Sourced from io.quarkus:quarkus-bom's releases.

3.23.0.CR1

Major changes

• #47445 - OIDC: Add bearer token step up authenticaiton

Complete changelog

• #34315 - Support ternary operator in expression
• #38562 - improve rest client exception for method lacking annotations
• #43011 - Compilation error on using Generics for Rest Client: java.lang.RuntimeException: Invalid type for descriptor T
• #43906 - Qute: allow user project (or build-items) to override other templates with same id
• #45053 - Introduce Dev only module for relevant extensions
• #45522 - WebSockets Next: use SPI to separate the Websockets extension from OpenTelemetry and Micrometer extensions
• #46213 - Support for OAuth2 Step-up authentication challenge protocol
• #46843 - Expose more JPA/Hibernate components through CDI
• #47252 - Rename quarkus.hibernate-orm.database.generation to quarkus.hibernate-orm.schema-management.strategy
• #47319 - Support for accepting encrypted OIDC access tokens
• #47320 - Support for decrypting OIDC access tokens
• #47372 - Make OIDC required claims support arrays and apply to introspection responses
• #47381 - Adjust ReflectiveHierarchyBuildItem javadoc
• #47383 - mocked quarkus-rest-client complains about missing uri
• #47400 - Failed to pass quarkus.profile to more than one integration test case when testing native executable
• #47401 - Lift requirement of setting REST Client base URL when mocks are used
• #47409 - quarkus_websockets_server_connections_opened_errors_total metric doesn't increment when exception is thrown on websocket opening
• #47415 - Update connection opening failed metric when @OnOpen throws
• #47433 - Bump flyway.version from 11.7.1 to 11.7.2
• #47442 - Add infrastructure to disable GIB and Develocity on specific PRs, and to run the Platform tests
• #47444 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.9.10 to 3.10.0
• #47445 - OIDC: Add bearer token step up authenticaiton
• #47450 - Make OIDC required claims support arrays
• #47452 - Set path of client subinterfaces 2+ levels deep
• #47453 - Bump Keycloak version to 26.2.0
• #47459 - Support parameterized parent rest client interfaces
• #47461 - Tweaks for permission checkers for WebSockets Next
• #47470 - QuarkusComponentTest: fail the test if unsupported InjectSpy is found
• #47471 - Quarkus REST calls protected constructor for QueryParam/PathParam and fails with 404
• #47487 - Upload more reports for TCKs testing
• #47494 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.10.0 to 3.11.0
• #47503 - Properly close the worker executor in Quarkus messaging
• #47511 - Disable Dev Services fully in oidc-wiremock-logout IT
• #47513 - Exceptions thrown by resteasy reactive itself do not need to be wrapped
• #47519 - Qute: introduce a new strategy to handle duplicate template paths
• #47521 - Be extra clear about the need of a reproducer
• #47526 - Qute: introduce equals operator for output expressions
• #47537 - Bump com.google.code.gson:gson from 2.13.0 to 2.13.1
• #47538 - Bump io.quarkus.bot:build-reporter-maven-extension from 3.11.0 to 3.11.1
• #47539 - Bump flyway.version from 11.7.2 to 11.8.0
• #47540 - Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0
• #47541 - Bump testcontainers.version from 1.20.6 to 1.21.0
• #47542 - Bump org.jboss.threads:jboss-threads from 3.8.0.Final to 3.9.0

... (truncated)

• f3970f9 [RELEASE] - Bump version to 3.23.0
• 6cc5581 Merge pull request #47965 from gsmet/3.23.0-backports-1
• 2f482ae Use config.getOptionValue checking quarkus.security.auth.enabled-in-dev-mode
• adf8d18 * OutputFormat param fixed
• b66960e Fallback quarkus.test.integration-test-profile to quarkus.profile
• f63c219 Do not use Facade ClassLoader as TCCL for interacting with profiles that migh...
• 97f5bb7 Store QuarkusClassLoaders, not StartupActions
• b14d406 Fix Quarkus Kafka Streams in DEV mode
• c465fe8 Refresh deleted source file location
• 0b18043 OpenAPI Auto security works with enabled-in-dev config from security
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)