fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
github/codeql-action	action	patch	v3.29.2 -> v3.29.11
com.diffplug.spotless	plugin	patch	7.2.0 -> 7.2.1
com.pinterest.ktlint:ktlint-cli	dependencies	patch	1.7.0 -> 1.7.1
org.springframework.boot:spring-boot-starter-test (source)	dependencies	patch	3.5.3 -> 3.5.5
org.springframework.boot:spring-boot-autoconfigure (source)	dependencies	patch	3.5.3 -> 3.5.5
org.springframework.boot:spring-boot-starter (source)	dependencies	patch	3.5.3 -> 3.5.5
io.quarkus	plugin	minor	3.24.4 -> 3.26.0
io.quarkus:quarkus-junit5	dependencies	minor	3.24.4 -> 3.26.0
io.quarkus:quarkus-arc	dependencies	minor	3.24.4 -> 3.26.0
io.quarkus:quarkus-bom	dependencies	minor	3.24.4 -> 3.26.0
org.junit:junit-bom (source)	dependencies	patch	5.13.3 -> 5.13.4

---

Release Notes

github/codeql-action (github/codeql-action)

v3.29.11

Compare Source

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

• Fix an issue where the Action would autodetect unsupported languages such as HTML. #​3015

See the full CHANGELOG.md for more information.

v3.29.7

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

v3.29.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

• The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #​2999
• Update default CodeQL bundle version to 2.22.3. #​3000

See the full CHANGELOG.md for more information.

v3.29.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.5 - 29 Jul 2025

• Update default CodeQL bundle version to 2.22.2. #​2986

See the full CHANGELOG.md for more information.

v3.29.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.4 - 23 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.3 - 21 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

pinterest/ktlint (com.pinterest.ktlint:ktlint-cli)

v1.7.1

Compare Source

🔧 Fixes

• Make Ktlint code backwards compatible with lower Kotlin versions (down to 2.0) - #​3063, by @​mateuszkwiecinski
• Fix conflict between modifier-list-spacing and context-receiver-list-wrapping - #​3077, by @​paul-dingemans
• Mark operand-expression-wrapping rule as experimental - #​3081, by @​paul-dingemans

💬 Other

• Update signing config, fix configuration-cache compatibility - #​3058, by @​mateuszkwiecinski
• Refactor ShadowJarExecutableTask to KtlintCLiTask - #​3078, by @​paul-dingemans

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-test)

v3.5.5

v3.5.4

quarkusio/quarkus (io.quarkus:quarkus-junit5)

v3.26.0

Compare Source

v3.25.4

Compare Source

Complete changelog

• #​47644 - Correct & clarify ActiveMQ Artemis doc details
• #​49174 - "config property is deprecated and should not be used anymore" warnings in Gradle projects
• #​49380 - Compose Dev Services do not work on Windows
• #​49389 - OIDC Dev UI won't work behind an HTTP Proxy
• #​49395 - Add Gradle repository to Bootstrap Core
• #​49401 - Fix some other go-offline issues
• #​49438 - Fix Proxy usage by OIDC devservices
• #​49462 - Testing: "class loader confusion 1" (regression 3.25.0->3.25.1 + 3.25.2)
• #​49470 - Quarkus extension using Gradle started failing after #​49224
• #​49489 - Update cors origin default info
• #​49493 - Revisions for style and typos
• #​49503 - Do not include default values when passing Gradle build configuration to Quarkus
• #​49512 - Skip the root application artifact and clear the reloadable flag properly when processing deployment dependencies
• #​49514 - Fix the extension Gradle plugin for the component variant-based approach
• #​49521 - Upgrade to Vert.x 4.5.18 and Netty 4.1.124
• #​49522 - Gradle configuration quarkusDev does not work since 3.25.1
• #​49525 - Provided the example in yaml for logging customization
• #​49529 - Set common attributes on quarkusDevCompileOnlyConfiguration
• #​49532 - Cannot start application on 3.26.0.CR1
• #​49539 - Hibernate Validator - Split feature in separate processor
• #​49567 - Bump narayana-lra.version from 1.0.1.Final to 1.0.2.Final
• #​49568 - Bump io.rest-assured:rest-assured from 5.5.5 to 5.5.6
• #​49590 - Updates to Infinispan 15.0.19.Final
• #​49604 - ComposeRunner - Avoid resetting env vars

v3.25.3

Compare Source

Complete changelog

• #​48503 - Continuous testing fails in multi-module project when using module as a dependency in 3.22 onwards
• #​48946 - Native image: testGCCArgument produces confusing warnings
• #​48959 - Avoids some WARNINGs from io.smallrye.common.process.Logging
• #​49118 - 3.25.0 Docker Being Checked Always even if quarkus.devservices.enabled=false
• #​49309 - Fix checking for docker enviroment when quarkus.devservices.enabled=false
• #​49418 - java.lang.NullPointerException: Cannot invoke "String.replaceAll(String, String)" because the return value of "io.quarkus.devui.spi.buildtime.FooterLogBuildItem.getName()" is null
• #​49419 - Enforce null checks for DiscoveredServiceBuilder
• #​49422 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 in /devtools/gradle
• #​49425 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4
• #​49426 - Add wait_for.logs for Oracle DB Compose Dev Services example
• #​49441 - Docs: Fix spelling typo in the Deploying to OpenShift guide
• #​49446 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.4 to 3.5.5
• #​49452 - Native container build does not redirect output to stdout
• #​49454 - Log native build output to stdout
• #​49455 - Fix native image generated static resources index
• #​49456 - Make the ProcessBuilder calls intents a bit clearer
• #​49467 - Add quarkus-extension-processor to quarkus-bom
• #​49472 - Do not try and cache deployment classloaders that don't have the right test dependencies in continuous testing
• #​49479 - Make ContainerRuntime detection less brittle
• #​49482 - Do not apply config provider if not set

v3.25.2

Compare Source

Complete changelog

• #​49172 - Resteasy-reactive: HEAD returns 405 in the REST resource in some cases
• #​49208 - KafkaCompanion no longer works with DevServices (3.25.0)
• #​49221 - Fix Quarkus REST issue where HEAD returned 405
• #​49238 - ClassTooLargeException in JacocoProcessor during instrumentation
• #​49366 - Avoid failing when JaCoCo can't instrument a class
• #​49390 - Fix ResponseExceptionMapper example in rest-client.adoc
• #​49394 - Quarkus 3.25.1: NullPointerException in Class JacocoProcessor
• #​49396 - Always start dev services before getting the dev services properties
• #​49402 - Fix Jacoco in Gradle multi module projects
• #​49409 - Config Doc - Improve default value escaping
• #​49413 - AWS lambda: Unable to find handler class since 3.25.0
• #​49416 - Revert "Contain the use of reflection in amazon-lambda"

v3.25.1

Compare Source

Major changes

• #​49224 - Switch to Gradle component variant-based approach to resolve conditional and deployment dependencies

Complete changelog

• #​48059 - jaxb.index not registered through quarkus-jaxb
• #​48159 - Gradle regression in tests when a module has a "sidecar" module
• #​48957 - Bump apicurio-registry.version from 2.6.12.Final to 2.6.13.Final
• #​48983 - Starting from version 3.18.0.CR1, calls to the reactive REST client from an imperative Kafka consumer freeze and fail with a TimeoutException
• #​48992 - Quarkus Gradle leaks "dev" dependencies outside the "quarkusDev*" configurations
• #​49034 - Bump org.hibernate.reactive:hibernate-reactive-core from 3.0.4.Final to 3.0.5.Final
• #​49064 - UriInfo.getRequestUri loses query parameters if ContainerRequestContext.setRequestUri is called
• #​49065 - Make sure query params are correct when set from ContainerRequestFilter
• #​49067 - Update SmallRye Config to 3.13.4
• #​49071 - Bump to Mutiny 2.9.4 and Vert.x bindings 3.19.2
• #​49076 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.13.3 to 3.13.4 in /devtools/gradle
• #​49078 - Bump elasticsearch-opensource-components.version from 9.0.3 to 9.0.4
• #​49080 - Bump hibernate-orm.version from 7.0.6.Final to 7.0.7.Final
• #​49083 - Bump io.quarkus:quarkus-platform-bom-maven-plugin from 0.0.121 to 0.0.122
• #​49093 - Bump smallrye-open-api.version from 4.0.11 to 4.0.12
• #​49100 - Set priority for form auth handler
• #​49101 - Bump flyway.version from 11.10.3 to 11.10.4
• #​49113 - Docs: Complete minor edits to TLS registry reference guide
• #​49114 - Docs: Minor editing fixes to Logging configuration guide
• #​49117 - Force reloadability of project dependencies in QuarkusApplicationModelTask
• #​49121 - Redis does not allow for zero timeout on blocking commands
• #​49127 - Redis Client: allow zero timeout values
• #​49129 - Docs: Minor editing fixes to Configure Datasources guide
• #​49142 - [3.25.0.CR1] Incompatibility between Swagger UI and Open API 3.1.0
• #​49143 - Register jaxb.index as native resource
• #​49155 - Bump hibernate-orm.version from 7.0.7.Final to 7.0.8.Final
• #​49156 - Bump org.hibernate.reactive:hibernate-reactive-core from 3.0.5.Final to 3.0.6.Final
• #​49159 - Hibernate initalization issue with Multiple Datasources and Compose Dev Services
• #​49160 - Make error message about needing a DataSource for a PersistenceUnit actionable
• #​49166 - Quarkus CLI 3.25 unable to find mvn command (when no ./mvnw)
• #​49170 - Fix CLI Maven executable path
• #​49179 - [3.25] getting NPE in reactive rest client
• #​49204 - Guard against possible NPE in ClientResponseImpl#bufferEntity
• #​49206 - Fix deployer lookup in the Gradle deploy task
• #​49216 - Use Dev UI Context root in swagger ui
• #​49218 - Quarkus Rest blocking method is considered non-blocking
• #​49224 - Switch to Gradle component variant-based approach to resolve conditional and deployment dependencies
• #​49228 - Revert parts of SmallRye Common Process conversion of the CLI
• #​49246 - Make sure @RunOnVirtual thread on Application doesn't break semantics
• #​49254 - Update SmallRye Common to 2.13.8
• #​49257 - SmallRye Fault Tolerance: upgrade to 6.9.2
• #​49261 - Bump flyway.version from 11.10.4 to 11.10.5
• #​49275 - Adjust the Hibernate ORM's JSON/XML formatter modification checks
• #​49292 - Warning about Run time configuration when using quarkus-reactive-db2-client
• #​49293 - Reactive DB2 Client - Use vetted pattern to access runtime config in recorder
• #​49294 - Gradle 9.0.0 issue, Quarkus plugin attempting to mutate compilePlusRuntime configuration
• #​49305 - Remove deprecated APIs that are removed from Gradle 9
• #​49312 - Add missing RestAssured restAssured() to TestConfig
• #​49314 - Suspicious warning when building native executable
• #​49316 - Fix docker inspect command line
• #​49331 - Bump com.github.ben-manes.caffeine:caffeine from 3.2.0 to 3.2.2
• #​49339 - Fix flacky Metrics IT test
• #​49347 - Fix missing backticks in JWT security documentation table
• #​49359 - Remove compilePlusRuntime and process compileClasspath and runtimeOnly separately

v3.25.0

Compare Source

Complete changelog

• #​48866 - Bump to Liquibase 4.33.0
• #​48885 - Unable to disable RestAssured's logging causing heap overflow
• #​48942 - QuarkusComponentTest: skip system config sources by default
• #​48954 - Reset more fields of Liquibase's Scope
• #​48971 - Add some since attributes to @Deprecated elements
• #​48979 - Bump flyway.version from 11.10.2 to 11.10.3
• #​48987 - Allow users to turn off RestAssured logging

v3.24.5

Compare Source

Complete changelog

• #​48656 - Update Hibernate integration artifact name
• #​48790 - Bump org.junit:junit-bom from 5.13.2 to 5.13.3
• #​48794 - OIDC client filter regression from quarkus 3.23.3+
• #​48808 - Drop junit-platform-testkit version
• #​48841 - Bump org.junit:junit-bom from 5.13.2 to 5.13.3 in /devtools/gradle
• #​48888 - Update SmallRye Config to 3.13.3
• #​48967 - Update container-image.adoc: correct base image for openshift extension
• #​48972 - Added Quarkus REST config to documentation
• #​48974 - Bump io.smallrye.config:smallrye-config-source-yaml from 3.13.2 to 3.13.3 in /devtools/gradle
• #​48982 - Add some metadata to quarkus-extension.yaml for Assistant
• #​48984 - Bump io.strimzi:strimzi-test-container from 0.109.1 to 0.109.2 to comply with Apache Licence
• #​48997 - Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2
• #​49004 - Small Dev UI workspace fix
• #​49013 - Make the CatalogMapper more reproducible
• #​49019 - Compose Dev Services fails with long stacktrace when compose-devservices.yml is empty
• #​49020 - Properly handle empty compose file
• #​49021 - Updates to Infinispan 15.0.18.Final
• #​49022 - Always return initialized TokenIntrospection from the CDI producer
• #​49029 - Bump org.junit:junit-bom from 5.13.3 to 5.13.4 in /devtools/gradle
• #​49035 - Bump org.junit:junit-bom from 5.13.3 to 5.13.4
• #​49037 - Compose Dev Services guide fixes

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.