Skip to content

chore: bump the quarkus group across 1 directory with 2 updates - #1153

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-4d73cadbf7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-4d73cadbf7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the quarkus group with 2 updates in the / directory: io.quarkus:quarkus-bom and io.quarkus:quarkus-maven-plugin.

Updates io.quarkus:quarkus-bom from 3.39.2 to 3.39.4

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.39.4

Complete changelog

  • #35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension
  • #37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide
  • #41734 - Probable bug in CognitoPrincipal lines 62 70
  • #53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32
  • #54925 - Formatting fails with a NullPointerException and the log record is dropped
  • #54926 - Fix JSON logging with null formatter keys
  • #55111 - [quarkus-info] Allow hiding the quarkus version
  • #55763 - Make the OIDC token JWE decryption algorithm configurable
  • #55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal
  • #55916 - DPoPNonceProvider should accept DPoP proof jti
  • #56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang
  • #56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions
  • #56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti
  • #56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • #56514 - Restore the third callout entry in the Hibernate ORM interceptor example
  • #56515 - Add the missing callout entry in the Infinispan client Greeting example
  • #56517 - Keep the Keycloak Dev Services resource-mapping callout list together
  • #56518 - Use a callout list for the generated resources extension example
  • #56519 - Add the two missing callout entries in the Vert.x OIDC migration guide
  • #56523 - Bootstrap Maven command from Getting started guide fails
  • #56527 - Fix reproducibility issue in Avro
  • #56529 - Strip quotes from extension names in Maven create command
  • #56537 - Bump GraalVM SDK version to 25.0.4.1
  • #56540 - NPE in getEffectiveMapper when response entity is an anonymous class (e.g. Stream)
  • #56541 - Fix NPE in getEffectiveMapper when response entity is an anonymous class
  • #56552 - the --debug-port or -DdebugPort parameter doesn't seem to work properly, always binding to port 5005
  • #56556 - Upgrade Apache HttpClient5 to 5.6.4
  • #56559 - Fix custom debug port being ignored in dev mode
  • #56560 - [3.39] Bump to Vert.x 4.5.34
  • #56561 - Remove empty RemoveableLateBoundSpanProcessor and LateBoundSpanProcessor files
  • #56562 - Customize OIDC token decryption algorithm
  • #56563 - [Keycloak dev service] - Make dev service access token lifespan configurable
  • #56583 - Avoid an internal error when a bean parameter field is not a class type
  • #56584 - docs: remove duplicate 'the' in OpenTelemetry logging guide
  • #56585 - docs: remove duplicate 'the' in Dev UI Patterns note
  • #56586 - Fix 'allows to' grammar in Config programmatic access docs
  • #56587 - Fix 'allows to storage' grammar in MongoDB guide
  • #56590 - Skip configuration directories that cannot be read when looking for unknown config files
  • #56593 - docs: remove duplicate 'the' in OIDC application-type note
  • #56604 - Keycloak Dev Service: make default realm's token lifespan configurable
  • #56613 - Compare Cognito claim names with strings instead of Claims enum constants
  • #56617 - Run the effective command of quarkus:update, with the local repository property
  • #56623 - Pass the add-opens requirements to JBang
  • #56626 - Fix the imports of the resource examples in the OAuth2 guide
  • #56627 - Mention the reactive extension in the Jakarta Persistence security guide
  • #56628 - Cache generated Jackson deserializers

... (truncated)

Commits
  • d274425 [RELEASE] - Bump version to 3.39.4
  • e452c5c Merge pull request #56770 from gsmet/3.39.4-backports-1
  • facd3c1 Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • 002b354 Fix flaky test DevMojoIT.testResourcesFromClasspath on Windows
  • 6931f5e Bump the default GraphQL query depth limit to 20
  • 44af7a1 Drop testEmbeddedSbomUncompressed as quarkus.cyclonedx.embedded.compress was ...
  • c87c0b4 Prevent leakage between tests
  • 9a70fa4 Explain OIDC filter annotation levels more clearly
  • ab5ea8a Clarify OIDC REST client method annotation behavior
  • c4fd37a Document method-level OIDC REST client annotations
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.39.2 to 3.39.4

Updates io.quarkus:quarkus-maven-plugin from 3.39.2 to 3.39.4

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 14, 2026
Bumps the quarkus group with 2 updates in the / directory: [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) and io.quarkus:quarkus-maven-plugin.


Updates `io.quarkus:quarkus-bom` from 3.39.2 to 3.39.4
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.39.2...3.39.4)

Updates `io.quarkus:quarkus-maven-plugin` from 3.39.2 to 3.39.4

Updates `io.quarkus:quarkus-maven-plugin` from 3.39.2 to 3.39.4

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quarkus
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quarkus
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quarkus
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore: bump the quarkus group with 2 updates chore: bump the quarkus group across 1 directory with 2 updates Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/quarkus-4d73cadbf7 branch from e9b385d to 3bda976 Compare September 21, 2026 21:25

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants