deps: bump the quarkus-patch group with 6 updates by dependabot[bot] · Pull Request #2675 · TimefoldAI/timefold-solver

dependabot · 2026-09-20T23:04:28Z

Bumps the quarkus-patch group with 6 updates:

Package	From	To
io.quarkus:quarkus-bom	`3.39.3`	`3.39.4`
io.quarkus:quarkus-maven-plugin	`3.39.3`	`3.39.4`
io.quarkus.platform:quarkus-maven-plugin	`3.39.3`	`3.39.4`
io.quarkus:quarkus-extension-maven-plugin	`3.39.3`	`3.39.4`
io.quarkus:quarkus-extension-processor	`3.39.3`	`3.39.4`
io.quarkus.platform:quarkus-bom	`3.39.3`	`3.39.4`

Updates io.quarkus:quarkus-bom from 3.39.3 to 3.39.4

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.39.4

Complete changelog

#35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension

#37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide

#41734 - Probable bug in CognitoPrincipal lines 62 70

#53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32

#54925 - Formatting fails with a NullPointerException and the log record is dropped

#54926 - Fix JSON logging with null formatter keys

#55111 - [quarkus-info] Allow hiding the quarkus version

#55763 - Make the OIDC token JWE decryption algorithm configurable

#55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal

#55916 - DPoPNonceProvider should accept DPoP proof jti

#56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang

#56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions

#56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti

#56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property

#56514 - Restore the third callout entry in the Hibernate ORM interceptor example

#56515 - Add the missing callout entry in the Infinispan client Greeting example

#56517 - Keep the Keycloak Dev Services resource-mapping callout list together

#56518 - Use a callout list for the generated resources extension example

#56519 - Add the two missing callout entries in the Vert.x OIDC migration guide

#56523 - Bootstrap Maven command from Getting started guide fails

#56527 - Fix reproducibility issue in Avro

#56529 - Strip quotes from extension names in Maven create command

#56537 - Bump GraalVM SDK version to 25.0.4.1

#56540 - NPE in getEffectiveMapper when response entity is an anonymous class (e.g. Stream)

#56541 - Fix NPE in getEffectiveMapper when response entity is an anonymous class

#56552 - the --debug-port or -DdebugPort parameter doesn't seem to work properly, always binding to port 5005

#56556 - Upgrade Apache HttpClient5 to 5.6.4

#56559 - Fix custom debug port being ignored in dev mode

#56560 - [3.39] Bump to Vert.x 4.5.34

#56561 - Remove empty RemoveableLateBoundSpanProcessor and LateBoundSpanProcessor files

#56562 - Customize OIDC token decryption algorithm

#56563 - [Keycloak dev service] - Make dev service access token lifespan configurable

#56583 - Avoid an internal error when a bean parameter field is not a class type

#56584 - docs: remove duplicate 'the' in OpenTelemetry logging guide

#56585 - docs: remove duplicate 'the' in Dev UI Patterns note

#56586 - Fix 'allows to' grammar in Config programmatic access docs

#56587 - Fix 'allows to storage' grammar in MongoDB guide

#56590 - Skip configuration directories that cannot be read when looking for unknown config files

#56593 - docs: remove duplicate 'the' in OIDC application-type note

#56604 - Keycloak Dev Service: make default realm's token lifespan configurable

#56613 - Compare Cognito claim names with strings instead of Claims enum constants

#56617 - Run the effective command of quarkus:update, with the local repository property

#56623 - Pass the add-opens requirements to JBang

#56626 - Fix the imports of the resource examples in the OAuth2 guide

#56627 - Mention the reactive extension in the Jakarta Persistence security guide

#56628 - Cache generated Jackson deserializers

... (truncated)

Commits

d274425 [RELEASE] - Bump version to 3.39.4
e452c5c Merge pull request #56770 from gsmet/3.39.4-backports-1
facd3c1 Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
002b354 Fix flaky test DevMojoIT.testResourcesFromClasspath on Windows
6931f5e Bump the default GraphQL query depth limit to 20
44af7a1 Drop testEmbeddedSbomUncompressed as quarkus.cyclonedx.embedded.compress was ...
c87c0b4 Prevent leakage between tests
9a70fa4 Explain OIDC filter annotation levels more clearly
ab5ea8a Clarify OIDC REST client method annotation behavior
c4fd37a Document method-level OIDC REST client annotations
Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.39.3 to 3.39.4

Updates io.quarkus.platform:quarkus-maven-plugin from 3.39.3 to 3.39.4

Commits

dea037c [maven-release-plugin] prepare release 3.39.4
b15a725 Merge pull request #2183 from quarkusio/quarkus-3.39.4
177fb0c Upgrade to Quarkus 3.39.4
ae64691 Merge pull request #2182 from gsmet/3.39.4-backports
49b8523 Update AmazonServices to 3.22.1
ca386e8 Update AmazonServices to 3.22.0
2920c5f Bump quarkus-platform-bom-generator.version from 0.0.134 to 0.0.135
9ff04fa Merge pull request #2181 from quarkusio/update-automation/3.39-quarkus-flow-1...
27d6198 Merge pull request #2179 from quarkusio/update-automation/3.39-langchain4j-1....
54faaf3 Update Quarkus Flow to 1.1.1
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-maven-plugin from 3.39.3 to 3.39.4

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.4

Complete changelog

#35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension

#37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide

#41734 - Probable bug in CognitoPrincipal lines 62 70

#53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32

#54925 - Formatting fails with a NullPointerException and the log record is dropped

#54926 - Fix JSON logging with null formatter keys

#55111 - [quarkus-info] Allow hiding the quarkus version

#55763 - Make the OIDC token JWE decryption algorithm configurable

#55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal

#55916 - DPoPNonceProvider should accept DPoP proof jti

#56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang

#56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions

#56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti

#56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property

#56514 - Restore the third callout entry in the Hibernate ORM interceptor example

#56515 - Add the missing callout entry in the Infinispan client Greeting example

#56517 - Keep the Keycloak Dev Services resource-mapping callout list together

#56518 - Use a callout list for the generated resources extension example

#56519 - Add the two missing callout entries in the Vert.x OIDC migration guide

#56523 - Bootstrap Maven command from Getting started guide fails

#56527 - Fix reproducibility issue in Avro

#56529 - Strip quotes from extension names in Maven create command

#56537 - Bump GraalVM SDK version to 25.0.4.1

#56540 - NPE in getEffectiveMapper when response entity is an anonymous class (e.g. Stream)

#56541 - Fix NPE in getEffectiveMapper when response entity is an anonymous class

#56552 - the --debug-port or -DdebugPort parameter doesn't seem to work properly, always binding to port 5005

#56556 - Upgrade Apache HttpClient5 to 5.6.4

#56559 - Fix custom debug port being ignored in dev mode

#56560 - [3.39] Bump to Vert.x 4.5.34

#56561 - Remove empty RemoveableLateBoundSpanProcessor and LateBoundSpanProcessor files

#56562 - Customize OIDC token decryption algorithm

#56563 - [Keycloak dev service] - Make dev service access token lifespan configurable

#56583 - Avoid an internal error when a bean parameter field is not a class type

#56584 - docs: remove duplicate 'the' in OpenTelemetry logging guide

#56585 - docs: remove duplicate 'the' in Dev UI Patterns note

#56586 - Fix 'allows to' grammar in Config programmatic access docs

#56587 - Fix 'allows to storage' grammar in MongoDB guide

#56590 - Skip configuration directories that cannot be read when looking for unknown config files

#56593 - docs: remove duplicate 'the' in OIDC application-type note

#56604 - Keycloak Dev Service: make default realm's token lifespan configurable

#56613 - Compare Cognito claim names with strings instead of Claims enum constants

#56617 - Run the effective command of quarkus:update, with the local repository property

#56623 - Pass the add-opens requirements to JBang

#56626 - Fix the imports of the resource examples in the OAuth2 guide

#56627 - Mention the reactive extension in the Jakarta Persistence security guide

#56628 - Cache generated Jackson deserializers

... (truncated)

Commits

d274425 [RELEASE] - Bump version to 3.39.4
e452c5c Merge pull request #56770 from gsmet/3.39.4-backports-1
facd3c1 Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
002b354 Fix flaky test DevMojoIT.testResourcesFromClasspath on Windows
6931f5e Bump the default GraphQL query depth limit to 20
44af7a1 Drop testEmbeddedSbomUncompressed as quarkus.cyclonedx.embedded.compress was ...
c87c0b4 Prevent leakage between tests
9a70fa4 Explain OIDC filter annotation levels more clearly
ab5ea8a Clarify OIDC REST client method annotation behavior
c4fd37a Document method-level OIDC REST client annotations
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.39.3 to 3.39.4

Updates io.quarkus:quarkus-maven-plugin from 3.39.3 to 3.39.4

Updates io.quarkus.platform:quarkus-maven-plugin from 3.39.3 to 3.39.4

Commits

dea037c [maven-release-plugin] prepare release 3.39.4
b15a725 Merge pull request #2183 from quarkusio/quarkus-3.39.4
177fb0c Upgrade to Quarkus 3.39.4
ae64691 Merge pull request #2182 from gsmet/3.39.4-backports
49b8523 Update AmazonServices to 3.22.1
ca386e8 Update AmazonServices to 3.22.0
2920c5f Bump quarkus-platform-bom-generator.version from 0.0.134 to 0.0.135
9ff04fa Merge pull request #2181 from quarkusio/update-automation/3.39-quarkus-flow-1...
27d6198 Merge pull request #2179 from quarkusio/update-automation/3.39-langchain4j-1....
54faaf3 Update Quarkus Flow to 1.1.1
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-maven-plugin from 3.39.3 to 3.39.4

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.4

Complete changelog

#35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension

#37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide

#41734 - Probable bug in CognitoPrincipal lines 62 70

#53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32

#54925 - Formatting fails with a NullPointerException and the log record is dropped

#54926 - Fix JSON logging with null formatter keys

#55111 - [quarkus-info] Allow hiding the quarkus version

#55763 - Make the OIDC token JWE decryption algorithm configurable

#55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal

#55916 - DPoPNonceProvider should accept DPoP proof jti

#56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang

#56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions

#56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti

#56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property

#56514 - Restore the third callout entry in the Hibernate ORM interceptor example

#56515 - Add the missing callout entry in the Infinispan client Greeting example

#56517 - Keep the Keycloak Dev Services resource-mapping callout list together

#56518 - Use a callout list for the generated resources extension example

#56519 - Add the two missing callout entries in the Vert.x OIDC migration guide

#56523 - Bootstrap Maven command from Getting started guide fails

#56527 - Fix reproducibility issue in Avro

#56529 - Strip quotes from extension names in Maven create command

#56537 - Bump GraalVM SDK version to 25.0.4.1

#56540 - NPE in getEffectiveMapper when response entity is an anonymous class (e.g. Stream)

#56541 - Fix NPE in getEffectiveMapper when response entity is an anonymous class

#56552 - the --debug-port or -DdebugPort parameter doesn't seem to work properly, always binding to port 5005

#56556 - Upgrade Apache HttpClient5 to 5.6.4

#56559 - Fix custom debug port being ignored in dev mode

#56560 - [3.39] Bump to Vert.x 4.5.34

#56561 - Remove empty RemoveableLateBoundSpanProcessor and LateBoundSpanProcessor files

#56562 - Customize OIDC token decryption algorithm

#56563 - [Keycloak dev service] - Make dev service access token lifespan configurable

#56583 - Avoid an internal error when a bean parameter field is not a class type

#56584 - docs: remove duplicate 'the' in OpenTelemetry logging guide

#56585 - docs: remove duplicate 'the' in Dev UI Patterns note

#56586 - Fix 'allows to' grammar in Config programmatic access docs

#56587 - Fix 'allows to storage' grammar in MongoDB guide

#56590 - Skip configuration directories that cannot be read when looking for unknown config files

#56593 - docs: remove duplicate 'the' in OIDC application-type note

#56604 - Keycloak Dev Service: make default realm's token lifespan configurable

#56613 - Compare Cognito claim names with strings instead of Claims enum constants

#56617 - Run the effective command of quarkus:update, with the local repository property

#56623 - Pass the add-opens requirements to JBang

#56626 - Fix the imports of the resource examples in the OAuth2 guide

#56627 - Mention the reactive extension in the Jakarta Persistence security guide

#56628 - Cache generated Jackson deserializers

... (truncated)

Commits

d274425 [RELEASE] - Bump version to 3.39.4
e452c5c Merge pull request #56770 from gsmet/3.39.4-backports-1
facd3c1 Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
002b354 Fix flaky test DevMojoIT.testResourcesFromClasspath on Windows
6931f5e Bump the default GraphQL query depth limit to 20
44af7a1 Drop testEmbeddedSbomUncompressed as quarkus.cyclonedx.embedded.compress was ...
c87c0b4 Prevent leakage between tests
9a70fa4 Explain OIDC filter annotation levels more clearly
ab5ea8a Clarify OIDC REST client method annotation behavior
c4fd37a Document method-level OIDC REST client annotations
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.39.3 to 3.39.4

Updates io.quarkus.platform:quarkus-bom from 3.39.3 to 3.39.4

Commits

dea037c [maven-release-plugin] prepare release 3.39.4
b15a725 Merge pull request #2183 from quarkusio/quarkus-3.39.4
177fb0c Upgrade to Quarkus 3.39.4
ae64691 Merge pull request #2182 from gsmet/3.39.4-backports
49b8523 Update AmazonServices to 3.22.1
ca386e8 Update AmazonServices to 3.22.0
2920c5f Bump quarkus-platform-bom-generator.version from 0.0.134 to 0.0.135
9ff04fa Merge pull request #2181 from quarkusio/update-automation/3.39-quarkus-flow-1...
27d6198 Merge pull request #2179 from quarkusio/update-automation/3.39-langchain4j-1....
54faaf3 Update Quarkus Flow to 1.1.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the quarkus-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) | `3.39.3` | `3.39.4` | | io.quarkus:quarkus-maven-plugin | `3.39.3` | `3.39.4` | | [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.39.3` | `3.39.4` | | [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.39.3` | `3.39.4` | | io.quarkus:quarkus-extension-processor | `3.39.3` | `3.39.4` | | [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.39.3` | `3.39.4` | Updates `io.quarkus:quarkus-bom` from 3.39.3 to 3.39.4 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.39.3...3.39.4) Updates `io.quarkus:quarkus-maven-plugin` from 3.39.3 to 3.39.4 Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.39.3 to 3.39.4 - [Commits](quarkusio/quarkus-platform@3.39.3...3.39.4) Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.39.3 to 3.39.4 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.39.3...3.39.4) Updates `io.quarkus:quarkus-extension-processor` from 3.39.3 to 3.39.4 Updates `io.quarkus:quarkus-maven-plugin` from 3.39.3 to 3.39.4 Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.39.3 to 3.39.4 - [Commits](quarkusio/quarkus-platform@3.39.3...3.39.4) Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.39.3 to 3.39.4 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.39.3...3.39.4) Updates `io.quarkus:quarkus-extension-processor` from 3.39.3 to 3.39.4 Updates `io.quarkus.platform:quarkus-bom` from 3.39.3 to 3.39.4 - [Commits](quarkusio/quarkus-platform@3.39.3...3.39.4) --- updated-dependencies: - dependency-name: io.quarkus:quarkus-bom dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus:quarkus-maven-plugin dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus:quarkus-maven-plugin dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch - dependency-name: io.quarkus.platform:quarkus-bom dependency-version: 3.39.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: quarkus-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file; used by Dependabot. label Sep 20, 2026

dependabot Bot requested a review from a team September 20, 2026 23:04

dependabot Bot added the dependencies Pull requests that update a dependency file; used by Dependabot. label Sep 20, 2026

dependabot Bot requested review from rsynek and triceo as code owners September 20, 2026 23:04

dependabot Bot deployed to internal September 20, 2026 23:04 Active

triceo approved these changes Sep 21, 2026

View reviewed changes

triceo merged commit 03844c1 into main Sep 21, 2026
26 of 28 checks passed

triceo deleted the dependabot/maven/quarkus-patch-ee6fd9db35 branch September 21, 2026 06:21

Navigation Menu

deps: bump the quarkus-patch group with 6 updates - #2675

deps: bump the quarkus-patch group with 6 updates#2675
triceo merged 1 commit into
mainfrom
dependabot/maven/quarkus-patch-ee6fd9db35

dependabot Bot commented on behalf of github Sep 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 20, 2026

3.39.4

Complete changelog

3.39.4

Complete changelog

3.39.4

Complete changelog

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant