# Quarkus 3.37.3

- Product: Quarkus (https://whatsnew.fyi/product/quarkus)
- Vendor: Red Hat
- Date: 2026-07-15
- Version: 3.37.3
- Original notes: https://github.com/quarkusio/quarkus/releases/tag/3.37.3
- Permalink: https://whatsnew.fyi/product/quarkus/releases/3.37.3

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — quarkus.grpc.codegen.proto-directory unrecognized configuration key is now registered
- **fixed** — Incompatible exception classloaders when mocking exceptions during tests
- **fixed** — quarkus-oidc cannot handle non rollable refresh tokens concurrently
- **fixed** — Safer testcontainers.reuse.enable restoration and more resilient tests
- **fixed** — OIDC deduplicate concurrent token refresh requests within a single Quarkus instance
- **fixed** — OpenShift Client native integration test fails after recent changes
- **fixed** — IsContainerRuntimeWorking to not write testcontainers.reuse.enable to ~/.testcontainers.properties
- **fixed** — Native image build failure caused by Netty's SelfSignedCertificate
- **fixed** — Don't truncate stacktrace on OIDC authentication errors
- **fixed** — Do not miss Throwable in the OIDC code flow error log
- **fixed** — @JsonFormat(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set
- **fixed** — Reflection free deserializers drops data of final collection field with no setter
- **fixed** — Fix flakiness of RawTypeReflectionFreeSerializerTest
- **fixed** — Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers
- **fixed** — quarkus-rest-jackson reflection-free deserializer ignores @JsonTypeInfo/@JsonSubTypes for polymorphic list elements inside a wrapper type
- **fixed** — Bail out of reflection-free deserializer when @JsonTypeInfo is used
- **fixed** — Jacoco and CycloneDX extension breaking combination in Quarkus 3.37.1+
- **fixed** — Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers
- **fixed** — Register gRPC codegen configuration properties
- **fixed** — Harden remote dev mode against path traversal and unsafe deserialization

###### Complete changelog

  * [#48106](https://github.com/quarkusio/quarkus/issues/48106) - `quarkus.grpc.codegen.proto-directory` unrecognized configuration key & missing from documentation
  * [#55093](https://github.com/quarkusio/quarkus/issues/55093) - Incompatible exception classloaders when mocking exceptions during tests
  * [#55196](https://github.com/quarkusio/quarkus/issues/55196) - quarkus-oidc cannot handle non rollable refresh tokens concurrently
  * [#55231](https://github.com/quarkusio/quarkus/pull/55231) - Safer testcontainers.reuse.enable restoration + more resilient tests
  * [#55272](https://github.com/quarkusio/quarkus/pull/55272) - OIDC: deduplicate concurrent token refresh requests within a single Quarkus instance
  * [#55288](https://github.com/quarkusio/quarkus/issues/55288) - [3.x]  OpenShift Client native integration test fails after #55242
  * [#55292](https://github.com/quarkusio/quarkus/pull/55292) - Bump the hibernate group across 1 directory with 12 updates
  * [#55316](https://github.com/quarkusio/quarkus/pull/55316) - Fix IsContainerRuntimeWorking to not write `testcontainers.reuse.enable` to ~/.testcontainers.properties
  * [#55319](https://github.com/quarkusio/quarkus/pull/55319) - Fix native image build failure caused by Netty's SelfSignedCertificate
  * [#55351](https://github.com/quarkusio/quarkus/issues/55351) - Don't truncate stacktrace on OIDC authentication errors
  * [#55357](https://github.com/quarkusio/quarkus/pull/55357) - Do not miss Throwable in the OIDC code flow error log
  * [#55362](https://github.com/quarkusio/quarkus/issues/55362) - `@JsonFormat`(shape = JsonFormat.Shape.ARRAY) on a class ignored by reflection-free Jackson serializers when used inside a List/Set
  * [#55363](https://github.com/quarkusio/quarkus/issues/55363) - Reflection free deserializers drops data of final collection field with no setter
  * [#55365](https://github.com/quarkusio/quarkus/pull/55365) - Fix flakiness of `RawTypeReflectionFreeSerializerTest`
  * [#55366](https://github.com/quarkusio/quarkus/pull/55366) - Fix serialization of pojos using JsonFormat.Shape enum in reflection-free Jackson serializers
  * [#55369](https://github.com/quarkusio/quarkus/issues/55369) - quarkus-rest-jackson: reflection-free deserializer ignores `@JsonTypeInfo`/`@JsonSubTypes` for polymorphic list elements inside a wrapper type
  * [#55370](https://github.com/quarkusio/quarkus/pull/55370) - Bail out of reflection-free deserializer when `@JsonTypeInfo` is used
  * [#55373](https://github.com/quarkusio/quarkus/issues/55373) - Jacoco + CycloneDX extension breaking combination in Quarkus 3.37.1+
  * [#55374](https://github.com/quarkusio/quarkus/pull/55374) - Implement getter-as-setter pattern when deserializing private collection in reflection-free Jackson serializers
  * [#55378](https://github.com/quarkusio/quarkus/pull/55378) - Register gRPC codegen configuration properties
  * [#55380](https://github.com/quarkusio/quarkus/pull/55380) - Harden remote dev mode against path traversal and unsafe deserialization
  * [#55385](https://github.com/quarkusio/quarkus/issues/55385) - NPE in modularity can transformed classes
  * [#55396](https://github.com/quarkusio/quarkus/pull/55396) - Fix NPE in modularity when processing removed resources
  * [#55397](https://github.com/quarkusio/quarkus/pull/55397) - Ignore unresolvable POMs for bundled CycloneDX components
  * [#55403](https://github.com/quarkusio/quarkus/pull/55403) - Fix bad link syntax and update cross-document references to use xref 
  * [#55410](https://github.com/quarkusio/quarkus/issues/55410) - quarkus-rest-jackson: Reflection-free deserializer ignores `@JsonProperty(required=true)` on a `@JsonCreator` sometimes
  * [#55411](https://github.com/quarkusio/quarkus/pull/55411) - Take count of `@JsonProperty`(required=true) on a `@JsonCreator` in reflection-free Jackson serializers
  * [#55425](https://github.com/quarkusio/quarkus/pull/55425) - Disable Mockito class cac

_[Truncated at 4000 characters — full notes: https://github.com/quarkusio/quarkus/releases/tag/3.37.3]_