Bump the quarkus group across 1 directory with 5 updates by dependabot[bot] · Pull Request #272 · wildfly/wildfly-github-bot

dependabot · 2026-09-15T06:07:02Z

Bumps the quarkus group with 5 updates in the / directory:

Package	From	To
io.quarkus.platform:quarkus-bom	`3.38.2`	`3.39.3`
io.quarkus:quarkus-ide-config	`3.38.2`	`3.39.3`
io.quarkus.platform:quarkus-maven-plugin	`3.38.2`	`3.39.3`
io.quarkiverse.githubapp:quarkus-github-app	`2.15.1`	`2.16.0`
io.quarkiverse.githubapp:quarkus-github-app-testing	`2.15.1`	`2.16.0`

Updates io.quarkus.platform:quarkus-bom from 3.38.2 to 3.39.3

Commits

4b08a64 [maven-release-plugin] prepare release 3.39.3
6de57cf Merge pull request #2171 from quarkusio/quarkus-3.39.3
b2d6215 Upgrade to Quarkus 3.39.3
14a151b [maven-release-plugin] prepare for next development iteration
c5a1540 [maven-release-plugin] prepare release 3.39.2
e67c344 Merge pull request #2167 from quarkusio/quarkus-3.39.2
65f8554 Upgrade to Quarkus 3.39.2
be4411e Merge pull request #2166 from quarkusio/update-automation/3.39-quarkus-flow-1...
9e2f4e0 Update Quarkus Flow to 1.1.0
c8091c3 Merge pull request #2164 from quarkusio/update-automation/3.39-debezium-3.6.2...
Additional commits viewable in compare view

Updates io.quarkus:quarkus-ide-config from 3.38.2 to 3.39.3

Release notes

Sourced from io.quarkus:quarkus-ide-config's releases.

3.39.3

Complete changelog

#42976 - Quarkus REST in NATIVE - abstract resources with @Path requires impl. to be CDI beans while RESTEasy does not

#45257 - update guide on writing extension regarding docs generation

#45791 - Range response status reset when using a @ServerResponseFilter

#55119 - Use branch instead of version to avoid dead link on main guides

#55674 - context propagation not working correctly

#55739 - Fix race in AeshLauncherImpl causing flaky test timeouts

#55835 - Quarkus 3.38 in dev mode - WARNING: java.lang.foreign.Linker::downcallHandle has been called by org.aesh.terminal.tty.impl.LibC in an unnamed module

#55962 - Enable WebSocket traffic logging in aesh websocket tests

#55999 - [Docs]: Lift and Shift review of Deploying to OpenShift guide

#56018 - Aesh: fix flaky WebSocket tests on Semeru by closing WebSocketClient

#56103 - Mention the quarkus-config-doc-maven-plugin

#56106 - Add licenses for generic file components in SBOMs

#56120 - Move SSH enabled config to build time and gate all processor build steps

#56129 - Fix wrapWithSpan context propagation

#56153 - Keep the 206 status of Range responses when the JAX-RS response has been materialized

#56222 - Make sure the callouts follow the Asciidoc syntax

#56240 - Update redirect instructions for Roq

#56279 - Security overview guide style review (3.40)

#56301 - Upgrade aesh to 3.17.5 and improve AeshLauncher test framework

#56336 - [3.39] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine

#56340 - Add a packaging overview guide

#56346 - Manage projectreactor in the bom, update to 3.8.7

#56348 - Update building-docs skill and docs-preview.sh for Roq migration

#56354 - Upgrade hibernate ORM from 7.4.5.Final to 7.4.7.Final

#56357 - [3.39] backport of doc improvement

#56359 - Check Keycloak token type on the OIDC server-less verification path

#56365 - [3.39] Upgrade RESTEasy to 6.2.18.Final

#56374 - Remove warning from PeriodicMetricReader

#56386 - Style and syntax violations in docs callouts

#56389 - Do not use attributes in guide title to work around Roq/Yupiik limitation

#56391 - Fix numbered callout lists in documentation examples

#56393 - ReactiveRedisDataSource.withConnection leaks pool permit when cancelled before connection is acquired

#56395 - Suppress PeriodicMetricReader exporter warnings

#56400 - rest-jackson: ContextResolver result cached by entity class, dropping the media type from the key

#56402 - rest-jackson: SecurityCustomSerialization caches its ObjectWriter in a JVM-wide static field, dropping the ObjectMapper from the key

#56408 - Update the logging guide for supported APIs

#56413 - Redis client: fix connection leaks caused by cancellation during acquisition

#56424 - Quarkus REST: fix native mode when abstract resource with path is extended by a subclass without paths

#56425 - Doc - place callout lists after source listings

#56429 - Typo fixes in websockets-next guides

#56430 - Ensure FullyFeaturedServerJacksonMessageBodyWriter uses media type properly

#56431 - Ensure SecurityCustomSerialization uses ContextResolver

#56432 - Remove orphaned callout markers with missing explanations

#56444 - Drop steps for discarded toc plugin in docs preview

#56449 - Fix remaining callout list placement issues in docs

#56470 - [3.39] Decouple types discovery and generation of reflection-free Jackson serializers

... (truncated)

Commits

69a5796 [RELEASE] - Bump version to 3.39.3
306e79a Merge pull request #56503 from gsmet/3.39.3-backports-1
4eb6333 Build extension processor first
1202723 Ensure restoring certificate to original works
952f74c Document CPE-related platform properties
d698132 Implement CycloneDX provided dependencies type
fcbd442 Store embedded SBOMs as uncompressed and make quarkus.cyclonedx.embedded.comp...
8336ff7 Support for component to product attribution in SBOMs
ed71198 Deploy to OpenShift guide: grammar and style corrections (3.40)
60c9258 Deploy to OpenShift guide: editorial fixes (3.40)
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.38.2 to 3.39.3

Commits

4b08a64 [maven-release-plugin] prepare release 3.39.3
6de57cf Merge pull request #2171 from quarkusio/quarkus-3.39.3
b2d6215 Upgrade to Quarkus 3.39.3
14a151b [maven-release-plugin] prepare for next development iteration
c5a1540 [maven-release-plugin] prepare release 3.39.2
e67c344 Merge pull request #2167 from quarkusio/quarkus-3.39.2
65f8554 Upgrade to Quarkus 3.39.2
be4411e Merge pull request #2166 from quarkusio/update-automation/3.39-quarkus-flow-1...
9e2f4e0 Update Quarkus Flow to 1.1.0
c8091c3 Merge pull request #2164 from quarkusio/update-automation/3.39-debezium-3.6.2...
Additional commits viewable in compare view

Updates io.quarkiverse.githubapp:quarkus-github-app from 2.15.1 to 2.16.0

Release notes

Sourced from io.quarkiverse.githubapp:quarkus-github-app's releases.

2.16.0

What's Changed

Bump actions/setup-java from 5 to 6 by @dependabot[bot] in quarkiverse/quarkus-github-app#890

Add separate RAG artifact for documentation search by @phillip-kruger in quarkiverse/quarkus-github-app#878

Bump com.github.rvesse:airline from 3.2.0 to 3.3.0 by @dependabot[bot] in quarkiverse/quarkus-github-app#885

Optionally authorize only some organizations by @gsmet in quarkiverse/quarkus-github-app#892

Release 2.16.0 by @gsmet in quarkiverse/quarkus-github-app#895

New Contributors

@phillip-kruger made their first contribution in quarkiverse/quarkus-github-app#878

Full Changelog: quarkiverse/quarkus-github-app@2.15.1...2.16.0

Commits

172a880 [maven-release-plugin] prepare release 2.16.0
554619a Update the latest release version 2.16.0 in documentation
758ed29 Merge pull request #895 from quarkiverse/gsmet-patch-1
c380c4d Release 2.16.0
93aa47a Merge pull request #892 from gsmet/organizations
e7024ef Optionally authorize only some organizations
d2b85d7 Merge pull request #885 from quarkiverse/dependabot/maven/com.github.rvesse-a...
f5d014d Merge pull request #878 from phillip-kruger/rag-external-artifact-support
e129ea9 Merge pull request #890 from quarkiverse/dependabot/github_actions/actions/se...
5ec707b Bump actions/setup-java from 5 to 6
Additional commits viewable in compare view

Updates io.quarkiverse.githubapp:quarkus-github-app-testing from 2.15.1 to 2.16.0

Release notes

Sourced from io.quarkiverse.githubapp:quarkus-github-app-testing's releases.

2.16.0

What's Changed

Bump actions/setup-java from 5 to 6 by @dependabot[bot] in quarkiverse/quarkus-github-app#890

Add separate RAG artifact for documentation search by @phillip-kruger in quarkiverse/quarkus-github-app#878

Bump com.github.rvesse:airline from 3.2.0 to 3.3.0 by @dependabot[bot] in quarkiverse/quarkus-github-app#885

Optionally authorize only some organizations by @gsmet in quarkiverse/quarkus-github-app#892

Release 2.16.0 by @gsmet in quarkiverse/quarkus-github-app#895

New Contributors

@phillip-kruger made their first contribution in quarkiverse/quarkus-github-app#878

Full Changelog: quarkiverse/quarkus-github-app@2.15.1...2.16.0

Commits

172a880 [maven-release-plugin] prepare release 2.16.0
554619a Update the latest release version 2.16.0 in documentation
758ed29 Merge pull request #895 from quarkiverse/gsmet-patch-1
c380c4d Release 2.16.0
93aa47a Merge pull request #892 from gsmet/organizations
e7024ef Optionally authorize only some organizations
d2b85d7 Merge pull request #885 from quarkiverse/dependabot/maven/com.github.rvesse-a...
f5d014d Merge pull request #878 from phillip-kruger/rag-external-artifact-support
e129ea9 Merge pull request #890 from quarkiverse/dependabot/github_actions/actions/se...
5ec707b Bump actions/setup-java from 5 to 6
Additional commits viewable in compare view

Updates io.quarkiverse.githubapp:quarkus-github-app-testing from 2.15.1 to 2.16.0

Release notes

Sourced from io.quarkiverse.githubapp:quarkus-github-app-testing's releases.

2.16.0

What's Changed

Bump actions/setup-java from 5 to 6 by @dependabot[bot] in quarkiverse/quarkus-github-app#890

Add separate RAG artifact for documentation search by @phillip-kruger in quarkiverse/quarkus-github-app#878

Bump com.github.rvesse:airline from 3.2.0 to 3.3.0 by @dependabot[bot] in quarkiverse/quarkus-github-app#885

Optionally authorize only some organizations by @gsmet in quarkiverse/quarkus-github-app#892

Release 2.16.0 by @gsmet in quarkiverse/quarkus-github-app#895

New Contributors

@phillip-kruger made their first contribution in quarkiverse/quarkus-github-app#878

Full Changelog: quarkiverse/quarkus-github-app@2.15.1...2.16.0

Commits

172a880 [maven-release-plugin] prepare release 2.16.0
554619a Update the latest release version 2.16.0 in documentation
758ed29 Merge pull request #895 from quarkiverse/gsmet-patch-1
c380c4d Release 2.16.0
93aa47a Merge pull request #892 from gsmet/organizations
e7024ef Optionally authorize only some organizations
d2b85d7 Merge pull request #885 from quarkiverse/dependabot/maven/com.github.rvesse-a...
f5d014d Merge pull request #878 from phillip-kruger/rag-external-artifact-support
e129ea9 Merge pull request #890 from quarkiverse/dependabot/github_actions/actions/se...
5ec707b Bump actions/setup-java from 5 to 6
Additional commits viewable in compare view

Updates io.quarkus:quarkus-ide-config from 3.38.2 to 3.39.3

Release notes

Sourced from io.quarkus:quarkus-ide-config's releases.

3.39.3

Complete changelog

#42976 - Quarkus REST in NATIVE - abstract resources with @Path requires impl. to be CDI beans while RESTEasy does not

#45257 - update guide on writing extension regarding docs generation

#45791 - Range response status reset when using a @ServerResponseFilter

#55119 - Use branch instead of version to avoid dead link on main guides

#55674 - context propagation not working correctly

#55739 - Fix race in AeshLauncherImpl causing flaky test timeouts

#55835 - Quarkus 3.38 in dev mode - WARNING: java.lang.foreign.Linker::downcallHandle has been called by org.aesh.terminal.tty.impl.LibC in an unnamed module

#55962 - Enable WebSocket traffic logging in aesh websocket tests

#55999 - [Docs]: Lift and Shift review of Deploying to OpenShift guide

#56018 - Aesh: fix flaky WebSocket tests on Semeru by closing WebSocketClient

#56103 - Mention the quarkus-config-doc-maven-plugin

#56106 - Add licenses for generic file components in SBOMs

#56120 - Move SSH enabled config to build time and gate all processor build steps

#56129 - Fix wrapWithSpan context propagation

#56153 - Keep the 206 status of Range responses when the JAX-RS response has been materialized

#56222 - Make sure the callouts follow the Asciidoc syntax

#56240 - Update redirect instructions for Roq

#56279 - Security overview guide style review (3.40)

#56301 - Upgrade aesh to 3.17.5 and improve AeshLauncher test framework

#56336 - [3.39] Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine

#56340 - Add a packaging overview guide

#56346 - Manage projectreactor in the bom, update to 3.8.7

#56348 - Update building-docs skill and docs-preview.sh for Roq migration

#56354 - Upgrade hibernate ORM from 7.4.5.Final to 7.4.7.Final

#56357 - [3.39] backport of doc improvement

#56359 - Check Keycloak token type on the OIDC server-less verification path

#56365 - [3.39] Upgrade RESTEasy to 6.2.18.Final

#56374 - Remove warning from PeriodicMetricReader

#56386 - Style and syntax violations in docs callouts

#56389 - Do not use attributes in guide title to work around Roq/Yupiik limitation

#56391 - Fix numbered callout lists in documentation examples

#56393 - ReactiveRedisDataSource.withConnection leaks pool permit when cancelled before connection is acquired

#56395 - Suppress PeriodicMetricReader exporter warnings

#56400 - rest-jackson: ContextResolver result cached by entity class, dropping the media type from the key

#56402 - rest-jackson: SecurityCustomSerialization caches its ObjectWriter in a JVM-wide static field, dropping the ObjectMapper from the key

#56408 - Update the logging guide for supported APIs

#56413 - Redis client: fix connection leaks caused by cancellation during acquisition

#56424 - Quarkus REST: fix native mode when abstract resource with path is extended by a subclass without paths

#56425 - Doc - place callout lists after source listings

#56429 - Typo fixes in websockets-next guides

#56430 - Ensure FullyFeaturedServerJacksonMessageBodyWriter uses media type properly

#56431 - Ensure SecurityCustomSerialization uses ContextResolver

#56432 - Remove orphaned callout markers with missing explanations

#56444 - Drop steps for discarded toc plugin in docs preview

#56449 - Fix remaining callout list placement issues in docs

#56470 - [3.39] Decouple types discovery and generation of reflection-free Jackson serializers

... (truncated)

Commits

69a5796 [RELEASE] - Bump version to 3.39.3
306e79a Merge pull request #56503 from gsmet/3.39.3-backports-1
4eb6333 Build extension processor first
1202723 Ensure restoring certificate to original works
952f74c Document CPE-related platform properties
d698132 Implement CycloneDX provided dependencies type
fcbd442 Store embedded SBOMs as uncompressed and make quarkus.cyclonedx.embedded.comp...
8336ff7 Support for component to product attribution in SBOMs
ed71198 Deploy to OpenShift guide: grammar and style corrections (3.40)
60c9258 Deploy to OpenShift guide: editorial fixes (3.40)
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.38.2 to 3.39.3

Commits

4b08a64 [maven-release-plugin] prepare release 3.39.3
6de57cf Merge pull request #2171 from quarkusio/quarkus-3.39.3
b2d6215 Upgrade to Quarkus 3.39.3
14a151b [maven-release-plugin] prepare for next development iteration
c5a1540 [maven-release-plugin] prepare release 3.39.2
e67c344 Merge pull request #2167 from quarkusio/quarkus-3.39.2
65f8554 Upgrade to Quarkus 3.39.2
be4411e Merge pull request #2166 from quarkusio/update-automation/3.39-quarkus-flow-1...
9e2f4e0 Update Quarkus Flow to 1.1.0
c8091c3 Merge pull request #2164 from quarkusio/update-automation/3.39-debezium-3.6.2...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the quarkus group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.38.2` | `3.39.3` | | [io.quarkus:quarkus-ide-config](https://github.com/quarkusio/quarkus) | `3.38.2` | `3.39.3` | | [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.38.2` | `3.39.3` | | [io.quarkiverse.githubapp:quarkus-github-app](https://github.com/quarkiverse/quarkus-github-app) | `2.15.1` | `2.16.0` | | [io.quarkiverse.githubapp:quarkus-github-app-testing](https://github.com/quarkiverse/quarkus-github-app) | `2.15.1` | `2.16.0` | Updates `io.quarkus.platform:quarkus-bom` from 3.38.2 to 3.39.3 - [Commits](quarkusio/quarkus-platform@3.38.2...3.39.3) Updates `io.quarkus:quarkus-ide-config` from 3.38.2 to 3.39.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.38.2...3.39.3) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.38.2 to 3.39.3 - [Commits](quarkusio/quarkus-platform@3.38.2...3.39.3) Updates `io.quarkiverse.githubapp:quarkus-github-app` from 2.15.1 to 2.16.0 - [Release notes](https://github.com/quarkiverse/quarkus-github-app/releases) - [Commits](quarkiverse/quarkus-github-app@2.15.1...2.16.0) Updates `io.quarkiverse.githubapp:quarkus-github-app-testing` from 2.15.1 to 2.16.0 - [Release notes](https://github.com/quarkiverse/quarkus-github-app/releases) - [Commits](quarkiverse/quarkus-github-app@2.15.1...2.16.0) Updates `io.quarkiverse.githubapp:quarkus-github-app-testing` from 2.15.1 to 2.16.0 - [Release notes](https://github.com/quarkiverse/quarkus-github-app/releases) - [Commits](quarkiverse/quarkus-github-app@2.15.1...2.16.0) Updates `io.quarkus:quarkus-ide-config` from 3.38.2 to 3.39.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.38.2...3.39.3) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.38.2 to 3.39.3 - [Commits](quarkusio/quarkus-platform@3.38.2...3.39.3) --- updated-dependencies: - dependency-name: io.quarkus.platform:quarkus-bom dependency-version: 3.39.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-ide-config dependency-version: 3.39.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.39.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkiverse.githubapp:quarkus-github-app dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkiverse.githubapp:quarkus-github-app-testing dependency-version: 2.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkiverse.githubapp:quarkus-github-app-testing dependency-version: 2.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus:quarkus-ide-config dependency-version: 3.39.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: quarkus - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.39.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: quarkus ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies label Sep 15, 2026

Navigation Menu

Uh oh!

Bump the quarkus group across 1 directory with 5 updates - #272

Bump the quarkus group across 1 directory with 5 updates#272
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus-91bcc87987

dependabot Bot commented on behalf of github Sep 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.39.3

Complete changelog

2.16.0

What's Changed

New Contributors

2.16.0

What's Changed

New Contributors

2.16.0

What's Changed

New Contributors

3.39.3

Complete changelog

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 15, 2026 •

edited

Loading