quarkusio/quarkus 3.36.0.CR1 on GitHub

Major changes

#53415 - Add JsonProvider SPI for per-record dynamic JSON field additions
#53491 - Support arbitrary keystore/truststore types via 'other' config
#53552 - Support for embedded dependency SBOMs in applications and exposing them via an endpoint
#53773 - Support for OIDC SPIFFE Client Authentication
#53788 - Introduce quarkus-signals experimental extension
#53856 - GraphQL client TLS reload

Complete changelog

#25256 - Automatically detect new Flyway scripts in Dev Mode
#36772 - logging-json support for dynamic additional properties
#37008 - Add Kubernetes attributes to OpenTelemetry data
#40602 - Implement low memory mode in the OpenTelemetry exporters.
#41525 - Customizing the JSON logging formatter
#41776 - Mutiny subscription is not cancelled when grpc client is cancelled
#44762 - "vc" is null in GraphQL when using CompletionStage
#46986 - gRPC client closing the stream doesn't automatically propagate the cancellation signal
#47555 - Forward subscription cancellation from client to server
#49006 - Delete Hibernate ORM's unzipped SQL files on shutdown
#50304 - bcfks with TLS registry
#50474 - quarkus-config-doc-maven-plugin support for nested bullet list and multiple sentences in a bullet entry
#50647 - Use source URI in Qute TemplateException
#50874 - Rework TLS reload mechanism for GraphQL Client, incl. application scope
#51569 - Clean up ExtensionLoader
#51571 - Logging JSON: Exceptions not shown as expected in ECS format
#52232 - Support for SPIFFE JWT-SVID OIDC client authentication
#52341 - Document and test hibernate-vector
#52348 - Add more options to configure Kubernetes
#52704 - Metric reader must use Quarkus classloader - Part III - Handle all exporters
#52797 - Introduce enableKeepAlive() and readTimeout() in JDBC Runtime config
#52942 - More prominent AI Policy
#52963 - Add @DisableCachingByDefault to all Gradle tasks that were not cacheable
#52975 - Panache Next: using PanacheRepository outside of entity throws a compilation error
#53038 - Agents: Add AGENTS.md and coding skills for the Quarkus codebase
#53050 - Allow specifying a startup timeout for Compose dev services
#53066 - Document and test hibernate-vector support
#53068 - Enable configurable connection acquisition modes
#53166 - Panache Next: test that toplevel repositories don't produce infinite files
#53332 - Introduce compose specific startup timeout
#53413 - import.sql not executed when not defining entities
#53415 - Add JsonProvider SPI for per-record dynamic JSON field additions
#53429 - Panache Next: switch to the JD 1.1 Sort type
#53451 - Bump com.nimbusds:nimbus-jose-jwt from 10.8 to 10.9
#53481 - Mockito / Bytebuddy warnings issued about self-attaching to the JVM
#53491 - Support arbitrary keystore/truststore types via 'other' config
#53516 - Custom multipart/form-data parser
#53523 - Bump org.jboss.metadata:jboss-metadata-web from 17.0.0 to 17.1.0
#53552 - Support for embedded dependency SBOMs in applications and exposing them via an endpoint
#53566 - Compiling Panache-Next as native-image fails due to missing optional dependency
#53569 - Panache next sort
#53575 - Bump org.mvnpm.at.panzoom:panzoom from 4.6.1 to 4.6.2
#53591 - Add test for import.sql without entities - merge after Hibernate ORM 7.3.2 / 7.4
#53611 - Delete hibernate sql files on shutdown
#53614 - Enhance agents/skils with Pull request rules
#53617 - feat(devui): Allow extensions to contribute buttons to the card
#53623 - Security annotations not applied in all Panache Next cases
#53629 - Panache Next: support native compilation when Hibernate Reactive is absent
#53634 - Bump org.commonmark:commonmark from 0.27.1 to 0.28.0
#53637 - Bump com.google.api.grpc:proto-google-common-protos from 2.66.0 to 2.70.0
#53645 - Undertow compression uses addEndHandler instead of addHeadersEndHandler
#53646 - Use addHeadersEndHandler instead of addEndHandler for Undertow compression
#53647 - Remove deprecated datasource.jdbc.enable-metrics which was once removed
#53650 - Dev MCP description and documentation update
#53653 - Disable Quarkus Config based Hibernate ORM configuration early when persistence.xml is enabled
#53661 - Bump the minimum officially supported GraalVM version to 25.0
#53662 - Fix 'occured' -> 'occurred' across DevUI i18n and qute template timeout
#53663 - Allow extensions to contribute action buttons to cards
#53666 - Simplify GHA scripts/json for integration test filtering
#53672 - Improve AGENTS.md and skills
#53675 - Remove DirectExportedModulesAPIModulesReconfigurer
#53686 - Update LLM summary on CONTRIBUTING.md
#53689 - Fix nested list handling in Javadoc to AsciiDoc converter
#53692 - Regression: ConfigProvider.getConfig().getValue("quarkus.http.port", Integer.class) does not work in BeforeAll methods
#53710 - Fix spelling errors
#53719 - Bump com.gradle.develocity from 4.3.2 to 4.4.1 in /devtools/gradle
#53724 - Polish CsrfRequestResponseReactiveFilter
#53726 - Add note about AI contribution scrutiny
#53727 - Fix ConfigProvider.getConfig() regression in @BeforeAll with @QuarkusIntegrationTest
#53730 - Move Spring Data JPA to Gizmo2
#53734 - Move Hibernate Dev UI from hibernate-tools-language (Tools) to hibernate-assistant (ORM)
#53735 - Bump Keycloak version to 26.6.1
#53746 - Tree-shake the CLI
#53757 - ArC: Add support for RegEx in @LookupIfProperty stringValue
#53760 - Bump org.mvnpm.at.viz-js:viz from 3.24.0 to 3.26.0
#53761 - Add JpaJandexScavenger unit tests and enum persistence test
#53763 - Remove deploy-snapshots workflow
#53766 - Update Extension Structure Guidelines - Package Name Rules for runtime-api
#53768 - Add metacosm to be notified of kubernetes-related issues
#53769 - Remove gastaldi from backport branch notifications
#53771 - Bump de.thetaphi:forbiddenapis Maven plugin from 3.4 to 3.10
#53773 - Support for OIDC SPIFFE Client Authentication
#53774 - Arc regex property matching
#53788 - Introduce quarkus-signals experimental extension
#53793 - Update CONTRIBUTING.md snapshot instructions
#53798 - Update remaining actions to pinned shas
#53803 - Bump io.smallrye.reactive:mutiny-zero-flow-adapters from 1.1.1 to 1.2.0
#53807 - Fix potential NPE and warn if trustall is being used in the exporter
#53809 - Polish ResteasyReactiveCommonProcessor
#53820 - Allow Quarkus apps to build with GraalVM and Mandrel 23.1
#53826 - Remove leftover mTLS test resources from quarkus-resteasy-reactive module
#53840 - Bump org.mvnpm:ldrs from 1.1.7 to 1.1.9
#53841 - Bump com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0
#53843 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.129 to 0.0.130
#53844 - Bump smallrye-open-api.version from 4.3.0 to 4.3.1
#53845 - Bump org.eclipse.microprofile.config:microprofile-config-tck from 3.1 to 3.1.1
#53856 - GraphQL client TLS reload
#53859 - Add a way for test dependencies to influence surefire
#53860 - OTel resource attributes for Kubernetes
#53864 - Reusable Data memory mode option in OTel exporters
#53873 - Panache Next: cannot use @InjectMock on repositories
#53875 - Bump Mutiny to 3.2.0 and the Vert.x Mutiny bindings to 3.22.1
#53878 - Bump com.google.errorprone:error_prone_annotations from 2.48.0 to 2.49.0
#53883 - Add test for dev services config isolation
#53884 - Trigger a restart upon adding a Flyway migration script & fix Flyway DevUI not correctly setting configuration when initializing from Hibernate
#53887 - Add reproducer test for testcontainers reuse broken by process-uuid label
#53889 - Support security annotations on Panache Next repositories
#53890 - Add rule about failing test in relevant skill
#53892 - Fix spelling in DevServicesSharedNetworkBuildItem
#53895 - Support read-only root file system and privilege escalation options
#53898 - Squash typo in comment
#53902 - Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
#53903 - Bump commons-codec:commons-codec from 1.21.0 to 1.22.0
#53909 - Bump elasticsearch-opensource-components.version from 9.3.2 to 9.3.4
#53911 - Bump org.bouncycastle:bctls-fips from 2.1.22 to 2.1.23
#53912 - OIDC extensions: reload provider WebClient TLS certificates when they are rotated
#53913 - Fix typo in Panache Next security annotation validation
#53914 - Rest Client fail on redirected calls when prometheus metrics are configured
#53915 - Apply client request customizer to redirect requests
#53916 - Add support for more Jackson annotations in generated reflection-free serializers
#53917 - Refactor SBOM aggregation API to allow extension contributions
#53919 - Rename SPIFFE enum value to SPIFFE_JWT
#53921 - Deprecate LateBoundSpanProcessor
#53923 - Embed SBOM in native image via generated GraalVM Feature
#53924 - Remove useless codegen annotations and bump smallrye-mutiny-vertx
#53930 - Strip matrix parameters from request paths during HTTP security polic…
#53939 - Add bob generated directory to gitignore
#53942 - Add a skill on how to write a Dev UI for a Quarkus extension
#53944 - Bump the hibernate group with 9 updates
#53945 - Bump org.mvnpm.at.mvnpm:vaadin-webcomponents from 25.1.0 to 25.1.2
#53958 - Qute: use source URI in TemplateException message
#53959 - Qute: string concatenation with + does not work in #let composite expressions
#53962 - Allow to customize OIDC JavaScript redirect workaround response
#53967 - Replace @Dependant with @ApplicationScoped in Panache repositories
#53968 - Add note about deprecated APIs
#53976 - Tweak the picocli TestVersion test
#53980 - Qute: support literal values as the base of expressions
#53983 - Add AI skill for quarkus-smallrye-health
#53990 - Add AI skill for quarkus-smallrye-health
#54002 - Update Dev MCP documentation to emphasize quarkus-agent-mcp as the recommended connection method
#54016 - Provide MultiBuildItem to allow modifaction index used by GraphQL
#54017 - OpenTelemetry skill
#54019 - Bump Agroal to 3.1
#54023 - Add AI skill for quarkus-redis-client
#54024 - Add AI skill for quarkus-redis-client
#54026 - Add MultiBuildItem to allow modification of the index used by GraphQL
#54035 - Fix NPE in GraphQL source field resolvers when CompletionStage completes off the Vert.x event loop
#54036 - Add .agents/** to CI sanity check path triggers
#54043 - Micrometer skill
#54044 - Add an asyncExit method that accepts an exception
#54045 - Fix ECS log format to write error.stack_trace as a flat string
#54046 - Test fix for continuous testing with @QuarkusTest meta annotation
#54051 - Add AI skill for quarkus-smallrye-jwt
#54058 - Add AI skill for quarkus-smallrye-jwt
#54059 - Add AI skill for quarkus-micrometer
#54081 - Update test skill to mention how to set configuration
#54085 - Improve Micrometer test resilience
#54096 - Document the easier method for including a dev service url in dev ui
#54099 - Adding an exit throwable to asyncExit
#54113 - Add AI skill for quarkus-security-webauthn
#54114 - Add AI skill for quarkus-security-webauthn
#54124 - Avoid an additional copy of supported versions in SECURITY.md
#54126 - Add AI skill for quarkus-smallrye-jwt-build
#54127 - quarkus-opentelemetry native image on JDK 25: IllegalArgumentException: Receiver type ManagementSupport$$Lambda is not an instance of com.sun.management.OperatingSystemMXBean at runtime
#54128 - Add AI skill for quarkus-smallrye-jwt-build
#54139 - Tree shake optimizaitons
#54140 - Fix CNFE for CpuMethods otel class
#54146 - SunPKCS provider is not available at runtime
#54147 - Apply security provider specific configuration at runtime
#54148 - Bump Narayana from 7.3.3.Final to 7.3.4.Final
#54151 - Bump wildfly-elytron.version from 2.8.4.Final to 2.9.0.Final