Major changes

• #32447 - Introduce Report an Issue menu in DevUI
• #35324 - OIDC dev services and ui changes
• #43618 - Add a Dev UI Screen for Agroal (DB)
• #43885 - Exclude uri from otel tracing
• #44105 - Reimplement security-webauthn on top of webauthn4j
• #44305 - Ability to configure extension Dev mode JVM options
• #44379 - Integrate Micrometer with WebSockets Next
• #44424 - Support for dev-mode-only conditional dependencies
• #44546 - Add OIDC Redis Token State Manager extension
• #44549 - Add support for encrypted PKCS#8
• #44993 - Support OidcProviderClient injection and token revocation
• #45117 - TLS - Enable Policy Configuration for Expired or Not Yet Valid Certificates
• #45121 - Support for OIDC MTLS binding
• #45131 - OIDC and OIDC Client: Support JWT bearer client authentication using client assertion loaded from filesystem
• #45259 - Bump kubernetes-client-bom from 6.13.4 to 7.0.1
• #45294 - Allow to create static OIDC tenants programmatically

Complete changelog

• #4482 - Support the access token binding to the client MTLS authentication
• #5702 - Reexamine how we manage config in tests
• #8300 - Warn or refuse configuration files with duplicate keys
• #24533 - Fault Tolerance in config file could use dash seperated names
• #28474 - Can't load static resource created by extension
• #31340 - Provide OIDC Mock DevService
• #32109 - Retain OIDC access token expiry time in the cookie
• #32431 - Report bugs from the DevUI
• #32447 - Introduce Report an Issue menu in DevUI
• #34577 - Dev UI: security / JWT / OIDC
• #35064 - OIDC Dev UI should support web-app application by recognizing q_session cookie
• #35215 - Native build failed after 3.x.x upgrade, using panache mongodb (maybe releated to ManagedExecuter and narayana)
• #35324 - OIDC dev services and ui changes
• #35693 - Confusing documentation or behaviour for quarkus.test.profile.tags
• #35751 - Reconsider the precedence of Forwarded vs X-Forwarded-For
• #35824 - Add capability to add topic configuration during topic creation
• #35953 - quarkus cli should give hint that you can run with -e to get error info
• #36006 - Dev mode hangs when graceful shutdown active
• #36265 - Unexpected commit of transaction using Oracle
• #36934 - PostgreSQL DevService does not enable max_prepared_transactions for XA operations
• #37626 - Netty's PlatformDependent and PlatformDependent0 class initializers require reflective access to some classes ?
• #38486 - Jandex warning when using @RegisterForReflection(registerFullHierarchy = true)
• #39143 - WebSockets Next: OTel integration
• #39155 - Custom Exception in SecurityIdentityAugmentor
• #39185 - Migrate OIDC-based extensions from config classes to @ConfigMapping
• #39230 - Options with quarkus.openshift.init-containers prefix are ignored
• #39416 - Shared extension for the Hibernate Search Elasticsearch backend
• #39561 - Quarkus management interface and Swagger UI executing APIs at wrong path
• #39926 - Allow to enable Management interface authentication without enabling basic authentication
• #40013 - Support JWT bearer client authentication for quarkus-oidc
• #40162 - Should the Renarde Cookie filter be included in the Quarkus WebAuthn testing extension?
• #40414 - [mongodb] devservice executed when host provided
• #40471 - Add filtering to dev-ui (with local-storage memory)
• #40833 - Quarkus REST: setting a LocalDate parameter to an empty value results in a 400 instead of a null parameter
• #40839 - Extending a resource class loses OpenAPI security scheme when generated
• #41292 - Spring-data throw JsonMappingException when using PageImpl
• #42114 - Core module is using a mix of traditional @ConfigRoot and @ConfigMapping
• #42335 - WIP: update to FKC 7.0.0
• #42468 - TemporalParamConverter returns null if it has to convert empty string
• #42566 - be explicit/use examples in websocket.next docs when it comes to subscribe call for action
• #42659 - Add exclude paths to OpenTelemetry Tracing
• #42715 - Register a Config instance to bootstrap tests
• #43149 - quarkus.configuration.build-time-mismatch-at-runtime should be in the quarkus.config namespace
• #43259 - Use keycloak-client libraries instead of keycloak-common, keycloak-core and keycloak-adapter-spi
• #43260 - Use keycloak-client libraries instead of keycloak-common, keycloak-core and keycloak-adapter-spi
• #43369 - Qute Character Escapes for Json Content
• #43394 - Show nicer error when a @ConfigMapping class exists in the deployment module and set to the runtime phase
• #43513 - Show nicer error when a @ConfigMapping class exists in the deployment module and set to the runtime phase
• #43618 - Add a Dev UI Screen for Agroal (DB)
• #43704 - Spring controller silently ignored if mapping is defined in interface and if there's an error in it
• #43736 - CORS Regex Header Allow-Credentials Bug
• #43885 - Exclude uri from otel tracing
• #44026 - Missing support for auto-generated count methods in one-to-many relationships based on child entity attributes in Spring Repository
• #44052 - Avoid double registration of providers
• #44054 - Take regexps into account when setting access-control-allow-credentials
• #44079 - Move core configuration to @ConfigMapping
• #44105 - Reimplement security-webauthn on top of webauthn4j
• #44157 - Make quarkus-oidc's OidcProviderClient available to the custom code
• #44168 - Unable to read RoutingContext from CustomTenantResolver
• #44233 - Support left join 44026
• #44262 - Supported encrypted pem files in the TLS registry
• #44305 - Ability to configure extension Dev mode JVM options
• #44334 - GraphQL client: "endpoint" parameter in "`@GraphQLClientApi...

Complete changelog

• #10264 - elytron security: define role mapper (was: ldap security - role mapper)
• #44047 - Demote Agroal's "JDBC resources leaked" warnings to DEBUG
• #44540 - FORMAT_FAILURE when using Log.error(Object,Throwable)
• #44565 - Ensure that all our handlers extend ExtHandler
• #44773 - OpenAPI Extension (smallrye) produces wrong schema for Flow based return types
• #45150 - OpenAPI Extension Misses Jackson Annotations on Methods that Return a Parameterized Type
• #45167 - Long.parseLong Error with Redis Client Instrumentation
• #45224 - PermissionChecker does not handle list of permission correctly
• #45364 - Don't treat colon as a permission-to-action separator in @PermissionChecker value attribute
• #45419 - Fix typos in deploying-to-kubernetes.adoc
• #45424 - Bump smallrye-open-api.version from 4.0.5 to 4.0.6
• #45439 - OpenTelemetry: fix the Redis instrumenter in case of a tainted connection
• #45467 - Add FAQ about thread dumps in native reference guide
• #45471 - Update code to get Mandrel version from native executable
• #45482 - Execute the MongoDB Connection Health Check on Startup
• #45486 - Remove yq installation step from GitHub Actions workflows
• #45487 - Fix Quarkus platform BOM version info collection for analytics
• #45509 - Parallelize bean scanning in SmallRyeFaultToleranceProcessor
• #45512 - Add a cache for class proxies in BytecodeRecorderImpl
• #45517 - Make scheduler timezone documentation consistent with javadoc
• #45518 - Remove erroneous state tracking from client readers/writers
• #45523 - Fix Mongo health checks
• #45536 - Quarkus REST - Use ByteBufInputStream instead of copying bytes
• #45564 - fix: possible NPE if data has not been set yet
• #45576 - Revert "[oracle-jdbc] Remove unnecessary conditionals from @BuildSteps in the Oracle JDBC extension"
• #45583 - Adjust logging level for JDBC resource leak warnings
• #45586 - Elytron security LDAP: Document and test mapping of LDAP groups to SecurityIdentity roles

Complete changelog

• #36688 - Unable to use Panache Sort.Direction enum as method parameter for GraphQL query
• #39137 - RESTEasy resource with constructor or field injection failing with RESTEASY003190
• #44550 - GraphQL Typesafe client with sources in a dependency
• #44590 - Change the JsonRPC Service for OIDC to use recorder
• #44929 - Error in secured post-multipart interface with large files
• #44959 - Ensure request body is consumed so that multipart requests with large payloads never hang when exception happens before body is consumed
• #44960 - Page count fails when using a sort specification in a Panache query with a SELECT DISTINCT statement in Quarkus 3.17
• #45104 - Bump com.gradle:develocity-maven-extension from 1.22.2 to 1.23
• #45199 - Bump gradle/develocity-actions from 1.2 to 1.3
• #45204 - Uber-Jar file name suffix issue for disabling it
• #45205 - Update Quarkus Parameter for Disabling Uber-JAR File Name Suffix
• #45220 - Messaging RunOnVirtualThreads fix on class annotation
• #45235 - Upgrade to Hibernate ORM 6.6.4 / Reactive 2.4.3
• #45253 - Assorted @WithTestResource fixes
• #45254 - Typo in Proxy Configuration Guidance
• #45260 - Typo in ProxyConfig
• #45261 - Update Develocity extension to 1.1.9
• #45284 - Add gRPC capability
• #45297 - RESTEasy - Mention you cannot inject @Context elements in constructors
• #45298 - Add Panache Sort enums in index for SmallRye GraphQL
• #45305 - Docs: Correct sentence in Simplified MongoDB with Panache
• #45335 - swapi.dev is down, use swapi.tech
• #45351 - Fixed an issue where annotations were not part of the Jandex index, if given in an external JAR
• #45387 - Docs: Correct sentence in Using the MongoDB Client
• #45390 - Fix typo in default LGTM dashboards
• #45392 - Fix metric scale on dashboard
• #45397 - Bump commons-codec:commons-codec from 1.17.1 to 1.17.2
• #45401 - Use swapi.tech for The Star Wars API calls
• #45402 - Update SmallRye Health to 4.1.1

Complete changelog

• #44974 - Rest Client metrics show real value in uri attribute instead of path parameter placeholders when used with @Url
• #44989 - REST Client not sending headers from shared configKey
• #45002 - REST Client using configKey resolves wrong config
• #45004 - Update documentation for handling proxies in native-mode
• #45010 - Properly create REST Client template path when @Url is used
• #45022 - Upgrade to quarkus-http 5.3.4
• #45034 - Revert MariaDB driver to 3.4.1
• #45044 - Priority of REST Client Config changed to Quarkus FQN, config key, simple name
• #45066 - Update OIDC MTLS test to use generated certificates
• #45072 - Prioritize OIDC mechanism when inclusive authentication is disabled to simplify using mTLS and OIDC together
• #45084 - A NoSuchMethodException is raised when a REST resource is called with a single JsonObject argument in native build
• #45095 - Generate certificates in the OIDC integration test
• #45097 - Ensure that jakarta json types can be deserialized in native mode
• #45108 - Logstash conf file fix
• #45126 - Bump org.hibernate.validator:hibernate-validator from 8.0.1.Final to 8.0.2.Final
• #45130 - Conflicting open telemetry and flyway dependencies
• #45136 - Break build cycle between OTel, logging and Flyway
• #45143 - Update OIDC bearer doc with a section about response filters
• #45161 - Fix local proxy handling in REST Client module
• #45162 - Improve documentation for handling proxies in native-mode
• #45172 - Docs: Correct word form in Native Applications Tips
• #45173 - Unable to use custom handlers for HTTP OPTIONS method in subresources
• #45174 - Unable to use custom handlers for HTTP OPTIONS method in subresources
• #45190 - Fix matrix computation for Ubuntu 24

Complete changelog

• #40328 - Support for springdoc-openapi annotations in quarkus-smallrye-openapi
• #44035 - smallrye-openapi scan for @ServerExceptionMapper annotation
• #44627 - OpenAPI Extension Fails to Generate Schema for Generic Type that Uses Jackson JsonUnwrapped
• #44804 - ElytronPasswordIdentityProvider does not forward attributes from SecurityIdentity
• #44853 - Quarkus Vertx GRPC Client should respect "max-inbound-message-size" property
• #44855 - Respect max message size property fo Quarkus GRPC client (44853)
• #44896 - Copy attributes from Elytron SecurityIdentity to Quarkus SecurityIdentity
• #44914 - LogManager error of type GENERIC_FAILURE
• #44919 - Register Kotlin's empty set for reflection
• #44923 - Spring Cloud Configuration ordinal customization
• #44931 - Reduce log level of OTel side exporter classes
• #44932 - Grpc client interceptors are not registered when injected via constructor
• #44936 - Make sure OidcRequestContextProperties are always modifiable
• #44938 - Keycloak devservice can be started indirectly if quarkus-oidc uses quarkus.oidc.provider
• #44946 - Bump org.jboss.logmanager:jboss-logmanager from 3.1.0.Final to 3.1.1.Final
• #44952 - Spring Cloud Configuration ordinal customization
• #44954 - Bump io.smallrye.common:smallrye-common-bom from 2.8.0 to 2.9.0
• #44961 - Fix InjectionPointModifier for repeated annotations on method parameters; add grpc test
• #44975 - Quarkus Generator for gradle projects generates broken GitHub-Workflow
• #44980 - Don't start Keycloak Dev Service for OIDC client and other extensions when OIDC extension is configured with a known social provider
• #44983 - Fix ci.yml for Gradle projects
• #44986 - Minor OIDC updates
• #44990 - PermissionChecker method sometimes receives unaugmented SecurityIdentity even though augmentor did run successfully
• #44996 - Bump smallrye-open-api.version from 4.0.4 to 4.0.5
• #45003 - Fix code indentation
• #45007 - Properly substitute {quarkus-version} in native-reference.adoc
• #45008 - Improve Dev Services network output in dev mode when typing c
• #45012 - Use final SecurityIdentity augmented with all the augmentors in @PermissionChecker methods
• #45016 - Correct dependency notation in documentation for observability-devservices-lgtm.adoc
• #45024 - Document @Url usage in REST Client
• #45026 - Build with devservices failed because download of redpanda leads to 404
• #45028 - Move from vectorized/redpanda images to redpandadata/redpanda

Complete changelog

• #44471 - JDK 24 new console is causing a serious regression in startup
• #44599 - Build fails with "Method too large" exception
• #44624 - Split creation of the Set to match unknown properties to avoid MethodTooLargeException
• #44653 - Dev console "crashes" with Java 23
• #44708 - Fix invalid proxy setting when the port ends with a whitespace
• #44761 - Re-enable OIDC wiremock tests once a new certificate chain is available
• #44791 - Add OpenPGP's Bouncycastle library to application's BOM
• #44795 - Fix typo with classes() method
• #44796 - Default to old console if user has not set it
• #44797 - Quarkus Qute broken in 3.16
• #44798 - Drop mentions of quarkus.ssl.native=false in Hibernate Search guides
• #44808 - Use CertificateGenerator in OIDC Wiremock tests
• #44811 - quarkus.jacoco.excludes doesn't work since 3.17.0
• #44817 - Qute: fix regression in perf optimization of ReflectionValueResolver
• #44820 - Fix NPE caused by PropertyName map with Mappings names
• #44822 - Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2
• #44834 - Fix off-by-one error in exception decoration code
• #44838 - Update SmallRye Config to 3.10.2
• #44853 - Quarkus Vertx GRPC Client should respect "max-inbound-message-size" property
• #44866 - Qute message bundle using enum uppercase with words separated by underscores
• #44883 - Qute message bundles: fix localization of enums
• #44886 - Custom openapi.yml under META-INF not merged after upgrade to 3.17.x
• #44892 - Bump smallrye-open-api.version from 4.0.3 to 4.0.4

Complete changelog

• #7462 - Hibernate fails on complex orphanDelete=true cases and bump version upon merge calls involving entities without change
• #35980 - Health UI access wrong health endpoint with management interface
• #43056 - Double Array Hibernate @JdbcTypeCode(SqlTypes.ARRAY) causes NullPointerException with 6.6.0.Final
• #43296 - AssertionError in EntityInitializerImpl.resolveInstanceSubInitializers after upgrading to 3.14
• #43845 - Exemplars are not recorded for metric http_server_requests*
• #44016 - Micrometer exemplars on HTTP
• #44117 - TestProfile's getEnabledAlternatives CDI BEAN leaks to unrelated TestProfile's test
• #44261 - Improve Qute documentation
• #44391 - Upgrade to Hibernate ORM 6.6.3.Final
• #44454 - Hibernate FetchNotFoundException
• #44511 - NPE during custom bean invocation via PreAuthorize annotation in Quarkus RESTEasy
• #44543 - Fix buildpack docker host handling for macos
• #44564 - A NoSuchMethodException is raised when a rest resource is called with a Jakarta Reader/Writer interceptor defined
• #44568 - @AuthorizationPolicy is not compatoble with kotlin suspend functions
• #44576 - Cannot build TODO demo app on windows into uber-jar since quarkus 3.16.1
• #44584 - Fix wrong web endpoint path for resource on Windows
• #44586 - Bump smallrye-fault-tolerance.version from 6.6.2 to 6.6.3
• #44589 - Copyedits for style, security-jwt.adoc
• #44592 - Docs: dev mode differences - remove the link for old Dev UI
• #44594 - Google Cloud Function gen 2 is now the default
• #44599 - Build fails with "Method too large" exception
• #44602 - Qute docs improvement
• #44603 - Copyedits for style, security-jwt-build.adoc
• #44608 - Bump testcontainers.version from 1.20.3 to 1.20.4
• #44610 - Qute: Unexpected primitive equality
• #44613 - Register method for reflection when read or write interceptors exist
• #44615 - Qute: if section - adjust the evaluation rules for equality operators
• #44638 - Clean up effects of test profiles when @QuarkusMainTest completes
• #44641 - NoClassDefFoundError in ShutdownTask when running BuildMetricsTest
• #44646 - Failing to apply @SecureField to a generic with nested objects.
• #44647 - Do not add host:port to Health path in Health UI
• #44649 - Register jakarta.json.spi.JsonProvider service provider
• #44667 - Pass secured method arguments into security checks for @PreAuthorize security annotation on SpringWeb endpoints
• #44668 - Support @AuthorizationPolicy on suspended Kotlin endpoint methods
• #44669 - Quarkus REST Jackson: Improve detection of generic fields annotated with the @SecureField and allow to explicitly enable secure serialization
• #44674 - Qute: Rendering Timeout Instead of Throwing TemplateException for Missing Keys in {#let} and {#set} Constructs
• #44677 - Properly reset Quarkus populated Jackson ObjectMapper
• #44678 - Fix glob to regex convertion to properly handle **/*.suffix
• #44679 - Config Doc - Improve HTML Javadoc -> Asciidoc conversion
• #44682 - Qute: fix handling of missing properties in strict mode
• #44684 - Remove line
• #44685 - Add documentation for @WithTestResource to getting started testing
• #44698 - Bump hibernate-search.version from 7.2.1.Final to 7.2.2.Final
• #44704 - Fix TLS config Javadoc typo
• #44709 - Fix leftover -reactive properties references in REST client guide
• #44754 - Fix retry count in remote dev mode error message
• #44760 - Temporarily disable OIDC wiremock tests using expired certificates
• #44768 - Address leftovers in testing docs from #44685

Complete changelog

• #9335 - Bug using a maven classifier in dev mode
• #43608 - Dependency warning spam during build
• #44216 - Increased build-time RSS usage in micrometer-prometheus integration test after moving Kubernetes to @ConfigMapping
• #44246 - Runtime property being resolved at build time
• #44286 - Clarify JFR configuration when using OTel Metrics
• #44448 - Reduce allocation in matching of unknown properties
• #44452 - quarkus-hal omits link params from response entity
• #44467 - WebSockets Next: clarify connector API docs/javadoc
• #44475 - Improve test reliability
• #44477 - Update to Quartz 2.5.0 and drop Jakarta transformation workaround
• #44479 - TestSecurity#permissions using SecurityIdentityAugmentor only work with proactive auth
• #44481 - Bump smallrye-open-api from 4.0.2 to 4.0.3
• #44483 - Bump com.gradle.develocity from 3.18.1 to 3.18.2 in /devtools/gradle
• #44487 - Support configuring quarkus.bootstrap.effective-model-builder as a POM property
• #44497 - Mutiple starts of Quarkus during Test execution (works in 3.15.1)
• #44499 - Improve test reliability II
• #44500 - Kafka serializer cannot be autodetected when injecting an Instance
• #44501 - Support title and type fields when generating HAL links
• #44503 - Enforce the platform constraints when resolving the Quarkus bootstrap Gradle resolver dependencies
• #44504 - WebSockets Next: support arrays as valid return types of callbacks
• #44512 - SmallRye Fault Tolerance: upgrade to 6.6.2
• #44526 - Support Serde detection for Instance injection of Messaging channels
• #44532 - Consider resources from @TestProfile when checking for restart
• #44535 - Allow @PermissionChecker methods to authorize secured methods when @TestSecurity annotation is applied and conditionally apply SecurityIdentityAugmentors
• #44536 - Fix typo, use common ID syntax
• #44541 - Removing unused configuration of the application model in QuarkusBuildTasks
• #44558 - Reference extension maturity matrix from extensions FAQ
• #44560 - Correct javadoc of ReflectiveHierarchyBuildItem
• #44567 - Render ConfigMapping elements properly in the Dev UI Configuration editor
• #44572 - Remove customizer mappings from runtime recording Config
• #44577 - Application does not start after update from 3.15.2 to 3.16.3 due to open api processor

Complete changelog

• #37040 - The flyway extension generates Kubernetes resources as if quarkus.flyway.enabled was a runtime property
• #42446 - Add explanation/concept for extension maturity model
• #44367 - Gradle 3.16 fails with missing required property additionalForcedProperties
• #44399 - Declaring explicitly the build service in the QuarkusBuildTask
• #44433 - Reflection free serializers ArrayIndexOutOfBoundsException
• #44438 - Gradle buildForkOptions no longer used since quarkus 3.16.1
• #44457 - Support for short and uncommon field names like set, get, and is
• #44468 - Use QUARKUS_FLYWAY_ACTIVE instead of QUARKUS_FLYWAY_ENABLED env in Kubernetes resources
• #44472 - Kotlin native Jackson serialization regression: EmptyList & EmptyMap missing
• #44480 - Fix nullpointer on null code websockets-next
• #44493 - Using BuildForkOptions in QuarkusBuildTask
• #44494 - Register Kotlin's empty list and map for reflection
• #44505 - Log in smallrye-jwt and oauth2 extensions when no bearer access token is available
• #44507 - Fixed Timestamp not being set for otel log signals
• #44509 - Updates to Infinispan 15.0.11.Final
• #44515 - Coordinated Vert.x 4.5.11 upgrades
• #44531 - Correct image file name to resolve broken image
• #44537 - Update smallrye-jwt to 4.6.1
• #44545 - Wrong index of ParameterizedType argument of Map when register type to be generated in JacksonCodeGenerator
• #44571 - Update CacheJsonRPCService.java reference
• #44574 - Grammar corrections for en-us

Complete changelog

• #36336 - @CacheResult on legacy @RegisterRestClient throws CCE on 3.4.2
• #37430 - Docs: OpenID Connect (OIDC) and OAuth2 Client and Filters Reference Guide
• #40007 - Add ability to hide rest endpoints from OpenAPI schema / Swagger
• #41813 - Keycloak container consumes too much memory in devmode
• #42064 - Self changes of column names to non-exist column names by PanacheJpaUtil#getFastCountQuery
• #42237 - Warning about failing to index Spring class on reload
• #42238 - Transfer-Encoding header is set twice
• #42425 - Fetchgraph does not prevent Hibernate from fetching lazy one-to-one relationships
• #42520 - FAQ (frequently asked questions) documentation for extensions
• #43036 - quarkus plug sync no longer removes plugins provided by extensions
• #43191 - quarkus plugin sync is broken
• #43192 - Fix Quarkus plugin syncing
• #43245 - ArC: fix the situation when a framework bean uses an application decorator
• #43290 - Using reusable workflows in Quarkiverse release process
• #43307 - Enum values are not displayed in extension documentation
• #43319 - Unable to run application with kafka-stream on aarch64 built using native builder image
• #43326 - Hibernate-Reactive: ClassCastException EmbeddableInitializerImpl to ReactiveInitializer
• #43347 - Bump microprofile-reactive-streams-operators.version from 3.0 to 3.0.1
• #43348 - Bump hibernate-orm.version from 6.6.0.Final to 6.6.1.Final, hibernate-reactive.version from 2.4.0.Final to 2.4.1.Final
• #43352 - Use ChainedLocalRepositoryManager to support -Dmaven.repo.local.tail
• #43364 - Issue with multiform data rest client on Quarkus 3.14
• #43373 - Application hangs on https=http port check failure
• #43376 - Properly fail when both http and https servers started on port
• #43383 - Add Javadoc for DevMojo#jvmArgs
• #43420 - Use varargs for localRepositoryTail
• #43422 - HTTP HEAD to @GET endpoint of (reactive) Jakarta RESTful web services sub resource returns 405
• #43424 - Migrating to 3.13.0 results in failure on quarkus reactive routes
• #43425 - Avoid SecurityContextOverrideHandler NPE when user provided custom JAX-RS security context and Quarkus Security is not present
• #43437 - Make media type optional for InputStream when using multipart in REST Client
• #43439 - WebSockets Next: ignore non-websocket connections
• #43440 - Support @HEAD and @OPTIONS in sub-resources
• #43459 - Make sure Transfer-Encoding set by a Resource is honored
• #43471 - ConcurrentModificationException when Quarkus Micrometer extension is used
• #43472 - Can't perform augmentation when using gRpc extension
• #43473 - quarkus:update fails on Windows with quarkus-cli
• #43474 - Improper defaults in KubernetesClientBuildConfig
• #43475 - Inherit defaults from Fabric8 kubernetes client defaults
• #43489 - Qute Generated ValueResolver for interface default methods
• #43490 - Bump kubernetes-client-bom from 6.13.3 to 6.13.4
• #43498 - Qute: improve docs/javadoc about value resolvers ordering
• #43501 - Update quarkus-spring-api to 6.1.SP4
• #43502 - OpenTelemetry instrumentation still active after quarkus.otel.sdk.disabled=true
• #43515 - Check whether a dependency has resolved paths before setting a component path
• #43518 - Mailer: default mailer beans are not registered if only mail template record is used
• #43519 - Quiet down logs of observability DevResources
• #43524 - Mailer: register default mailer beans correctly
• #43531 - Remove deprecated RunOptions mention in the transactions docs
• #43532 - Fixed trust all option after reload (TlsRegistry)
• #43534 - The WebSocket Dev UI widget does not connect for nested classes
• #43535 - Disable instrumentation according with SDK config
• #43536 - Quarkus Update - Replace \ by / in rewriteFile path on Windows
• #43551 - Stacktrace container overflows in error page
• #43552 - Add overflow-x scroll
• #43560 - WebSockets Next: fix Dev UI for nested endpoint class
• #43568 - Improve GitHub Actions cache usage
• #43574 - Update Maven Archetype Plugin to 3.3.0
• #43583 - Generated ID token can be attempted to be verified as if it was issued by the OIDC/OAuth2 provider
• #43585 - Check self-signed ID token when access token is verified
• #43591 - Qute: fix reload of templates backed by build item
• #43592 - Add note about ExceptionMapper<ValidationException> in validation guide
• #43593 - Openapi-swaggerui guide - reference MicroProfile OpenAPI Core configuration
• #43601 - Keycloak container consumes too much memory in devmode
• #43602 - Qute: fix generated ValueResolvers
• #43624 - Properly test for existence of OtlpMeterRegistry
• #43628 - Undertow: UnsupportedOperationException using servlet filter in SSL
• #43629 - Updates Infinispan to 15.0.9.Final
• #43632 - Split Quarkiverse release into two workflows
• #43633 - Config Doc - Expand enums even if tooltip is not supported
• #43645 - Bump Micrometer to 1.13.5
• #43653 - Qute: fix generated ValueResolver for default methods with params
• #43680 - Bump to Quarkus HTTP 5.3.3
• #43681 - JBangIntegration needs some TLC ASAP
• #43697 - Bump org.hibernate.reactive:hibernate-reactive-core from 2.4.1.Final to 2.4.2.Final
• #43701 - Keycloak devservice restarts with every update in devmode
• #43718 - Fix faulty class loader
• #43733 - AppCDS docs on usage with JIB are slightly misleading
• #43762 - Add quarkus.hibernate-orm.database.version-check.enabled
• #43779 - Manage angus-mail in the bom
• #43782 - Move rocksdb native library resource registration to a feature
• #43784 - [rest-client] @RestForm does not work with a Map
• #43789 - Writing a Dev Service doc fixes
  *...