quarkusio/quarkus 3.33.2 on GitHub

Complete changelog

#42549 - Remove references to Renarde in https://quarkus.io/guides/security-openid-connect-providers
#50392 - JFR extension not capturing Quarkus application runtime data
#52239 - OpenTelemetry: Context get lost when hitting rest client read timeout
#53115 - Prevent server's OpenTelemetry Context getting lost on client read timeout
#53121 - OpenShift build extension seemingly ignoring configuration properties for image/image name
#53167 - build(deps): bump testcontainers.version from 2.0.3 to 2.0.4
#53191 - OpenShift Internal Registry Container Image Name
#53203 - Refactor jar building to a first-write-wins approach
#53209 - quarkus-artifact.properties generation is brittle
#53215 - Properly set path property for quarkus-artifact.properties
#53222 - VertxHttpHotReplacementSetup: move the httpInitiatedReload flag check
#53261 - Honour the legacy resolver settings in go-offline goals
#53271 - JFR extension event fix
#53290 - Webauthn IT: move test-webauthn to the test scope
#53296 - Swagger UI does not mark endpoint as protected if PermissionsAllowed present multiple times
#53301 - OpenAPI: Detect repeated @PermissionsAllowed annotations in Swagger UI
#53325 - Quarkus 3.33.1: WARN: This Gauge has been already registered
#53331 - Prevent warning about Gauge having already been registered
#53334 - [3.33] Bump Hibernate ORM to 7.2.9.Final, Reactive to 3.2.9.Final
#53338 - Style and grammar review for the OpenID Connect authorization code flow
#53349 - Updates to Infinispan 16.0.9
#53352 - Some minor uberjar improvements and a test for service concatenation
#53366 - [3.33] Upgrade to Vert.x 4.5.26 and Netty 4.1.132.Final
#53383 - BUILD_AND_RUN_TIME_FIXED config values not resolved with custom profiles (3.31+ regression)
#53386 - [3.34] Update SmallRye Fault Tolerance to 6.10.1
#53389 - Update Gradle template to select quarkus-junit or quarkus-junit5 based on Quarkus platform version
#53391 - Docs: Add caution note to Using RestResponse section in rest-client.adoc
#53393 - ClassCastException when PEM CA certificate is used
#53397 - Avoid CCE when reloading Vert.x trust store
#53399 - Ensure that shared Config build time runtime fixed uses the expected profile when set from @TestProfile
#53403 - Fix xref link text in security-authentication-mechanisms.adoc
#53418 - @ServerExceptionMapper beans with super class using Java generics doesn't build (with BuilderException)
#53420 - Fix @ServerExceptionMapper handling for generic types
#53427 - NullPointerException in VertxHttpRecorder for null URI
#53428 - Set up CodeQL security analysis for pull requests
#53430 - Also populate cache on GitHub Actions for main repo
#53434 - Avoid skipping config tracking when the Quarkus build is skipped
#53435 - Enforce plexus-utils 3.6.1 to fix CVE-2025-67030
#53442 - Do not preinit UUID infrastructure for Vert.x anymore
#53456 - Avoid trying to parse null URI
#53458 - Remove duplicated plexus-utils from bootstrap BOM
#53461 - List commands when you run just
#53462 - Tightening workflow permissions
#53463 - Fix typo in unused gRPC interceptor warnings
#53467 - [3.33] Update to plexus-utils 3.6.1
#53485 - Style and grammar review for the "OpenID Connect (OIDC) and OAuth2 client and filters" guide
#53502 - [3.33] Quarkus REST: fix @Context injection for records
#53505 - [3.34] Quarkus REST: fix @Context injection for records
#53517 - Native build cannot detect Flyway Oracle support for manual Flyway.configure() usage from a dependency JAR, while JVM works
#53520 - [3.33] documentation backports
#53527 - Typo in graphic in dev ui guide
#53528 - Move OracleDatabaseTypeSubstitution to flyway-oracle
#53529 - Fix spelling error in Dev UI Docs screenshot
#53531 - Use <annotationProcessorPathsUseDepMgmt> in new extension projects
#53539 - [3.33] Bump kafka.version from 4.1.1 to 4.2.0
#53543 - Bump wildfly-elytron.version from 2.8.3.Final to 2.8.4.Final
#53548 - Register oracle.jdbc.OracleDriver for reflection
#53573 - Bump Keycloak version to 25.6.7
#53598 - Little asciidoc markup fix for the OIDC authentication guide
#53603 - Fix typo in Grafana dashboard title
#53619 - Review for the OpenID Connect client and token propagation quickstart
#53638 - Fixing two numbered procedures and their includes in OpenID Connect client and token propagation quickstart
#53644 - Multiple GeneratedClassBuildItem produced for coroutine invokers when multiple subclasses inherit suspend JAX-RS endpoints
#53664 - Fix Quarkus REST issue with duplicate coroutine invokers
#53669 - [3.33] Move Kafka to 4.1.2
#53709 - Bump webauthn4j.version from 0.28.0.RELEASE to 0.30.3.RELEASE
#53712 - Make some OIDC authentication failure messages more verbose
#53742 - Uber jar is creating duplicate META-INF/ entries
#53754 - Avoid adding duplicate META-INF/ directories
#53756 - Review for the "Deploying Quarkus applications to OpenShift" guide
#53775 - Json.appendValue() throws IllegalStateException for unrecognized value types (breaks @QuarkusTest with jlama extension on 3.32+)
#53784 - Bump the hibernate group across 1 directory with 9 updates
#53786 - Latest LTS and Java 25 - jib container entrypoint changed from run-java.sh regardless of aot or jar type
#53787 - Mark UBI9_JAVA25 as containsJavaRun
#53789 - Bump SmallRye Certificate Generator to 0.9.2
#53795 - Fix JvmOption JSON serialization
#53801 - Update RESTEasy Classic to 6.2.16.Final
#53804 - OIDC code flow docs: fix incorrectly named PKCE state secret property
#53849 - RESTEasy Classic: VertxHttpResponse sets Connection: keep-alive on HTTP/2 responses, causing 502 with Envoy
#53893 - Unifing the code sample headers for the OpenShift guide
#53920 - Fix Connection: keep-alive being set on HTTP/2 responses in RESTEasy Classic
#53937 - [3.33] Strip matrix parameters from request paths during HTTP security policy matching
#53988 - Clarify X provider callback URI registration without Renarde-specific paths in the OIDC providers guide
#54012 - quarkus.rest-client.connect-timeout should not be deprecated
#54013 - Undeprecate REST Client connect timeout config
#54193 - [3.33] Pin actions to specific shas, and avoid using external actions when we can