dependabot[bot] opened a new pull request, #6450: URL: https://github.com/apache/myfaces-tobago/pull/6450
Bumps [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) from 3.22.3 to 3.23.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/quarkusio/quarkus/releases";>io.quarkus:quarkus-bom's releases</a>.</em></p> <blockquote> <h2>3.23.0.CR1</h2> <h3>Major changes</h3> <ul> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47445";>#47445</a> - OIDC: Add bearer token step up authenticaiton</li> </ul> <h3>Complete changelog</h3> <ul> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/34315";>#34315</a> - Support ternary operator in expression</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/38562";>#38562</a> - improve rest client exception for method lacking annotations</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/43011";>#43011</a> - Compilation error on using Generics for Rest Client: java.lang.RuntimeException: Invalid type for descriptor T</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/43906";>#43906</a> - Qute: allow user project (or build-items) to override other templates with same id</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/45053";>#45053</a> - Introduce Dev only module for relevant extensions</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/45522";>#45522</a> - WebSockets Next: use SPI to separate the Websockets extension from OpenTelemetry and Micrometer extensions</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/46213";>#46213</a> - Support for OAuth2 Step-up authentication challenge protocol</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/46843";>#46843</a> - Expose more JPA/Hibernate components through CDI</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47252";>#47252</a> - Rename quarkus.hibernate-orm.database.generation to quarkus.hibernate-orm.schema-management.strategy</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/47319";>#47319</a> - Support for accepting encrypted OIDC access tokens</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47320";>#47320</a> - Support for decrypting OIDC access tokens</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/47372";>#47372</a> - Make OIDC required claims support arrays and apply to introspection responses</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47381";>#47381</a> - Adjust ReflectiveHierarchyBuildItem javadoc</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/47383";>#47383</a> - mocked quarkus-rest-client complains about missing uri</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/47400";>#47400</a> - Failed to pass quarkus.profile to more than one integration test case when testing native executable</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47401";>#47401</a> - Lift requirement of setting REST Client base URL when mocks are used</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/47409";>#47409</a> - quarkus_websockets_server_connections_opened_errors_total metric doesn't increment when exception is thrown on websocket opening</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47415";>#47415</a> - Update connection opening failed metric when <code>@OnOpen</code> throws</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47433";>#47433</a> - Bump flyway.version from 11.7.1 to 11.7.2</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47442";>#47442</a> - Add infrastructure to disable GIB and Develocity on specific PRs, and to run the Platform tests</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47444";>#47444</a> - Bump io.quarkus.bot:build-reporter-maven-extension from 3.9.10 to 3.10.0</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47445";>#47445</a> - OIDC: Add bearer token step up authenticaiton</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47450";>#47450</a> - Make OIDC required claims support arrays</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47452";>#47452</a> - Set path of client subinterfaces 2+ levels deep</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47453";>#47453</a> - Bump Keycloak version to 26.2.0</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47459";>#47459</a> - Support parameterized parent rest client interfaces</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47461";>#47461</a> - Tweaks for permission checkers for WebSockets Next</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47470";>#47470</a> - QuarkusComponentTest: fail the test if unsupported InjectSpy is found</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/issues/47471";>#47471</a> - Quarkus REST calls protected constructor for QueryParam/PathParam and fails with 404</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47487";>#47487</a> - Upload more reports for TCKs testing</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47494";>#47494</a> - Bump io.quarkus.bot:build-reporter-maven-extension from 3.10.0 to 3.11.0</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47503";>#47503</a> - Properly close the worker executor in Quarkus messaging</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47511";>#47511</a> - Disable Dev Services fully in oidc-wiremock-logout IT</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47513";>#47513</a> - Exceptions thrown by resteasy reactive itself do not need to be wrapped</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47519";>#47519</a> - Qute: introduce a new strategy to handle duplicate template paths</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47521";>#47521</a> - Be extra clear about the need of a reproducer</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47526";>#47526</a> - Qute: introduce equals operator for output expressions</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47537";>#47537</a> - Bump com.google.code.gson:gson from 2.13.0 to 2.13.1</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47538";>#47538</a> - Bump io.quarkus.bot:build-reporter-maven-extension from 3.11.0 to 3.11.1</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47539";>#47539</a> - Bump flyway.version from 11.7.2 to 11.8.0</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47540";>#47540</a> - Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47541";>#47541</a> - Bump testcontainers.version from 1.20.6 to 1.21.0</li> <li><a href="https://redirect.github.com/quarkusio/quarkus/pull/47542";>#47542</a> - Bump org.jboss.threads:jboss-threads from 3.8.0.Final to 3.9.0</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/quarkusio/quarkus/commit/f3970f989e7e2f4d5c22e8a414e90ab22ab501ce";><code>f3970f9</code></a> [RELEASE] - Bump version to 3.23.0</li> <li><a href="https://github.com/quarkusio/quarkus/commit/6cc558105c5359b2674c058020a26d1c6d4c5e52";><code>6cc5581</code></a> Merge pull request <a href="https://redirect.github.com/quarkusio/quarkus/issues/47965";>#47965</a> from gsmet/3.23.0-backports-1</li> <li><a href="https://github.com/quarkusio/quarkus/commit/2f482ae22a95817a9742b8341015f22334169960";><code>2f482ae</code></a> Use config.getOptionValue checking quarkus.security.auth.enabled-in-dev-mode</li> <li><a href="https://github.com/quarkusio/quarkus/commit/adf8d18328ace200fd5a013aa4f76c413d61abb2";><code>adf8d18</code></a> * OutputFormat param fixed</li> <li><a href="https://github.com/quarkusio/quarkus/commit/b66960e7c89f558d05289b583122184ab57b8012";><code>b66960e</code></a> Fallback <code>quarkus.test.integration-test-profile</code> to <code>quarkus.profile</code></li> <li><a href="https://github.com/quarkusio/quarkus/commit/f63c219d42c04071e6e6a6078bb868ef7750157b";><code>f63c219</code></a> Do not use Facade ClassLoader as TCCL for interacting with profiles that migh...</li> <li><a href="https://github.com/quarkusio/quarkus/commit/97f5bb76e3a60e938dd4a81137e18ccfa7e93ac8";><code>97f5bb7</code></a> Store QuarkusClassLoaders, not StartupActions</li> <li><a href="https://github.com/quarkusio/quarkus/commit/b14d406d29530dfb82d54afc507c8ecc729c84f5";><code>b14d406</code></a> Fix Quarkus Kafka Streams in DEV mode</li> <li><a href="https://github.com/quarkusio/quarkus/commit/c465fe800971c7a933999e942ef40e23c0bfdcf3";><code>c465fe8</code></a> Refresh deleted source file location</li> <li><a href="https://github.com/quarkusio/quarkus/commit/0b180430713af0c954ff9565d4ab36494210d57f";><code>0b18043</code></a> OpenAPI Auto security works with enabled-in-dev config from security</li> <li>Additional commits viewable in <a href="https://github.com/quarkusio/quarkus/compare/3.22.3...3.23.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
