fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
github/codeql-action	action	patch	v3.28.8 -> v3.28.9
io.quarkus	plugin	patch	3.18.1 -> 3.18.3
io.quarkus:quarkus-junit5	dependencies	patch	3.18.1 -> 3.18.3
io.quarkus:quarkus-arc	dependencies	patch	3.18.1 -> 3.18.3
io.quarkus:quarkus-bom	dependencies	patch	3.18.1 -> 3.18.3

---

Release Notes

github/codeql-action (github/codeql-action)

v3.28.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025

• Update default CodeQL bundle version to 2.20.4. #​2753

See the full CHANGELOG.md for more information.

quarkusio/quarkus (io.quarkus:quarkus-junit5)

v3.18.3

Compare Source

Complete changelog

• #​40374 - Error when executing persist() method with an entity having bidirectional one-to-one relationships in Hibernate Reactive with Panache
• #​45948 - Removal of public method in a minor release breaking semantic versioning with utter lack of warnings or anything
• #​45949 - Restore two JWT decoding methods in OidcUtils
• #​46005 - Qute TemplateGlobal throws error on live reload
• #​46014 - Qute: fix template global class generation in the dev mode #​2
• #​46035 - QuarkusTest TestProfile pollutes environment of QuarkusComponentTest
• #​46039 - Upgrade to Jandex 3.2.4
• #​46040 - OpenTelemetry extension traces health endpoints when a custom root-path is configured
• #​46046 - Execute simple JUnit tests and @QuarkusComponentTest first
• #​46088 - Fix typo remove extra bracket
• #​46099 - OpenTelemetryLogHandler - Do not read config for each publish
• #​46102 - Live reload classloader memory leak when using hibernate-envers with a custom revision entity
• #​46106 - Bump maven-dependency-plugin in docs
• #​46107 - For synthetic injection points, target can be null
• #​46108 - @Observes @BeforeDestroyed(?Scoped.class) does not work in the same bean and the same scope
• #​46111 - Could not determine the canonical constructor when quarkus.rest.jackson.optimization.enable-reflection-free-serializers=true
• #​46113 - Remove non-existing value "OPTIONAL", fix typo
• #​46115 - Bump to Vert.x Mutiny bindings 3.18.1
• #​46125 - Change timing of @Initialized and @BeforeDestroyed events so that they can be observed from a bean within given context
• #​46135 - Upgrade to Jandex 3.2.5
• #​46136 - Error occurs on tests with @Nested classes and QuarkusMainLauncher
• #​46141 - Replace outdated hostname v1 property for keycloak dev service in shared networks
• #​46150 - Overcome augmentation issue with @Nested QuarkusMainTest
• #​46154 - Docs: Fix some more weaknesses
• #​46156 - Reflection-free Serialization issue when first accessed vs. second access or if multiple methods
• #​46170 - Configuration custom converters fail on primitive type arrays since Quarkus v3.18
• #​46171 - Fix config converter loading issue when arrays are used
• #​46179 - Upgrade to Hibernate ORM 6.6.7.Final
• #​46181 - Simplify and fix building the list of framework endpoints
• #​46186 - Bump io.micrometer:micrometer-bom from 1.14.3 to 1.14.4
• #​46189 - Upgrade to Hibernate Reactive 2.4.5.Final
• #​46190 - Bump the version of kindContainer from 1.4.7 to 1.4.8
• #​46191 - Bump version of kindcontainer from 1.4.7 to 1.4.8
• #​46194 - Bump to Vert.x 4.5.13 and Netty 4.1.118.Final
• #​46211 - Avoid using generated Jackson serializers for subclasses
• #​46219 - Bump io.smallrye:jandex from 3.2.5 to 3.2.6

v3.18.2

Compare Source

Complete changelog

• #​44569 - SmallRye OpenAPI outputs Chinese garbled characters in Json
• #​44645 - NullPointerException from Hibernate ORM when there is a problem establishing a connection
• #​45385 - IllegalArgumentException when parsing Accept Header
• #​45776 - Bump to Mutiny 2.8.0 and the Mutiny Vert.x bindings 3.18.0
• #​45789 - [resteasy-reactive] [3.8.6] Header not reset between request
• #​45847 - Netty metric with dynamic tag cause time series leak
• #​45868 - QuarkusTestResource not working with QuarkusMainLauncher
• #​45877 - Replace the id label with a name label for Netty allocator
• #​45910 - Clarify usage of quarkus-keycloak-admin-rest-client and quarkus-keycloak-admin-resteasy-client
• #​45926 - Release the Config from the TCCL when setting the Quarkus config
• #​45933 - Native tests fail in Gradle-based Quarkus project when module has no classes in src/main/java
• #​45934 - Dev UI: make sure add button works when log is open
• #​45935 - Clear SystemProperties set by QuarkusMainIntegrationTestExtension
• #​45938 - Be more defensive about sources Path in integration tests
• #​45943 - OpenApiFilter without Runstage causes NPE
• #​45945 - Properly get default value when handling OpenApiFilters
• #​45950 - Correctly handle REST field injection
• #​45956 - Improve content about running the application in the JWT guide
• #​45967 - Use Maven log in quarkus:run
• #​45971 - Fix incorrect response code when media type is invalid
• #​45976 - Add remote address to gRPC spans
• #​45985 - BlockingNotAllowedException when using rest client since quarkus 3.18.1
• #​45991 - Bump com.gradle.plugin-publish from 1.3.0 to 1.3.1 in /devtools/gradle
• #​45992 - [REGRESSION] - quarkus.rest.jackson.optimization.enable-reflection-free-serializers=true broken in 3.18
• #​45993 - Bump smallrye-open-api.version from 4.0.7 to 4.0.8
• #​45996 - ConfigMapping broken for extensions with smallrye-config-crypto since 3.9.1
• #​45999 - Quarkus 3.18 and Flyway 11: Bring back cleanOnValidationError
• #​46002 - Fix generated Jackson deserializer for a record with an empty constructor
• #​46006 - Don't prematurely close an InputStream returned by the REST Client
• #​46008 - QuarkusIntegrationTest: publishing a random port in the started container no longer works
• #​46009 - Updates to Infinispan 15.0.13.Final
• #​46016 - Quarkus 3.18.1 does not allow overwriting lists from application.yaml with lists supplied in environment variables
• #​46018 - integration-tests/hibernate-reactive-mssql is not being run (and does not build)
• #​46020 - Runtime values from mapping without expansion
• #​46031 - Fix Javadoc/MD syntax issues
• #​46032 - Update SmallRye Config to 3.11.2
• #​46033 - Implement 'cleanOnValidationError' for Flyway 11
• #​46036 - In container build output is not executable anymore
• #​46041 - Upgrade Hibernate ORM to 6.6.6.Final
• #​46043 - Fix and restore hibernate-reactive-mssql tests
• #​46044 - Recalculate config property names during tests
• #​46049 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.11.1 to 3.11.2 in /devtools/gradle
• #​46055 - Ensure that the copied native executable has the executable permission when copied from the host to the container image.

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.