Update quarkus to v3.37.1

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Change	Age	Confidence
io.quarkus:quarkus-ide-config	3.36.1 → 3.37.1
io.quarkus:quarkus-maven-plugin	3.36.1 → 3.37.1
io.quarkus.platform:quarkus-bom	3.36.1 → 3.37.1
io.quarkus.platform:quarkus-maven-plugin	3.36.1 → 3.37.1
io.quarkus:quarkus-devtools-testing	3.36.1 → 3.37.1
io.quarkus:quarkus-devtools-base-codestarts	3.36.1 → 3.37.1
io.quarkus:quarkus-devtools-common	3.36.1 → 3.37.1

---

Release Notes

quarkusio/quarkus (io.quarkus:quarkus-ide-config)

v3.37.1

Compare Source

Complete changelog

• #​49919 - Prevent invocation of Task.project at execution time in Gradle plugin
• #​54854 - OIDC DPoP Nonce response uses from status code and message
• #​54855 - For missing and invalid nonces, return 401/use_dpop_nonce
• #​54889 - Response not handled in ContainerResponseFilter for dropped HTTP requests
• #​54903 - Allow the use of @Cancellable on ContainerResponseFilter
• #​54909 - Change log level of some OIDC log messages from debug to warn
• #​54919 - Improve the update-quarkus.adoc guide a bit
• #​54924 - Fix status in update-quarkus.adoc
• #​54942 - Include additional args in AOTMode=create" command
• #​54949 - Infinispan - Add missing service implementations for native
• #​54950 - JAXB - Register a new service implementation for native
• #​54955 - Significant CPU regression
• #​54958 - Prevent invocation of Task.project at execution time in Gradle plugin
• #​54975 - Infinispan - Register services properly and enforce basic client intelligence in ITs
• #​54997 - Bump org.hibernate.validator:hibernate-validator from 9.1.0.Final to 9.1.1.Final
• #​55008 - Quarkus REST sub-resources return 500 for malformed content type unlike 415 from top-level resource
• #​55009 - Quarkus REST: fix response status for sub-resource requests with a malformed content type
• #​55010 - Fix TransactionalInterceptorBase to handle reaper-cancelled transactions
• #​55018 - Enforce no duplicate POM dependencies via maven-enforcer-plugin
• #​55022 - infinispan-client and infinispan-cache IT tests fail with GraalVM CE 25.2.4-dev
• #​55028 - Switch from org.fusesource.jansi to org.jline:jansi
• #​55030 - Reduce allocation in HTTP instrumentation
• #​55046 - CycloneDX SBOM fixes
• #​55048 - Add Literal helper to NamedOidcClient qualifier
• #​55053 - Register for reflection all constructors of service providers
• #​55057 - Qute should handle properties that are not found more gracefully than throwing ClassCastException
• #​55066 - Qute: handle not-found params in JsonObject and Plus value resolvers
• #​55068 - Bump io.quarkus.develocity:quarkus-project-develocity-extension from 1.3.0 to 1.3.1
• #​55080 - Generated quarkusjacksonserializer fails for JSON property names containing ‘-’ and ‘.’
• #​55081 - Sanitize json property names while generating reflection-free Jackson serializers
• #​55095 - Bump eu.maveniverse.maven.nisse:extension3 from 0.9.2 to 0.9.3
• #​55096 - Bump eu.maveniverse.maven.njord:extension3 from 0.9.8 to 0.9.9
• #​55099 - Update to MicroProfile API 3.1.1
• #​55105 - Bump Agroal to 3.2.1
• #​55107 - Signals: clarify SignalMetadataEnricher threading
• #​55121 - Bump com.ibm.db2:jcc from 12.1.0.0 to 12.1.5.0
• #​55128 - @JsonFormat on java.util.Date ignored by reflection-free Jackson serializers
• #​55140 - Fix support for @JsonFormat on java.util.Date in reflection-free Jackson serializers
• #​55143 - quarkus-rest-jackson: reflection-free serializer drops JsonNullable contained type (3.37.0 regression)
• #​55146 - Generalize handing of any single-type-parameter parameterized type
• #​55158 - OIDC: Multiple AuthenticationCompletionAction beans silently ignored
• #​55159 - Bump org.junit:junit-bom from 6.1.0 to 6.1.1 in /devtools/gradle
• #​55165 - Bump the hibernate group across 1 directory with 11 updates
• #​55168 - Bump org.junit:junit-bom from 6.1.0 to 6.1.1
• #​55173 - quarkus-rest-jackson ignores @JsonIgnoreProperties in combination with @JsonUnwrapped
• #​55176 - Fix performance regression in AotQuarkusEntryPoint
• #​55178 - Fix ignoring of properties of unwrapped object in generated Jackson serializers
• #​55179 - Bump Keycloak server version to 26.6.4
• #​55181 - Support multiple AuthenticationCompletionAction as we document
• #​55182 - Make sure tree-shaken classes are recorded in pedigree for native build SBOMs
• #​55187 - Fix JDK 21 profile in signals and websockets-next deployment modules
• #​55188 - Mailer: clarify that Uni returned from send() must be subscribed to
• #​55191 - Add maven.compiler.release and testRelease to independent-projects parent POM
• #​55195 - Bump Keycloak client version to 26.0.10
• #​55208 - Use maven.compiler.testRelease for Signals Java 21 tests

v3.37.0

Compare Source

Complete changelog

• #​54729 - Gradle: imageBuild and imagePush use this output of :jandex without declaring dependency
• #​54730 - Gradle plugin: declare jandex task ordering for all tasks consuming main source set resources
• #​54759 - ObservabilityJsonRPCService fails when LGTM dev service is disabled
• #​54777 - Native image: SoftDeleteStateManagement.INSTANCE field not registered for reflection
• #​54780 - Register StateManagement fields for native image reflection
• #​54784 - When using quarkus.openshift.secret-volumes."secret-volumes".items."items".path the deploy fail to openshift
• #​54785 - OIDC web-app step-up re-authentication redirect does not include acr_values
• #​54786 - Carry acr_values and max_age in the code flow authorization request
• #​54790 - Add link to JMC in JFR guide
• #​54831 - Fix dev mode startup when LGTM observability dev services are disabled
• #​54832 - Fix invalid secret and ConfigMap volume item mode in Kubernetes manifests
• #​54840 - Bump the hibernate group with 11 updates
• #​54848 - Upgrade to SmallRye GraphQL 2.18.2
• #​54867 - Rename trusted proxy Subject DN property
• #​54871 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.131 to 0.0.132

v3.36.3

Compare Source

Complete changelog

• #​54765 - JSON logger doesn't print stacktrace anymore
• #​54769 - Fix NPE in JSON Logging
• #​54798 - Fix dead links in kafka.adoc
• #​54807 - Fix dead links in security guides
• #​54812 - Fix miscellaneous dead links across guides
• #​54829 - Log Dev MCP endpoint path at startup when enabled
• #​54837 - Add UnwrappedTypeResolverBuilder reflective class registration to kubernetes-client
• #​54873 - Bump io.quarkus:quarkus-fs-util from 1.4.0 to 1.4.2
• #​54878 - [3.37] Update to Micrometer 1.16.6

v3.36.2

Compare Source

Complete changelog

• #​34285 - Using Dev ui "breaks" a lambda
• #​40420 - FrameworkRouter not initialized when access-log is enabled with custom non-application-root-path
• #​54080 - Don't use ordered execution for @RunOnVertxContext
• #​54438 - Allow Dev UI to work with Amazon Lambda HTTP extensions in dev mode
• #​54546 - Bump kafka.version from 4.2.0 to 4.2.1
• #​54597 - Fix null Vert.x log messages showing as NULL in native mode
• #​54604 - With quarkus.thread-pool.queue-size set, async health work can be silently dropped
• #​54609 - Don't ignore Future in Smallrye Health
• #​54621 - Bump the hibernate group with 10 updates
• #​54639 - Memory Leak with Quarkus Rest Client in a Reactive pipeline
• #​54646 - Panache: PanacheRepositoryBase.findByIds(List<?> ids) returns a list of instead of
• #​54647 - Fix return type of PanacheRepositoryBase
• #​54649 - Bump to Vert.x 4.5.28 and Netty 4.1.135.Final
• #​54659 - Fix memory leak in REST Client reactive pipelines
• #​54669 - Fix startup NPE when the access log is enabled without a framework router
• #​54673 - add config properties section to cyclonedx guide
• #​54674 - cyclonedx sbom missing serialnumber
• #​54675 - Add cyclone configuration to docs
• #​54678 - Missing %l in the access log documentation
• #​54689 - Basic auth may return 401 with older clients when realm is unset
• #​54697 - Document Basic authentication realm compatibility
• #​54700 - Include serial numbers into generated SBOMs
• #​54705 - Bump quarkiverse-parent from 20 to 22
• #​54708 - Updates Infinispan to 16.0.13
• #​54709 - Add support for --no-wrapper on CreateProjectMojo
• #​54711 - Bump jacoco.version from 0.8.14 to 0.8.15
• #​54713 - Add option to Maven plugin to forget wrapper addition
• #​54732 - Dev-UI: Update German translation for 'Read me' to 'Lies mich'

quarkusio/quarkus-platform (io.quarkus.platform:quarkus-bom)

v3.37.1

Compare Source

v3.37.0

Compare Source

v3.36.3

Compare Source

v3.36.2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.