation is flaky and fails due missing tables (while the tables are present)
• #39162 - Add mapping to a Map<String, ConfigObject> in the documentation
• #39178 - Update grpc-service-implementation.adoc
• #39192 - Make HTTP templates for observability work with subresources
• #39197 - Qute is not adding the right NativeImageResourceBuildItem when using a custom template root
• #39204 - Update partial extension names to include full extension names
• #39216 - Unwrap processing exception from REST Client when returning a Uni
• #39223 - Fix WithSpan uni and multi
• #39225 - Upgrade to Mutiny 2.5.8
• #39242 - e quarkus-azure-functions-http generationg function.json with missing method.
• #39245 - dev-ui shows wrong property for rest-client
• #39251 - Make mutiny version of pool use the already configured vertx pool
• #39252 - Explicitly set all HTTP methods for Azure Functions
• #39255 - Fix config key for dev-ui
• #39257 - Quarkus 3.8.1: Use GraalVM sdk 23.1.2 over 23.0.1
• #39260 - Bump GraalVM SDK version to 23.1.2
• #39265 - Properly support sending InputStream in REST Client
• #39266 - ./mvnw --file $(pwd)/./pom.xml broken since quarkus 3.7.1
• #39270 - Update the title of dev-ui.adoc
• #39271 - Update the title of dev-ui.adoc and fix minor typos
• #39294 - Qute: add correct NativeImageResourceBuildItem for custom template root
• #39309 - Normalize POM path
• #39310 - Wrong reference on list of injected beans
• #39311 - Be more consistent with extension names in datasource.adoc
• #39316 - Empty container-group not allowed in Quarkus 3.8.2
• #39319 - org.graalvm.js:js was renamed to org.graalvm.polyglot:js-community
• #39337 - Fix rest-client-mutiny mention in the docs
• #39350 - Exception when building application with a lot of dependencies, String too large to record error
• #39352 - Make Hibernate / Micrometer integration run after schema creation
• #39353 - Allow config empty values in the Gradle worker
• #39354 - Add note about pre-matching filters execution model
• #39368 - Submodule on second level fails to find itself in dev mode
• #39372 - Replace org.graalvm.sdk:graal-sdk dependency with org.graalvm.sdk:nativeimage
• #39379 - Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1
• #39383 - Typo at OIDC Client Mutual TLS config properties
• #39386 - Update to Brotli4J 1.16.0
• #39402 - ArC: fix creation of synthetic beans
• #39411 - Fix typo in Building my first extension
• #39418 - Use the value of project/default-codestart from the platform descriptor as the default codestart instead of a hardcoded value
• #39430 - Fix misleading error message when REST Client interface has been indexed
• #39434 - Qute: fix the NoRestartTemplatesDevModeTest on Windows
• #39437 - Make sure the current project location isn't overridden by other modules with the same groupId and artifactId
• #39440 - graal-sdk in 23.1.x brings in org.graalvm.polyglot which causes a couple of issues (wrap up)
• #39442 - Exclude org.graalvm.polyglot:polyglot from graal-sdk