Bump the maven group with 5 updates by dependabot[bot] · Pull Request #355 · belgif/rest-problem-java

dependabot · 2026-07-20T16:44:12Z

Bumps the maven group with 5 updates:

Package	From	To
org.openapitools:openapi-generator-maven-plugin	`7.23.0`	`7.24.0`
io.quarkus.platform:quarkus-bom	`3.37.2`	`3.37.3`
io.quarkus:quarkus-extension-processor	`3.37.2`	`3.37.3`
io.quarkus:quarkus-extension-maven-plugin	`3.37.2`	`3.37.3`
io.quarkus.platform:quarkus-maven-plugin	`3.37.2`	`3.37.3`

Updates org.openapitools:openapi-generator-maven-plugin from 7.23.0 to 7.24.0

Updates io.quarkus.platform:quarkus-bom from 3.37.2 to 3.37.3

Commits

ae80746 [maven-release-plugin] prepare release 3.37.3
05b1665 Merge pull request #2063 from quarkusio/quarkus-3.37.3
8ab217a Upgrade to Quarkus 3.37.3
a71db02 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates io.quarkus:quarkus-extension-processor from 3.37.2 to 3.37.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.37.2 to 3.37.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.37.3

Complete changelog

#48106 - quarkus.grpc.codegen.proto-directory unrecognized configuration key & missing from documentation

#55093 - Incompatible exception classloaders when mocking exceptions during tests

#55196 - quarkus-oidc cannot handle non rollable refresh tokens concurrently

#55231 - Safer testcontainers.reuse.enable restoration + more resilient tests

#55272 - OIDC: deduplicate concurrent token refresh requests within a single Quarkus instance

#55288 - [3.x] OpenShift Client native integration test fails after #55242

#55292 - Bump the hibernate group across 1 directory with 12 updates

#55316 - Fix IsContainerRuntimeWorking to not write testcontainers.reuse.enable to ~/.testcontainers.properties

#55319 - Fix native image build failure caused by Netty's SelfSignedCertificate

#55351 - Don't truncate stacktrace on OIDC authentication errors

#55357 - Do not miss Throwable in the OIDC code flow error log

#55362 - @JsonFormat(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set

#55363 - Reflection free deserializers drops data of final collection field with no setter

#55365 - Fix flakiness of RawTypeReflectionFreeSerializerTest

#55366 - Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers

#55369 - quarkus-rest-jackson: reflection-free deserializer ignores @JsonTypeInfo/@JsonSubTypes for polymorphic list elements inside a wrapper type

#55370 - Bail out of reflection-free deserializer when @JsonTypeInfo is used

#55373 - Jacoco + CycloneDX extension breaking combination in Quarkus 3.37.1+

#55374 - Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers

#55378 - Register gRPC codegen configuration properties

#55380 - Harden remote dev mode against path traversal and unsafe deserialization

#55385 - NPE in modularity can transformed classes

#55396 - Fix NPE in modularity when processing removed resources

#55397 - Ignore unresolvable POMs for bundled CycloneDX components

#55403 - Fix bad link syntax and update cross-document references to use xref

#55410 - quarkus-rest-jackson: Reflection-free deserializer ignores @JsonProperty(required=true) on a @JsonCreator sometimes

#55411 - Take count of @JsonProperty(required=true) on a @JsonCreator in reflection-free Jackson serializers

#55425 - Disable Mockito class cache so thenThrow works across component tests

#55426 - ServerExceptionMapper on sub-resource is global instead of sub-resource specific

#55427 - Make @ServerExceptionMapper in sub-resource specific to that sub-resource

#55450 - Fix serialization of java.time.Duration in generated reflection-free Jackson serializers

Commits

d647aef [RELEASE] - Bump version to 3.37.3
7a51b0e Merge pull request #55460 from gsmet/3.37.3-backports-4
036eb11 Fix serialization of java.time.Duration in generated reflection-free Jackson ...
a435cb1 Fix native image build failure caused by Netty's SelfSignedCertificate
34eacf7 Register gRPC codegen configuration properties
9a31621 fix(quarkus-rest): @serverexceptionmapper in sub-resource shouldn't be global
81b8969 Ignore unresolvable POMs for bundled CycloneDX components
c0090b9 Disable Mockito class cache for thenThrow across component tests
5868f10 Harden remote dev mode against unsafe deserialization
49cfd7e Harden remote dev mode against path traversal
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.37.2 to 3.37.3

Commits

ae80746 [maven-release-plugin] prepare release 3.37.3
05b1665 Merge pull request #2063 from quarkusio/quarkus-3.37.3
8ab217a Upgrade to Quarkus 3.37.3
a71db02 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates io.quarkus:quarkus-extension-processor from 3.37.2 to 3.37.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.37.2 to 3.37.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.37.3

Complete changelog

#48106 - quarkus.grpc.codegen.proto-directory unrecognized configuration key & missing from documentation

#55093 - Incompatible exception classloaders when mocking exceptions during tests

#55196 - quarkus-oidc cannot handle non rollable refresh tokens concurrently

#55231 - Safer testcontainers.reuse.enable restoration + more resilient tests

#55272 - OIDC: deduplicate concurrent token refresh requests within a single Quarkus instance

#55288 - [3.x] OpenShift Client native integration test fails after #55242

#55292 - Bump the hibernate group across 1 directory with 12 updates

#55316 - Fix IsContainerRuntimeWorking to not write testcontainers.reuse.enable to ~/.testcontainers.properties

#55319 - Fix native image build failure caused by Netty's SelfSignedCertificate

#55351 - Don't truncate stacktrace on OIDC authentication errors

#55357 - Do not miss Throwable in the OIDC code flow error log

#55362 - @JsonFormat(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set

#55363 - Reflection free deserializers drops data of final collection field with no setter

#55365 - Fix flakiness of RawTypeReflectionFreeSerializerTest

#55366 - Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers

#55369 - quarkus-rest-jackson: reflection-free deserializer ignores @JsonTypeInfo/@JsonSubTypes for polymorphic list elements inside a wrapper type

#55370 - Bail out of reflection-free deserializer when @JsonTypeInfo is used

#55373 - Jacoco + CycloneDX extension breaking combination in Quarkus 3.37.1+

#55374 - Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers

#55378 - Register gRPC codegen configuration properties

#55380 - Harden remote dev mode against path traversal and unsafe deserialization

#55385 - NPE in modularity can transformed classes

#55396 - Fix NPE in modularity when processing removed resources

#55397 - Ignore unresolvable POMs for bundled CycloneDX components

#55403 - Fix bad link syntax and update cross-document references to use xref

#55410 - quarkus-rest-jackson: Reflection-free deserializer ignores @JsonProperty(required=true) on a @JsonCreator sometimes

#55411 - Take count of @JsonProperty(required=true) on a @JsonCreator in reflection-free Jackson serializers

#55425 - Disable Mockito class cache so thenThrow works across component tests

#55426 - ServerExceptionMapper on sub-resource is global instead of sub-resource specific

#55427 - Make @ServerExceptionMapper in sub-resource specific to that sub-resource

#55450 - Fix serialization of java.time.Duration in generated reflection-free Jackson serializers

Commits

d647aef [RELEASE] - Bump version to 3.37.3
7a51b0e Merge pull request #55460 from gsmet/3.37.3-backports-4
036eb11 Fix serialization of java.time.Duration in generated reflection-free Jackson ...
a435cb1 Fix native image build failure caused by Netty's SelfSignedCertificate
34eacf7 Register gRPC codegen configuration properties
9a31621 fix(quarkus-rest): @serverexceptionmapper in sub-resource shouldn't be global
81b8969 Ignore unresolvable POMs for bundled CycloneDX components
c0090b9 Disable Mockito class cache for thenThrow across component tests
5868f10 Harden remote dev mode against unsafe deserialization
49cfd7e Harden remote dev mode against path traversal
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.37.2 to 3.37.3

Commits

ae80746 [maven-release-plugin] prepare release 3.37.3
05b1665 Merge pull request #2063 from quarkusio/quarkus-3.37.3
8ab217a Upgrade to Quarkus 3.37.3
a71db02 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 5 updates: | Package | From | To | | --- | --- | --- | | org.openapitools:openapi-generator-maven-plugin | `7.23.0` | `7.24.0` | | [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.37.2` | `3.37.3` | | io.quarkus:quarkus-extension-processor | `3.37.2` | `3.37.3` | | [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.37.2` | `3.37.3` | | [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.37.2` | `3.37.3` | Updates `org.openapitools:openapi-generator-maven-plugin` from 7.23.0 to 7.24.0 Updates `io.quarkus.platform:quarkus-bom` from 3.37.2 to 3.37.3 - [Commits](quarkusio/quarkus-platform@3.37.2...3.37.3) Updates `io.quarkus:quarkus-extension-processor` from 3.37.2 to 3.37.3 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.37.2 to 3.37.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.37.2...3.37.3) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.37.2 to 3.37.3 - [Commits](quarkusio/quarkus-platform@3.37.2...3.37.3) Updates `io.quarkus:quarkus-extension-processor` from 3.37.2 to 3.37.3 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.37.2 to 3.37.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.37.2...3.37.3) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.37.2 to 3.37.3 - [Commits](quarkusio/quarkus-platform@3.37.2...3.37.3) --- updated-dependencies: - dependency-name: org.openapitools:openapi-generator-maven-plugin dependency-version: 7.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-bom dependency-version: 3.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.37.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.37.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-07-20T16:55:47Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 20, 2026

github-actions Bot approved these changes Jul 20, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) July 20, 2026 16:44

github-actions Bot merged commit 00ce13a into main Jul 20, 2026
4 checks passed

github-actions Bot deleted the dependabot/maven/maven-e94d6df4eb branch July 20, 2026 16:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the maven group with 5 updates - #355

Bump the maven group with 5 updates#355
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-e94d6df4eb

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

sonarqubecloud Bot commented Jul 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

3.37.3

Complete changelog

3.37.3

Complete changelog

Uh oh!

sonarqubecloud Bot commented Jul 20, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants