deps: bump the quarkus group with 4 updates by dependabot[bot] · Pull Request #2326 · TimefoldAI/timefold-solver

dependabot · 2026-06-01T01:51:47Z

Bumps the quarkus group with 4 updates: io.quarkus:quarkus-bom, io.quarkus:quarkus-maven-plugin, io.quarkus:quarkus-extension-maven-plugin and io.quarkus:quarkus-extension-processor.

Updates io.quarkus:quarkus-bom from 3.35.3 to 3.36.0

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.36.0

Complete changelog

#53533 - Complains about missing <extensions>true</extensions> for newly created extension

#54119 - Add extension-rag module to generate RAG vector embeddings from core documentation

#54133 - Bump kubernetes-client-bom from 7.6.1 to 7.7.0

#54186 - Signals: improvements

#54196 - Bump Gradle from 9.3.1 to 9.5.1

#54202 - Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3

#54209 - Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18

#54217 - Reflection free serializer improvements

#54220 - Bump Microsoft SQL Server JDBC driver to 13.4.0

#54221 - Support for multiple SunPKCS11 configurations

#54223 - Add extensions=true to generated extension codestart POMs for external extensions

#54227 - Exclude transitive dependencies from narayana-jta

#54228 - Add Spring's entities among class placeholders to be unwrapped

#54239 - Add preauthorized_code as OidcClient grant type enum

#54241 - Bump Vineflower to 1.12.0

#54243 - Agroal 3.1 Causes Connections to Use DB Default Transaction Isolation

#54248 - Signals: remove flaky BlockingEmissionFailureTest

#54258 - Using copyRecursive instead of registering configuration for QuarkusComponentVariants

#54259 - Ensure LauncherProvider always use current Config

#54262 - Bump Agroal to 3.1.2

#54300 - Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4

3.36.0.CR1

Major changes

#53415 - Add JsonProvider SPI for per-record dynamic JSON field additions

#53491 - Support arbitrary keystore/truststore types via 'other' config

#53552 - Support for embedded dependency SBOMs in applications and exposing them via an endpoint

#53773 - Support for OIDC SPIFFE Client Authentication

#53788 - Introduce quarkus-signals experimental extension

#53856 - GraphQL client TLS reload

Complete changelog

#25256 - Automatically detect new Flyway scripts in Dev Mode

#36772 - logging-json support for dynamic additional properties

#37008 - Add Kubernetes attributes to OpenTelemetry data

#40602 - Implement low memory mode in the OpenTelemetry exporters.

#41525 - Customizing the JSON logging formatter

#41776 - Mutiny subscription is not cancelled when grpc client is cancelled

#44762 - "vc" is null in GraphQL when using CompletionStage

#46986 - gRPC client closing the stream doesn't automatically propagate the cancellation signal

#47555 - Forward subscription cancellation from client to server

#49006 - Delete Hibernate ORM's unzipped SQL files on shutdown

#50304 - bcfks with TLS registry

#50474 - quarkus-config-doc-maven-plugin support for nested bullet list and multiple sentences in a bullet entry

... (truncated)

Commits

8b751d1 [RELEASE] - Bump version to 3.36.0
614271e Merge pull request #54327 from gsmet/3.36.0-backports-1
1771373 fix(security): prevent NPE in mTLS auth mech & trusted proxy
81169d1 Fix NPE in RemoteUserAttribute with anonymous identity
598373a Prometheus compression header fix
c3a05fc Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
bd56a35 Add extensions=true to generated extension codestart POMs for external extens...
0fd6acd Bump smallrye-open-api from 4.3.1 to 4.3.3
5bc7509 Bump the hibernate group across 1 directory with 14 updates
d66ccfc Use copyRecursive() for temporary configuration copies in variant resolution
Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.35.3 to 3.36.0

Updates io.quarkus:quarkus-extension-maven-plugin from 3.35.3 to 3.36.0

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.36.0

Complete changelog

#53533 - Complains about missing <extensions>true</extensions> for newly created extension

#54119 - Add extension-rag module to generate RAG vector embeddings from core documentation

#54133 - Bump kubernetes-client-bom from 7.6.1 to 7.7.0

#54186 - Signals: improvements

#54196 - Bump Gradle from 9.3.1 to 9.5.1

#54202 - Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3

#54209 - Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18

#54217 - Reflection free serializer improvements

#54220 - Bump Microsoft SQL Server JDBC driver to 13.4.0

#54221 - Support for multiple SunPKCS11 configurations

#54223 - Add extensions=true to generated extension codestart POMs for external extensions

#54227 - Exclude transitive dependencies from narayana-jta

#54228 - Add Spring's entities among class placeholders to be unwrapped

#54239 - Add preauthorized_code as OidcClient grant type enum

#54241 - Bump Vineflower to 1.12.0

#54243 - Agroal 3.1 Causes Connections to Use DB Default Transaction Isolation

#54248 - Signals: remove flaky BlockingEmissionFailureTest

#54258 - Using copyRecursive instead of registering configuration for QuarkusComponentVariants

#54259 - Ensure LauncherProvider always use current Config

#54262 - Bump Agroal to 3.1.2

#54300 - Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4

3.36.0.CR1

Major changes

#53415 - Add JsonProvider SPI for per-record dynamic JSON field additions

#53491 - Support arbitrary keystore/truststore types via 'other' config

#53552 - Support for embedded dependency SBOMs in applications and exposing them via an endpoint

#53773 - Support for OIDC SPIFFE Client Authentication

#53788 - Introduce quarkus-signals experimental extension

#53856 - GraphQL client TLS reload

Complete changelog

#25256 - Automatically detect new Flyway scripts in Dev Mode

#36772 - logging-json support for dynamic additional properties

#37008 - Add Kubernetes attributes to OpenTelemetry data

#40602 - Implement low memory mode in the OpenTelemetry exporters.

#41525 - Customizing the JSON logging formatter

#41776 - Mutiny subscription is not cancelled when grpc client is cancelled

#44762 - "vc" is null in GraphQL when using CompletionStage

#46986 - gRPC client closing the stream doesn't automatically propagate the cancellation signal

#47555 - Forward subscription cancellation from client to server

#49006 - Delete Hibernate ORM's unzipped SQL files on shutdown

#50304 - bcfks with TLS registry

#50474 - quarkus-config-doc-maven-plugin support for nested bullet list and multiple sentences in a bullet entry

... (truncated)

Commits

8b751d1 [RELEASE] - Bump version to 3.36.0
614271e Merge pull request #54327 from gsmet/3.36.0-backports-1
1771373 fix(security): prevent NPE in mTLS auth mech & trusted proxy
81169d1 Fix NPE in RemoteUserAttribute with anonymous identity
598373a Prometheus compression header fix
c3a05fc Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
bd56a35 Add extensions=true to generated extension codestart POMs for external extens...
0fd6acd Bump smallrye-open-api from 4.3.1 to 4.3.3
5bc7509 Bump the hibernate group across 1 directory with 14 updates
d66ccfc Use copyRecursive() for temporary configuration copies in variant resolution
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.35.3 to 3.36.0

Updates io.quarkus:quarkus-maven-plugin from 3.35.3 to 3.36.0

Updates io.quarkus:quarkus-extension-maven-plugin from 3.35.3 to 3.36.0

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.36.0

Complete changelog

#53533 - Complains about missing <extensions>true</extensions> for newly created extension

#54119 - Add extension-rag module to generate RAG vector embeddings from core documentation

#54133 - Bump kubernetes-client-bom from 7.6.1 to 7.7.0

#54186 - Signals: improvements

#54196 - Bump Gradle from 9.3.1 to 9.5.1

#54202 - Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3

#54209 - Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18

#54217 - Reflection free serializer improvements

#54220 - Bump Microsoft SQL Server JDBC driver to 13.4.0

#54221 - Support for multiple SunPKCS11 configurations

#54223 - Add extensions=true to generated extension codestart POMs for external extensions

#54227 - Exclude transitive dependencies from narayana-jta

#54228 - Add Spring's entities among class placeholders to be unwrapped

#54239 - Add preauthorized_code as OidcClient grant type enum

#54241 - Bump Vineflower to 1.12.0

#54243 - Agroal 3.1 Causes Connections to Use DB Default Transaction Isolation

#54248 - Signals: remove flaky BlockingEmissionFailureTest

#54258 - Using copyRecursive instead of registering configuration for QuarkusComponentVariants

#54259 - Ensure LauncherProvider always use current Config

#54262 - Bump Agroal to 3.1.2

#54300 - Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4

3.36.0.CR1

Major changes

#53415 - Add JsonProvider SPI for per-record dynamic JSON field additions

#53491 - Support arbitrary keystore/truststore types via 'other' config

#53552 - Support for embedded dependency SBOMs in applications and exposing them via an endpoint

#53773 - Support for OIDC SPIFFE Client Authentication

#53788 - Introduce quarkus-signals experimental extension

#53856 - GraphQL client TLS reload

Complete changelog

#25256 - Automatically detect new Flyway scripts in Dev Mode

#36772 - logging-json support for dynamic additional properties

#37008 - Add Kubernetes attributes to OpenTelemetry data

#40602 - Implement low memory mode in the OpenTelemetry exporters.

#41525 - Customizing the JSON logging formatter

#41776 - Mutiny subscription is not cancelled when grpc client is cancelled

#44762 - "vc" is null in GraphQL when using CompletionStage

#46986 - gRPC client closing the stream doesn't automatically propagate the cancellation signal

#47555 - Forward subscription cancellation from client to server

#49006 - Delete Hibernate ORM's unzipped SQL files on shutdown

#50304 - bcfks with TLS registry

#50474 - quarkus-config-doc-maven-plugin support for nested bullet list and multiple sentences in a bullet entry

... (truncated)

Commits

8b751d1 [RELEASE] - Bump version to 3.36.0
614271e Merge pull request #54327 from gsmet/3.36.0-backports-1
1771373 fix(security): prevent NPE in mTLS auth mech & trusted proxy
81169d1 Fix NPE in RemoteUserAttribute with anonymous identity
598373a Prometheus compression header fix
c3a05fc Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
bd56a35 Add extensions=true to generated extension codestart POMs for external extens...
0fd6acd Bump smallrye-open-api from 4.3.1 to 4.3.3
5bc7509 Bump the hibernate group across 1 directory with 14 updates
d66ccfc Use copyRecursive() for temporary configuration copies in variant resolution
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.35.3 to 3.36.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the quarkus group with 4 updates: [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus), io.quarkus:quarkus-maven-plugin, [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) and io.quarkus:quarkus-extension-processor. Updates `io.quarkus:quarkus-bom` from 3.35.3 to 3.36.0 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.35.3...3.36.0) Updates `io.quarkus:quarkus-maven-plugin` from 3.35.3 to 3.36.0 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.35.3 to 3.36.0 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.35.3...3.36.0) Updates `io.quarkus:quarkus-extension-processor` from 3.35.3 to 3.36.0 Updates `io.quarkus:quarkus-maven-plugin` from 3.35.3 to 3.36.0 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.35.3 to 3.36.0 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.35.3...3.36.0) Updates `io.quarkus:quarkus-extension-processor` from 3.35.3 to 3.36.0 --- updated-dependencies: - dependency-name: io.quarkus:quarkus-bom dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-maven-plugin dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-maven-plugin dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-06-01T02:14:19Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

triceo · 2026-06-01T05:15:32Z

Not upgrading to .0 releases of Quarkus.

dependabot · 2026-06-01T05:15:34Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added the dependencies Pull requests that update a dependency file; used by Dependabot. label Jun 1, 2026

dependabot Bot requested a review from triceo as a code owner June 1, 2026 01:51

dependabot Bot temporarily deployed to internal June 1, 2026 01:51 Inactive

triceo closed this Jun 1, 2026

triceo deleted the dependabot/maven/quarkus-9b5ea3eec3 branch June 1, 2026 05:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the quarkus group with 4 updates#2326

deps: bump the quarkus group with 4 updates#2326
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-9b5ea3eec3

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

sonarqubecloud Bot commented Jun 1, 2026

Uh oh!

triceo commented Jun 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026

3.36.0

Complete changelog

3.36.0.CR1

Major changes

Complete changelog

3.36.0

Complete changelog

3.36.0.CR1

Major changes

Complete changelog

3.36.0

Complete changelog

3.36.0.CR1

Major changes

Complete changelog

Uh oh!

sonarqubecloud Bot commented Jun 1, 2026

Quality Gate passed

Uh oh!

triceo commented Jun 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant