Quarkus 3.36 has been released with several notable features. The highlight is the new experimental Quarkus Signals extension, which enables loosely coupled component interaction through publish, send, and request-reply emission modes with type-safe resolution inspired by CDI events. The release also adds support for embedding dependency SBOMs (Software Bill of Materials) into applications and exposing them via a well-known endpoint, including native image support following the GraalVM SBOM spec. Security improvements include OIDC SPIFFE client authentication for workload identity-based zero-trust service communication, and support for arbitrary keystore/truststore types (e.g., BCFKS). Additional changes include a new JsonProvider SPI for dynamic JSON field additions in logging and dynamic TLS configuration reloading for GraphQL clients.
