Skip to content

Bump quarkus.version from 3.38.1 to 3.39.3 - #691

Merged
lwitkowski merged 1 commit into
mainfrom
dependabot/maven/quarkus.version-3.39.3
Sep 18, 2026
Merged

lwitkowski merged 1 commit into
mainfrom
dependabot/maven/quarkus.version-3.39.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps quarkus.version from 3.38.1 to 3.39.3.
Updates io.quarkus:quarkus-bom from 3.38.1 to 3.39.3

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.39.3

Complete changelog

  • #42976 - Quarkus REST in NATIVE - abstract resources with @Path requires impl. to be CDI beans while RESTEasy does not
  • #45257 - update guide on writing extension regarding docs generation
  • #45791 - Range response status reset when using a @ServerResponseFilter
  • #55119 - Use branch instead of version to avoid dead link on main guides
  • #55674 - context propagation not working correctly
  • #55739 - Fix race in AeshLauncherImpl causing flaky test timeouts
  • #55835 - Quarkus 3.38 in dev mode - WARNING: java.lang.foreign.Linker::downcallHandle has been called by org.aesh.terminal.tty.impl.LibC in an unnamed module
  • #55962 - Enable WebSocket traffic logging in aesh websocket tests
  • #55999 - [Docs]: Lift and Shift review of Deploying to OpenShift guide
  • #56018 - Aesh: fix flaky WebSocket tests on Semeru by closing WebSocketClient
  • #56103 - Mention the quarkus-config-doc-maven-plugin
  • #56106 - Add licenses for generic file components in SBOMs
  • #56120 - Move SSH enabled config to build time and gate all processor build steps
  • #56129 - Fix wrapWithSpan context propagation
  • #56153 - Keep the 206 status of Range responses when the JAX-RS response has been materialized
  • #56222 - Make sure the callouts follow the Asciidoc syntax
  • #56240 - Update redirect instructions for Roq
  • #56279 - Security overview guide style review (3.40)
  • #56301 - Upgrade aesh to 3.17.5 and improve AeshLauncher test framework
  • #56336 - [3.39] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine
  • #56340 - Add a packaging overview guide
  • #56346 - Manage projectreactor in the bom, update to 3.8.7
  • #56348 - Update building-docs skill and docs-preview.sh for Roq migration
  • #56354 - Upgrade hibernate ORM from 7.4.5.Final to 7.4.7.Final
  • #56357 - [3.39] backport of doc improvement
  • #56359 - Check Keycloak token type on the OIDC server-less verification path
  • #56365 - [3.39] Upgrade RESTEasy to 6.2.18.Final
  • #56374 - Remove warning from PeriodicMetricReader
  • #56386 - Style and syntax violations in docs callouts
  • #56389 - Do not use attributes in guide title to work around Roq/Yupiik limitation
  • #56391 - Fix numbered callout lists in documentation examples
  • #56393 - ReactiveRedisDataSource.withConnection leaks pool permit when cancelled before connection is acquired
  • #56395 - Suppress PeriodicMetricReader exporter warnings
  • #56400 - rest-jackson: ContextResolver result cached by entity class, dropping the media type from the key
  • #56402 - rest-jackson: SecurityCustomSerialization caches its ObjectWriter in a JVM-wide static field, dropping the ObjectMapper from the key
  • #56408 - Update the logging guide for supported APIs
  • #56413 - Redis client: fix connection leaks caused by cancellation during acquisition
  • #56424 - Quarkus REST: fix native mode when abstract resource with path is extended by a subclass without paths
  • #56425 - Doc - place callout lists after source listings
  • #56429 - Typo fixes in websockets-next guides
  • #56430 - Ensure FullyFeaturedServerJacksonMessageBodyWriter uses media type properly
  • #56431 - Ensure SecurityCustomSerialization uses ContextResolver
  • #56432 - Remove orphaned callout markers with missing explanations
  • #56444 - Drop steps for discarded toc plugin in docs preview
  • #56449 - Fix remaining callout list placement issues in docs
  • #56470 - [3.39] Decouple types discovery and generation of reflection-free Jackson serializers

... (truncated)

Commits
  • 69a5796 [RELEASE] - Bump version to 3.39.3
  • 306e79a Merge pull request #56503 from gsmet/3.39.3-backports-1
  • 4eb6333 Build extension processor first
  • 1202723 Ensure restoring certificate to original works
  • 952f74c Document CPE-related platform properties
  • d698132 Implement CycloneDX provided dependencies type
  • fcbd442 Store embedded SBOMs as uncompressed and make quarkus.cyclonedx.embedded.comp...
  • 8336ff7 Support for component to product attribution in SBOMs
  • ed71198 Deploy to OpenShift guide: grammar and style corrections (3.40)
  • 60c9258 Deploy to OpenShift guide: editorial fixes (3.40)
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.38.1 to 3.39.3

Updates io.quarkus:quarkus-config-doc-maven-plugin from 3.38.1 to 3.39.3

Updates io.quarkus:quarkus-extension-processor from 3.38.1 to 3.39.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.38.1 to 3.39.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.3

Complete changelog

  • #42976 - Quarkus REST in NATIVE - abstract resources with @Path requires impl. to be CDI beans while RESTEasy does not
  • #45257 - update guide on writing extension regarding docs generation
  • #45791 - Range response status reset when using a @ServerResponseFilter
  • #55119 - Use branch instead of version to avoid dead link on main guides
  • #55674 - context propagation not working correctly
  • #55739 - Fix race in AeshLauncherImpl causing flaky test timeouts
  • #55835 - Quarkus 3.38 in dev mode - WARNING: java.lang.foreign.Linker::downcallHandle has been called by org.aesh.terminal.tty.impl.LibC in an unnamed module
  • #55962 - Enable WebSocket traffic logging in aesh websocket tests
  • #55999 - [Docs]: Lift and Shift review of Deploying to OpenShift guide
  • #56018 - Aesh: fix flaky WebSocket tests on Semeru by closing WebSocketClient
  • #56103 - Mention the quarkus-config-doc-maven-plugin
  • #56106 - Add licenses for generic file components in SBOMs
  • #56120 - Move SSH enabled config to build time and gate all processor build steps
  • #56129 - Fix wrapWithSpan context propagation
  • #56153 - Keep the 206 status of Range responses when the JAX-RS response has been materialized
  • #56222 - Make sure the callouts follow the Asciidoc syntax
  • #56240 - Update redirect instructions for Roq
  • #56279 - Security overview guide style review (3.40)
  • #56301 - Upgrade aesh to 3.17.5 and improve AeshLauncher test framework
  • #56336 - [3.39] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine
  • #56340 - Add a packaging overview guide
  • #56346 - Manage projectreactor in the bom, update to 3.8.7
  • #56348 - Update building-docs skill and docs-preview.sh for Roq migration
  • #56354 - Upgrade hibernate ORM from 7.4.5.Final to 7.4.7.Final
  • #56357 - [3.39] backport of doc improvement
  • #56359 - Check Keycloak token type on the OIDC server-less verification path
  • #56365 - [3.39] Upgrade RESTEasy to 6.2.18.Final
  • #56374 - Remove warning from PeriodicMetricReader
  • #56386 - Style and syntax violations in docs callouts
  • #56389 - Do not use attributes in guide title to work around Roq/Yupiik limitation
  • #56391 - Fix numbered callout lists in documentation examples
  • #56393 - ReactiveRedisDataSource.withConnection leaks pool permit when cancelled before connection is acquired
  • #56395 - Suppress PeriodicMetricReader exporter warnings
  • #56400 - rest-jackson: ContextResolver result cached by entity class, dropping the media type from the key
  • #56402 - rest-jackson: SecurityCustomSerialization caches its ObjectWriter in a JVM-wide static field, dropping the ObjectMapper from the key
  • #56408 - Update the logging guide for supported APIs
  • #56413 - Redis client: fix connection leaks caused by cancellation during acquisition
  • #56424 - Quarkus REST: fix native mode when abstract resource with path is extended by a subclass without paths
  • #56425 - Doc - place callout lists after source listings
  • #56429 - Typo fixes in websockets-next guides
  • #56430 - Ensure FullyFeaturedServerJacksonMessageBodyWriter uses media type properly
  • #56431 - Ensure SecurityCustomSerialization uses ContextResolver
  • #56432 - Remove orphaned callout markers with missing explanations
  • #56444 - Drop steps for discarded toc plugin in docs preview
  • #56449 - Fix remaining callout list placement issues in docs
  • #56470 - [3.39] Decouple types discovery and generation of reflection-free Jackson serializers

... (truncated)

Commits
  • 69a5796 [RELEASE] - Bump version to 3.39.3
  • 306e79a Merge pull request #56503 from gsmet/3.39.3-backports-1
  • 4eb6333 Build extension processor first
  • 1202723 Ensure restoring certificate to original works
  • 952f74c Document CPE-related platform properties
  • d698132 Implement CycloneDX provided dependencies type
  • fcbd442 Store embedded SBOMs as uncompressed and make quarkus.cyclonedx.embedded.comp...
  • 8336ff7 Support for component to product attribution in SBOMs
  • ed71198 Deploy to OpenShift guide: grammar and style corrections (3.40)
  • 60c9258 Deploy to OpenShift guide: editorial fixes (3.40)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
io.quarkus:quarkus-maven-plugin [> 1.12.2.Final, < 2]

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `quarkus.version` from 3.38.1 to 3.39.3.

Updates `io.quarkus:quarkus-bom` from 3.38.1 to 3.39.3
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.38.1...3.39.3)

Updates `io.quarkus:quarkus-maven-plugin` from 3.38.1 to 3.39.3

Updates `io.quarkus:quarkus-config-doc-maven-plugin` from 3.38.1 to 3.39.3

Updates `io.quarkus:quarkus-extension-processor` from 3.38.1 to 3.39.3

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.38.1 to 3.39.3
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.38.1...3.39.3)

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-config-doc-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 14, 2026
@lwitkowski
lwitkowski merged commit cecb4ad into main Sep 18, 2026
6 checks passed
@lwitkowski
lwitkowski deleted the dependabot/maven/quarkus.version-3.39.3 branch September 18, 2026 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant