Skip to content

chore: bump the quarkus group across 1 directory with 2 updates - #1153

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-4d73cadbf7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-4d73cadbf7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the quarkus group with 2 updates in the / directory: io.quarkus:quarkus-bom and io.quarkus:quarkus-maven-plugin.

Updates io.quarkus:quarkus-bom from 3.39.2 to 3.40.0

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.40.0.CR1

Complete changelog

3.39.5

Complete changelog

  • #56037 - Always complete the export when the OTLP sender is shut down
  • #56255 - Bump org.freemarker:freemarker from 2.3.34 to 2.3.35
  • #56349 - [3.39] Bump to Vert.x 4.5.33
  • #56573 - Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup
  • #56783 - Typo fixes in gRPC guides
  • #56796 - docs: Fix the dead Jose4J link in the JWT Build guide
  • #56800 - Add javadoc to AbstractSecurityIdentityAssociation
  • #56821 - [3.40] SmallRye Fault Tolerance: bump to 6.11.4
  • #56831 - [3.40] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
  • #56837 - Do not stack asciidoc anchors, because it does not work
  • #56838 - Fix malformed link
  • #56842 - Fix dead link for Redis sandbox
  • #56845 - Bump Keycloak version to 26.7.4
  • #56849 - [3.40] Upgrade RESTEasy to 6.2.19.Final
  • #56853 - [3.40] Upgrade to Hibernate 7.4.9.Final
  • #56857 - [3.40] WebSockets Next: add max-pending-messages back-pressure
  • #56861 - [3.40] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)
  • #56867 - [3.40] : Bump smallrye-jwt version to 4.6.4
  • #56884 - Invalid Java interface declaration in SmallRye GraphQL guide
  • #56885 - Fix interface inheritance in SmallRye GraphQL guide
  • #56920 - Update Elytron to 2.9.2.SP1
  • #56925 - aesh 3.18.1

3.39.4

Complete changelog

  • #35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension
  • #37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide
  • #41734 - Probable bug in CognitoPrincipal lines 62 70
  • #53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32
  • #54925 - Formatting fails with a NullPointerException and the log record is dropped
  • #54926 - Fix JSON logging with null formatter keys
  • #55111 - [quarkus-info] Allow hiding the quarkus version
  • #55763 - Make the OIDC token JWE decryption algorithm configurable
  • #55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal
  • #55916 - DPoPNonceProvider should accept DPoP proof jti
  • #56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang
  • #56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions
  • #56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti
  • #56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • #56514 - Restore the third callout entry in the Hibernate ORM interceptor example

... (truncated)

Commits
  • 2b5f5ea [RELEASE] - Bump version to 3.40.0
  • a3c701a Merge pull request #56931 from gsmet/3.40.0-backports-2
  • 98242d4 aesh 3.18.1
  • e09ba0f Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup
  • d1cfc49 Merge pull request #56905 from gsmet/3.40.0-backports-1
  • b6db218 Merge pull request #56831 from jmartisk/3.40-qute-xss
  • 6763c90 Fix interface inheritance in SmallRye GraphQL guide
  • 1a298a6 Bump Keycloak version to 26.7.4
  • 1371ddf Fix dead link for Redis sandbox
  • 6f6b621 Do not stack anchors, because it does not work
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.39.2 to 3.40.0

Updates io.quarkus:quarkus-maven-plugin from 3.39.2 to 3.40.0

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 14, 2026
@dependabot dependabot Bot changed the title chore: bump the quarkus group with 2 updates chore: bump the quarkus group across 1 directory with 2 updates Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/quarkus-4d73cadbf7 branch from e9b385d to 3bda976 Compare September 21, 2026 21:25
Bumps the quarkus group with 2 updates in the / directory: [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) and io.quarkus:quarkus-maven-plugin.


Updates `io.quarkus:quarkus-bom` from 3.39.2 to 3.40.0
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.39.2...3.40.0)

Updates `io.quarkus:quarkus-maven-plugin` from 3.39.2 to 3.40.0

Updates `io.quarkus:quarkus-maven-plugin` from 3.39.2 to 3.40.0

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quarkus
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quarkus
- dependency-name: io.quarkus:quarkus-maven-plugin
  dependency-version: 3.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quarkus
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/quarkus-4d73cadbf7 branch from 3bda976 to ee962af Compare September 28, 2026 21:26

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants