3.7.0.CR1

Major changes

• #38066 - Drop Okhttp/Okio from BOM
• #38029 - Allow applications using quakus-info to contribute data to the /info using CDI
• #37891 - Split OIDC session cookie if its size is more than 4KB
• #37794 - Update SmallRye Config to 3.5.1
• #37730 - Introduce LinkedIn OIDC provider
• #37472 - Provide a way to observe security events
• #37269 - Support certificate role mappings
• #37152 - Support token verification with the inlined certificate chain
• #36978 - Upgrade to Hibernate ORM 6.4, Hibernate Search 7.0, Hibernate Reactive 2.2
• #36945 - Support Micrometer @MeterTag
• #35065 - Add Hibernate Search management endpoint

Complete changelog

• #38233 - Bump resteasy.version from 6.2.6.Final to 6.2.7.Final
• #38232 - Bump wildfly-elytron.version from 2.2.2.Final to 2.2.3.Final
• #38229 - Ensure the refreshed CSRF cookie retains the original value
• #38227 - Add dependency management for org.hibernate:hibernate-jpamodelgen
• #38225 - CSRF Token is refreshed on every request
• #38224 - Revert "Fixing Jaxb unmarshalling error with native compilation"
• #38218 - Make subject configurable in OidcWiremockTestResource
• #38214 - Introduce a way to ignore mixing REST stacks errors
• #38213 - AWS Lambda Rest: split the amazon-lambda-rest integration module
• #38211 - Add trustAll to QuarkusRestClientBuilder
• #38209 - Bump com.github.javaparser:javaparser-core from 3.25.6 to 3.25.8
• #38208 - Bump io.smallrye.reactive:smallrye-mutiny-vertx-core from 3.7.2 to 3.8.0
• #38207 - Bump elasticsearch-opensource-components.version from 8.11.3 to 8.11.4
• #38206 - Add configurations for base image layer and application layer cache in Jib build
• #38201 - Update Maven Surefire plugin to 3.2.5
• #38195 - Fix Arc request context state restoration on Vert.x duplicated context which allows to support security events in gRPC
• #38193 - Infinispan Client, tests skip if test-containers is not set
• #38192 - Remove leading and trailing space from k8s labels
• #38190 - Rename RESTEasy Classic client extensions to resteasy-client
• #38188 - ADR for removal of reactive when reactive is not a requirement
• #38185 - Make sure quarkus.http.filter headers don't remove existing headers
• #38175 - Resouce name with whitespaces
• #38168 - Bump io.micrometer:micrometer-bom from 1.12.1 to 1.12.2
• #38167 - Bump org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable from 1.6.0 to 1.9.22
• #38165 - Use smallrye-reactive-messaging-bom
• #38162 - Bump Hibernate ORM to 6.4.1.Final and Hibernate Reactive to 2.2.1.Final
• #38161 - Add metrics when the connections limit is set
• #38159 - Investigate request context activation/deactivation in grpc interceptor
• #38155 - Using http filter config is disabling CORS options
• #38153 - SmallRye GraphQL 2.7.0
• #38149 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.4.4 to 3.5.2 in /devtools/gradle
• #38148 - Support Liberica NIK GraalVM version parsing
• #38145 - Use RestEasy Reactive instead of classic in the extension's IT
• #38143 - New Route SPI not requiring Vert.x HTTP
• #38136 - Introduce option to create uncompressed jars
• #38134 - Bump version.cdi-tck from 4.0.12 to 4.0.13
• #38131 - Use headers set in PreMatching filter during media type negotiation
• #38130 - Changing Accept Header in PreMatching filter doesn't affect routing
• #38128 - Allow for creation of non-compressed jars
• #38126 - Bump kubernetes-client-bom from 6.9.2 to 6.10.0
• #38121 - ArC: introduce quarkus.arc.optimize-contexts=auto
• #38117 - Keep static instance field and delete unused field in substitution
• #38116 - Support ManyToOne queries in Panache REST resource
• #38113 - Bump org.assertj:assertj-core from 3.24.2 to 3.25.1
• #38110 - Bump org.apache.logging.log4j:log4j-api from 2.22.0 to 2.22.1
• #38107 - Arc - Decide whether req. context is active based on validity of its ContextState
• #38106 - Fix swallowed failures in Reactive SQL Client tests
• #38104 - Bump smallrye-reactive-messaging.version from 4.14.0 to 4.15.0
• #38100 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
• #38091 - Support Java Records in bytecode recorders
• #38089 - OpenTelemetry: fine-grained instrumentation enablement
• #38087 - Fix NPE and otel quickstart test
• #38084 - NPE when disabling OpenTelemetry
• #38081 - Add quarkus version annotation to kubernetes resources
• #38075 - Docs: Add documentation for ClientMultipartForm class introduced in for creating custom Multipart for Rest-Client-Reactive.
• #38072 - Bump apicurio-registry.version from 2.5.7.Final to 2.5.8.Final
• #38068 - Bump dekorate to 4.1.2
• #38067 - gRPC client over TLS not working
• #38066 - Drop Okhttp/Okio from BOM
• #38065 - ArC: deprecate ArcInitConfig.Builder.setOptimizeContexts()
• #38064 - Add custom Kotlin serializers for ValidationReport and Violation
• #38063 - Do not wait for daemon threads when building docs
• #38059 - Fix Reactive Messaging Extension multiple different Emitter injections check
• #38056 - Bump OTel to 1.32.0
• #38054 - Kafka fails with mutiple emitters on same channel
• #38048 - Docs: Final edits, Style enhancements, Vale checks
• #38034 - Update to Vertx 4.5.1
• #38031 - Expose an API for programmatically creating multipart requests in reactive REST Client
• #38029 - Allow applications using quakus-info to contribute data to the /info using CDI
• #38027 - Update SmallRye Config to 3.5.2
• #38025 - Add priority to OpenApiFilter to specify order of execution for multiple OASFilters
• #38024 - Docs: Final edits, Style enhancements, Vale checks
• #38023 - Update SmallRye Health to 4.1.0
• #38022 - Disable impls of ConfigurableConfigSourceFactory that perform network access, when building AppCDS
• #38021 - Scheduler: Quartz - support JobDefinition API if DB type store is used
• #38020 - Enable Custom Java Arguments for AppCDS Archive Generation
• #38017 - Use UTF-8 constant in QuarkusEntryPoint
• #38016 - Bump org.asciidoctor:asciidoctorj from 2.5.10 to 2.5.11
• #38015 - Bump com.fasterxml.jackson:jackson-bom from 2.16.0 to 2.16.1
• #38014 - Bump elasticsearch-opensource-components.version from 8.11.1 to 8.11.3
• #38012 - Bump org.assertj:assertj-core from 3.25.0 to 3.25.1 in /devtools/gradle
• #38005 - Display Json output before injecting build scans
• #38004 - Avoid integration-tests/kafka-sasl-elytron to modify test resources
• #38002 - integration-tests/kafka-sasl-elytron tests modify files in src/test/resources
• #37998 - ArC: improve description of injection points that are parameters
• #37995 - Fix javadoc of RESTEasy Reactive filters
• #37994 - Provide a way for applications to contribute to the /info enpoint
• #37986 - Bump smallrye-open-api from 3.7.0 to 3.8.0
• #37982 - ArC: use a separate lock for each bean in generated ContextInstances
• #37978 - Bump Keycloak version to 23.0.3
• #37977 - Clarify how Keycloak Dev Service can be used to test Keycloak authorization
• #37976 - Add documentation for pushing with Podman to Heroku
• #37974 - Add test for EnumConverter
• #37972 - Expose pandaproxy port in Redpanda dev services
• #37970 - Kafka Devservices Redpanda expose Pandaproxy/Http Proxy
• #37969 - Bump org.assertj:assertj-core from 3.24.2 to 3.25.0 in /devtools/gradle
• #37967 - Testing OIDC service with OidcWiremock section is not clear that it can not be used with Keycloak Authorization
• #37966 - Support basic, mTLS and bearer access token based auth and authorization using annotations when running on Vert.x gRPC server
• #37964 - OIDC Keycloak devservice keeps throwing 403
• #37958 - Upgrading from 3.5.3 to 3.6.1 ,3.6.3,3.6.4 Quakust test will not start with Thread Thread[vert.x-eventloop-thread-6,5,main] has been blocked for 2460 m
• #37944 - PortSystemProperties sets wrong properties for HTTPS
• #37943 - Extension logging-gelf: Adding missing GELF MDC Config
• #37938 - Overhauled handling of local extensions in Gradle DevTools
• #37937 - Bump com.google.errorprone:error_prone_annotations from 2.23.0 to 2.24.0
• #37935 - Reproduce #37934 Failed to find class com.fasterxml.jackson.databindext.CoreXMLSerializers when a POJO has field of type javax.xml.datatype.XMLGregorianCalendar
• #37934 - Failed to find class com.fasterxml.jackson.databind.ext.CoreXMLSerializers when a POJO has field of type javax.xml.datatype.XMLGregorianCalendar
• #37931 - Document that QuarkuTestResourceLifecycleManager is not a CDI Bean
• #37923 - missing constructor parameter annotation reported as if member is missing annotation
• #37915 - Bump org.apache.groovy:groovy from 4.0.16 to 4.0.17
• #37910 - Remove Justin Lee from the maintainers lists for Kotlin and MongoDB related extensions
• #37908 - Typo in gradle example
• #37906 - Fix type/unremovable for reactive client CDI beans, make DataSource beans application-scoped, more consistent exceptions for unconfigured datasources
• #37899 - Bump Smallrye Reactive Messaging version from 4.12.0 to 4.13.0
• #37895 - Bump the owasp dependency check plugin version to 9.0.7
• #37894 - Bump org.mariadb.jdbc:mariadb-java-client from 3.3.1 to 3.3.2
• #37891 - Split OIDC session cookie if its size is more than 4KB
• #37888 - Docs: Final edits, Style enhancements, Vale checks
• #37887 - Update reference metrics for Mandrel/GraalVM 23.0
• #37885 - Add Hibernate projects to dependabot (for micros only)
• #37884 - Document datasource Dev Service reuse, add configuration to disable it, and enable reuse of Elasticsearch Dev Service containers
• #37882 - The ImageMetricsITCase failing with RH Mandrel
• #37879 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
• #37878 - Remove preapproved developers list to publish Build Scans
• #37877 - Minor improvements to Dev Service config javadoc
• #37872 - Bump org.checkerframework:checker-qual from 3.41.0 to 3.42.0
• #37870 - Add confluent jsonserde support
• #37869 - Edit security-jpa.adoc
• #37863 - Reorg of Kotlin and Mongo related maintainers
• #37862 - [GraalVM for JDK 22] kafka-oauth-keycloak native integration test fails with latest GraalVM sources
• #37860 - Qute - message bundles: skip unnecessary build steps
• #37857 - Bump com.google.guava:guava from 32.1.3-jre to 33.0.0-jre
• #37855 - OpenShift deployment fails over HTTP POST request to service monitor URL
• #37851 - Edit security-proactive-authentication.adoc
• #37850 - Support for OAuth2 Strava
• #37849 - Edit security-overview.adoc
• #37844 - Edit security-jpa.adoc
• #37842 - Upgrade to Maven Compiler Plugin 3.12.1
• #37841 - Also condition docker config update in native tests
• #37840 - Edit security-identity-providers.adoc
• #37839 - Support Strava OAuth2 provider
• #37838 - Reorg of persistence related maintainers
• #37837 - Add dmlloyd to notify list for logging area
• #37836 - Support for splitting OIDC session cookie into chunks
• #37833 - Fix generation of Scheduler startmode enum tooltip
• #37832 - Scheduler: JobDefinition API is only supported if RAM store type is used
• #37830 - Take max-chunk-size config into account for programmatic client
• #37829 - Scheduler: support skip predicate class with public no-args constructor
• #37822 - Bump org.liquibase:liquibase-core from 4.25.0 to 4.25.1
• #37820 - Introduce env variable QUARKUS_NATIVE_IT_SKIP_VERIFY_IMAGE_METRICS
• #37819 - Fix OIDC Security event fired before runtime config ready in Arc
• #37818 - Scheduler start-mode enum not shown properly in scheduler config reference
• #37817 - Edit security-getting-started-tutorial.adoc
• #37814 - Fix flaky HttpSecurityPolicySecurityEventTest
• #37813 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
• #37812 - Fix name in Dev Tools matrix
• #37805 - Scheduler - JobDefinition programmatic API does not work if quarkus-quartz and DB type store is used
• #37801 - Add org.mockito:mockito-junit-jupiter to quarkus-junit5-mockito
• #37800 - Update links to java docs from java 11 to java 17
• #37799 - Docs security JPA small enhancement and fix
• #37797 - Upgrade to Maven Surefire Plugin 3.2.3
• #37796 - Docs: clarify reference to elytron-security-jdbc extension in the Security JDBC guide
• #37794 - Update SmallRye Config to 3.5.1
• #37793 - Docs: fix wrong link in Security JDBC guide
• #37790 - Introduce shared HTTP permissions to avoid duplication across multiple HTTP permissions and to simplify creation of HTTP permissions
• #37788 - Fix primitive class handling in Serialisers
• #37786 - MaxChunkSize not taken into account for Quarkus Reasteasy Reactive client
• #37784 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.11.1 to 4.12.0
• #37781 - Security guide writer's review
• #37780 - MockitoExtension is Missing In Action when quarkus-junit5-mockito is imported
• #37774 - ArC: improve error message for unsatisfied dependency
• #37773 - Add build-metadata-file-path as extra input to report action
• #37771 - Docs: security-jdbc guide linking user entity section where is used built-in bcrypt password mapper
• #37769 - Use JDK 17 in sdkman file
• #37766 - Upgrade to Vaadin 24.3.0 and lit 3.1.0
• #37760 - Fire OIDC security event when OIDC server not available
• #37759 - Edit security-architecture.adoc
• #37758 - Bump com.gradle.enterprise from 3.16 to 3.16.1 in /devtools/gradle
• #37755 - Docs: Security JWT guide minor fixes
• #37752 - Introduce BuildInfo.quarkusVersion
• #37751 - Collect and expose compile-only dependencies through ApplicationModel
• #37748 - Keycloak docs fix wrong link and add small enhancement
• #37747 - Native Build vs. Runtime Profiles Mismatch and Doubled-Up Using Parent Profile
• #37741 - CDI request scope deactivation does not work on duplicated context
• #37740 - Bump to Mutiny 2.5.3
• #37739 - Core: make it possible to index dependencies with a specific groupId
• #37738 - Docs: Fix typo in Qute.java javadoc
• #37736 - ArC: clarify the description of quarkus.arc.context-propagation.enabled
• #37734 - Docs: Qute and RESTEasy Reactive integration clarification
• #37730 - Introduce LinkedIn OIDC provider
• #37726 - Support OIDC LinkedIn provider
• #37724 - Docs: Remove section documenting support for other OpenID Connect Providers that does not work in new DEV UI
• #37722 - Add apicurio jsonserde support
• #37719 - Fix test by adding ad-hoc LocalDate support
• #37709 - Fix ServiceMonitor generation (targetPort type and dekorate bump)
• #37707 - Remove duplicate runtime init io.netty.buffer.PooledByteBufAllocator
• #37703 - Bump io.smallrye.reactive:smallrye-reactive-messaging-jms from 4.10.1 to 4.12.0
• #37701 - Bump org.eclipse.jgit:org.eclipse.jgit from 6.7.0.202309050840-r to 6.8.0.202311291450-r
• #37699 - Update JReleaser descriptors for quarkus-cli to Java 17
• #37697 - Document that JDK 17+ is Quarkus prerequisity
• #37696 - Docs: dont use deprecated RoutingContext cookies methods in OIDC multitenancy guide example
• #37694 - Improve security-getting-started-tutorial doc
• #37692 - Improve OIDC bearer token concept doc
• #37689 - Improve OIDC code flow concept document
• #37684 - Support mounting host file/directory to devservices containers
• #37681 - Fix for accurate LEX operations on Redis Test Suite
• #37679 - Skip CDS test if the JDK cannot create AppCDS
• #37678 - Bump io.micrometer:micrometer-bom from 1.11.5 to 1.12.1
• #37675 - Bump org.postgresql:postgresql from 42.6.0 to 42.7.1
• #37674 - Bump org.apache.groovy:groovy from 4.0.15 to 4.0.16
• #37673 - Bump org.wiremock:wiremock-standalone from 3.2.0 to 3.3.1
• #37671 - Bump rest-assured.version from 5.3.2 to 5.4.0
• #37670 - Save FixedProducesHandler lookup
• #37668 - Work around fishy Jackson test
• #37663 - Fix Build Scan publication
• #37662 - Jackson integration tests fail if TZ is west of GMT
• #37661 - Docs: security-openid-connect-dev-services#dev-services-and-ui-support-for-other-openid-connect-providers section is doesn't work in new DEV UI
• #37660 - Dev UI - Cache - show keys contained in a cache
• #37659 - Hibernate ORM graphql panache test fails if time zone is west of GMT
• #37658 - Infinispan client deployment tests fail unless test-containers and start-containers is set
• #37656 - Serialisers.findWriters primitive wrapper lookup performance
• #37655 - Optimise primitive clazz checks
• #37652 - Mention Coordinated omission explicitly in performance section
• #37648 - ArC: detect incorrect usage of javax.inject.Singleton
• #37647 - Use run-java script when possible
• #37646 - Remove unnecessary content type checks
• #37642 - View cache Data in quarkus dev-ui (quarkus-cache)
• #37641 - Maps in ConfigMappings, that reference other ConfigMappings
• #37637 - Skip performing content negotiation twice
• #37631 - Bump org.mariadb.jdbc:mariadb-java-client from 3.3.0 to 3.3.1
• #37630 - Bump com.nimbusds:nimbus-jose-jwt from 9.37.2 to 9.37.3
• #37629 - AwtProcessor use the default native-image version if necessary
• #37624 - Improve MongoDB tests on Java records
• #37621 - ArC dev mode: introduce quarkus.arc.dev-mode.generate-dependency-graphs
• #37616 - Review and edits to Protect a web service by using bearer token authentication tutorial
• #37615 - Using optimized Vertx HTTP header names
• #37609 - Scheduler: javadoc/docs clarifications
• #37597 - Bump org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0
• #37593 - Bump artemis.version from 2.31.0 to 2.31.2
• #37592 - Bump com.fasterxml:classmate from 1.5.1 to 1.6.0
• #37591 - Fix terminology: Replace configuration key with configuration property
• #37584 - Edit Using OpenID Connect (OIDC) multitenancy
• #37580 - Make REST Client a bean when the scope property is set in config
• #37577 - @ConfigMapping with Optional values does not load values when inheriting interface
• #37576 - Fix ContainerRuntimeUtil.ContainerRuntime#isPodman check
• #37573 - Create new entry for Mvnpm notifications
• #37568 - Fix Build scan capture extension registration when using the Maven wrapper
• #37567 - ScheduledExecution.getTrigger().getPreviousFireTime() returns the same time as ScheduledExecution.getFireTime()
• #37566 - Edit Dev Services and UI for OIDC
• #37562 - Documentation fixes for Authorization of web endpoints guide
• #37560 - Multiple changes for spring-security guide
• #37551 - Bump org.mockito:mockito-core from 5.4.0 to 5.8.0
• #37548 - Bump org.checkerframework:checker-qual from 3.40.0 to 3.41.0
• #37543 - Fix smallrye ConfigValidationException not being handled properly at Quarkus startup
• #37542 - Bump com.gradle.enterprise from 3.15.1 to 3.16 in /devtools/gradle
• #37541 - Order Map entries when serializing registry artifacts
• #37540 - Docs: security-authorize-web-endpoints-reference Guide
• #37539 - Edit the OIDC and OAuth2 Client and Filters Reference Guide
• #37534 - Edit OpenID Connect client and token propagation quickstart
• #37530 - Docs: Spring security guide
• #37529 - Zero-Garbage ContextInstances::forEach
• #37527 - Upgrade to Hibernate Search 7.0.0.Final
• #37522 - Improve security-oidc-bearer-token-authentication-tutorial
• #37519 - Configuration property %test,prod.quarkus.log.category."...".level is ignored in native mode
• #37511 - Add more parameter types in Dev UI JsonRPC Tests
• #37507 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.9.2 to 4.11.1
• #37506 - Bump org.liquibase:liquibase-core from 4.24.0 to 4.25.0
• #37504 - Bump com.unboundid:unboundid-ldapsdk from 6.0.10 to 6.0.11
• #37503 - Bump grpc.version from 1.59.0 to 1.59.1
• #37502 - Bump com.nimbusds:nimbus-jose-jwt from 9.34 to 9.37.2
• #37501 - Bump org.mockito:mockito-bom from 5.3.1 to 5.8.0
• #37499 - Docs: security-getting-started-tutorial guide
• #37497 - Edit the OIDC and OAuth2 Client and Filters Reference Guide
• #37489 - Remove the container-image-s2i extension
• #37484 - Updated scheduler docs (tracing)
• #37481 - Testing tool for Dev UI doesn't allow testing JSON-RPC methods that take non-string arguments
• #37477 - Make hibernate-jpamodelgen easier to apply to Quarkus 3.7+ projects
• #37476 - Fix javadoc of VertxHttpServerMetrics
• #37472 - Provide a way to observe security events
• #37464 - Improve security-oidc-code-flow-authentication-tutorial
• #37463 - Docs: security-oidc-bearer-token-authentication guide
• #37461 - Service binding doesn't work as SERVICE_BINDING_ROOT expression is not expanded
• #37460 - Dependency fixes for Hibernate extensions
• #37458 - Move Java 17 records tests to their respective modules
• #37456 - Core: ignore attempts to on-demand index primitive types and arrays
• #37452 - "Failed to index long" warning in MongodbPanacheTransactionTest
• #37448 - Build Scan publication action update
• #37445 - Introduce quarkus.package.decompiler config
• #37442 - Bump org.jetbrains:annotations from 24.0.1 to 24.1.0
• #37441 - Bump com.google.errorprone:error_prone_annotations from 2.22.0 to 2.23.0
• #37438 - Edit Security Authentication mechanisms guide
• #37435 - Bump the owasp dependency check plugin version to 9.0.1
• #37433 - Build cache - Include the native executable -runner in failsafe input
• #37429 - Update README.md and CONTRIBUTING.md for Java 17+
• #37423 - Stop removing org.graalvm.polyglot:polyglot artifact from native classpath
• #37422 - Docs: OpenID Connect authorization code flow mechanism
• #37419 - Improve error message when the client cannot be created
• #37418 - Index the gRPC stub dependency
• #37414 - Enhancing Quarkus Security for ROOT Group Access
• #37412 - Bump Keycloak version to 23.0.1
• #37407 - Fix HTTP access logging of authenticated remote user when Jakarta REST SecurityContext is used
• #37404 - Docs: security-oidc-bearer-token-authentication-tutorial guide
• #37397 - ArC: fix in-application build compatible extensions
• #37389 - Use --interactive option when using docker inside Windows' WSL
• #37381 - Fixes workspace discovery based on effective POMs
• #37380 - quarkus-info extension and Quarkus Version info
• #37377 - Check native-tests.json/virtual-threads-tests.json in CI build
• #37374 - Rename hibernate-search-orm-elasticsearch-outbox-polling in native-tests.json
• #37369 - Bump org.mariadb.jdbc:mariadb-java-client from 3.2.0 to 3.3.0
• #37368 - Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0
• #37356 - Add relocation artifacts for quarkus-hibernate-search-orm-coordination-outbox-polling renaming
• #37355 - Qute: improve the key/property/method "not found" error message
• #37349 - Remove OpenshiftBaseXXXImage classes
• #37345 - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.21.0-alpha to 1.23.1-alpha
• #37343 - Bump apicurio-registry.version from 2.5.1.Final to 2.5.3.Final
• #37342 - Bump org.apache.logging.log4j:log4j-api from 2.20.0 to 2.22.0
• #37341 - Bump org.checkerframework:checker-qual from 3.38.0 to 3.40.0
• #37339 - Add comment about runtime initializing class for google cloud SQL
• #37337 - NoClassDefFoundError in BuildCompatibleExtension
• #37335 - Move baseline from Java 11 to Java 17
• #37333 - Docs: security-oidc-code-flow-authentication-tutorial guide
• #37332 - Rename the Vineflower properties ?
• #37330 - Handle symlink dirs
• #37329 - JPA test cleanup
• #37328 - Run Sonarcloud analysis with Java 17 and schedule it for Sunday
• #37324 - Automatically disable the HTTP port when client certs are required
• #37312 - Index missing in quarkus-grpc-stubs
• #37311 - Bump smallrye-reactive-messaging.version from 4.11.0 to 4.12.0
• #37309 - Bump org.mvnpm:es-module-shims from 1.8.1 to 1.8.2
• #37302 - ArC: allow putting bean enablement annotations on stereotypes
• #37297 - Build cache - Apply better inheritance rules
• #37295 - Bump Jackson to 2.16.0
• #37282 - Escape column names with backticks in order by clause of hql query
• #37278 - Allow for model module exclusions in native mode
• #37276 - Dev UI Filter by any config source
• #37275 - Allow to map token roles to deployment-specific SecurityIdentity roles
• #37272 - [error]: Build step io.quarkus.deployment.pkg.steps.NativeImageBuildStep#build threw an exception: java.lang.RuntimeException: Failed to get GraalVM version
• #37269 - Support certificate role mappings
• #37267 - Redis: add minimal connection pooling documentation
• #37263 - Qute: make the global variables accessible via "global:" namespace
• #37262 - Wrong type for EncoderMode used in rest-client
• #37261 - ClassCastException in PausableHttpPostRequestEncoder for custom encoder-mode in configuration
• #37257 - Allow restricting OidcRequestFilters to specific OIDC endpoints
• #37256 - Allow restricting OidcRequestFilter to specific OIDC endpoints and scopes
• #37239 - Build scans - Allow publishing build scans for everyone
• #37237 - Security doc enhancement
• #37233 - Bump apicurio-registry.version from 2.4.14.Final to 2.5.1.Final
• #37232 - Bump com.github.javaparser:javaparser-core from 3.25.5 to 3.25.6
• #37231 - Bump org.eclipse.microprofile.telemetry.tracing:microprofile-telemetry-tracing-tck from 1.0 to 1.1
• #37229 - Deprecate DeploymentConfig
• #37223 - Quarkus cannot find gRPC input files through symlinks
• #37219 - Warn when the HTTP method is not supposed to have a body
• #37217 - devui config should show config source more prominently
• #37207 - Vertx: make the address in ConsumeEvent annotation configurable
• #37202 - Fix rendering of documentation tooltip when enum description contains paragraphs
• #37196 - Minor doc fixes identified during QE cycle
• #37192 - Support repeated wildcards in the HTTP permissions path matching patterns
• #37191 - Bump org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.7.1 to 1.7.3
• #37184 - Changed JSON array is not persisted when using hibernate6 / jsonb
• #37176 - Simplify pom.xml since we have a common parent now
• #37164 - Bump org.jetbrains.dokka:dokka-maven-plugin from 1.9.0 to 1.9.10
• #37163 - Bump elasticsearch-opensource-components.version from 8.10.4 to 8.11.1
• #37156 - Allow a bit more Dependabot PRs
• #37155 - Inject the build scans into our reports
• #37152 - Support token verification with the inlined certificate chain
• #37151 - Verify OIDC bearer tokens with inlined certificate chains
• #37144 - Allow integration with quarkus-vertx-http without a "hard" dependency
• #37131 - Fix vale errors in Security Authentication mechanisms
• #37126 - Bump org.jboss.resteasy.spring:resteasy-spring-web from 3.0.2.Final to 3.1.0.Final
• #37123 - Generate prometheus ServiceMonitor CR
• #37117 - @IfBuildProfile cannot be used in a stereotype
• #37111 - Fix MQTT devService always start even if the host/port channel is set
• #37106 - Introduces quarkus.locales=all
• #37100 - Adjust output file name in develocity-publish-build-scans.yml
• #37098 - Provide the ability to define extension Java version on creation
• #37083 - ArC: fix some corner cases in Build Compatible Extensions
• #37081 - Add backward compatible support for multiple extensions in CodeGenProvider
• #37075 - Arc - @Default beans can now be ordered via @Priority
• #37062 - Remove Old Dev UI Logstream WebSocket
• #37044 - Better support for APT in dev mode
• #37042 - Make @DefaultBean work with @Priority
• #37041 - Redis cache: Failed to connect to all nodes of the cluster
• #37024 - Final edits and Vale fixes in OIDC authorization code flow mechanism for protecting web applications guide for 3.2
• #37007 - REST client reactive should allow to instantiate clients based on (external) classes without @RegisterRestClient annotation
• #36996 - Native builds fail after upgrading to Quarkus 3.5.1, Mandrel 23.1.1.0-Final and Java 21
• #36988 - Update Protoc to version 3.25.0
• #36978 - Upgrade to Hibernate ORM 6.4, Hibernate Search 7.0, Hibernate Reactive 2.2
• #36960 - Fix vale error in grpc, oidc, and vertx areas
• #36954 - Fix restore happening in the same thread
• #36945 - Support Micrometer @MeterTag
• #36943 - Erroneous resteasy "Attempting a blocking read on io thread"
• #36928 - Fix bad numbering format (.1.) for section numbers (sectnums) and some...
• #36876 - NumberFormat.getInstance(locale).parse() does not work correctly even after -H:+IncludeAllLocales in native mode
• #36851 - Quarkus EventBus - Set address of ConsumeEvent from configuration
• #36722 - Add error message to quarkus-resteasy-reactive-links and improve documentation
• #36644 - OTel upgrade to 1.31.0
• #36592 - Methods returning TemplateInstance reported as not blocking
• #36577 - Should we update S2iBaseJavaImage and OpenshiftBaseJavaImage?
• #36558 - Kotlinx.serialization not configured to work with Quarkus Hibernate Validation out of the box
• #36508 - Remove custom Keycloak image code from the keycloak-authorization tests
• #36401 - Tooltips for enum values are rendered incorrectly in documentation of configuration properties
• #36379 - Setting base image layer and application layer cache in Jib build
• #36376 - quarkus.test.integration-test-profile ignored in IT startup error message if startup fails because of ConfigValidationException
• #36363 - Hibernate ORM 6.2 - NullPointerException in TupleMappingModelExpressible
• #36357 - Check runtime Maven version is aligned with wrapper Maven version
• #36334 - Update config-yaml.adoc
• #36108 - Check for code usage fluctuations in native images
• #35989 - Scheduler: OTel Instrumentation feature improvements and refactoring
• #35920 - Unable to add additional handling when OIDC provider is not available
• #35912 - OpenTelemetry - Disable Span/Scope creation
• #35746 - AWT needs native-image installed to do native-source build
• #35310 - Hibernate in Quarkus does not lazy load field when it is not based on the Primary Key from the parent table
• #35265 - Authenticated user is not logged in http access logs
• #35113 - Allow JSON serialization customization in ORM
• #35065 - Add Hibernate Search management endpoint
• #34553 - Management endpoint for Hibernate Search
• #34160 - Order interposed sychronizations
• #34123 - Add quarkus.arc.context-propagation.enabled to Context Progagation guide
• #33895 - Hibernate 6.2.4.Final in Quarkus 3.1.1.Final breaks GROUP BY statements in PostgreSQL when there is a JSON column type in the association
• #33485 - ArC - improve the error message for unsatisfied dependency
• #33316 - Index all dependencies with a certain groupId
• #32532 - JPA concurrent locking of Entities fails in Quarkus 3.0.0.CR2
• #32463 - Quarkus 2.16.6: MQTT Connector allways starts dev services although all config is provided
• #32215 - Native build show no output when using docker 20.10 on ubuntu wsl
• #32150 - Add ManyToOne relation filtering in PanacheEntityResource
• #32029 - Use default ObjectMapper in FormatMappers Configuration for Hibernate ORM's JSONType
• #30115 - Allow accessing the ClientSession programmatively
• #29234 - Better gradle composite build support
• #28552 - traceId, spanId not set in logs when using quartz and opentelemetry
• #27707 - Added close handler on initial response for reactive SseEventSinkImpl
• #26549 - SPI for performed authorization checks
• #23683 - Support role mapping for Client certificates
• #20092 - GraphQL authenticated subscription
• #18737 - Incorrect "WARN Closing open connection prior to commit" when handling BEFORE_COMMIT event
• #14047 - Support complex wildcard path matching for authorization of web endpoints
• #5255 - HTTP Security Policy should support the role mappings
• #1502 - Annotation processors are not re-run in dev mode
• #1120 - Panache - Sort properties injected in the query should be escaped somehow