- Use normalized path to check Keycloak authorization policies
- Use normalised path for Servlet
- Use normalized path to check CSRF token path constraint

Co-authored-by: Michal Vavrik <[email protected]>
Co-authored-by: Stuart Douglas <[email protected]>
Co-authored-by: Sergey Beryozkin <[email protected]>
Co-authored-by: Clement Escoffier <[email protected]>

The problem is causes by 2aef532
which contained a Maven exclusion
which results in the dependency not being
added when the client and server part
are mixed.

Fixes: quarkusio#35889
(cherry picked from commit 596d388)

(cherry picked from commit 8b0a263)

(cherry picked from commit 47ef31f)

Relates to: quarkusio#35891

(cherry picked from commit 4c15e55)

These were erroneously removed in 19aae16

(cherry picked from commit cafcc52)

(cherry picked from commit 737d27f)

Fixes: quarkusio#35884
(cherry picked from commit ddb6360)

Signed-off-by: Michal Maléř <[email protected]>
(cherry picked from commit 43f5225)

Complementary to quarkusio#35847

(cherry picked from commit 66fbb2f)

(cherry picked from commit dc226c9)

(cherry picked from commit 0bce9d9)

Bumps org.apache.commons:commons-compress from 1.23.0 to 1.24.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit bb6ecde)

Bumps org.apache.commons:commons-compress from 1.23.0 to 1.24.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit e65f535)

If the Redis client cannot connect to Redis (and only in this case), recompute the value.
The value is neither cached nor written in the cache, making the cache implementation more robust to transient network issues.
A log message (warning) has been added to detect the issue.

Co-authored-by: Monhemius, B. (Bart) <[email protected]>
Co-authored-by: Clement Escoffier <[email protected]>
(cherry picked from commit c2b4860)

(cherry picked from commit 1f36147)

We introduce an injection point to the
synthetic bean creation process thus
giving Arc all the declarative context
it needs in order to ensure proper bean
creation order

(cherry picked from commit dc78468)

RESTEasy Classic does not ignore them,
so let's keep the same behavior

Closes: quarkusio#35966
(cherry picked from commit a3ba466)

(cherry picked from commit 7fb2bc9)

(cherry picked from commit 40b4739)

As discussed in https://quarkusio.zulipchat.com/#narrow/stream/191168-core-team/topic/negative.20feedback

(cherry picked from commit a1a2485)

Bumps org.eclipse.jgit:org.eclipse.jgit from 6.6.0.202305301015-r to 6.6.1.202309021850-r.

---
updated-dependencies:
- dependency-name: org.eclipse.jgit:org.eclipse.jgit
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit 8580a46)

Bumps org.eclipse.jgit:org.eclipse.jgit from 6.6.0.202305301015-r to 6.6.1.202309021850-r.

---
updated-dependencies:
- dependency-name: org.eclipse.jgit:org.eclipse.jgit
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit 17195f6)

(cherry picked from commit f6027e8)

(cherry picked from commit 28cf0b8)

I wasn't exactly aware of this new development and it needs to be
handled a bit differently.

(cherry picked from commit 797162a)

(cherry picked from commit e0f9964)

(cherry picked from commit 88e50c2)

…uidee

(cherry picked from commit ea3af2f)

(cherry picked from commit 411cb27)