Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2025

Bumps io.quarkus:quarkus-bom from 3.25.2 to 3.28.0.

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.28.0.CR1

Major changes

  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49618 - Provide a fluent API for CSRF programmatic set up
  • #49805 - Add support for multiple clients in Liquibase MongoDB extension

Complete changelog

  • #19913 - Config Editor doesn't update the prefixed values
  • #22183 - HibernateOrmProcessor complains about abstract model classes not mapped to a PersistenceUnit
  • #35660 - Surge.sh deployment fails with Aborted - Unable to publish. Application too large
  • #43229 - Configuration Form Editor in Dev UI is confusing - disable rewriting application.properties
  • #44127 - InfinispanCacheTest random failures
  • #44736 - io.quarkus.oidc.client.* packages are split across multiple modules
  • #45407 - Remove the deprecated legacy TLS configuration for GraphQL clients
  • #46697 - Flow specific OIDC request/response filter support
  • #46847 - Remove support for Hibernate ORM proxy generation at static init
  • #47157 - Upgrade to gRPC v4
  • #47881 - Add a quarkus-devservices runtime module
  • #48915 - Bump maven to 3.9.11
  • #48986 - Quarkus-Liquibase-MongoDB supporting multiple datasources
  • #49007 - Support fixed LGTM ports
  • #49025 - Add devservices runtime module
  • #49122 - Support flow-specific OIDC request and response filters
  • #49151 - Allow for custom Grafana dashboards
  • #49295 - Improve assignment of interfaces / PanacheEntity to persistence units
  • #49306 - Update kafka-streams.adoc
  • #49307 - Kotlin Coroutines Fail to preserve active request between a suspension and resume
  • #49308 - Preserve active request on subscriber when using messaging-kotlin
  • #49311 - Improve panache projection by supporting multiple constructors
  • #49345 - Keep variant info when using template locator
  • #49397 - Qute: gizmo2 rewrite
  • #49400 - Provide a fluent API for CORS programmatic set up
  • #49469 - OIDCS: split-tokens=true does not work if session cookie gets longer than MAX_COOKIE_VALUE_LENGTH
  • #49500 - Cannot Connect to Database in Containerized Integration Test
  • #49526 - Avoid now unnecessary copy of MethodInfo in Methods
  • #49533 - Bytecode transformers - Optimize constant pool scanning optimization
  • #49540 - Remove quarkus.test.native-image-profile references
  • #49543 - Add tests for keycloak dev services when there is no test resource
  • #49545 - Bump the hibernate group with 5 updates
  • #49554 - Upgrade Vaadin to 24.8.5
  • #49555 - Small assorted optimizations for ArC
  • #49558 - As an extension developer, I would like to have the same dev mode experience as our users
  • #49560 - Revert "Upgrade to gRPC v4"
  • #49562 - ArC - Pass MethodKey to mergeBindings() to avoid recreating it
  • #49564 - Create chunked OIDC session access token cookies
  • #49570 - Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0
  • #49573 - Micrometer to OpenTelemetry bridge native build warns that "OpenTelemetryMeterRegistry" does not support reading measurements

... (truncated)

Commits
  • d5a75b4 [RELEASE] - Bump version to 3.28.0
  • 0dbc0d0 Merge pull request #50088 from gsmet/3.28.0-backports-1
  • 65a7860 * Move platform version-specific tooling codestarts from the base to the proj...
  • d186091 Bump version.kotlin from 2.2.10 to 2.2.20
  • 24d16eb Bump com.amazonaws:aws-lambda-java-core from 1.3.0 to 1.4.0
  • 9057584 Set fixed file/dir permissions for zip entries when building an archive
  • c919487 Bump org.hibernate.tool:hibernate-tools-language in the hibernate group
  • 922cde3 Fix build failure when quarkus-rest-data-panache is used
  • afc56f3 Bump io.smallrye.common:smallrye-common-bom from 2.13.8 to 2.13.9
  • 2dccc09 Fix hostname when starting Keycloak devServices in shared network
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) from 3.25.2 to 3.28.0.
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.25.2...3.28.0)

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 18, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 25, 2025

Superseded by #330.

@dependabot dependabot bot closed this Sep 25, 2025
@dependabot dependabot bot deleted the dependabot/maven/io.quarkus-quarkus-bom-3.28.0 branch September 25, 2025 01:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants