Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 28, 2026

Bumps io.quarkus:quarkus-bom from 3.30.2 to 3.31.1.

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.31.0.CR1

Major changes

  • #36168 - Support new Hibernate 6.3 syntax for type-safe queries
  • #50058 - Introduce Panache 2
  • #50519 - Upgrade to Hibernate ORM 7.2, Reactive 3.2, Search 8.2, Elasticsearch 9.2 / OpenSearch 3.3 for clients / server (dev services)
  • #50603 - Enable headless AWT on Windows
  • #50987 - Support security annotations on Jakarta Data repositories
  • #51049 - Add i18n to Dev UI
  • #51188 - Support @PermissionsAllowed security annotation on REST Data Panache endpoints
  • #51220 - Encrypt OIDC tokens for custom TokenStateManager implementations
  • #51314 - Update to Testcontainers 2.0.2
  • #51383 - Allow to configure OIDC DB token state manager column sizes for tokens
  • #51407 - ArC: split logic in ComponentsProviderGenerator
  • #51412 - Upgrade to JUnit 6
  • #51586 - New Hibernate Spatial extension and integration tests
  • #51587 - Introduce a quarkus Maven packaging and an assorted lifecycle
  • #51679 - Allow to assign a user and roles to a scheduled task
  • #51736 - Require Maven 3.9.0+ for Quarkus projects
  • #51743 - Allow to select OIDC client for individual dynamic GraphQL clients
  • #51799 - Add support for OAuth 2.0 Pushed Authorization Requests to OIDC extension
  • #51957 - Bump smallrye-reactive-messaging.version from 4.31.0 to 4.32.0

Complete changelog

  • #3945 - Use enums for Hibernate ORM configuration
  • #13261 - @TempDir not working when on a field on @QuarkusTest
  • #22355 - Support creation of multiple openapi documents
  • #22611 - Quarkus CDI-managed beans not available in Pact state callbacks
  • #23854 - Blocking authentication should be implied when using HTTP JWKS loading
  • #32936 - Allow plugging in Hibernate ORM's TypeContributor, FunctionContributor
  • #32993 - Port AWT Extension to Windows
  • #33104 - Test failure with podman: Quarkus - JDBC - DB2 - Deployment
  • #35014 - Oidc-client heathcheck and readinesscheck
  • #36168 - Support new Hibernate 6.3 syntax for type-safe queries
  • #37636 - (quarkus-smallrye-openapi) Create separate OpenAPI specs for different packages.
  • #38966 - Add @PermissionsAllowed to Panache Resources
  • #39293 - Quarkus OIDC Client: Lazy OIDC Discovery
  • #39431 - Validate that the injected config class has to be the entry point of the @ConfigMapping
  • #39968 - Add a configuration to serve a local directory with a static handler
  • #41835 - Clarify load shedding documentation
  • #44690 - Enhancement proposal : TLS registry - Support path to a directory containing the certificates to trust for the value of quarkus.tls.trust-store.pem.certs
  • #45380 - ClassTooLargeException when building an application containing many CDI beans
  • #45917 - Deprecate Service Binding module
  • #46001 - quarkus:run to support arguments and property setting
  • #46011 - Add the ability to configure launch for quarkus:run
  • #46091 - Hibernate Reactive with Panache: support stateless sessions
  • #46092 - Add option to run-time initialize JDK classes
  • #46096 - Panache 2
  • #46315 - Allow passthrough of URL parameters in FormAuthenticationMechanism

... (truncated)

Commits
  • a5108a2 [RELEASE] - Bump version to 3.31.1
  • d6ed070 Merge pull request #52221 from gsmet/3.31.1-backports-1
  • 9a03fe2 Rewrite DefaultChannelId to avoid reflection
  • 758e9ef Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  • fbaf04d Transform Netty's isSharable check to use a marker interface
  • 7a0cd37 Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 in /build-parent
  • 91f524f Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 in /devtools/gradle
  • 3678217 Bump com.microsoft.azure.functions:azure-functions-java-library
  • f6348c1 Bump smallrye-open-api.version from 4.2.3 to 4.2.4
  • 108eca9 build(deps): bump org.jetbrains.kotlinx:kotlinx-serialization-json
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) from 3.30.2 to 3.31.1.
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.30.2...3.31.1)

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants