Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 24, 2025

Bumps quarkus.version from 3.24.5 to 3.28.1.
Updates io.quarkus:quarkus-bom from 3.24.5 to 3.28.1

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.28.0.CR1

Major changes

  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49618 - Provide a fluent API for CSRF programmatic set up
  • #49805 - Add support for multiple clients in Liquibase MongoDB extension

Complete changelog

  • #19913 - Config Editor doesn't update the prefixed values
  • #22183 - HibernateOrmProcessor complains about abstract model classes not mapped to a PersistenceUnit
  • #35660 - Surge.sh deployment fails with Aborted - Unable to publish. Application too large
  • #43229 - Configuration Form Editor in Dev UI is confusing - disable rewriting application.properties
  • #44127 - InfinispanCacheTest random failures
  • #44736 - io.quarkus.oidc.client.* packages are split across multiple modules
  • #45407 - Remove the deprecated legacy TLS configuration for GraphQL clients
  • #46697 - Flow specific OIDC request/response filter support
  • #46847 - Remove support for Hibernate ORM proxy generation at static init
  • #47157 - Upgrade to gRPC v4
  • #47881 - Add a quarkus-devservices runtime module
  • #48915 - Bump maven to 3.9.11
  • #48986 - Quarkus-Liquibase-MongoDB supporting multiple datasources
  • #49007 - Support fixed LGTM ports
  • #49025 - Add devservices runtime module
  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49295 - Improve assignment of interfaces / PanacheEntity to persistence units
  • #49306 - Update kafka-streams.adoc
  • #49307 - Kotlin Coroutines Fail to preserve active request between a suspension and resume
  • #49308 - Preserve active request on subscriber when using messaging-kotlin
  • #49311 - Improve panache projection by supporting multiple constructors
  • #49345 - Keep variant info when using template locator
  • #49397 - Qute: gizmo2 rewrite
  • #49400 - Provide a fluent API for CORS programmatic set up
  • #49469 - OIDCS: split-tokens=true does not work if session cookie gets longer than MAX_COOKIE_VALUE_LENGTH
  • #49500 - Cannot Connect to Database in Containerized Integration Test
  • #49526 - Avoid now unnecessary copy of MethodInfo in Methods
  • #49533 - Bytecode transformers - Optimize constant pool scanning optimization
  • #49540 - Remove quarkus.test.native-image-profile references
  • #49543 - Add tests for keycloak dev services when there is no test resource
  • #49545 - Bump the hibernate group with 5 updates
  • #49554 - Upgrade Vaadin to 24.8.5
  • #49555 - Small assorted optimizations for ArC
  • #49558 - As an extension developer, I would like to have the same dev mode experience as our users
  • #49560 - Revert "Upgrade to gRPC v4"
  • #49562 - ArC - Pass MethodKey to mergeBindings() to avoid recreating it
  • #49564 - Create chunked OIDC session access token cookies
  • #49570 - Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0
  • #49573 - Micrometer to OpenTelemetry bridge native build warns that "OpenTelemetryMeterRegistry" does not support reading measurements

... (truncated)

Commits
  • 8e90f41 [RELEASE] - Bump version to 3.28.1
  • 5ea8be9 Merge pull request #50239 from gsmet/3.28.1-backports-1
  • dceacd2 Bump io.quarkus.develocity:quarkus-project-develocity-extension
  • 26be2b3 Bump Keycloak version to 26.3.4
  • dbf5bd1 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 in /devtools/gradle
  • bb51be4 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • f77993a Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2
  • e2784fd ArC: fix NPE in InvokerGenerator
  • 7a6b00e Fix Kotlin reflection issue in native mode
  • b6246c2 Prevent simultaneous use of @​InjectMock and @​InjectSpy
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.24.5 to 3.28.1

Updates io.quarkus:quarkus-config-doc-maven-plugin from 3.24.5 to 3.28.1

Updates io.quarkus:quarkus-extension-processor from 3.24.5 to 3.28.1

Updates io.quarkus:quarkus-extension-maven-plugin from 3.24.5 to 3.28.1

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.28.0.CR1

Major changes

  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49618 - Provide a fluent API for CSRF programmatic set up
  • #49805 - Add support for multiple clients in Liquibase MongoDB extension

Complete changelog

  • #19913 - Config Editor doesn't update the prefixed values
  • #22183 - HibernateOrmProcessor complains about abstract model classes not mapped to a PersistenceUnit
  • #35660 - Surge.sh deployment fails with Aborted - Unable to publish. Application too large
  • #43229 - Configuration Form Editor in Dev UI is confusing - disable rewriting application.properties
  • #44127 - InfinispanCacheTest random failures
  • #44736 - io.quarkus.oidc.client.* packages are split across multiple modules
  • #45407 - Remove the deprecated legacy TLS configuration for GraphQL clients
  • #46697 - Flow specific OIDC request/response filter support
  • #46847 - Remove support for Hibernate ORM proxy generation at static init
  • #47157 - Upgrade to gRPC v4
  • #47881 - Add a quarkus-devservices runtime module
  • #48915 - Bump maven to 3.9.11
  • #48986 - Quarkus-Liquibase-MongoDB supporting multiple datasources
  • #49007 - Support fixed LGTM ports
  • #49025 - Add devservices runtime module
  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49295 - Improve assignment of interfaces / PanacheEntity to persistence units
  • #49306 - Update kafka-streams.adoc
  • #49307 - Kotlin Coroutines Fail to preserve active request between a suspension and resume
  • #49308 - Preserve active request on subscriber when using messaging-kotlin
  • #49311 - Improve panache projection by supporting multiple constructors
  • #49345 - Keep variant info when using template locator
  • #49397 - Qute: gizmo2 rewrite
  • #49400 - Provide a fluent API for CORS programmatic set up
  • #49469 - OIDCS: split-tokens=true does not work if session cookie gets longer than MAX_COOKIE_VALUE_LENGTH
  • #49500 - Cannot Connect to Database in Containerized Integration Test
  • #49526 - Avoid now unnecessary copy of MethodInfo in Methods
  • #49533 - Bytecode transformers - Optimize constant pool scanning optimization
  • #49540 - Remove quarkus.test.native-image-profile references
  • #49543 - Add tests for keycloak dev services when there is no test resource
  • #49545 - Bump the hibernate group with 5 updates
  • #49554 - Upgrade Vaadin to 24.8.5
  • #49555 - Small assorted optimizations for ArC
  • #49558 - As an extension developer, I would like to have the same dev mode experience as our users
  • #49560 - Revert "Upgrade to gRPC v4"
  • #49562 - ArC - Pass MethodKey to mergeBindings() to avoid recreating it
  • #49564 - Create chunked OIDC session access token cookies
  • #49570 - Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0
  • #49573 - Micrometer to OpenTelemetry bridge native build warns that "OpenTelemetryMeterRegistry" does not support reading measurements

... (truncated)

Commits
  • 8e90f41 [RELEASE] - Bump version to 3.28.1
  • 5ea8be9 Merge pull request #50239 from gsmet/3.28.1-backports-1
  • dceacd2 Bump io.quarkus.develocity:quarkus-project-develocity-extension
  • 26be2b3 Bump Keycloak version to 26.3.4
  • dbf5bd1 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 in /devtools/gradle
  • bb51be4 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • f77993a Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2
  • e2784fd ArC: fix NPE in InvokerGenerator
  • 7a6b00e Fix Kotlin reflection issue in native mode
  • b6246c2 Prevent simultaneous use of @​InjectMock and @​InjectSpy
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `quarkus.version` from 3.24.5 to 3.28.1.

Updates `io.quarkus:quarkus-bom` from 3.24.5 to 3.28.1
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.24.5...3.28.1)

Updates `io.quarkus:quarkus-maven-plugin` from 3.24.5 to 3.28.1

Updates `io.quarkus:quarkus-config-doc-maven-plugin` from 3.24.5 to 3.28.1

Updates `io.quarkus:quarkus-extension-processor` from 3.24.5 to 3.28.1

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.24.5 to 3.28.1
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.24.5...3.28.1)

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-config-doc-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants