Quarkus 3.40.0.CR1 and 3.39.4 released!

NewsBot · 17 September 2026 12:24

Quarkus 3.40.0.CR1 and 3.39.4 has been released.

Link: Release 3.40.0.CR1 · quarkusio/quarkus · GitHub

Complete changelog

#35814 - Quarkus Security with Jakarta Persistence guide doesn’t mention security-jpa-reactive extension

#37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide

#41734 - Probable bug in CognitoPrincipal lines 62 70

#53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32

#54925 - Formatting fails with a NullPointerException and the log record is dropped

#54926 - Fix JSON logging with null formatter keys

#55111 - [quarkus-info] Allow hiding the quarkus version

#55763 - Make the OIDC token JWE decryption algorithm configurable

#55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal

#55916 - DPoPNonceProvider should accept DPoP proof jti

#56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang

#56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions

#56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti

#56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property

#56514 - Restore the third callout ent…

Link: Release 3.39.4 · quarkusio/quarkus · GitHub