Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 22, 2025

Bumps quarkus.version from 3.20.0 to 3.28.5.
Updates io.quarkus:quarkus-bom from 3.20.0 to 3.28.5

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.28.4

Complete changelog

  • #49225 - OIDC redirect fails to properly append OAuth parameters when original URL contains query parameters
  • #50321 - @RequestParam required true
  • #50400 - Modify @RequestParam presence handling
  • #50427 - DEV UI workspace shows a log file on Windows rather than Java file and hierarchy visualisation is broken
  • #50476 - Rename leftovers of GlobalDevServicesConfig
  • #50490 - Fix DEV UI workspace directory worktree and item selection on Windows
  • #50491 - Correctly restore query params when OIDC does not drop redirect params
  • #50503 - Add a clarification about OAuth2 protected resource metadata route address
  • #50515 - Move Hibernate ORM/Reactive configuration reference to the bottom of the guides
  • #50517 - Assistant: Remove unused exception method
  • #50520 - Minor update to rest-client.adoc
  • #50528 - Project creation with extension not from platform fails with 3.28.3
  • #50531 - Update logging configuration property from .enable to .enabled in application properties
  • #50541 - Bump the hibernate group with 8 updates
  • #50554 - Ignore quarkus-core in non-platform extension catalogs
  • #50556 - Quarkus augmentation weakens file permissions
  • #50557 - Avoid using COPY_ATTRIBUTES when copying the jars of fast jar
  • #50560 - UnsupportedOperationException with HTTP Response Code 204
  • #50569 - Don't fail in Quarkus REST Servlet when trying to remove an HTTP header

3.28.3

Complete changelog

  • #29817 - quarkus cli fail hard on bad settings.xml
  • #49733 - quarkus.thread-pool.shutdown-interrupt is not respected
  • #50126 - HQL Console improvements
  • #50306 - Unrecognized configuration key "quarkus.gradle-worker.no-process"
  • #50317 - VertxOutputStream: Cannot reserve 65536 bytes of direct buffer memory (allocated: 760195093, limit: 760217600)
  • #50318 - Avoid importing BOMs managing extensions managed by BOMs with higher preferences
  • #50335 - Change quarkus.gradle-worker.* to gradle.quarkus.gradle-worker.*
  • #50336 - Chunked response always finishes cleanly, client cannot detect incomplete download
  • #50351 - Fix a few issues with Java 25 compatibility and include Java 25 in CI
  • #50360 - Dev MCP: Make sure the config dir exist
  • #50361 - When an error occurs during a streaming response, call HttpServerResponse.reset()
  • #50364 - OIDC Steup authentication is missing information about insufficient authentication level in 'www-authenticate' when provider responses with single ACR
  • #50365 - Bump keycloak to 26.4.0 and keycloak-client to 26.0.7
  • #50366 - ArC: fix construction of interception proxies, part 2
  • #50367 - Fix step authentication with Keycloak when protocol mapper has 'acr' user attribute configured as single valued string
  • #50371 - HQL console: correct allow-hql config on hot reload and enter key to run query
  • #50372 - Remove extra space in Dev UI welcome message
  • #50375 - Log OIDC Client requests in debug mode
  • #50376 - Handle backpressure whilst not on the event loop
  • #50377 - Qute template results in timeout instead of NullPointerException
  • #50383 - Qute: fix error propagation from section helpers
  • #50390 - Quarkus OIDC incorrecty selects request filters for the token revocation

... (truncated)

Commits
  • 7343948 [RELEASE] - Bump version to 3.28.5
  • 319b171 Merge pull request #50656 from gsmet/3.28.5-backports-1
  • 55e3f83 Opens java.lang as it's required for Java 24+
  • 4b3e239 Prevent continuous testing log entry when `quarkus.test.continuous-testing=di...
  • b403fdc Prevent NPE when quarkus.test.continuous-testing=false
  • 3afb089 Ensure that Liquibase pre-conditions work for MongoDB
  • 88e2ca6 Fix podman machine setup command order
  • 55137e4 Bump Microsoft SQL Server JDBC driver to 13.2.1
  • 21666c5 Removed extra '=' when converting single add opns jvm option (fixes #50610)
  • fdd2683 Contribute files to the app jar in a deterministic order
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.20.0 to 3.28.5

Updates io.quarkus:quarkus-extension-maven-plugin from 3.20.0 to 3.28.5

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.28.4

Complete changelog

  • #49225 - OIDC redirect fails to properly append OAuth parameters when original URL contains query parameters
  • #50321 - @RequestParam required true
  • #50400 - Modify @RequestParam presence handling
  • #50427 - DEV UI workspace shows a log file on Windows rather than Java file and hierarchy visualisation is broken
  • #50476 - Rename leftovers of GlobalDevServicesConfig
  • #50490 - Fix DEV UI workspace directory worktree and item selection on Windows
  • #50491 - Correctly restore query params when OIDC does not drop redirect params
  • #50503 - Add a clarification about OAuth2 protected resource metadata route address
  • #50515 - Move Hibernate ORM/Reactive configuration reference to the bottom of the guides
  • #50517 - Assistant: Remove unused exception method
  • #50520 - Minor update to rest-client.adoc
  • #50528 - Project creation with extension not from platform fails with 3.28.3
  • #50531 - Update logging configuration property from .enable to .enabled in application properties
  • #50541 - Bump the hibernate group with 8 updates
  • #50554 - Ignore quarkus-core in non-platform extension catalogs
  • #50556 - Quarkus augmentation weakens file permissions
  • #50557 - Avoid using COPY_ATTRIBUTES when copying the jars of fast jar
  • #50560 - UnsupportedOperationException with HTTP Response Code 204
  • #50569 - Don't fail in Quarkus REST Servlet when trying to remove an HTTP header

3.28.3

Complete changelog

  • #29817 - quarkus cli fail hard on bad settings.xml
  • #49733 - quarkus.thread-pool.shutdown-interrupt is not respected
  • #50126 - HQL Console improvements
  • #50306 - Unrecognized configuration key "quarkus.gradle-worker.no-process"
  • #50317 - VertxOutputStream: Cannot reserve 65536 bytes of direct buffer memory (allocated: 760195093, limit: 760217600)
  • #50318 - Avoid importing BOMs managing extensions managed by BOMs with higher preferences
  • #50335 - Change quarkus.gradle-worker.* to gradle.quarkus.gradle-worker.*
  • #50336 - Chunked response always finishes cleanly, client cannot detect incomplete download
  • #50351 - Fix a few issues with Java 25 compatibility and include Java 25 in CI
  • #50360 - Dev MCP: Make sure the config dir exist
  • #50361 - When an error occurs during a streaming response, call HttpServerResponse.reset()
  • #50364 - OIDC Steup authentication is missing information about insufficient authentication level in 'www-authenticate' when provider responses with single ACR
  • #50365 - Bump keycloak to 26.4.0 and keycloak-client to 26.0.7
  • #50366 - ArC: fix construction of interception proxies, part 2
  • #50367 - Fix step authentication with Keycloak when protocol mapper has 'acr' user attribute configured as single valued string
  • #50371 - HQL console: correct allow-hql config on hot reload and enter key to run query
  • #50372 - Remove extra space in Dev UI welcome message
  • #50375 - Log OIDC Client requests in debug mode
  • #50376 - Handle backpressure whilst not on the event loop
  • #50377 - Qute template results in timeout instead of NullPointerException
  • #50383 - Qute: fix error propagation from section helpers
  • #50390 - Quarkus OIDC incorrecty selects request filters for the token revocation

... (truncated)

Commits
  • 7343948 [RELEASE] - Bump version to 3.28.5
  • 319b171 Merge pull request #50656 from gsmet/3.28.5-backports-1
  • 55e3f83 Opens java.lang as it's required for Java 24+
  • 4b3e239 Prevent continuous testing log entry when `quarkus.test.continuous-testing=di...
  • b403fdc Prevent NPE when quarkus.test.continuous-testing=false
  • 3afb089 Ensure that Liquibase pre-conditions work for MongoDB
  • 88e2ca6 Fix podman machine setup command order
  • 55137e4 Bump Microsoft SQL Server JDBC driver to 13.2.1
  • 21666c5 Removed extra '=' when converting single add opns jvm option (fixes #50610)
  • fdd2683 Contribute files to the app jar in a deterministic order
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-config-doc-maven-plugin from 3.20.0 to 3.28.5

Updates io.quarkus:quarkus-extension-processor from 3.20.0 to 3.28.5

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `quarkus.version` from 3.20.0 to 3.28.5.

Updates `io.quarkus:quarkus-bom` from 3.20.0 to 3.28.5
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.20.0...3.28.5)

Updates `io.quarkus:quarkus-maven-plugin` from 3.20.0 to 3.28.5

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.20.0 to 3.28.5
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.20.0...3.28.5)

Updates `io.quarkus:quarkus-config-doc-maven-plugin` from 3.20.0 to 3.28.5

Updates `io.quarkus:quarkus-extension-processor` from 3.20.0 to 3.28.5

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.28.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.28.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.28.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-config-doc-maven-plugin
  dependency-version: 3.28.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.28.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 22, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 22, 2025 13:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 22, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 23, 2025

Superseded by #358.

@dependabot dependabot bot closed this Oct 23, 2025
@dependabot dependabot bot deleted the dependabot/maven/quarkus.version-3.28.5 branch October 23, 2025 13:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant