Skip to content

[3.26] 3.26.3 backports 2 #49927

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 9 commits into from
Sep 9, 2025
Merged

[3.26] 3.26.3 backports 2 #49927

merged 9 commits into from
Sep 9, 2025

Conversation

jmartisk
Copy link
Contributor

@jmartisk jmartisk commented Sep 8, 2025

No description provided.

dependabot bot and others added 3 commits September 8, 2025 08:54
@dependabot @jmartisk
Bump wildfly-elytron.version from 2.6.4.Final to 2.6.5.Final
ea1308e 
Bumps `wildfly-elytron.version` from 2.6.4.Final to 2.6.5.Final.

Updates `org.wildfly.security:wildfly-elytron` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-ssh-util` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-auth-server` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-password-impl` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-realm` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-realm-token` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-realm-jdbc` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-realm-ldap` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-ssl` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-sasl-plain` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-sasl-digest` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-sasl-external` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-sasl-oauth2` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-sasl-scram` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-x500-cert` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-x500-cert-acme` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-credential` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-sasl-gs2` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-asn1` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-sasl-gssapi` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-security-manager-action` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-auth` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-base` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-http` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-keystore` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-mechanism-digest` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-mechanism-gssapi` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-mechanism-oauth2` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-mechanism-scram` from 2.6.4.Final to 2.6.5.Final

Updates `org.wildfly.security:wildfly-elytron-mechanism` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-permission` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-provider-util` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-sasl` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-util` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-x500-cert-util` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

Updates `org.wildfly.security:wildfly-elytron-x500` from 2.6.4.Final to 2.6.5.Final
- [Commits](wildfly-security/wildfly-elytron@2.6.4.Final...2.6.5.Final)

---
updated-dependencies:
- dependency-name: org.wildfly.security:wildfly-elytron
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-ssh-util
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-auth-server
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-password-impl
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-realm
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-realm-token
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-realm-jdbc
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-realm-ldap
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-ssl
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-plain
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-digest
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-external
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-oauth2
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-scram
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-x500-cert
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-x500-cert-acme
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-credential
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-gs2
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-asn1
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl-gssapi
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-security-manager-action
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-auth
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-base
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-http
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-keystore
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-mechanism-digest
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-mechanism-gssapi
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-mechanism-oauth2
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-mechanism-scram
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-mechanism
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-permission
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-provider-util
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-sasl
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-util
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-x500-cert-util
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.wildfly.security:wildfly-elytron-x500
  dependency-version: 2.6.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit 2856e5a)
@sberyozkin @jmartisk
Update OidcConfigMetadata to return supported properties such as subj…
2f802a6 
…ect and response types

(cherry picked from commit d3e98c2)
@phillip-kruger @jmartisk
Dev UI: Make Continuous Testing Grid resizable
017e830 
Signed-off-by: Phillip Kruger <[email protected]>
(cherry picked from commit 52a35e2)
@quarkus-bot quarkus-bot bot changed the title 3.26.3 backports 2 [3.26] 3.26.3 backports 2 Sep 8, 2025
@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Sep 8, 2025

Thanks for your pull request!

Your pull request does not follow our editorial rules. Could you have a look?

  • description should not be empty, describe your intent or provide links to the issues this PR is fixing (using Fixes #NNNNN) or changelogs

This message is automatically generated by a bot.

@quarkus-bot quarkus-bot bot added area/dependencies Pull requests that update a dependency file area/oidc labels Sep 8, 2025
@quarkus-bot quarkus-bot

This comment has been minimized.

Sign in to view
@github-actions GitHub Actions
Copy link

github-actions bot commented Sep 8, 2025 •
edited
Loading

🙈 The PR is closed and the preview is expired.

@quarkus-bot quarkus-bot

This comment has been minimized.

Sign in to view
geoand and others added 6 commits September 9, 2025 07:17
@geoand @jmartisk
Ensure that a large numbers of REST Client interfaces doesn't break t…
9ac1fe4 
…he build

Fixes: quarkusio#49933
(cherry picked from commit 9421b85)
@aloubyansky @jmartisk
Allow registry offering configuration with an environment variable
70b4e71 
(cherry picked from commit 2c3f9ad)
@jponge @jmartisk
Bump to Vert.x 4.5.21 and Netty 4.1.126.Final
eff88af 
This fixes Netty CVEs: CVE-2025-58057 and CVE-2025-58056

(cherry picked from commit e75a328)
@gsmet @jmartisk
Implement authority(boolean real) in ForwardedServerRequestWrapper
3e0b174 
We override the authority here so we need to be extra careful.

(cherry picked from commit 7ca2b3f)
@jponge @cescoffier @jmartisk
Ensure the full compressed payload is decoded
4459f87 
Also fixes Vertx context being created in tests but never been cleared.

Co-authored-by: Clement Escoffier <[email protected]>
(cherry picked from commit 5cec148)
@jponge @jmartisk
Bump to Netty 4.1.127.Final
15ef1e8 
This fixes Netty/BouncyCastle issues.

(cherry picked from commit 8021e27)
@quarkus-bot quarkus-bot bot added area/devtools Issues/PR related to maven, gradle, platform and cli tooling/plugins area/documentation area/platform Issues related to definition and interaction with Quarkus Platform area/rest area/rest-client area/tracing area/vertx labels Sep 9, 2025
@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Sep 9, 2025

Status for workflow Quarkus Documentation CI

This is the status report for running Quarkus Documentation CI on commit 15ef1e8.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

Warning

There are other workflow runs running, you probably need to wait for their status before merging.

@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Sep 9, 2025 •
edited by github-actions bot
Loading

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 15ef1e8.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

@jmartisk jmartisk merged commit 16a4ea0 into quarkusio:3.26 Sep 9, 2025
60 checks passed
@jmartisk jmartisk deleted the 3.26.3-backports-2 branch September 9, 2025 09:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
area/dependencies Pull requests that update a dependency file area/devtools Issues/PR related to maven, gradle, platform and cli tooling/plugins area/documentation area/oidc area/platform Issues related to definition and interaction with Quarkus Platform area/rest area/rest-client area/tracing area/vertx triage/flaky-test
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
7 participants
@jmartisk @sberyozkin @phillip-kruger @geoand @aloubyansky @jponge @gsmet