2.13.0.CR1

Major changes

• #27726 - Add CrossSite Request Forgery prevention filter
• #27025 - Reduce the number of vert.x eventloops started by default
• #26998 - Introduce a Kafka Client DevUI component
• #26107 - Bump kubernetes-client-bom from 5.12.2 to 6.1.1

Complete changelog

• #27899 - Auto-approve workflow runs from established contributors or low-risk files
• #27898 - Properly support generic bounds for ParamConverterProvider classes
• #27897 - Support non-producer methods annotated with @startup
• #27896 - Ensure that Mongo DNS lookup does not happen on the event loop
• #27895 - Bump Eclipse Yasson to 3.0.2 in the Jakarta rewrite
• #27892 - resteasy-reactive: ParamConverter+Kotlin+ResteasyReactice+List leads to java.lang.ClassNotFoundException on startup (Regression since 2.12)
• #27891 - Use default host and port when the service instance does not set them
• #27890 - Bump jboss-logmanager 1.1.1
• #27885 - Fix request context leak in the Funqy Knative runtime
• #27883 - Add test to verify openshift with deployment kind and no version labels
• #27880 - Bump micrometer-bom from 1.9.3 to 1.9.4
• #27875 - Revert "Bump kubernetes-client-bom from 5.12.2 to 6.1.1"
• #27871 - Redis value group (replacing the string group)
• #27870 - Stork custom serviceDiscovery default Host is not working anymore
• #27866 - Additional docs notifications
• #27864 - Allow setting a custom logging filter on logging handlers
• #27863 - Bump liquibase.version from 4.15.0 to 4.16.0
• #27860 - More fixes for JAX-RS 3.1, upgrade to RESTEasy 6.2.0.Beta1, to Hibernate Validator 8.0.0.Final
• #27859 - Return proper response code when an HTTP request contains an invalid Q value
• #27853 - Provide an option to set Form based auth encrypted cookie as HttpOnly
• #27852 - 500 from RESTEasy Reactive with malformed Accept when multiple @produces
• #27846 - Cross-link to quarkiverse wiki
• #27843 - Adjust notifications for documentation work
• #27838 - Create Infinispan caches on first access with the minimal config
• #27837 - Bump nimbus-jose-jwt from 9.24.3 to 9.24.4
• #27833 - Bump mockito-bom from 4.7.0 to 4.8.0
• #27830 - Use dependabot for GitHub actions version management
• #27829 - Upgrade SmallRye Health to 3.3.0
• #27826 - Ensure that InitialConfigurator uses the Quarkus configured min log level
• #27825 - Kubernetes: Add default template.metadata in StatefulSet resource
• #27824 - Synchronize maven-model-helper version
• #27822 - Bump flyway.version from 9.2.3 to 9.3.0
• #27820 - Bump artemis.version from 2.24.0 to 2.25.0
• #27816 - Use dependabot for simplifying GitHub actions version management
• #27815 - Address a few Kotlin compiler warnings
• #27810 - Rest client classic: revert to package private visibility for configuration methods
• #27808 - Jakarta - EE 10 - SmallRye Metrics test failure
• #27806 - Jakarta - Also reformat Kotlin projects
• #27802 - Fix for Context Propagation on Reactive Messaging
• #27796 - Bump flyway.version from 9.2.2 to 9.2.3
• #27789 - Fixes artifact names of Kubernetes Service Binding ITs
• #27788 - Make it easier to configure that OIDC JWT introspection only is required
• #27787 - Avoid several levels of RuntimeException wrapping
• #27786 - Temporary disabled CompositeBuildWithDependenciesDevModeTest flaky test
• #27783 - Reduce native-image -H: options
• #27782 - Enforce project's dependency constraints on the classpath used for dev mode bootstrap
• #27781 - Improve MongoDB guides
• #27779 - Not fail with bean params with generics
• #27776 - Qute - introduce CheckedTemplate#defaultName()
• #27773 - Too many levels of RuntimeException nesting on BuildException
• #27771 - GraphQL revert custom field data fetcher
• #27765 - Improve Reactive Route guide
• #27764 - Explicitly register generation task output to sourceset
• #27762 - Reactive native returns "400 bad request" in case of bean params with template parameters
• #27756 - Properly generate documents from config groups in ConfigMapping
• #27755 - Improve error reporting for https access when quarkus.ssl.native=false and update corresponding docs
• #27750 - Avoid mixing the RESTEasy Classic and RESTEasy Reactive REST layers
• #27749 - Keycloak Reactive Admin Client code which depends on comparing Response.StatusType does not work
• #27748 - Update mvn commands in docs to match the ones ran by quarkus-cli
• #27745 - Use new RuntimeProxyCreation public API with GraalVM >= 22.3
• #27742 - Bump jackson-bom from 2.13.3 to 2.13.4
• #27741 - Revert "Upgrade to jreleaser 1.2.0"
• #27737 - Add RESTEasy Reactive StatusType equals and hashCode methods
• #27733 - Fix inconsistency in kubernetes commands / arguments handling between jvm and native
• #27732 - More Jakarta progress
• #27731 - Enable Keycloak Admin Client injection by default and minor doc updates
• #27728 - Use new RuntimeResourceSupport public API with GraalVM >= 22.3
• #27727 - Improve the extension proposal form
• #27726 - Add CrossSite Request Forgery prevention filter
• #27722 - Fix broken main
• #27719 - Fix streaming of JSON strings in RESTEasy Reactive
• #27718 - Add getDataSource accessor in the new Redis API
• #27716 - Add suffix to errors on shutdown
• #27715 - Add global rest-client config properties
• #27701 - Bump checker-qual from 3.24.0 to 3.25.0
• #27700 - Bump flyway.version from 9.2.1 to 9.2.2
• #27697 - Use new public API RuntimeJNIAccess with GraalVM >= 22.3
• #27694 - Validate parameter passed to ConfiguratorBase.param()
• #27690 - Stop depending on com.oracle.svm.core.jdk.Resources#registerResource
• #27689 - Fix typos and wrong fonction class in the GCF Funqy guide
• #27688 - Manually serialize the Pojo in the PojoResourceTest and enable it
• #27687 - Use own lookupMethod to avoid dependency on internal GraalVM API
• #27686 - Replace usages of @DisabledOnNativeImage and @NativeImageTest
• #27685 - SmallRye CP - introduce ThreadContextProviderBuildItem
• #27682 - Allow HttpServerOptionsCustomizer to set KeyManager and TrustManager for HTTPS server
• #27679 - GraphQL Field level context and error event on blocking fixes
• #27678 - Bump jsoup from 1.15.1 to 1.15.3 in /core/processor
• #27676 - Bump smallrye-common-bom from 1.13.0 to 1.13.1
• #27673 - Add kotlin formatting plugin
• #27672 - Docs: Enhancement to authorization code flow intro in Security docs
• #27670 - Make sure methods annotated with @Funq are declared as public
• #27669 - @FunQ over non-public methods are ignored but information is not logged/no ex/nothing in docs
• #27668 - The config reference is not generated for child config classes annotated with @ConfigMapping
• #27667 - Jakarta - Remove integration-tests/kafka-avro when migrating
• #27664 - Proper exception message when passing null value to SyntheticBeanBuildItem Configuration parameter
• #27658 - Rework the BeanDefiningAnnotationBuildItem default scope
• #27651 - Jakarta - Upgrade to CDI 4.0.1 and various other upgrades
• #27649 - Bump jquery from 3.6.0 to 3.6.1
• #27648 - Bump jboss-metadata-web from 15.0.0.Final to 15.1.0.Final
• #27646 - Bump flyway.version from 9.2.0 to 9.2.1
• #27645 - Bump unboundid-ldapsdk from 6.0.5 to 6.0.6
• #27644 - Fix KafkaDevServicesContinuousTestingTestCase#testContinuousTestingScenario2
• #27643 - Jakarta - EE 10 - Update Jakarta Authorization API to 2.1.0 and Authentication API to 3.0.0
• #27642 - Jakarta - EE 10 - Upgrade Quarkus HTTP to Servlet 6.0.0 and Websockets 2.1.0
• #27637 - OIDC Remote Intropsection should work with discovery-enable set to true
• #27635 - More global Rest Client configs
• #27631 - Fix treatment of recursive bean types
• #27629 - Stork integration with REST Client Reactive on a filter
• #27627 - MongoDB driver failing DNS Lookup
• #27621 - Add Google Cloud Functions integration tests
• #27619 - Re-enable PojoResourceTest when the issue is fixed at Yasson side
• #27618 - Disable PojoResourceTest due to issue on Yasson 3.0.1
• #27617 - Bump default Kafka dev service image to redpanda v22.1.7
• #27616 - Improve SmallRye Health extension's default scope for health checks
• #27614 - Re-enable the test KafkaDevServicesContinuousTestingTestCase#testContinuousTestingScenario2
• #27609 - Extend form auth cookie configuration
• #27607 - Bump elasticsearch-opensource-components.version from 8.4.0 to 8.4.1
• #27606 - Bump jib-core from 0.21.0 to 0.22.0
• #27602 - Upgrade to Hibernate ORM 5.6.11.Final
• #27601 - Some fixes to include imports in subsequent code examples
• #27599 - Fix flaky ClientRequestTest
• #27597 - Disable flaky BlockingRawTest#shouldAdd
• #27590 - Generalize external rules to independent-projects and adjust Jakarta transformation
• #27588 - Switch Oracle DB container image to new 21-slim-faststart flavour
• #27586 - Disable KafkaDevServicesContinuousTestingTestCase#testContinuousTestingScenario2
• #27579 - Use ClassPathElement.getDependencyKey() for dev ui template paths
• #27578 - Fix flaky ClientRequestTest
• #27577 - Add explicit dependency on smallrye-context-propagation-propagators-rxjava2 for SR CP integration tests
• #27570 - Jakarta - EE 10 - Support JAX-RS 3.1.0 in RESTEasy Reactive
• #27568 - Replace deprecated Date constructor use in Jackson test
• #27567 - Disable flaky ClientRequestTest
• #27563 - Make Kubernetes model for native registration more complete
• #27562 - Make dependencies on bootstrap resolvers "provided" in quarkus-bootstrap-core
• #27558 - Fail extension build when @recorder is used in a deployment module
• #27555 - Upgrade to jreleaser 1.2.0
• #27550 - Report actionable error when extension @Recorder is in the wrong module.
• #27549 - Null Pointer Exception Attempting to Watch Change Stream in Database with ChangeStreamOptions
• #27548 - Reactive MongoDB Change Streams - Add Support for Databases using custom ChangeStreamOptions
• #27545 - Bump nimbus-jose-jwt from 9.24.2 to 9.24.3
• #27540 - Allow to set OIDC code grant custom headers and params
• #27539 - Improve command mode guide
• #27537 - Validate that synthetic beans are defined with known scope annotations
• #27533 - Automatically use SSE produces MediaType when @RestStreamElementType is used
• #27532 - Add default "" value to @Launch and improve command line JavaDoc
• #27531 - Add some details about status in jakarta/README.md
• #27530 - Allow to provide custom HTTP options in REST Client Reactive
• #27527 - Jakarta - Simplify classloader-linkage-error
• #27523 - Add Support for startAfter in Reactive MongoDB Change Streams
• #27522 - Add Support for startAfter in Reactive MongoDB Change Streams
• #27521 - Revert "Allow to provide custom HTTP options in REST Client Reactive"
• #27519 - Bump postgresql from 42.4.2 to 42.5.0
• #27518 - Bump flyway.version from 9.1.6 to 9.2.0
• #27516 - Change the dokka output format from the javadoc style to the native dokka style
• #27514 - Jakarta - Update the version of the RESTEasy Reactive TCK
• #27510 - NPE when using SyntheticBeanBuildItem with BeanCreator
• #27509 - Upgrade to version 42.5.0 of the PostgreSQL JDBC driver
• #27508 - Jakarta - EE 9 - Maven integration tests - testClassLoaderLinkageError tests failing
• #27507 - Jakarta - EE 9 - Context propagation tests failing
• #27506 - Jakarta - EE 9 - Serialization issue in MongoDB IT PojoResourceTest
• #27505 - Replace @michalszynkiewicz in the quarkus-github-bot.yml
• #27504 - Remove incorrect dependency from MongoDB IT pom
• #27502 - New config quarkus.flyway.repair-at-start
• #27498 - RESTEasy Reactive - Support text/binary conversion for multipart files
• #27495 - Correctly set default for quarkus.flyway.validate-on-migrate
• #27493 - Fix rotated access log file names
• #27490 - Make sure config keys with quoted dots works
• #27488 - Introduce CaffeineCache#put(Object,CompletableFuture)
• #27486 - Bump elasticsearch-opensource-components.version from 8.3.3 to 8.4.0
• #27485 - Bump grpc.version from 1.48.1 to 1.49.0
• #27484 - Bump slf4j-jboss-logmanager to 1.2.0.Final
• #27483 - ArC - add the convenient ClientProxy.unwrap() method
• #27482 - Expose potential extension points on authorization code flow-related provider clients
• #27481 - Let user to provide own KeyManager and TrustManager for HTTPS server
• #27478 - Smallrye GraphQL codestart in Java & Kotlin
• #27477 - Ensure test resources are not restarted for nested classes
• #27474 - RestClient Reactive: Default conversion for basic types
• #27472 - http access-logs when rotate as double dots in filename extension
• #27469 - Graal Native Build missing ReflectionRegistrations in io.fabric8:kubernetes-model-core:5.12.3
• #27465 - Bump groovy for maven-invoker-plugin to support Java 19
• #27443 - CDI context propagation improvements for the reactive stack
• #27438 - Google Cloud Functions documentation improvements
• #27430 - Default parameter conversion for REST Client Reactive
• #27427 - Clarify ValidationErrorBuildItem/ArtifactResultBuildItem/EmptyBuildItem
• #27426 - Disallow mixing @QuarkusTest and @QuarkusMainTest
• #27419 - Take HTTP root path into account when using @TestHTTPResource
• #27416 - @TestHTTPResource annotation injects endpoint URL without the quarkus.http.root-path segment
• #27408 - action-build-reporter - Disable main repo at the job level
• #27405 - Promote kubernetes config extension to stable
• #27400 - QuarkusTestResource with restrictToAnnotatedClass restarts for @Nested classes
• #27399 - Ability to configure dependency exclusions when composing app modules programmatically
• #27395 - Introduce action-build-reporter for forks
• #27391 - Bump flyway.version from 9.1.5 to 9.1.6
• #27390 - Bump nimbus-jose-jwt from 9.24.1 to 9.24.2
• #27387 - Bump Keycloak version to 19.0.1
• #27372 - Improve live reload experience of external artifacts on dev mode
• #27369 - Bump wildfly-elytron.version from 1.20.0.Final to 1.20.1.Final
• #27367 - Jakarta - Make Infinispan work by using artifacts with the jakarta classifier
• #27366 - Add osgi-core dependency for liquibase-core
• #27363 - Upgrade OTel to 1.17.0
• #27356 - Fix scheduler exclusion
• #27352 - RedPanda + kafka-streams stop working in upstream
• #27345 - [2.12.0.CR1]: /q/dev UI throws an error when navigating to "Configuration" -> "Config Editor", and "Devservices" is empty
• #27341 - Create caches in Infinispan using the application.properties
• #27340 - Update to Vert.x 4.3.3 and Mutiny Bindings 2.26.0
• #27329 - Flyway: New config property to run repair before migrate
• #27324 - Don't fully buffer RR client responses
• #27322 - Bump nimbus-jose-jwt from 9.23 to 9.24.1
• #27317 - Dev UI - bean dependency graph improvements
• #27314 - @produce(EmptyBuildItem.class) not working
• #27294 - Use ExternalRules enforcer rule
• #27259 - In a Gradle Quarkus application build, quarkusGenerateCode triggers a deprecation warning when sourcesJar is enabled
• #27235 - Validate config property names in the quarkus namespace
• #27232 - quarkus-integration-test-liquibase-mongodb fails in native with latest GraalVM 22.3-dev build
• #27229 - Broken context propagation in HTTP request that involves hibernate-reactive-panache, resteasy-reactive and qute
• #27225 - Resteasy Reactive: Add JAXB API as runtime dependency
• #27211 - quarkus-integration-test-redis-client native build fails with 22.3.0-dev mandrel
• #27203 - Rest Client Reactive: Provide custom ObjectMapper in request scope
• #27176 - Docs: Enhancements to OIDC introduction in Security docs
• #27171 - Make it possible to inject Keycloak admin client
• #27166 - Connection pool exhaustion for lazy entity association (acquisition timeout)
• #27142 - Document the release process
• #27105 - Docs: Adapt the Diataxis template and restructure the content for Basic Authentication
• #27083 - RESTEasy Reactive - Server side multipart implementation is not being respected
• #27070 - Bump avro.version from 1.11.0 to 1.11.1
• #27037 - Reduce false positives from revapi output/report
• #27030 - Jakarta - EE 9 - Upgrade to Infinispan 14 DEV and use Jakarta artifacts
• #27025 - Reduce the number of vert.x eventloops started by default
• #27009 - Enhancements to Security Getting Started docs
• #26998 - Introduce a Kafka Client DevUI component
• #26992 - Jakarta - EE 9 - Get a Jakarta version of the Confluent schema registry client
• #26984 - Jakarta - EE 9 - Infinispan Client IT fails because javax.annotation.Generated is not available
• #26901 - Document the release process
• #26868 - Enhance OIDC Client to support the token revocation
• #26867 - OidcClient should support the token revocation
• #26837 - Support Keycloak injection in quarkus-keycloak-admin-client and quarkus-keycloak-admin-client-reactive
• #26783 - Add access log handler to the main router if non-app root-path is different from root-path
• #26782 - Endpoint access not logged into access log when root-path and non-application-root-path are under different root
• #26723 - Better structure for bean dependency graph in dev ui
• #26581 - [CI] - Kubernetes end-to-end testing
• #26567 - RESTEasy Reactive - prevent repeating of standard security checks
• #26551 - Support @ActivateRequestContext on reactive methods
• #26536 - RestEasy Reactive performs authorization checks twice
• #26495 - Allow to provide custom HTTP options in REST Client Reactive
• #26420 - Detect improper YAML keys
• #26401 - log4j: java.lang.IllegalStateException: Maximum number of attachments exceeded
• #26264 - Improve stereotypes support
• #26161 - Narayana recovery manager service
• #26160 - Improve recovery manager in quarkus-narayana-jta extension
• #26152 - Resteasy Reactive: ContextResolver not used
• #26116 - Reactive REST client: Configure Vert.x HttpClientOptions
• #26107 - Bump kubernetes-client-bom from 5.12.2 to 6.1.1
• #25981 - Custom logging filters
• #25905 - Testing: Add failure state in testing context
• #25749 - Provide running context to TestResource implementations
• #25423 - Allow configuring how Stork-based REST clients are mapped to requests
• #24885 - quarkus.openshift.arguments fails on OCP + native mode
• #24880 - Share the set of banned dependencies and their replacements with Quarkus ecosystem
• #24474 - RegisterForReflection#classNames does not register full hierarchy of the class
• #23739 - Hibernate Reactive Panache MSSQL Native Build
• #23592 - Build fails on REST endpoint when @BeanParam has parameterized type
• #21458 - Added "User-Agent" header to requests made to the Lambda Runtime API
• #18043 - Resteasy-reactive produces invalid json for Multi
• #11710 - Should be able to call a method annotated with @startup
• #8399 - Provide a CSRF prevention feature