Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 24, 2025

Bumps quarkus.version from 3.20.0 to 3.28.1.
Updates io.quarkus:quarkus-bom from 3.20.0 to 3.28.1

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.28.0.CR1

Major changes

  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49618 - Provide a fluent API for CSRF programmatic set up
  • #49805 - Add support for multiple clients in Liquibase MongoDB extension

Complete changelog

  • #19913 - Config Editor doesn't update the prefixed values
  • #22183 - HibernateOrmProcessor complains about abstract model classes not mapped to a PersistenceUnit
  • #35660 - Surge.sh deployment fails with Aborted - Unable to publish. Application too large
  • #43229 - Configuration Form Editor in Dev UI is confusing - disable rewriting application.properties
  • #44127 - InfinispanCacheTest random failures
  • #44736 - io.quarkus.oidc.client.* packages are split across multiple modules
  • #45407 - Remove the deprecated legacy TLS configuration for GraphQL clients
  • #46697 - Flow specific OIDC request/response filter support
  • #46847 - Remove support for Hibernate ORM proxy generation at static init
  • #47157 - Upgrade to gRPC v4
  • #47881 - Add a quarkus-devservices runtime module
  • #48915 - Bump maven to 3.9.11
  • #48986 - Quarkus-Liquibase-MongoDB supporting multiple datasources
  • #49007 - Support fixed LGTM ports
  • #49025 - Add devservices runtime module
  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49295 - Improve assignment of interfaces / PanacheEntity to persistence units
  • #49306 - Update kafka-streams.adoc
  • #49307 - Kotlin Coroutines Fail to preserve active request between a suspension and resume
  • #49308 - Preserve active request on subscriber when using messaging-kotlin
  • #49311 - Improve panache projection by supporting multiple constructors
  • #49345 - Keep variant info when using template locator
  • #49397 - Qute: gizmo2 rewrite
  • #49400 - Provide a fluent API for CORS programmatic set up
  • #49469 - OIDCS: split-tokens=true does not work if session cookie gets longer than MAX_COOKIE_VALUE_LENGTH
  • #49500 - Cannot Connect to Database in Containerized Integration Test
  • #49526 - Avoid now unnecessary copy of MethodInfo in Methods
  • #49533 - Bytecode transformers - Optimize constant pool scanning optimization
  • #49540 - Remove quarkus.test.native-image-profile references
  • #49543 - Add tests for keycloak dev services when there is no test resource
  • #49545 - Bump the hibernate group with 5 updates
  • #49554 - Upgrade Vaadin to 24.8.5
  • #49555 - Small assorted optimizations for ArC
  • #49558 - As an extension developer, I would like to have the same dev mode experience as our users
  • #49560 - Revert "Upgrade to gRPC v4"
  • #49562 - ArC - Pass MethodKey to mergeBindings() to avoid recreating it
  • #49564 - Create chunked OIDC session access token cookies
  • #49570 - Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0
  • #49573 - Micrometer to OpenTelemetry bridge native build warns that "OpenTelemetryMeterRegistry" does not support reading measurements

... (truncated)

Commits
  • 8e90f41 [RELEASE] - Bump version to 3.28.1
  • 5ea8be9 Merge pull request #50239 from gsmet/3.28.1-backports-1
  • dceacd2 Bump io.quarkus.develocity:quarkus-project-develocity-extension
  • 26be2b3 Bump Keycloak version to 26.3.4
  • dbf5bd1 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 in /devtools/gradle
  • bb51be4 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • f77993a Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2
  • e2784fd ArC: fix NPE in InvokerGenerator
  • 7a6b00e Fix Kotlin reflection issue in native mode
  • b6246c2 Prevent simultaneous use of @​InjectMock and @​InjectSpy
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.20.0 to 3.28.1

Updates io.quarkus:quarkus-extension-maven-plugin from 3.20.0 to 3.28.1

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.28.0.CR1

Major changes

  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49618 - Provide a fluent API for CSRF programmatic set up
  • #49805 - Add support for multiple clients in Liquibase MongoDB extension

Complete changelog

  • #19913 - Config Editor doesn't update the prefixed values
  • #22183 - HibernateOrmProcessor complains about abstract model classes not mapped to a PersistenceUnit
  • #35660 - Surge.sh deployment fails with Aborted - Unable to publish. Application too large
  • #43229 - Configuration Form Editor in Dev UI is confusing - disable rewriting application.properties
  • #44127 - InfinispanCacheTest random failures
  • #44736 - io.quarkus.oidc.client.* packages are split across multiple modules
  • #45407 - Remove the deprecated legacy TLS configuration for GraphQL clients
  • #46697 - Flow specific OIDC request/response filter support
  • #46847 - Remove support for Hibernate ORM proxy generation at static init
  • #47157 - Upgrade to gRPC v4
  • #47881 - Add a quarkus-devservices runtime module
  • #48915 - Bump maven to 3.9.11
  • #48986 - Quarkus-Liquibase-MongoDB supporting multiple datasources
  • #49007 - Support fixed LGTM ports
  • #49025 - Add devservices runtime module
  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49295 - Improve assignment of interfaces / PanacheEntity to persistence units
  • #49306 - Update kafka-streams.adoc
  • #49307 - Kotlin Coroutines Fail to preserve active request between a suspension and resume
  • #49308 - Preserve active request on subscriber when using messaging-kotlin
  • #49311 - Improve panache projection by supporting multiple constructors
  • #49345 - Keep variant info when using template locator
  • #49397 - Qute: gizmo2 rewrite
  • #49400 - Provide a fluent API for CORS programmatic set up
  • #49469 - OIDCS: split-tokens=true does not work if session cookie gets longer than MAX_COOKIE_VALUE_LENGTH
  • #49500 - Cannot Connect to Database in Containerized Integration Test
  • #49526 - Avoid now unnecessary copy of MethodInfo in Methods
  • #49533 - Bytecode transformers - Optimize constant pool scanning optimization
  • #49540 - Remove quarkus.test.native-image-profile references
  • #49543 - Add tests for keycloak dev services when there is no test resource
  • #49545 - Bump the hibernate group with 5 updates
  • #49554 - Upgrade Vaadin to 24.8.5
  • #49555 - Small assorted optimizations for ArC
  • #49558 - As an extension developer, I would like to have the same dev mode experience as our users
  • #49560 - Revert "Upgrade to gRPC v4"
  • #49562 - ArC - Pass MethodKey to mergeBindings() to avoid recreating it
  • #49564 - Create chunked OIDC session access token cookies
  • #49570 - Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0
  • #49573 - Micrometer to OpenTelemetry bridge native build warns that "OpenTelemetryMeterRegistry" does not support reading measurements

... (truncated)

Commits
  • 8e90f41 [RELEASE] - Bump version to 3.28.1
  • 5ea8be9 Merge pull request #50239 from gsmet/3.28.1-backports-1
  • dceacd2 Bump io.quarkus.develocity:quarkus-project-develocity-extension
  • 26be2b3 Bump Keycloak version to 26.3.4
  • dbf5bd1 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 in /devtools/gradle
  • bb51be4 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • f77993a Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2
  • e2784fd ArC: fix NPE in InvokerGenerator
  • 7a6b00e Fix Kotlin reflection issue in native mode
  • b6246c2 Prevent simultaneous use of @​InjectMock and @​InjectSpy
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-config-doc-maven-plugin from 3.20.0 to 3.28.1

Updates io.quarkus:quarkus-extension-processor from 3.20.0 to 3.28.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `quarkus.version` from 3.20.0 to 3.28.1.

Updates `io.quarkus:quarkus-bom` from 3.20.0 to 3.28.1
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.20.0...3.28.1)

Updates `io.quarkus:quarkus-maven-plugin` from 3.20.0 to 3.28.1

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.20.0 to 3.28.1
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.20.0...3.28.1)

Updates `io.quarkus:quarkus-config-doc-maven-plugin` from 3.20.0 to 3.28.1

Updates `io.quarkus:quarkus-extension-processor` from 3.20.0 to 3.28.1

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-config-doc-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 24, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 24, 2025 13:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 24, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 2, 2025

Superseded by #350.

@dependabot dependabot bot closed this Oct 2, 2025
@dependabot dependabot bot deleted the dependabot/maven/quarkus.version-3.28.1 branch October 2, 2025 13:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants