quarkusio/quarkus 3.7.0.CR1 on GitHub

Major changes

#38066 - Drop Okhttp/Okio from BOM
#38029 - Allow applications using quakus-info to contribute data to the /info using CDI
#37891 - Split OIDC session cookie if its size is more than 4KB
#37794 - Update SmallRye Config to 3.5.1
#37730 - Introduce LinkedIn OIDC provider
#37472 - Provide a way to observe security events
#37269 - Support certificate role mappings
#37152 - Support token verification with the inlined certificate chain
#36978 - Upgrade to Hibernate ORM 6.4, Hibernate Search 7.0, Hibernate Reactive 2.2
#36945 - Support Micrometer @MeterTag
#35065 - Add Hibernate Search management endpoint

Complete changelog

#38233 - Bump resteasy.version from 6.2.6.Final to 6.2.7.Final
#38232 - Bump wildfly-elytron.version from 2.2.2.Final to 2.2.3.Final
#38229 - Ensure the refreshed CSRF cookie retains the original value
#38227 - Add dependency management for org.hibernate:hibernate-jpamodelgen
#38225 - CSRF Token is refreshed on every request
#38224 - Revert "Fixing Jaxb unmarshalling error with native compilation"
#38218 - Make subject configurable in OidcWiremockTestResource
#38214 - Introduce a way to ignore mixing REST stacks errors
#38213 - AWS Lambda Rest: split the amazon-lambda-rest integration module
#38211 - Add trustAll to QuarkusRestClientBuilder
#38209 - Bump com.github.javaparser:javaparser-core from 3.25.6 to 3.25.8
#38208 - Bump io.smallrye.reactive:smallrye-mutiny-vertx-core from 3.7.2 to 3.8.0
#38207 - Bump elasticsearch-opensource-components.version from 8.11.3 to 8.11.4
#38206 - Add configurations for base image layer and application layer cache in Jib build
#38201 - Update Maven Surefire plugin to 3.2.5
#38195 - Fix Arc request context state restoration on Vert.x duplicated context which allows to support security events in gRPC
#38193 - Infinispan Client, tests skip if test-containers is not set
#38192 - Remove leading and trailing space from k8s labels
#38190 - Rename RESTEasy Classic client extensions to resteasy-client
#38188 - ADR for removal of reactive when reactive is not a requirement
#38185 - Make sure quarkus.http.filter headers don't remove existing headers
#38175 - Resouce name with whitespaces
#38168 - Bump io.micrometer:micrometer-bom from 1.12.1 to 1.12.2
#38167 - Bump org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable from 1.6.0 to 1.9.22
#38165 - Use smallrye-reactive-messaging-bom
#38162 - Bump Hibernate ORM to 6.4.1.Final and Hibernate Reactive to 2.2.1.Final
#38161 - Add metrics when the connections limit is set
#38159 - Investigate request context activation/deactivation in grpc interceptor
#38155 - Using http filter config is disabling CORS options
#38153 - SmallRye GraphQL 2.7.0
#38149 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.4.4 to 3.5.2 in /devtools/gradle
#38148 - Support Liberica NIK GraalVM version parsing
#38145 - Use RestEasy Reactive instead of classic in the extension's IT
#38143 - New Route SPI not requiring Vert.x HTTP
#38136 - Introduce option to create uncompressed jars
#38134 - Bump version.cdi-tck from 4.0.12 to 4.0.13
#38131 - Use headers set in PreMatching filter during media type negotiation
#38130 - Changing Accept Header in PreMatching filter doesn't affect routing
#38128 - Allow for creation of non-compressed jars
#38126 - Bump kubernetes-client-bom from 6.9.2 to 6.10.0
#38121 - ArC: introduce quarkus.arc.optimize-contexts=auto
#38117 - Keep static instance field and delete unused field in substitution
#38116 - Support ManyToOne queries in Panache REST resource
#38113 - Bump org.assertj:assertj-core from 3.24.2 to 3.25.1
#38110 - Bump org.apache.logging.log4j:log4j-api from 2.22.0 to 2.22.1
#38107 - Arc - Decide whether req. context is active based on validity of its ContextState
#38106 - Fix swallowed failures in Reactive SQL Client tests
#38104 - Bump smallrye-reactive-messaging.version from 4.14.0 to 4.15.0
#38100 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
#38091 - Support Java Records in bytecode recorders
#38089 - OpenTelemetry: fine-grained instrumentation enablement
#38087 - Fix NPE and otel quickstart test
#38084 - NPE when disabling OpenTelemetry
#38081 - Add quarkus version annotation to kubernetes resources
#38075 - Docs: Add documentation for ClientMultipartForm class introduced in for creating custom Multipart for Rest-Client-Reactive.
#38072 - Bump apicurio-registry.version from 2.5.7.Final to 2.5.8.Final
#38068 - Bump dekorate to 4.1.2
#38067 - gRPC client over TLS not working
#38066 - Drop Okhttp/Okio from BOM
#38065 - ArC: deprecate ArcInitConfig.Builder.setOptimizeContexts()
#38064 - Add custom Kotlin serializers for ValidationReport and Violation
#38063 - Do not wait for daemon threads when building docs
#38059 - Fix Reactive Messaging Extension multiple different Emitter injections check
#38056 - Bump OTel to 1.32.0
#38054 - Kafka fails with mutiple emitters on same channel
#38048 - Docs: Final edits, Style enhancements, Vale checks
#38034 - Update to Vertx 4.5.1
#38031 - Expose an API for programmatically creating multipart requests in reactive REST Client
#38029 - Allow applications using quakus-info to contribute data to the /info using CDI
#38027 - Update SmallRye Config to 3.5.2
#38025 - Add priority to OpenApiFilter to specify order of execution for multiple OASFilters
#38024 - Docs: Final edits, Style enhancements, Vale checks
#38023 - Update SmallRye Health to 4.1.0
#38022 - Disable impls of ConfigurableConfigSourceFactory that perform network access, when building AppCDS
#38021 - Scheduler: Quartz - support JobDefinition API if DB type store is used
#38020 - Enable Custom Java Arguments for AppCDS Archive Generation
#38017 - Use UTF-8 constant in QuarkusEntryPoint
#38016 - Bump org.asciidoctor:asciidoctorj from 2.5.10 to 2.5.11
#38015 - Bump com.fasterxml.jackson:jackson-bom from 2.16.0 to 2.16.1
#38014 - Bump elasticsearch-opensource-components.version from 8.11.1 to 8.11.3
#38012 - Bump org.assertj:assertj-core from 3.25.0 to 3.25.1 in /devtools/gradle
#38005 - Display Json output before injecting build scans
#38004 - Avoid integration-tests/kafka-sasl-elytron to modify test resources
#38002 - integration-tests/kafka-sasl-elytron tests modify files in src/test/resources
#37998 - ArC: improve description of injection points that are parameters
#37995 - Fix javadoc of RESTEasy Reactive filters
#37994 - Provide a way for applications to contribute to the /info enpoint
#37986 - Bump smallrye-open-api from 3.7.0 to 3.8.0
#37982 - ArC: use a separate lock for each bean in generated ContextInstances
#37978 - Bump Keycloak version to 23.0.3
#37977 - Clarify how Keycloak Dev Service can be used to test Keycloak authorization
#37976 - Add documentation for pushing with Podman to Heroku
#37974 - Add test for EnumConverter
#37972 - Expose pandaproxy port in Redpanda dev services
#37970 - Kafka Devservices Redpanda expose Pandaproxy/Http Proxy
#37969 - Bump org.assertj:assertj-core from 3.24.2 to 3.25.0 in /devtools/gradle
#37967 - Testing OIDC service with OidcWiremock section is not clear that it can not be used with Keycloak Authorization
#37966 - Support basic, mTLS and bearer access token based auth and authorization using annotations when running on Vert.x gRPC server
#37964 - OIDC Keycloak devservice keeps throwing 403
#37958 - Upgrading from 3.5.3 to 3.6.1 ,3.6.3,3.6.4 Quakust test will not start with Thread Thread[vert.x-eventloop-thread-6,5,main] has been blocked for 2460 m
#37944 - PortSystemProperties sets wrong properties for HTTPS
#37943 - Extension logging-gelf: Adding missing GELF MDC Config
#37938 - Overhauled handling of local extensions in Gradle DevTools
#37937 - Bump com.google.errorprone:error_prone_annotations from 2.23.0 to 2.24.0
#37935 - Reproduce #37934 Failed to find class com.fasterxml.jackson.databindext.CoreXMLSerializers when a POJO has field of type javax.xml.datatype.XMLGregorianCalendar
#37934 - Failed to find class com.fasterxml.jackson.databind.ext.CoreXMLSerializers when a POJO has field of type javax.xml.datatype.XMLGregorianCalendar
#37931 - Document that QuarkuTestResourceLifecycleManager is not a CDI Bean
#37923 - missing constructor parameter annotation reported as if member is missing annotation
#37915 - Bump org.apache.groovy:groovy from 4.0.16 to 4.0.17
#37910 - Remove Justin Lee from the maintainers lists for Kotlin and MongoDB related extensions
#37908 - Typo in gradle example
#37906 - Fix type/unremovable for reactive client CDI beans, make DataSource beans application-scoped, more consistent exceptions for unconfigured datasources
#37899 - Bump Smallrye Reactive Messaging version from 4.12.0 to 4.13.0
#37895 - Bump the owasp dependency check plugin version to 9.0.7
#37894 - Bump org.mariadb.jdbc:mariadb-java-client from 3.3.1 to 3.3.2
#37891 - Split OIDC session cookie if its size is more than 4KB
#37888 - Docs: Final edits, Style enhancements, Vale checks
#37887 - Update reference metrics for Mandrel/GraalVM 23.0
#37885 - Add Hibernate projects to dependabot (for micros only)
#37884 - Document datasource Dev Service reuse, add configuration to disable it, and enable reuse of Elasticsearch Dev Service containers
#37882 - The ImageMetricsITCase failing with RH Mandrel
#37879 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
#37878 - Remove preapproved developers list to publish Build Scans
#37877 - Minor improvements to Dev Service config javadoc
#37872 - Bump org.checkerframework:checker-qual from 3.41.0 to 3.42.0
#37870 - Add confluent jsonserde support
#37869 - Edit security-jpa.adoc
#37863 - Reorg of Kotlin and Mongo related maintainers
#37862 - [GraalVM for JDK 22] kafka-oauth-keycloak native integration test fails with latest GraalVM sources
#37860 - Qute - message bundles: skip unnecessary build steps
#37857 - Bump com.google.guava:guava from 32.1.3-jre to 33.0.0-jre
#37855 - OpenShift deployment fails over HTTP POST request to service monitor URL
#37851 - Edit security-proactive-authentication.adoc
#37850 - Support for OAuth2 Strava
#37849 - Edit security-overview.adoc
#37844 - Edit security-jpa.adoc
#37842 - Upgrade to Maven Compiler Plugin 3.12.1
#37841 - Also condition docker config update in native tests
#37840 - Edit security-identity-providers.adoc
#37839 - Support Strava OAuth2 provider
#37838 - Reorg of persistence related maintainers
#37837 - Add dmlloyd to notify list for logging area
#37836 - Support for splitting OIDC session cookie into chunks
#37833 - Fix generation of Scheduler startmode enum tooltip
#37832 - Scheduler: JobDefinition API is only supported if RAM store type is used
#37830 - Take max-chunk-size config into account for programmatic client
#37829 - Scheduler: support skip predicate class with public no-args constructor
#37822 - Bump org.liquibase:liquibase-core from 4.25.0 to 4.25.1
#37820 - Introduce env variable QUARKUS_NATIVE_IT_SKIP_VERIFY_IMAGE_METRICS
#37819 - Fix OIDC Security event fired before runtime config ready in Arc
#37818 - Scheduler start-mode enum not shown properly in scheduler config reference
#37817 - Edit security-getting-started-tutorial.adoc
#37814 - Fix flaky HttpSecurityPolicySecurityEventTest
#37813 - JDK-8316304 in JDK 21 introduced a new field accessed through JNI
#37812 - Fix name in Dev Tools matrix
#37805 - Scheduler - JobDefinition programmatic API does not work if quarkus-quartz and DB type store is used
#37801 - Add org.mockito:mockito-junit-jupiter to quarkus-junit5-mockito
#37800 - Update links to java docs from java 11 to java 17
#37799 - Docs security JPA small enhancement and fix
#37797 - Upgrade to Maven Surefire Plugin 3.2.3
#37796 - Docs: clarify reference to elytron-security-jdbc extension in the Security JDBC guide
#37794 - Update SmallRye Config to 3.5.1
#37793 - Docs: fix wrong link in Security JDBC guide
#37790 - Introduce shared HTTP permissions to avoid duplication across multiple HTTP permissions and to simplify creation of HTTP permissions
#37788 - Fix primitive class handling in Serialisers
#37786 - MaxChunkSize not taken into account for Quarkus Reasteasy Reactive client
#37784 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.11.1 to 4.12.0
#37781 - Security guide writer's review
#37780 - MockitoExtension is Missing In Action when quarkus-junit5-mockito is imported
#37774 - ArC: improve error message for unsatisfied dependency
#37773 - Add build-metadata-file-path as extra input to report action
#37771 - Docs: security-jdbc guide linking user entity section where is used built-in bcrypt password mapper
#37769 - Use JDK 17 in sdkman file
#37766 - Upgrade to Vaadin 24.3.0 and lit 3.1.0
#37760 - Fire OIDC security event when OIDC server not available
#37759 - Edit security-architecture.adoc
#37758 - Bump com.gradle.enterprise from 3.16 to 3.16.1 in /devtools/gradle
#37755 - Docs: Security JWT guide minor fixes
#37752 - Introduce BuildInfo.quarkusVersion
#37751 - Collect and expose compile-only dependencies through ApplicationModel
#37748 - Keycloak docs fix wrong link and add small enhancement
#37747 - Native Build vs. Runtime Profiles Mismatch and Doubled-Up Using Parent Profile
#37741 - CDI request scope deactivation does not work on duplicated context
#37740 - Bump to Mutiny 2.5.3
#37739 - Core: make it possible to index dependencies with a specific groupId
#37738 - Docs: Fix typo in Qute.java javadoc
#37736 - ArC: clarify the description of quarkus.arc.context-propagation.enabled
#37734 - Docs: Qute and RESTEasy Reactive integration clarification
#37730 - Introduce LinkedIn OIDC provider
#37726 - Support OIDC LinkedIn provider
#37724 - Docs: Remove section documenting support for other OpenID Connect Providers that does not work in new DEV UI
#37722 - Add apicurio jsonserde support
#37719 - Fix test by adding ad-hoc LocalDate support
#37709 - Fix ServiceMonitor generation (targetPort type and dekorate bump)
#37707 - Remove duplicate runtime init io.netty.buffer.PooledByteBufAllocator
#37703 - Bump io.smallrye.reactive:smallrye-reactive-messaging-jms from 4.10.1 to 4.12.0
#37701 - Bump org.eclipse.jgit:org.eclipse.jgit from 6.7.0.202309050840-r to 6.8.0.202311291450-r
#37699 - Update JReleaser descriptors for quarkus-cli to Java 17
#37697 - Document that JDK 17+ is Quarkus prerequisity
#37696 - Docs: dont use deprecated RoutingContext cookies methods in OIDC multitenancy guide example
#37694 - Improve security-getting-started-tutorial doc
#37692 - Improve OIDC bearer token concept doc
#37689 - Improve OIDC code flow concept document
#37684 - Support mounting host file/directory to devservices containers
#37681 - Fix for accurate LEX operations on Redis Test Suite
#37679 - Skip CDS test if the JDK cannot create AppCDS
#37678 - Bump io.micrometer:micrometer-bom from 1.11.5 to 1.12.1
#37675 - Bump org.postgresql:postgresql from 42.6.0 to 42.7.1
#37674 - Bump org.apache.groovy:groovy from 4.0.15 to 4.0.16
#37673 - Bump org.wiremock:wiremock-standalone from 3.2.0 to 3.3.1
#37671 - Bump rest-assured.version from 5.3.2 to 5.4.0
#37670 - Save FixedProducesHandler lookup
#37668 - Work around fishy Jackson test
#37663 - Fix Build Scan publication
#37662 - Jackson integration tests fail if TZ is west of GMT
#37661 - Docs: security-openid-connect-dev-services#dev-services-and-ui-support-for-other-openid-connect-providers section is doesn't work in new DEV UI
#37660 - Dev UI - Cache - show keys contained in a cache
#37659 - Hibernate ORM graphql panache test fails if time zone is west of GMT
#37658 - Infinispan client deployment tests fail unless test-containers and start-containers is set
#37656 - Serialisers.findWriters primitive wrapper lookup performance
#37655 - Optimise primitive clazz checks
#37652 - Mention Coordinated omission explicitly in performance section
#37648 - ArC: detect incorrect usage of javax.inject.Singleton
#37647 - Use run-java script when possible
#37646 - Remove unnecessary content type checks
#37642 - View cache Data in quarkus dev-ui (quarkus-cache)
#37641 - Maps in ConfigMappings, that reference other ConfigMappings
#37637 - Skip performing content negotiation twice
#37631 - Bump org.mariadb.jdbc:mariadb-java-client from 3.3.0 to 3.3.1
#37630 - Bump com.nimbusds:nimbus-jose-jwt from 9.37.2 to 9.37.3
#37629 - AwtProcessor use the default native-image version if necessary
#37624 - Improve MongoDB tests on Java records
#37621 - ArC dev mode: introduce quarkus.arc.dev-mode.generate-dependency-graphs
#37616 - Review and edits to Protect a web service by using bearer token authentication tutorial
#37615 - Using optimized Vertx HTTP header names
#37609 - Scheduler: javadoc/docs clarifications
#37597 - Bump org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0
#37593 - Bump artemis.version from 2.31.0 to 2.31.2
#37592 - Bump com.fasterxml:classmate from 1.5.1 to 1.6.0
#37591 - Fix terminology: Replace configuration key with configuration property
#37584 - Edit Using OpenID Connect (OIDC) multitenancy
#37580 - Make REST Client a bean when the scope property is set in config
#37577 - @ConfigMapping with Optional values does not load values when inheriting interface
#37576 - Fix ContainerRuntimeUtil.ContainerRuntime#isPodman check
#37573 - Create new entry for Mvnpm notifications
#37568 - Fix Build scan capture extension registration when using the Maven wrapper
#37567 - ScheduledExecution.getTrigger().getPreviousFireTime() returns the same time as ScheduledExecution.getFireTime()
#37566 - Edit Dev Services and UI for OIDC
#37562 - Documentation fixes for Authorization of web endpoints guide
#37560 - Multiple changes for spring-security guide
#37551 - Bump org.mockito:mockito-core from 5.4.0 to 5.8.0
#37548 - Bump org.checkerframework:checker-qual from 3.40.0 to 3.41.0
#37543 - Fix smallrye ConfigValidationException not being handled properly at Quarkus startup
#37542 - Bump com.gradle.enterprise from 3.15.1 to 3.16 in /devtools/gradle
#37541 - Order Map entries when serializing registry artifacts
#37540 - Docs: security-authorize-web-endpoints-reference Guide
#37539 - Edit the OIDC and OAuth2 Client and Filters Reference Guide
#37534 - Edit OpenID Connect client and token propagation quickstart
#37530 - Docs: Spring security guide
#37529 - Zero-Garbage ContextInstances::forEach
#37527 - Upgrade to Hibernate Search 7.0.0.Final
#37522 - Improve security-oidc-bearer-token-authentication-tutorial
#37519 - Configuration property %test,prod.quarkus.log.category."...".level is ignored in native mode
#37511 - Add more parameter types in Dev UI JsonRPC Tests
#37507 - Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 4.9.2 to 4.11.1
#37506 - Bump org.liquibase:liquibase-core from 4.24.0 to 4.25.0
#37504 - Bump com.unboundid:unboundid-ldapsdk from 6.0.10 to 6.0.11
#37503 - Bump grpc.version from 1.59.0 to 1.59.1
#37502 - Bump com.nimbusds:nimbus-jose-jwt from 9.34 to 9.37.2
#37501 - Bump org.mockito:mockito-bom from 5.3.1 to 5.8.0
#37499 - Docs: security-getting-started-tutorial guide
#37497 - Edit the OIDC and OAuth2 Client and Filters Reference Guide
#37489 - Remove the container-image-s2i extension
#37484 - Updated scheduler docs (tracing)
#37481 - Testing tool for Dev UI doesn't allow testing JSON-RPC methods that take non-string arguments
#37477 - Make hibernate-jpamodelgen easier to apply to Quarkus 3.7+ projects
#37476 - Fix javadoc of VertxHttpServerMetrics
#37472 - Provide a way to observe security events
#37464 - Improve security-oidc-code-flow-authentication-tutorial
#37463 - Docs: security-oidc-bearer-token-authentication guide
#37461 - Service binding doesn't work as SERVICE_BINDING_ROOT expression is not expanded
#37460 - Dependency fixes for Hibernate extensions
#37458 - Move Java 17 records tests to their respective modules
#37456 - Core: ignore attempts to on-demand index primitive types and arrays
#37452 - "Failed to index long" warning in MongodbPanacheTransactionTest
#37448 - Build Scan publication action update
#37445 - Introduce quarkus.package.decompiler config
#37442 - Bump org.jetbrains:annotations from 24.0.1 to 24.1.0
#37441 - Bump com.google.errorprone:error_prone_annotations from 2.22.0 to 2.23.0
#37438 - Edit Security Authentication mechanisms guide
#37435 - Bump the owasp dependency check plugin version to 9.0.1
#37433 - Build cache - Include the native executable -runner in failsafe input
#37429 - Update README.md and CONTRIBUTING.md for Java 17+
#37423 - Stop removing org.graalvm.polyglot:polyglot artifact from native classpath
#37422 - Docs: OpenID Connect authorization code flow mechanism
#37419 - Improve error message when the client cannot be created
#37418 - Index the gRPC stub dependency
#37414 - Enhancing Quarkus Security for ROOT Group Access
#37412 - Bump Keycloak version to 23.0.1
#37407 - Fix HTTP access logging of authenticated remote user when Jakarta REST SecurityContext is used
#37404 - Docs: security-oidc-bearer-token-authentication-tutorial guide
#37397 - ArC: fix in-application build compatible extensions
#37389 - Use --interactive option when using docker inside Windows' WSL
#37381 - Fixes workspace discovery based on effective POMs
#37380 - quarkus-info extension and Quarkus Version info
#37377 - Check native-tests.json/virtual-threads-tests.json in CI build
#37374 - Rename hibernate-search-orm-elasticsearch-outbox-polling in native-tests.json
#37369 - Bump org.mariadb.jdbc:mariadb-java-client from 3.2.0 to 3.3.0
#37368 - Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0
#37356 - Add relocation artifacts for quarkus-hibernate-search-orm-coordination-outbox-polling renaming
#37355 - Qute: improve the key/property/method "not found" error message
#37349 - Remove OpenshiftBaseXXXImage classes
#37345 - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.21.0-alpha to 1.23.1-alpha
#37343 - Bump apicurio-registry.version from 2.5.1.Final to 2.5.3.Final
#37342 - Bump org.apache.logging.log4j:log4j-api from 2.20.0 to 2.22.0
#37341 - Bump org.checkerframework:checker-qual from 3.38.0 to 3.40.0
#37339 - Add comment about runtime initializing class for google cloud SQL
#37337 - NoClassDefFoundError in BuildCompatibleExtension
#37335 - Move baseline from Java 11 to Java 17
#37333 - Docs: security-oidc-code-flow-authentication-tutorial guide
#37332 - Rename the Vineflower properties ?
#37330 - Handle symlink dirs
#37329 - JPA test cleanup
#37328 - Run Sonarcloud analysis with Java 17 and schedule it for Sunday
#37324 - Automatically disable the HTTP port when client certs are required
#37312 - Index missing in quarkus-grpc-stubs
#37311 - Bump smallrye-reactive-messaging.version from 4.11.0 to 4.12.0
#37309 - Bump org.mvnpm:es-module-shims from 1.8.1 to 1.8.2
#37302 - ArC: allow putting bean enablement annotations on stereotypes
#37297 - Build cache - Apply better inheritance rules
#37295 - Bump Jackson to 2.16.0
#37282 - Escape column names with backticks in order by clause of hql query
#37278 - Allow for model module exclusions in native mode
#37276 - Dev UI Filter by any config source
#37275 - Allow to map token roles to deployment-specific SecurityIdentity roles
#37272 - [error]: Build step io.quarkus.deployment.pkg.steps.NativeImageBuildStep#build threw an exception: java.lang.RuntimeException: Failed to get GraalVM version
#37269 - Support certificate role mappings
#37267 - Redis: add minimal connection pooling documentation
#37263 - Qute: make the global variables accessible via "global:" namespace
#37262 - Wrong type for EncoderMode used in rest-client
#37261 - ClassCastException in PausableHttpPostRequestEncoder for custom encoder-mode in configuration
#37257 - Allow restricting OidcRequestFilters to specific OIDC endpoints
#37256 - Allow restricting OidcRequestFilter to specific OIDC endpoints and scopes
#37239 - Build scans - Allow publishing build scans for everyone
#37237 - Security doc enhancement
#37233 - Bump apicurio-registry.version from 2.4.14.Final to 2.5.1.Final
#37232 - Bump com.github.javaparser:javaparser-core from 3.25.5 to 3.25.6
#37231 - Bump org.eclipse.microprofile.telemetry.tracing:microprofile-telemetry-tracing-tck from 1.0 to 1.1
#37229 - Deprecate DeploymentConfig
#37223 - Quarkus cannot find gRPC input files through symlinks
#37219 - Warn when the HTTP method is not supposed to have a body
#37217 - devui config should show config source more prominently
#37207 - Vertx: make the address in ConsumeEvent annotation configurable
#37202 - Fix rendering of documentation tooltip when enum description contains paragraphs
#37196 - Minor doc fixes identified during QE cycle
#37192 - Support repeated wildcards in the HTTP permissions path matching patterns
#37191 - Bump org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.7.1 to 1.7.3
#37184 - Changed JSON array is not persisted when using hibernate6 / jsonb
#37176 - Simplify pom.xml since we have a common parent now
#37164 - Bump org.jetbrains.dokka:dokka-maven-plugin from 1.9.0 to 1.9.10
#37163 - Bump elasticsearch-opensource-components.version from 8.10.4 to 8.11.1
#37156 - Allow a bit more Dependabot PRs
#37155 - Inject the build scans into our reports
#37152 - Support token verification with the inlined certificate chain
#37151 - Verify OIDC bearer tokens with inlined certificate chains
#37144 - Allow integration with quarkus-vertx-http without a "hard" dependency
#37131 - Fix vale errors in Security Authentication mechanisms
#37126 - Bump org.jboss.resteasy.spring:resteasy-spring-web from 3.0.2.Final to 3.1.0.Final
#37123 - Generate prometheus ServiceMonitor CR
#37117 - @IfBuildProfile cannot be used in a stereotype
#37111 - Fix MQTT devService always start even if the host/port channel is set
#37106 - Introduces quarkus.locales=all
#37100 - Adjust output file name in develocity-publish-build-scans.yml
#37098 - Provide the ability to define extension Java version on creation
#37083 - ArC: fix some corner cases in Build Compatible Extensions
#37081 - Add backward compatible support for multiple extensions in CodeGenProvider
#37075 - Arc - @Default beans can now be ordered via @Priority
#37062 - Remove Old Dev UI Logstream WebSocket
#37044 - Better support for APT in dev mode
#37042 - Make @DefaultBean work with @Priority
#37041 - Redis cache: Failed to connect to all nodes of the cluster
#37024 - Final edits and Vale fixes in OIDC authorization code flow mechanism for protecting web applications guide for 3.2
#37007 - REST client reactive should allow to instantiate clients based on (external) classes without @RegisterRestClient annotation
#36996 - Native builds fail after upgrading to Quarkus 3.5.1, Mandrel 23.1.1.0-Final and Java 21
#36988 - Update Protoc to version 3.25.0
#36978 - Upgrade to Hibernate ORM 6.4, Hibernate Search 7.0, Hibernate Reactive 2.2
#36960 - Fix vale error in grpc, oidc, and vertx areas
#36954 - Fix restore happening in the same thread
#36945 - Support Micrometer @MeterTag
#36943 - Erroneous resteasy "Attempting a blocking read on io thread"
#36928 - Fix bad numbering format (.1.) for section numbers (sectnums) and some...
#36876 - NumberFormat.getInstance(locale).parse() does not work correctly even after -H:+IncludeAllLocales in native mode
#36851 - Quarkus EventBus - Set address of ConsumeEvent from configuration
#36722 - Add error message to quarkus-resteasy-reactive-links and improve documentation
#36644 - OTel upgrade to 1.31.0
#36592 - Methods returning TemplateInstance reported as not blocking
#36577 - Should we update S2iBaseJavaImage and OpenshiftBaseJavaImage?
#36558 - Kotlinx.serialization not configured to work with Quarkus Hibernate Validation out of the box
#36508 - Remove custom Keycloak image code from the keycloak-authorization tests
#36401 - Tooltips for enum values are rendered incorrectly in documentation of configuration properties
#36379 - Setting base image layer and application layer cache in Jib build
#36376 - quarkus.test.integration-test-profile ignored in IT startup error message if startup fails because of ConfigValidationException
#36363 - Hibernate ORM 6.2 - NullPointerException in TupleMappingModelExpressible
#36357 - Check runtime Maven version is aligned with wrapper Maven version
#36334 - Update config-yaml.adoc
#36108 - Check for code usage fluctuations in native images
#35989 - Scheduler: OTel Instrumentation feature improvements and refactoring
#35920 - Unable to add additional handling when OIDC provider is not available
#35912 - OpenTelemetry - Disable Span/Scope creation
#35746 - AWT needs native-image installed to do native-source build
#35310 - Hibernate in Quarkus does not lazy load field when it is not based on the Primary Key from the parent table
#35265 - Authenticated user is not logged in http access logs
#35113 - Allow JSON serialization customization in ORM
#35065 - Add Hibernate Search management endpoint
#34553 - Management endpoint for Hibernate Search
#34160 - Order interposed sychronizations
#34123 - Add quarkus.arc.context-propagation.enabled to Context Progagation guide
#33895 - Hibernate 6.2.4.Final in Quarkus 3.1.1.Final breaks GROUP BY statements in PostgreSQL when there is a JSON column type in the association
#33485 - ArC - improve the error message for unsatisfied dependency
#33316 - Index all dependencies with a certain groupId
#32532 - JPA concurrent locking of Entities fails in Quarkus 3.0.0.CR2
#32463 - Quarkus 2.16.6: MQTT Connector allways starts dev services although all config is provided
#32215 - Native build show no output when using docker 20.10 on ubuntu wsl
#32150 - Add ManyToOne relation filtering in PanacheEntityResource
#32029 - Use default ObjectMapper in FormatMappers Configuration for Hibernate ORM's JSONType
#30115 - Allow accessing the ClientSession programmatively
#29234 - Better gradle composite build support
#28552 - traceId, spanId not set in logs when using quartz and opentelemetry
#27707 - Added close handler on initial response for reactive SseEventSinkImpl
#26549 - SPI for performed authorization checks
#23683 - Support role mapping for Client certificates
#20092 - GraphQL authenticated subscription
#18737 - Incorrect "WARN Closing open connection prior to commit" when handling BEFORE_COMMIT event
#14047 - Support complex wildcard path matching for authorization of web endpoints
#5255 - HTTP Security Policy should support the role mappings
#1502 - Annotation processors are not re-run in dev mode
#1120 - Panache - Sort properties injected in the query should be escaped somehow