Update io.quarkus to v3.28.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.quarkus:quarkus-bom	3.28.2 -> 3.28.3
io.quarkus:quarkus-maven-plugin	3.28.2 -> 3.28.3
io.quarkus:quarkus-junit5	3.28.2 -> 3.28.3
io.quarkus:quarkus-resteasy-jsonb	3.28.2 -> 3.28.3
io.quarkus:quarkus-resteasy	3.28.2 -> 3.28.3
io.quarkus:quarkus-jdbc-postgresql	3.28.2 -> 3.28.3
io.quarkus	3.28.2 -> 3.28.3

---

Release Notes

quarkusio/quarkus (io.quarkus:quarkus-bom)

v3.28.3

Compare Source

Complete changelog

• #​29817 - quarkus cli fail hard on bad settings.xml
• #​49733 - quarkus.thread-pool.shutdown-interrupt is not respected
• #​50126 - HQL Console improvements
• #​50306 - Unrecognized configuration key "quarkus.gradle-worker.no-process"
• #​50317 - VertxOutputStream: Cannot reserve 65536 bytes of direct buffer memory (allocated: 7601950, limit: 7602176)
• #​50318 - Avoid importing BOMs managing extensions managed by BOMs with higher preferences
• #​50335 - Change quarkus.gradle-worker.* to gradle.quarkus.gradle-worker.*
• #​50336 - Chunked response always finishes cleanly, client cannot detect incomplete download
• #​50351 - Fix a few issues with Java 25 compatibility and include Java 25 in CI
• #​50360 - Dev MCP: Make sure the config dir exist
• #​50361 - When an error occurs during a streaming response, call HttpServerResponse.reset()
• #​50364 - OIDC Steup authentication is missing information about insufficient authentication level in 'www-authenticate' when provider responses with single ACR
• #​50365 - Bump keycloak to 26.4.0 and keycloak-client to 26.0.7
• #​50366 - ArC: fix construction of interception proxies, part 2
• #​50367 - Fix step authentication with Keycloak when protocol mapper has 'acr' user attribute configured as single valued string
• #​50371 - HQL console: correct allow-hql config on hot reload and enter key to run query
• #​50372 - Remove extra space in Dev UI welcome message
• #​50375 - Log OIDC Client requests in debug mode
• #​50376 - Handle backpressure whilst not on the event loop
• #​50377 - Qute template results in timeout instead of NullPointerException
• #​50383 - Qute: fix error propagation from section helpers
• #​50390 - Quarkus OIDC incorrecty selects request filters for the token revocation
• #​50397 - Fix OIDC TokenRevocation filter binding and improve request logging
• #​50399 - Expand error messages when quarkus cli fail hard on bad settings.xml
• #​50401 - Correctly handle Agroal Dev UI settings in hot-reload scenarios
• #​50403 - Update links to Cassandra demo UI
• #​50404 - Application with quarkus-keycloak-admin-rest-client fails to compile after recent Keycloak bump
• #​50405 - Initialize org.keycloak.common.util.SecretGenerator at runtime for Keycloak admin client
• #​50409 - Bump smallrye-graphql.version from 2.14.1 to 2.15.0
• #​50416 - Set correct quarkus.oidc.token.require-jwt-introspection-only default value
• #​50423 - Fix incorrect timing computation
• #​50426 - Create proxies for abstract entity classes too in Hibernate ORM
• #​50429 - Bump the hibernate group with 9 updates
• #​50462 - Update Elasticsearch clients + dev service image version to 9.1.5
• #​50472 - Fix NPE when no library versions exist in the DevUI

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.