# Quarkus 3.40.0.CR1 and 3.39.4 released!

**URL:** <https://forum.devtalk.com/t/quarkus-3-40-0-cr1-and-3-39-4-released/249842>\
**Category:** Backend Official News\
**Tags:** newsbot, quarkus, official-news\
**Created:** [17 September 2026 12:24 UTC](https://forum.devtalk.com/t/quarkus-3-40-0-cr1-and-3-39-4-released/249842 "2026-09-17T12:24:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [17 September 2026 12:24 UTC](https://forum.devtalk.com/t/quarkus-3-40-0-cr1-and-3-39-4-released/249842/1 "2026-09-17T12:24:34Z")

</div>

[Quarkus](https://devtalk.com/quarkus) 3.40.0.CR1 and 3.39.4 has been released.

> [@](#):
>
> ### Complete changelog

Link: [Release 3.40.0.CR1 · quarkusio/quarkus · GitHub](https://github.com/quarkusio/quarkus/releases/tag/3.40.0.CR1)

> [@](#):
>
> ### Complete changelog
> 
> - [#35814](https://github.com/quarkusio/quarkus/issues/35814) - `Quarkus Security with Jakarta Persistence` guide doesn’t mention `security-jpa-reactive` extension
> - [#37745](https://github.com/quarkusio/quarkus/issues/37745) - Docs: security-oauth2 and security-oauth2-quickstart Guide
> - [#41734](https://github.com/quarkusio/quarkus/issues/41734) - Probable bug in CognitoPrincipal lines 62 70
> - [#53739](https://github.com/quarkusio/quarkus/issues/53739) - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32
> - [#54925](https://github.com/quarkusio/quarkus/issues/54925) - Formatting fails with a `NullPointerException` and the log record is dropped
> - [#54926](https://github.com/quarkusio/quarkus/pull/54926) - Fix JSON logging with null formatter keys
> - [#55111](https://github.com/quarkusio/quarkus/issues/55111) - [quarkus-info] Allow hiding the quarkus version
> - [#55763](https://github.com/quarkusio/quarkus/issues/55763) - Make the OIDC token JWE decryption algorithm configurable
> - [#55910](https://github.com/quarkusio/quarkus/pull/55910) - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal
> - [#55916](https://github.com/quarkusio/quarkus/issues/55916) - DPoPNonceProvider should accept DPoP proof jti
> - [#56160](https://github.com/quarkusio/quarkus/issues/56160) - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang
> - [#56287](https://github.com/quarkusio/quarkus/pull/56287) - Add forgotten extension-status includes – and remove extension status from guides for stable extensions
> - [#56303](https://github.com/quarkusio/quarkus/pull/56303) - OIDC: make `DPoPNonceProvider` accept DPoP proof `jti`
> - [#56453](https://github.com/quarkusio/quarkus/pull/56453) - Allow TEST\_TO\_MAIN\_MAPPINGS to be set as a system property
> - [#56514](https://github.com/quarkusio/quarkus/pull/56514) - Restore the third callout ent…

Link: [Release 3.39.4 · quarkusio/quarkus · GitHub](https://github.com/quarkusio/quarkus/releases/tag/3.39.4)