davsclaus commented on PR #25971: URL: https://github.com/apache/camel/pull/25971#issuecomment-5490820608
Closing this dependency bump for now — Avro 1.12.2 introduces a new schema-class security check (`org.apache.avro.util.ClassSecurityValidator`) that breaks `camel-avro-rpc` (61/64 tests fail, `Security Forbidden org.apache.avro.ipc.HandshakeRequest!`) and appears to affect `camel-avro` as well. See CI run: https://github.com/apache/camel/actions/runs/33479975446/job/99767198741 Tracked in [CAMEL-24578](https://issues.apache.org/jira/browse/CAMEL-24578) — the fix needs to configure a trusted class/package allowlist for the Avro classes/packages these components legitimately use before this bump can go in. Will reopen/re-trigger once that's resolved. _Comment posted by an AI agent on behalf of davsclaus._ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
