3.10.0.CR1

Major changes

• #36504 - Allow authentication mechanism selection for a REST endpoint with annotation
• #37816 - Optional support for the OIDC session cookie dir encryption
• #39295 - Move package config to an interface
• #39415 - Extension for the Hibernate Search Standalone Pojo Mapper with Elasticsearch
• #39793 - Support for verifying OIDC JWT claims with custom Jose4j Validator
• #39812 - Support resolving of static OIDC tenants based on token issuers
• #40056 - Add OIDC TokenCertificateValidator

Complete changelog

• #10267 - LDAP Security - Don't re-authenticate on every request
• #14851 - Quarkus keycloak authorization usability improvements.
• #26182 - Hibernate Search Standalone Pojo Mapper: Hibernate Search without Hibernate ORM / datasource
• #34664 - Provide a way to specify HttpAuthenticationMechanism per JAX-RS resource
• #35952 - Get management interface resolved port when quarkus.management.test-port set to 0
• #36504 - Allow authentication mechanism selection for a REST endpoint with annotation
• #37676 - Bump com.microsoft.azure.functions:azure-functions-java-library from 2.2.0 to 3.1.0
• #37700 - Bump com.amazonaws:aws-lambda-java-events from 3.11.3 to 3.11.4
• #37785 - Consider using direct JWE encryption of the OIDC session cookie
• #37816 - Optional support for the OIDC session cookie dir encryption
• #37875 - Restart and other hotkey in devui
• #38026 - Missing security requirement on operation level, declared @RolesAllowed in implementing class derived from a generated openapi java interface
• #38373 - Webauthn improvements : docs, customisable cookies, virtual thread support
• #38535 - OIDC Tenant Resolution for web-app applications does not explain that the session cookie has a tenant id recorded
• #38696 - OIDC Multitinancy by actual answer from teenant
• #38940 - Offer a way to block inside custom SecurityContext.isUserInRole with resteasy-reactive
• #39011 - quarkus-redis-client tracing
• #39015 - Bump org.wiremock:wiremock-standalone from 3.4.1 to 3.4.2
• #39061 - RunOnVirtualThread should avoid using Netty FastThreadLocals
• #39104 - Use followOutput for lra-coordinator container
• #39156 - Add the ability to ask for devservices to use the shared network
• #39170 - Bump actions/upload-artifact and download-artifact to v4
• #39182 - WebSockets Next: detect incorrect path parameter usage
• #39269 - Simplify configuration based mapping of token roles to deployment-specific SecurityIdentity
• #39295 - Move package config to an interface
• #39322 - [Mandrel 23.0] hibernate-orm-panache-kotlin native integration tests fail with 23.0 build and 23.1.2 sdk.
• #39339 - Simplify configuration based mapping of token roles to deployment-specific SecurityIdentity
• #39348 - Remove message to avoid using testNative until proven it works
• #39391 - AuthenticationSuccessEvent event is not created on successful authorization using FormAuthenticationMechanism
• #39395 - Invalid warnings about SQL Server version "0.0.0" on startup
• #39406 - Improve documentation for AMQP client options about setting a heartbeat
• #39407 - Fix update-version.sh script
• #39414 - Deploy relocations for snapshots
• #39415 - Extension for the Hibernate Search Standalone Pojo Mapper with Elasticsearch
• #39417 - OIDC TenantConfigResolver and TenantResolver are called even if the tenant id is already resolved
• #39424 - Bump org.asciidoctor:asciidoctorj from 2.5.11 to 2.5.12
• #39425 - Support for verifying OIDC JWT claims with custom Jose4j Validator
• #39446 - WebSockets Next: add endpoints to the DevUI's 404 page
• #39456 - Bump com.google.errorprone:error_prone_annotations from 2.25.0 to 2.26.1
• #39457 - Quarkus OpenTelemetry Rest Client Span Name with Route (URL Path Template)
• #39459 - Add key listeners to the log in Dev UI
• #39462 - WebSockets Next: detect incorrect path parameter usage
• #39464 - WebSockets Next: add basic Dev UI
• #39465 - WebSockets Next: add convenient way to handle the subprotocol header
• #39469 - Easy way to add deployment methods in Dev UI
• #39473 - Upgrade to Jandex 3.1.7
• #39481 - Push project version to RESTEasy Reactive TCK
• #39483 - Add ApplicationArchive.getResolvedDependency()
• #39484 - WebSockets Next: add basic Dev UI
• #39486 - Improve OIDC named tenant-specific configuration exceptions and make sure userinfo/token verification is enforced for named tenants
• #39489 - Opentelemetry Redis Instrumentation
• #39490 - Updates to Schema programmatic API in Infinispan
• #39492 - Optimize OIDC tenant id resolution
• #39493 - Fire SecurityEvent on Form authentication login success
• #39499 - Bump com.unboundid:unboundid-ldapsdk from 6.0.11 to 7.0.0
• #39500 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.102 to 0.0.103
• #39507 - RestEasy Jackson test fails in certain time zones
• #39509 - Update Flyway to 10.10.0
• #39512 - Move Keycloak Authorization Enforcer Tenant config to runtime and improve usability with aggregated policy enforcer paths
• #39518 - Migrate Elytron Security extensions from config classes to @ConfigMapping
• #39524 - Handle trailing/leading spaces in all relevant datasource configuration properties
• #39534 - Use URL path template when tracing REST clients where possible
• #39535 - Bump smallrye-config.version from 3.7.0 to 3.7.1
• #39537 - Bump org.apache.groovy:groovy from 4.0.19 to 4.0.20
• #39538 - Bump com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2 from 2.15.1 to 2.15.2
• #39539 - Bump com.google.guava:guava from 33.0.0-jre to 33.1.0-jre
• #39540 - Bump org.commonmark:commonmark from 0.21.0 to 0.22.0
• #39542 - WebSockets Next: attempt to diagnose BroadcastOnOpenTest
• #39551 - RestEasy Jackson test fails in certain time zones
• #39552 - Fix formatter-maven-plugin build cache misses
• #39553 - Consider...

3.2.12.Final

Complete changelog

• #36736 - Manage Jose4j dependency in the bom
• #39383 - Typo at OIDC Client Mutual TLS config properties
• #39580 - Fix directory name in vertx.adoc
• #39679 - Bump mime4j version to 0.8.11
• #39692 - Recommend podman desktop
• #39734 - Fix typo in podman.adoc
• #39801 - Manage mime4j core, dom and storage jars in the bom

3.9.3

Complete changelog

• #39731 - Fix StorkClientRequestFilter exception handling
• #39796 - document @Inject ScheduledExecutorService
• #39807 - Explain in the docs how to map the X509 CN attribute to roles
• #39839 - Removing quarkus-panache-common annotation processor from docs
• #39857 - SmallRye GraphQL Client: Added MP's Input.class to the index
• #39868 - Add property to force cache-control: no-store on: quarkus.smallrye-health
• #39871 - Routing for index.html fails with 404 for directories
• #39872 - Use cache-control header to make sure health checks aren't cached
• #39876 - OIDC Dev UI screen is blank after the user authentication
• #39878 - Ensure that index.html works in any directory in native mode
• #39880 - Mention ScheduledExecutorService in scheduler reference doc
• #39896 - Revert removal of redirect in Dev UI Deep links
• #39897 - Fix Servlet/Rest ExceptionMapper
• #39913 - Add more non-platform extensions to dev services guide + make guide guide-ier
• #39929 - Adjust some user-visible references to RESTEasy Reactive
• #39938 - Update of the SmallRye GraphQL 2.8.2
• #39956 - Docs OIDC Client - Inconsistent variable naming, OidcClientCreator example

3.9.2

Complete changelog

• #38964 - Add smallrye metrics capability
• #39668 - Recompute cache when the redis connection pool is exhausted
• #39705 - WebSockets Next: error handlers part 1
• #39717 - OIDC code flow access token verification is enforced even if the application code does not use it as JWT
• #39718 - Enforce OIDC code flow access token verification only if JWT is in the application code
• #39725 - Setting the correct CodeFlowVerifyAccessTokenDisabledTest test class name
• #39742 - Fix a remaining reference to quarkus.resteasy-reactive. prefix
• #39746 - ScheduledExecutorService: cannot remove future task from the scheduler
• #39763 - WebSockets Next: error handlers part 2
• #39766 - Properly handle array class types to be looked up
• #39770 - Improve the multipart encoded mode handling in the rest client
• #39776 - Cannot build native image after 3.9.1 upgrade - missing configuration properties but they exist
• #39777 - Bean Param init issue - java.lang.NoClassDefFoundError: io/quarkus/generated/int$quarkusrestparamConverter$
• #39790 - Add quarkus-credentials-deployment where it's missing
• #39794 - Bump org.jboss.threads:jboss-threads from 3.6.0.Final to 3.6.1.Final
• #39797 - Docs: fix typo in OIDC tenant resolution by configuration
• #39798 - Update documentation for QUARKUS AND GRADLE - Development mode: quarkusDev#workingDir has been deprecated
• #39804 - Always record profiles
• #39823 - Ensure ParameterConverter is loaded from the TCCL
• #39829 - Use quarkusDev#workingDirectory
• #39835 - Bump maven-model-helper to 36

3.9.1

Complete changelog

• #25682 - Dev Services for Postgresql not working with Rancher
• #36736 - Manage Jose4j dependency in the bom
• #36737 - Add OpenAPI Filter usage to documentation
• #39088 - Solve POM formatting issues when creating project/adding extension/removing extension
• #39224 - WebSockets Next: support method parameter injection
• #39313 - prod-profile configuration pollutes test profile in integration tests
• #39371 - Avoid resolving plugin command after the first option
• #39382 - Preserve POM format when extensions are added/removed
• #39385 - smallrye-health should hande the case when Vert.x current context is null
• #39388 - Hibernate runtime property persisting after build
• #39394 - Handle null Vert.x context in smallrye-health
• #39426 - Do not record active profile configuration name if a profile one exists
• #39443 - Use Quarkus wide version of jna-platform in azure-functions
• #39496 - Gradle build cache prevents source packages to be installed to local Maven repository
• #39513 - @SecureField in members of the response class isn't applied
• #39528 - (Doc issue) Getting token using blocking or non blocking calls
• #39544 - OidcClient: Getting exception when trying to use tokenHelper
• #39546 - Make maxParameters of MultiPartUploadHandler configurable
• #39549 - Make max parameters of multipart handling configurable
• #39564 - Fix Quarkus REST Jackson @SecureField detection on subclasses, interface implementors, fileds of the fields, parametrized types and arrays
• #39572 - Remove mvnpm and webjars from the 404 page
• #39574 - Add a section about openapi filters in the doc
• #39576 - Fix semconv-stability.opt-in property name
• #39578 - Update quarkus-project-develocity-extension to 1.0.7
• #39579 - Don't run CDI interceptors on class-level exception mappers
• #39580 - Fix directory name in vertx.adoc
• #39581 - The http metrics provide a path instead of REDIRECTION and NOT_FOUND when possible
• #39583 - Keep the URIs in the metrics tag if they match a client or server pattern
• #39586 - RestMulti is not sending headers if there is no content
• #39587 - Properly use headers from RestMulti when the multi is empty
• #39589 - Only Add OTel Security Events when span is recording
• #39594 - Redis: add documentation for replicas usage
• #39595 - Update one of OIDC certificate chain tests to use TenantConfigResolver
• #39598 - ClassNotFoundException for beanparam class with generics in external artifact
• #39599 - JsonObject is empty when used with resteasy-reactive
• #39604 - Do not record local sources in runtime config defaults.
• #39615 - Allow JsonObject and JsonArray to be used in any POJO for JSON handling
• #39623 - Type not consistent in sample code
• #39626 - Update parameter type to be consistent across the doc
• #39628 - Bump smallrye-jwt.version from 4.4.0 to 4.5.0
• #39630 - Bump smallrye-reactive-messaging.version from 4.18.0 to 4.19.0
• #39638 - Avoid all caching in DevModeClient
• #39642 - WebSocket Next: endpoint callback arguments injection
• #39645 - Improve the OIDC Client Quickstart document
• #39651 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.5.0 to 3.6.0
• #39656 - Bump maven-model-helper to 35
• #39661 - Fix property name in OIDC docs
• #39679 - Bump mime4j version to 0.8.11
• #39682 - Fix postgres datasource devservice not working with rancher-desktop on mac arm
• #39691 - Fix dev-mode issue with generated classes for Quarkus REST converters
• #39699 - UpxCompressionBuildStep Not Executed Since Quarkus 3.8.2
• #39702 - Bring back erroneously removed @BuildStep
• #39706 - Use --no-daemon when calling gradle update

3.9.0

Complete changelog

• #25101 - [CI] - quarkus-devtools-compat + Quarkus main
• #27374 - Update Quarkus CLI doc for installing specific version of the CLI to avoid printing warnings
• #39144 - WebSockets Next: documentation
• #39315 - @ConfigMapping handling of Maps is not compatible with old config classes
• #39344 - Avro schemas aren't generated in isolation
• #39345 - Isolate Avro schema code generation when using multiple schema files
• #39363 - Initial version of the WebSocket Next documentation
• #39413 - Refresh documentation (and some tests) of the Hibernate Search + ORM extension
• #39427 - Enforce authorization code flow access token verification if JsonWebToken is injected
• #39428 - Enforce OIDC UserInfo acquisition if UserInfo is injected
• #39441 - RESTEasy Reactive dependency added to deployment classpath of nearly all Quarkus apps
• #39445 - Remove Quarkus REST deployment dependency from Vertx HTTP deployment
• #39447 - Save concat indy allocations on JarResource::getResourceURL
• #39454 - Bump org.jboss.threads:jboss-threads from 3.5.1.Final to 3.6.0.Final
• #39458 - Enforce OIDC UserInfo acquisition and authorization code flow access token verification if UserInfo and JsonWebToken beans are injected
• #39467 - Fix codestarts compatibility with older CLI
• #39468 - ChainBuildException - Cycle detected after #39352 PR
• #39470 - Remove the old MetricBuildItem SPI
• #39471 - Update to Vert.x 4.5.5
• #39472 - Update SmallRye Config to 3.7.0
• #39474 - Use explicit jar reference instead of GAV to avoid duplicate log warning
• #39476 - Fix the broken link to the OIDC client reference doc
• #39477 - Adjust toggle names in OTel InstrumentBuildTimeConfig
• #39479 - 3.9.0.CR2: NoClassDefFoundError: io/quarkus/security/spi/runtime/SecurityEvent
• #39480 - Fix security spi dependency on OTel
• #39487 - Allow occasional pin events in ShouldNotPin
• #39491 - Ignore the split access and refresh token cookies for resolving the tenant
• #39519 - OpenTelemetry - respect proxy settings in VertxGrpcExporter and VertxHttpExporter
• #39522 - Fix typos in rest doc
• #39530 - Update profile section in building-native-image.adoc
• #39531 - Use SmallRye Commons Inet
• #39533 - Class loader leak in configuration
• #39536 - Bump org.postgresql:postgresql from 42.7.2 to 42.7.3
• #39541 - Update SmallRye Config to 3.7.1
• #39543 - Enable proxy configuration for OpenTelemetry exporters
• #39562 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.7.0 to 3.7.1 in /devtools/gradle

3.9.0.CR2

Complete changelog

• #30450 - Infinispan Extension: Allow InjectMock for RemoteCache
• #33008 - info extension should have link to ui in devui tile
• #39240 - Bump org.mockito:mockito-bom from 5.10.0 to 5.11.0
• #39302 - Adds RemoteCache @InjectMock support in Infinispan
• #39367 - Improve OIDC client reference document
• #39389 - Updates to Infinispan 15 release
• #39398 - Fix incorrect REST artifactId because PR was stale and using old one
• #39408 - Autogenerated application with oidc-db-token-state-manager fails to be built
• #39409 - Reduce the allocation pressure on ConfigDiagnostic.unknownProperties
• #39421 - Bump org.apache.logging.log4j:log4j-api from 2.23.0 to 2.23.1
• #39422 - Bump com.github.javaparser:javaparser-core from 3.25.8 to 3.25.9
• #39423 - Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2
• #39429 - Dev UI: Info card now links to page
• #39432 - Fix OIDC DB token state validation when no reactive SQL client present
• #39435 - Upgrade to SmallRye GraphQL 2.8.1
• #39444 - Save regexp Pattern allocation on config name renaming

3.8.3

Complete changelog

• #25453 - Mutiny is not compatible with quarkus opentelemetry
• #31497 - Enabled micrometer.binder.http-server should also capture parameterized sub-resources
• #39047 - Reactive pg datasource with enabled health check opens more connections than configured
• #39145 - Hibernate schema validation is flaky and fails due missing tables (while the tables are present)
• #39162 - Add mapping to a Map<String, ConfigObject> in the documentation
• #39178 - Update grpc-service-implementation.adoc
• #39192 - Make HTTP templates for observability work with subresources
• #39197 - Qute is not adding the right NativeImageResourceBuildItem when using a custom template root
• #39204 - Update partial extension names to include full extension names
• #39216 - Unwrap processing exception from REST Client when returning a Uni
• #39223 - Fix WithSpan uni and multi
• #39225 - Upgrade to Mutiny 2.5.8
• #39242 - e quarkus-azure-functions-http generationg function.json with missing method.
• #39245 - dev-ui shows wrong property for rest-client
• #39251 - Make mutiny version of pool use the already configured vertx pool
• #39252 - Explicitly set all HTTP methods for Azure Functions
• #39255 - Fix config key for dev-ui
• #39257 - Quarkus 3.8.1: Use GraalVM sdk 23.1.2 over 23.0.1
• #39260 - Bump GraalVM SDK version to 23.1.2
• #39265 - Properly support sending InputStream in REST Client
• #39266 - ./mvnw --file $(pwd)/./pom.xml broken since quarkus 3.7.1
• #39270 - Update the title of dev-ui.adoc
• #39271 - Update the title of dev-ui.adoc and fix minor typos
• #39294 - Qute: add correct NativeImageResourceBuildItem for custom template root
• #39309 - Normalize POM path
• #39310 - Wrong reference on list of injected beans
• #39311 - Be more consistent with extension names in datasource.adoc
• #39316 - Empty container-group not allowed in Quarkus 3.8.2
• #39319 - org.graalvm.js:js was renamed to org.graalvm.polyglot:js-community
• #39337 - Fix rest-client-mutiny mention in the docs
• #39350 - Exception when building application with a lot of dependencies, String too large to record error
• #39352 - Make Hibernate / Micrometer integration run after schema creation
• #39353 - Allow config empty values in the Gradle worker
• #39354 - Add note about pre-matching filters execution model
• #39368 - Submodule on second level fails to find itself in dev mode
• #39372 - Replace org.graalvm.sdk:graal-sdk dependency with org.graalvm.sdk:nativeimage
• #39379 - Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1
• #39383 - Typo at OIDC Client Mutual TLS config properties
• #39386 - Update to Brotli4J 1.16.0
• #39402 - ArC: fix creation of synthetic beans
• #39411 - Fix typo in Building my first extension
• #39418 - Use the value of project/default-codestart from the platform descriptor as the default codestart instead of a hardcoded value
• #39430 - Fix misleading error message when REST Client interface has been indexed
• #39434 - Qute: fix the NoRestartTemplatesDevModeTest on Windows
• #39437 - Make sure the current project location isn't overridden by other modules with the same groupId and artifactId
• #39440 - graal-sdk in 23.1.x brings in org.graalvm.polyglot which causes a couple of issues (wrap up)
• #39442 - Exclude org.graalvm.polyglot:polyglot from graal-sdk

3.2.11.Final

Complete changelog

• #35659 - Fix File handling as a JAX-RS body parameter
• #37153 - Bump smallrye-jwt version to 4.4.0
• #38233 - Bump resteasy.version from 6.2.6.Final to 6.2.7.Final
• #38236 - Adding a decorator causes bytecode error
• #38362 - Register JDBC RowSet required bundle
• #38370 - Include RowSet properties file in native image
• #38429 - Replace {project-name} attribute in document title for downstream
• #38430 - Avoid dots in config doc ids as it's causing issues for downstream
• #38580 - Make the Forwarded Parser syntax parsing case-insensitive
• #38648 - More documentation adjustments for new downstream tooling
• #38649 - Use [[anchor]] format consistently
• #38748 - Sanitize app.dekorate.io/vcs-url kubernetes annotation
• #38755 - Log when a RestEasy Reactive client close method is called
• #38785 - ArC: fix interception when some methods return void
• #38865 - Update commons-compress version to mitigate CVE-2024-25710

3.9.0.CR1

Major changes

• #34493 - Add CLI command for Config
• #37680 - index.html (welcome page) now dynamic
• #38541 - Support OIDC Client JWT Bearer authentication
• #38603 - Introduce @ClientBasicAuth annotation
• #38608 - Allow TLS certificate reloading for the HTTP server
• #39142 - Initial version of the new declarative WebSocket server API
• #39159 - Big Quarkus REST rename
• #39206 - Improve graceful shutdown
• #39301 - Rename SmallRye Reactive Messaging extensions to Messaging

Complete changelog

• #1120 - Panache - Sort properties injected in the query should be escaped somehow
• #1499 - Improve index.html welcome page
• #5236 - Move handling of NotFound http code from resteasy to the vertx-http extension
• #7963 - test Fault Tolerance in dev mode
• #8392 - Hyperlink Rest Resources on 404 page
• #15926 - Hot Reload for TLS Keystore
• #16833 - quarkus scheduler does not await termination of scheduledExecutor
• #20024 - Support Multi<Byte> and Multi<byte[]> for octet stream in Rest Client Reactive
• #21248 - Clean up JDK 18 workarounds
• #25453 - Mutiny is not compatible with quarkus opentelemetry
• #26308 - Panache - load page with join fetch
• #29172 - Integrate FileVault Utils with Quarkus CLI
• #31157 - websocket extension should implement ping/pong
• #31414 - Exclude banned dependency commons-logging in the BOM
• #31497 - Enabled micrometer.binder.http-server should also capture parameterized sub-resources
• #33173 - Quarkus Gradle Plugin: tests with encrypted configuration
• #33495 - OIDC tenant resolution policy
• #34435 - Upload schema to backup cluster in cross site
• #34493 - Add CLI command for Config
• #35410 - Regression 3.3.0 config quarkus.config.locations with vault
• #35812 - Quarkus 3 -> PanacheRepoqueries SemanticException
• #36102 - Clarify quarkus.config.locations and multiple profiles documentation
• #36458 - Enhance OIDC token propagation filters to select named OIDC clients
• #36496 - Panache simplfied query + CTE with
• #36581 - Support of Embedded and ManyToOne nested object projection + Support of @ProjectedFieldName on class fields
• #36594 - Support of Embedded and XXXToOne nested object projection + Support of @ProjectedFieldName on class fields
• #36836 - Re-enable MP Tracing TCK
• #36994 - OIDC AccessToken can lead to AmbiguousResolutionException
• #37285 - Path-matching HTTP Security policy should secure exact path matches for both present and missing ending path separator
• #37485 - OIDC multi-tenancy @Tenant annotation not selecting tenant
• #37488 - Quarkus Maven Plugin doc parameters are broken
• #37622 - Enable caching for quarkus:build and declare dependencies as inputs
• #37645 - Docs: security-authentication-mechanisms Guide
• #37680 - index.html (welcome page) now dynamic
• #37782 - ExtensionDescriptorMojoTest fails on a pristine computer
• #37809 - [Quarkus main] integration test 'main' fails in native mode: QuarkusTestCallbacksITCase.testCallbackContextIsNotFailed
• #37901 - OpenAPI filters run twice when storing
• #37920 - Fixes create and update goals docs
• #38008 - Export security events as OTel Events
• #38070 - Avoid executing OpenAPI build filters twice on build
• #38071 - Bump com.google.api.grpc:proto-google-common-protos from 2.28.0 to 2.30.0
• #38118 - Rename reflection-config.json into reflect-config.json and resources-config.json into resource-config.json
• #38127 - Reset junit test's extension failed state for each test class
• #38166 - Bump grpc.version from 1.59.1 to 1.61.0
• #38186 - Update native configuration file best practices
• #38217 - JAXB - Ignore @XmlTransient fields/methods when marking hierarchy for reflection
• #38242 - Removed Panache marker and annotation processor in favour of Jandex use-site indexing
• #38248 - Infinispan, upload schemas on backup clusters
• #38258 - Fix typos and formatting in ADR-0002
• #38274 - Add details about relocations into README and/or CONTRIBUTING
• #38288 - Bump com.fasterxml:classmate from 1.6.0 to 1.7.0
• #38293 - Apply polish to REST Client read timeout handling
• #38294 - Remove Consul entry from MAINTAINERS.adoc
• #38309 - Dev UI wraps code viewer content in <!----> HTML comments (on Safari and Chrome, but not Firefox)
• #38312 - Bump com.google.errorprone:error_prone_annotations from 2.24.0 to 2.24.1
• #38313 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.12.0 to 4.12.2
• #38321 - Configuration ignored when using config maps and the prefix conflicts with a "static" config group
• #38327 - Updated docs for Panache marker removal
• #38339 - Bump org.apache.groovy:groovy from 4.0.17 to 4.0.18
• #38341 - Building with relocations
• #38344 - Apply some more cleanup now that baseline is JDK 17
• #38345 - Documentation for quarkus.test.profile not mentioning multi-profile support?
• #38360 - Bump org.mockito:mockito-bom from 5.8.0 to 5.9.0
• #38377 - Migration path for the new HTTP semantic conventions
• #38379 - QuarkusComponentTest: support test method parameter injection
• #38380 - Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 in /devtools/gradle
• #38382 - Fix documentation for profiles
• #38383 - Bump org.mockito:mockito-core from 5.9.0 to 5.10.0
• #38385 - Bump org.assertj:assertj-core from 3.25.1 to 3.25.2
• #38403 - Update Gizmo to 1.8.0
• #38408 - Remove an indent not to make it unnecessary section
• #38414 - Assorted JAX-RS security fixes - CVE-2023-6267 and CVE-2023-5675
• #38415 - Add com.gradle Maven extensions to Dependabot
• #38416 - Add build cache for format...