Skip to content

Bump io.quarkus:quarkus-bom from 3.38.1 to 3.40.1 - #602

Merged
pascalseeland merged 1 commit into
masterfrom
dependabot/maven/io.quarkus-quarkus-bom-3.40.1
Oct 23, 2026
Merged

pascalseeland merged 1 commit into
masterfrom
dependabot/maven/io.quarkus-quarkus-bom-3.40.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps io.quarkus:quarkus-bom from 3.38.1 to 3.40.1.

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.40.1

Complete changelog

  • #48420 - Redis with "CacheResult" returns "QUEUED" under high concurrency load
  • #56834 - Missing RdsUtilities during Java 25 native build
  • #56938 - Harden AeshLauncher signal protocol and timeout diagnostics
  • #56942 - RestEasy Reactive logs warning when an endpoint has a void return type
  • #56943 - Fix MariaDB GraalVM metadata when AWS SDK is on the classpath, clean up unnecessary related build items
  • #56944 - Extend void check when indexing endpoints with RestEasy Reactive
  • #56946 - WebSockets Next: fix stalled Multi stream on decode failure with backpressure
  • #56958 - ForwardedProxyHandler leaks DNS UDP sockets — DnsClient never closed
  • #56961 - Prevent leak of DnsClient instance when resolving proxy hostnames
  • #56976 - Redis Client: fix error handling in blocking transaction API

3.40.0

Complete changelog

  • #56750 - Enhance CycloneDX documentation and configuration options description to stress the priority on JSON format
  • #56829 - [3.40] Update to Scalpel 0.4.2

3.40.0.CR1

Complete changelog

3.39.5

Complete changelog

  • #56037 - Always complete the export when the OTLP sender is shut down
  • #56255 - Bump org.freemarker:freemarker from 2.3.34 to 2.3.35
  • #56349 - [3.39] Bump to Vert.x 4.5.33
  • #56573 - Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup
  • #56783 - Typo fixes in gRPC guides
  • #56796 - docs: Fix the dead Jose4J link in the JWT Build guide
  • #56800 - Add javadoc to AbstractSecurityIdentityAssociation
  • #56821 - [3.40] SmallRye Fault Tolerance: bump to 6.11.4
  • #56831 - [3.40] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
  • #56837 - Do not stack asciidoc anchors, because it does not work
  • #56838 - Fix malformed link
  • #56842 - Fix dead link for Redis sandbox
  • #56845 - Bump Keycloak version to 26.7.4
  • #56849 - [3.40] Upgrade RESTEasy to 6.2.19.Final
  • #56853 - [3.40] Upgrade to Hibernate 7.4.9.Final
  • #56857 - [3.40] WebSockets Next: add max-pending-messages back-pressure
  • #56861 - [3.40] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)
  • #56867 - [3.40] : Bump smallrye-jwt version to 4.6.4
  • #56884 - Invalid Java interface declaration in SmallRye GraphQL guide
  • #56885 - Fix interface inheritance in SmallRye GraphQL guide

... (truncated)

Commits
  • 6ce9987 [RELEASE] - Bump version to 3.40.1
  • 21cfc51 Merge pull request #57008 from gsmet/3.40.1-backports-1
  • 4046cfa WebSockets Next: drop try-with-resources in MaxFrameSizeTest
  • 47d5fe1 Prevent leak of DnsClient instance when resolving proxy hostnames
  • 87166c8 Redis Client: fix error handling in blocking transaction API
  • 72a84e4 Harden AeshLauncher test harness and bump aesh to 3.18.2
  • ed28f6b WebSockets Next: make sure all WSClient instances are closed in tests
  • 14dad54 WebSockets Next: fix stalled Multi stream on decode failure with back-pressure
  • 3620b2c Extend void check when indexing endpoints with RestEasy Reactive
  • 92b3867 Remove redundant native image build steps for MariaDB codec and authenticatio...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) from 3.38.1 to 3.40.1.
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.38.1...3.40.1)

---
updated-dependencies:
- dependency-name: io.quarkus:quarkus-bom
  dependency-version: 3.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 5, 2026
@pascalseeland
pascalseeland merged commit d24d2a1 into master Oct 23, 2026
2 of 4 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/io.quarkus-quarkus-bom-3.40.1 branch October 23, 2026 03:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant