chore(deps): bump the quarkus group across 1 directory with 3 updates by dependabot[bot] · Pull Request #90 · juandiii/ark

dependabot · 2026-06-22T08:25:07Z

Bumps the quarkus group with 3 updates in the / directory: io.quarkus:quarkus-bom, io.quarkus:quarkus-extension-processor and io.quarkus:quarkus-extension-maven-plugin.

Updates io.quarkus:quarkus-bom from 3.35.0 to 3.37.3

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.37.3

Complete changelog

#48106 - quarkus.grpc.codegen.proto-directory unrecognized configuration key & missing from documentation

#55093 - Incompatible exception classloaders when mocking exceptions during tests

#55196 - quarkus-oidc cannot handle non rollable refresh tokens concurrently

#55231 - Safer testcontainers.reuse.enable restoration + more resilient tests

#55272 - OIDC: deduplicate concurrent token refresh requests within a single Quarkus instance

#55288 - [3.x] OpenShift Client native integration test fails after #55242

#55292 - Bump the hibernate group across 1 directory with 12 updates

#55316 - Fix IsContainerRuntimeWorking to not write testcontainers.reuse.enable to ~/.testcontainers.properties

#55319 - Fix native image build failure caused by Netty's SelfSignedCertificate

#55351 - Don't truncate stacktrace on OIDC authentication errors

#55357 - Do not miss Throwable in the OIDC code flow error log

#55362 - @JsonFormat(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set

#55363 - Reflection free deserializers drops data of final collection field with no setter

#55365 - Fix flakiness of RawTypeReflectionFreeSerializerTest

#55366 - Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers

#55369 - quarkus-rest-jackson: reflection-free deserializer ignores @JsonTypeInfo/@JsonSubTypes for polymorphic list elements inside a wrapper type

#55370 - Bail out of reflection-free deserializer when @JsonTypeInfo is used

#55373 - Jacoco + CycloneDX extension breaking combination in Quarkus 3.37.1+

#55374 - Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers

#55378 - Register gRPC codegen configuration properties

#55380 - Harden remote dev mode against path traversal and unsafe deserialization

#55385 - NPE in modularity can transformed classes

#55396 - Fix NPE in modularity when processing removed resources

#55397 - Ignore unresolvable POMs for bundled CycloneDX components

#55403 - Fix bad link syntax and update cross-document references to use xref

#55410 - quarkus-rest-jackson: Reflection-free deserializer ignores @JsonProperty(required=true) on a @JsonCreator sometimes

#55411 - Take count of @JsonProperty(required=true) on a @JsonCreator in reflection-free Jackson serializers

#55425 - Disable Mockito class cache so thenThrow works across component tests

#55426 - ServerExceptionMapper on sub-resource is global instead of sub-resource specific

#55427 - Make @ServerExceptionMapper in sub-resource specific to that sub-resource

#55450 - Fix serialization of java.time.Duration in generated reflection-free Jackson serializers

3.37.2

Complete changelog

#49524 - IllegalStateException: GlobalOpenTelemetry.set has already been called

#54999 - Produce ServiceStartBuildItem for OTel

#55134 - Add regression tests for QuteProcessor

#55137 - Null boxed Integer and Boolean fields dropped from JSON by reflection-free serializers (Quarkus 3.37)

#55142 - @JsonProperty is ignored or duplicated + 'visibility'-setting is ignored in 'ObjectMapperCustomizer' by reflection-free Jackson serializers

#55183 - Fix typo

#55214 - Reflection-free serializers break Kotlin boolean "is" properties and @JsonProperty annotations

#55216 - Avoid duplicate fields when using @JsonProperty + improve Kotlin support + obey visibility defined in ObjectMapperCustomizer in reflection-free Jackson serializers

#55229 - Bump com.ongres.scram:scram-client from 3.2 to 3.3 in /bom/application

#55238 - Bump SmallRye GraphQL to 2.18.3

... (truncated)

Commits

d647aef [RELEASE] - Bump version to 3.37.3
7a51b0e Merge pull request #55460 from gsmet/3.37.3-backports-4
036eb11 Fix serialization of java.time.Duration in generated reflection-free Jackson ...
a435cb1 Fix native image build failure caused by Netty's SelfSignedCertificate
34eacf7 Register gRPC codegen configuration properties
9a31621 fix(quarkus-rest): @serverexceptionmapper in sub-resource shouldn't be global
81b8969 Ignore unresolvable POMs for bundled CycloneDX components
c0090b9 Disable Mockito class cache for thenThrow across component tests
5868f10 Harden remote dev mode against unsafe deserialization
49cfd7e Harden remote dev mode against path traversal
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.35.0 to 3.37.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.35.0 to 3.37.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.37.3

Complete changelog

#48106 - quarkus.grpc.codegen.proto-directory unrecognized configuration key & missing from documentation

#55093 - Incompatible exception classloaders when mocking exceptions during tests

#55196 - quarkus-oidc cannot handle non rollable refresh tokens concurrently

#55231 - Safer testcontainers.reuse.enable restoration + more resilient tests

#55272 - OIDC: deduplicate concurrent token refresh requests within a single Quarkus instance

#55288 - [3.x] OpenShift Client native integration test fails after #55242

#55292 - Bump the hibernate group across 1 directory with 12 updates

#55316 - Fix IsContainerRuntimeWorking to not write testcontainers.reuse.enable to ~/.testcontainers.properties

#55319 - Fix native image build failure caused by Netty's SelfSignedCertificate

#55351 - Don't truncate stacktrace on OIDC authentication errors

#55357 - Do not miss Throwable in the OIDC code flow error log

#55362 - @JsonFormat(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set

#55363 - Reflection free deserializers drops data of final collection field with no setter

#55365 - Fix flakiness of RawTypeReflectionFreeSerializerTest

#55366 - Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers

#55369 - quarkus-rest-jackson: reflection-free deserializer ignores @JsonTypeInfo/@JsonSubTypes for polymorphic list elements inside a wrapper type

#55370 - Bail out of reflection-free deserializer when @JsonTypeInfo is used

#55373 - Jacoco + CycloneDX extension breaking combination in Quarkus 3.37.1+

#55374 - Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers

#55378 - Register gRPC codegen configuration properties

#55380 - Harden remote dev mode against path traversal and unsafe deserialization

#55385 - NPE in modularity can transformed classes

#55396 - Fix NPE in modularity when processing removed resources

#55397 - Ignore unresolvable POMs for bundled CycloneDX components

#55403 - Fix bad link syntax and update cross-document references to use xref

#55410 - quarkus-rest-jackson: Reflection-free deserializer ignores @JsonProperty(required=true) on a @JsonCreator sometimes

#55411 - Take count of @JsonProperty(required=true) on a @JsonCreator in reflection-free Jackson serializers

#55425 - Disable Mockito class cache so thenThrow works across component tests

#55426 - ServerExceptionMapper on sub-resource is global instead of sub-resource specific

#55427 - Make @ServerExceptionMapper in sub-resource specific to that sub-resource

#55450 - Fix serialization of java.time.Duration in generated reflection-free Jackson serializers

3.37.2

Complete changelog

#49524 - IllegalStateException: GlobalOpenTelemetry.set has already been called

#54999 - Produce ServiceStartBuildItem for OTel

#55134 - Add regression tests for QuteProcessor

#55137 - Null boxed Integer and Boolean fields dropped from JSON by reflection-free serializers (Quarkus 3.37)

#55142 - @JsonProperty is ignored or duplicated + 'visibility'-setting is ignored in 'ObjectMapperCustomizer' by reflection-free Jackson serializers

#55183 - Fix typo

#55214 - Reflection-free serializers break Kotlin boolean "is" properties and @JsonProperty annotations

#55216 - Avoid duplicate fields when using @JsonProperty + improve Kotlin support + obey visibility defined in ObjectMapperCustomizer in reflection-free Jackson serializers

#55229 - Bump com.ongres.scram:scram-client from 3.2 to 3.3 in /bom/application

#55238 - Bump SmallRye GraphQL to 2.18.3

... (truncated)

Commits

d647aef [RELEASE] - Bump version to 3.37.3
7a51b0e Merge pull request #55460 from gsmet/3.37.3-backports-4
036eb11 Fix serialization of java.time.Duration in generated reflection-free Jackson ...
a435cb1 Fix native image build failure caused by Netty's SelfSignedCertificate
34eacf7 Register gRPC codegen configuration properties
9a31621 fix(quarkus-rest): @serverexceptionmapper in sub-resource shouldn't be global
81b8969 Ignore unresolvable POMs for bundled CycloneDX components
c0090b9 Disable Mockito class cache for thenThrow across component tests
5868f10 Harden remote dev mode against unsafe deserialization
49cfd7e Harden remote dev mode against path traversal
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.35.0 to 3.37.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.35.0 to 3.37.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.37.3

Complete changelog

#48106 - quarkus.grpc.codegen.proto-directory unrecognized configuration key & missing from documentation

#55093 - Incompatible exception classloaders when mocking exceptions during tests

#55196 - quarkus-oidc cannot handle non rollable refresh tokens concurrently

#55231 - Safer testcontainers.reuse.enable restoration + more resilient tests

#55272 - OIDC: deduplicate concurrent token refresh requests within a single Quarkus instance

#55288 - [3.x] OpenShift Client native integration test fails after #55242

#55292 - Bump the hibernate group across 1 directory with 12 updates

#55316 - Fix IsContainerRuntimeWorking to not write testcontainers.reuse.enable to ~/.testcontainers.properties

#55319 - Fix native image build failure caused by Netty's SelfSignedCertificate

#55351 - Don't truncate stacktrace on OIDC authentication errors

#55357 - Do not miss Throwable in the OIDC code flow error log

#55362 - @JsonFormat(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set

#55363 - Reflection free deserializers drops data of final collection field with no setter

#55365 - Fix flakiness of RawTypeReflectionFreeSerializerTest

#55366 - Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers

#55369 - quarkus-rest-jackson: reflection-free deserializer ignores @JsonTypeInfo/@JsonSubTypes for polymorphic list elements inside a wrapper type

#55370 - Bail out of reflection-free deserializer when @JsonTypeInfo is used

#55373 - Jacoco + CycloneDX extension breaking combination in Quarkus 3.37.1+

#55374 - Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers

#55378 - Register gRPC codegen configuration properties

#55380 - Harden remote dev mode against path traversal and unsafe deserialization

#55385 - NPE in modularity can transformed classes

#55396 - Fix NPE in modularity when processing removed resources

#55397 - Ignore unresolvable POMs for bundled CycloneDX components

#55403 - Fix bad link syntax and update cross-document references to use xref

#55410 - quarkus-rest-jackson: Reflection-free deserializer ignores @JsonProperty(required=true) on a @JsonCreator sometimes

#55411 - Take count of @JsonProperty(required=true) on a @JsonCreator in reflection-free Jackson serializers

#55425 - Disable Mockito class cache so thenThrow works across component tests

#55426 - ServerExceptionMapper on sub-resource is global instead of sub-resource specific

#55427 - Make @ServerExceptionMapper in sub-resource specific to that sub-resource

#55450 - Fix serialization of java.time.Duration in generated reflection-free Jackson serializers

3.37.2

Complete changelog

#49524 - IllegalStateException: GlobalOpenTelemetry.set has already been called

#54999 - Produce ServiceStartBuildItem for OTel

#55134 - Add regression tests for QuteProcessor

#55137 - Null boxed Integer and Boolean fields dropped from JSON by reflection-free serializers (Quarkus 3.37)

#55142 - @JsonProperty is ignored or duplicated + 'visibility'-setting is ignored in 'ObjectMapperCustomizer' by reflection-free Jackson serializers

#55183 - Fix typo

#55214 - Reflection-free serializers break Kotlin boolean "is" properties and @JsonProperty annotations

#55216 - Avoid duplicate fields when using @JsonProperty + improve Kotlin support + obey visibility defined in ObjectMapperCustomizer in reflection-free Jackson serializers

#55229 - Bump com.ongres.scram:scram-client from 3.2 to 3.3 in /bom/application

#55238 - Bump SmallRye GraphQL to 2.18.3

... (truncated)

Commits

d647aef [RELEASE] - Bump version to 3.37.3
7a51b0e Merge pull request #55460 from gsmet/3.37.3-backports-4
036eb11 Fix serialization of java.time.Duration in generated reflection-free Jackson ...
a435cb1 Fix native image build failure caused by Netty's SelfSignedCertificate
34eacf7 Register gRPC codegen configuration properties
9a31621 fix(quarkus-rest): @serverexceptionmapper in sub-resource shouldn't be global
81b8969 Ignore unresolvable POMs for bundled CycloneDX components
c0090b9 Disable Mockito class cache for thenThrow across component tests
5868f10 Harden remote dev mode against unsafe deserialization
49cfd7e Harden remote dev mode against path traversal
Additional commits viewable in compare view

Bumps the quarkus group with 3 updates in the / directory: [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus), io.quarkus:quarkus-extension-processor and [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus). Updates `io.quarkus:quarkus-bom` from 3.35.0 to 3.37.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.35.0...3.37.3) Updates `io.quarkus:quarkus-extension-processor` from 3.35.0 to 3.37.3 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.35.0 to 3.37.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.35.0...3.37.3) Updates `io.quarkus:quarkus-extension-processor` from 3.35.0 to 3.37.3 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.35.0 to 3.37.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.35.0...3.37.3) --- updated-dependencies: - dependency-name: io.quarkus:quarkus-bom dependency-version: 3.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies label Jun 22, 2026

github-actions Bot added the chore label Jun 22, 2026

dependabot Bot changed the title ~~chore(deps): bump the quarkus group with 3 updates~~ chore(deps): bump the quarkus group across 1 directory with 3 updates Jun 29, 2026

dependabot Bot force-pushed the dependabot/maven/quarkus-5f901a8092 branch from c6143c7 to 36d94de Compare June 29, 2026 08:24

dependabot Bot force-pushed the dependabot/maven/quarkus-5f901a8092 branch 2 times, most recently from f435c02 to 3cfc04f Compare July 17, 2026 13:55

dependabot Bot force-pushed the dependabot/maven/quarkus-5f901a8092 branch from 3cfc04f to 701239f Compare July 17, 2026 14:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the quarkus group across 1 directory with 3 updates#90

chore(deps): bump the quarkus group across 1 directory with 3 updates#90
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-5f901a8092

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.37.3

Complete changelog

3.37.2

Complete changelog

3.37.3

Complete changelog

3.37.2

Complete changelog

3.37.3

Complete changelog

3.37.2

Complete changelog

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading