Skip to content

fix(deps): update quarkus packages to v3.39.3 - #20162

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/quarkus-packages
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/quarkus-packages

Conversation

@renovate

@renovate renovate Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
io.quarkus:quarkus-bom 3.39.23.39.3 age confidence
io.quarkus 3.39.23.39.3 age confidence

Release Notes

quarkusio/quarkus (io.quarkus:quarkus-bom)

v3.39.3

Compare Source

Complete changelog
  • #​42976 - Quarkus REST in NATIVE - abstract resources with @Path requires impl. to be CDI beans while RESTEasy does not
  • #​45257 - update guide on writing extension regarding docs generation
  • #​45791 - Range response status reset when using a @ServerResponseFilter
  • #​55119 - Use branch instead of version to avoid dead link on main guides
  • #​55674 - context propagation not working correctly
  • #​55739 - Fix race in AeshLauncherImpl causing flaky test timeouts
  • #​55835 - Quarkus 3.38 in dev mode - WARNING: java.lang.foreign.Linker::downcallHandle has been called by org.aesh.terminal.tty.impl.LibC in an unnamed module
  • #​55962 - Enable WebSocket traffic logging in aesh websocket tests
  • #​55999 - [Docs]: Lift and Shift review of Deploying to OpenShift guide
  • #​56018 - Aesh: fix flaky WebSocket tests on Semeru by closing WebSocketClient
  • #​56103 - Mention the quarkus-config-doc-maven-plugin
  • #​56106 - Add licenses for generic file components in SBOMs
  • #​56120 - Move SSH enabled config to build time and gate all processor build steps
  • #​56129 - Fix wrapWithSpan context propagation
  • #​56153 - Keep the 206 status of Range responses when the JAX-RS response has been materialized
  • #​56222 - Make sure the callouts follow the Asciidoc syntax
  • #​56240 - Update redirect instructions for Roq
  • #​56279 - Security overview guide style review (3.40)
  • #​56301 - Upgrade aesh to 3.17.5 and improve AeshLauncher test framework
  • #​56336 - [3.39] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine
  • #​56340 - Add a packaging overview guide
  • #​56346 - Manage projectreactor in the bom, update to 3.8.7
  • #​56348 - Update building-docs skill and docs-preview.sh for Roq migration
  • #​56354 - Upgrade hibernate ORM from 7.4.5.Final to 7.4.7.Final
  • #​56357 - [3.39] backport of doc improvement
  • #​56359 - Check Keycloak token type on the OIDC server-less verification path
  • #​56365 - [3.39] Upgrade RESTEasy to 6.2.18.Final
  • #​56374 - Remove warning from PeriodicMetricReader
  • #​56386 - Style and syntax violations in docs callouts
  • #​56389 - Do not use attributes in guide title to work around Roq/Yupiik limitation
  • #​56391 - Fix numbered callout lists in documentation examples
  • #​56393 - ReactiveRedisDataSource.withConnection leaks pool permit when cancelled before connection is acquired
  • #​56395 - Suppress PeriodicMetricReader exporter warnings
  • #​56400 - rest-jackson: ContextResolver result cached by entity class, dropping the media type from the key
  • #​56402 - rest-jackson: SecurityCustomSerialization caches its ObjectWriter in a JVM-wide static field, dropping the ObjectMapper from the key
  • #​56408 - Update the logging guide for supported APIs
  • #​56413 - Redis client: fix connection leaks caused by cancellation during acquisition
  • #​56424 - Quarkus REST: fix native mode when abstract resource with path is extended by a subclass without paths
  • #​56425 - Doc - place callout lists after source listings
  • #​56429 - Typo fixes in websockets-next guides
  • #​56430 - Ensure FullyFeaturedServerJacksonMessageBodyWriter uses media type properly
  • #​56431 - Ensure SecurityCustomSerialization uses ContextResolver
  • #​56432 - Remove orphaned callout markers with missing explanations
  • #​56444 - Drop steps for discarded toc plugin in docs preview
  • #​56449 - Fix remaining callout list placement issues in docs
  • #​56470 - [3.39] Decouple types discovery and generation of reflection-free Jackson serializers
  • #​56480 - fix: align docs-preview.sh default port to 8042
  • #​56487 - Update to Avro 1.12.2, auto-trust Avro-generated classes, add properties to configure additional Avro-trusted classes
  • #​56489 - SBOM component to product attribution
  • #​56493 - Certificate reload skips restored certificates by comparing against startup snapshot
  • #​56497 - [3.39] SBOM CPE attribution
  • #​56498 - Ensure restoring certificate to original works

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner September 15, 2026 02:03
Copilot AI balanced review requested due to automatic review settings September 15, 2026 02:03
@opentelemetry-pr-dashboard

opentelemetry-pr-dashboard Bot commented Sep 15, 2026

Copy link
Copy Markdown

Pull request dashboard status

Waiting on reviewers · refreshed 2026-09-15 11:58 UTC

Review the latest changes.

Status above doesn't look right?
  • Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
  • Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

Dependency-only update reviewed with no unresolved comments.

Pull request overview

Updates the Quarkus smoke-test image dependencies from 3.39.2 to 3.39.3.

Changes:

  • Upgraded the Quarkus Gradle plugin.
  • Upgraded the enforced Quarkus BOM.
File summaries
File Description
smoke-tests/images/quarkus/build.gradle.kts Updates Quarkus plugin and dependency versions.
Review details
  • Files reviewed: 1/1 changed files
  • Comments generated: 0
  • Review effort level: Lite (auto)

Note

Copilot is running an experiment and ran this review at Lite.


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The coordinated patch-version update is complete and consistent.

Review details
  • Files reviewed: 1/1 changed files
  • Comments generated: 0 new
  • Review effort level: Balanced

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant