Skip to content

Bump io.quarkus:quarkus-bom from 3.36.1 to 3.38.0 in /s3-uploader/runtimes/quarkus_native_on_provided_al2#3702

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/s3-uploader/runtimes/quarkus_native_on_provided_al2/io.quarkus-quarkus-bom-3.38.0
Open

Bump io.quarkus:quarkus-bom from 3.36.1 to 3.38.0 in /s3-uploader/runtimes/quarkus_native_on_provided_al2#3702
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/s3-uploader/runtimes/quarkus_native_on_provided_al2/io.quarkus-quarkus-bom-3.38.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps io.quarkus:quarkus-bom from 3.36.1 to 3.38.0.

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.38.0.CR1

Complete changelog

  • #27362 - Quarkus Lambda IT failing with java.net.SocketTimeoutException: Read timed out
  • #29141 - Mailer stuck when sending a message from GraphQL endpoint
  • #36215 - Imperative Mailer not working with smallrye-graphql
  • #45227 - Generating the OpenShift Route CRD using the quarkus-maven-plugin fails when using TLS b/c is adds a path field
  • #46899 - Spring Data API Extension Dynamic Projections not working
  • #49975 - Support Vertx context propagation in Kotlin coroutine gRPC services
  • #50151 - Make @SpringBootTest annotation work
  • #50685 - quarkus-rest treats semicolon as a separator in query parameters
  • #52703 - Opentelemtry VertxGrpcSpanExporter + NoopSpanExporter
  • #53312 - Testcontainers are not reused between builds and test executions with testcontainers.reuse.enable=true
  • #53350 - Cross-application AMQP Dev Services sharing broken — ContainerLocator not updated for new discovered() API
  • #53431 - Panache Next: Switch to JD 1.1 Page and PageRequest
  • #53943 - Add a property requiring to use client authentication for all OIDC endpoints
  • #54290 - Document priority of configs in various dev and test profiles as well as overriding possibilities
  • #54384 - quarkus-hibernate-panache-next: in Kotlin, WithId.AutoUUID fails with Unknown integral data type for ids: UUID
  • #54402 - Allow trusted proxy CA subject DN to be verified
  • #54537 - @Transactional does not work in Hibernate Reactive with Panache
  • #54592 - SPI to have other extensions contribute (static) Hibernate Persistence Unit definitions
  • #54593 - Use a per-request TaskQueue for blocking GraphQL over WebSockets
  • #54596 - Migrate from quarkus-local-cache to Caffeine + JCache
  • #54668 - Hibernate ORM 7.4 temporal entity support testing
  • #54691 - Quarkus ForwardedParser does not validate proto values from Forwarded and X-Forwarded-Proto headers
  • #54788 - Native build with future defaults fails when CLDR locale data uses disabled service loader
  • #54802 - Support stream in maven create project mojo
  • #54814 - KnownCompatibleBeanArchiveBuildItem: support maven type
  • #54870 - HttpServerMetricsTagsContributor tags are not applied on the requestReset path, causing inconsistent tag keys for http_server_requests_seconds (quarkus-micrometer-registry-prometheus)
  • #54965 - quarkus-data-hibernate: PanacheRepository.flush() (no-arg) throws IllegalStateException: Entity 'java.lang.Class' was not found
  • #54971 - GraphQL blocking resolvers using Hibernate without @Transactional silently break with parallel execution
  • #55045 - OIDC: Eager startup validation of JWT bearer token file prevents lazy file creation
  • #55063 - SpringDataRepositoryCreator generates duplicate findAll() method when extending bare Repository marker interface with explicit findAll() declaration
  • #55131 - quarkus-dev.properties is not loaded in quarkusDev when gradle-worker.no-process=true
  • #55282 - Support weight-based (memory) eviction for Hibernate 2LC Caffeine cache regions

3.37.4

Complete changelog

  • #46633 - AWS Lamdba function.zip permission issue on Windows
  • #55436 - Update to Vert.x 4.5.30 and Netty 4.1.136.Final
  • #55438 - Qute does not apply property-not-found-strategy when chaining template extension methods
  • #55451 - reflection-free serializers ignore @JsonValue declared on a superinterface method
  • #55452 - Skip NOT_FOUND in value resolver to avoid locking in NOT_FOUND strings before calls to.raw
  • #55455 - Embedding cyclone DX SBOM fails with relative parent pom file
  • #55466 - Check @JsonValue declared on a superinterface method in reflection-free Jackson serializers
  • #55470 - Update to Hibernate ORM 7.4.5 / Update to Hibernate Validator 9.1.2
  • #55476 - Make sure MavenProjects available through the API are added to the Quarkus workspace

... (truncated)

Commits
  • 0b8f289 [RELEASE] - Bump version to 3.38.0
  • 462bcec Merge pull request #55592 from gsmet/3.38.0-backports-1
  • cde0276 Set Unix permissions when copying entries into function.zip
  • 9e37685 Fix scalpel configuration
  • 7299dff Make sure MavenProjects available through the API are added to the Quarkus wo...
  • 9aa664a Prevent unboxing of null Character in reflecton-free Jackson serializers
  • 2cee817 Update to Hibernate Validator 9.1.2
  • 584707c Update to Hibernate ORM 7.4.5
  • 3415437 Gradle: Add Gradle-version dependent warnings
  • 1e6d4e4 Implement @​JsonAnyGetter on fields in reflection-free Jackson serializers
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) from 3.36.1 to 3.38.0.
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.36.1...3.38.0)

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants