This is an automated email from the ASF dual-hosted git repository.
davsclaus pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-spring-boot.git
The following commit(s) were added to refs/heads/main by this push:
new d513323fb88 Regen
d513323fb88 is described below
commit d513323fb88f480b73d1bd526d16153cb0087262
Author: Claus Ibsen <[email protected]>
AuthorDate: Fri Sep 11 11:55:02 2026 +0200
Regen
---
.../springboot/catalog/components/jgroups.json | 6 ++++--
.../src/main/docs/jgroups.json | 6 ++++++
.../springboot/JGroupsComponentConfiguration.java | 21 +++++++++++++++++++++
.../modules/ROOT/pages/starters/jgroups.adoc | 3 ++-
tooling/camel-spring-boot-dependencies/pom.xml | 6 +++---
5 files changed, 36 insertions(+), 6 deletions(-)
diff --git
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
index 3ee087e6209..230e651f9c0 100644
---
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
+++
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
@@ -29,7 +29,8 @@
"bridgeErrorHandler": { "index": 2, "kind": "property", "displayName":
"Bridge Error Handler", "group": "consumer", "label": "consumer", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": false, "description":
"Allows for bridging the consumer to the Camel routing Error Handler, which
mean any exceptions (if possible) occurred while the Camel consumer is trying
to pickup incoming messages, or the like [...]
"enableViewMessages": { "index": 3, "kind": "property", "displayName":
"Enable View Messages", "group": "consumer", "label": "consumer", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": false, "description": "If
set to true, the consumer endpoint will receive org.jgroups.View messages as
well (not only org.jgroups.Message instances). By default only regular messages
are consumed by the endpoint." },
"lazyStartProducer": { "index": 4, "kind": "property", "displayName":
"Lazy Start Producer", "group": "producer", "label": "producer", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": false, "description":
"Whether the producer should be started lazy (on the first message). By
starting lazy you can use this to allow CamelContext and routes to startup in
situations where a producer may otherwise fail [...]
- "autowiredEnabled": { "index": 5, "kind": "property", "displayName":
"Autowired Enabled", "group": "advanced", "label": "advanced", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": true, "description":
"Whether autowiring is enabled. This is used for automatic autowiring options
(the option must be marked as autowired) by looking up in the registry to find
if there is a single instance of matching t [...]
+ "autowiredEnabled": { "index": 5, "kind": "property", "displayName":
"Autowired Enabled", "group": "advanced", "label": "advanced", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": true, "description":
"Whether autowiring is enabled. This is used for automatic autowiring options
(the option must be marked as autowired) by looking up in the registry to find
if there is a single instance of matching t [...]
+ "deserializationFilter": { "index": 6, "kind": "property", "displayName":
"Deserialization Filter", "group": "security", "label": "consumer,security",
"required": false, "type": "string", "javaType": "java.lang.String",
"deprecated": false, "autowired": false, "secret": false, "description": "Sets
an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a
defense-in-depth check on the class of the message body deserialized by
org.jgroups.Message.getObject(). The pattern is e [...]
},
"headers": {
"CamelJGroupsChannelAddress": { "index": 0, "kind": "header",
"displayName": "", "group": "common", "label": "", "required": false,
"javaType": "org.jgroups.Address", "deprecated": false, "deprecationNote": "",
"autowired": false, "secret": false, "description": "Address
(org.jgroups.Address) of the channel associated with the endpoint.",
"constantName":
"org.apache.camel.component.jgroups.JGroupsConstants#HEADER_JGROUPS_CHANNEL_ADDRESS"
},
@@ -44,6 +45,7 @@
"bridgeErrorHandler": { "index": 3, "kind": "parameter", "displayName":
"Bridge Error Handler", "group": "consumer (advanced)", "label":
"consumer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Allows for bridging the consumer to the
Camel routing Error Handler, which mean any exceptions (if possible) occurred
while the Camel consumer is trying to pickup incoming [...]
"exceptionHandler": { "index": 4, "kind": "parameter", "displayName":
"Exception Handler", "group": "consumer (advanced)", "label":
"consumer,advanced", "required": false, "type": "object", "javaType":
"org.apache.camel.spi.ExceptionHandler", "optionalPrefix": "consumer.",
"deprecated": false, "autowired": false, "secret": false, "description": "To
let the consumer use a custom ExceptionHandler. Notice if the option
bridgeErrorHandler is enabled then this option is not in use. By def [...]
"exchangePattern": { "index": 5, "kind": "parameter", "displayName":
"Exchange Pattern", "group": "consumer (advanced)", "label":
"consumer,advanced", "required": false, "type": "enum", "javaType":
"org.apache.camel.ExchangePattern", "enum": [ "InOnly", "InOut" ],
"deprecated": false, "autowired": false, "secret": false, "description": "Sets
the exchange pattern when the consumer creates an exchange." },
- "lazyStartProducer": { "index": 6, "kind": "parameter", "displayName":
"Lazy Start Producer", "group": "producer (advanced)", "label":
"producer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Whether the producer should be started
lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a produc [...]
+ "lazyStartProducer": { "index": 6, "kind": "parameter", "displayName":
"Lazy Start Producer", "group": "producer (advanced)", "label":
"producer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Whether the producer should be started
lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a produc [...]
+ "deserializationFilter": { "index": 7, "kind": "parameter", "displayName":
"Deserialization Filter", "group": "security", "label": "consumer,security",
"required": false, "type": "string", "javaType": "java.lang.String",
"deprecated": false, "autowired": false, "secret": false, "description": "Sets
an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a
defense-in-depth check on the class of the message body deserialized by
org.jgroups.Message.getObject(). The pattern is [...]
}
}
diff --git
a/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
b/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
index 5a0fef0734e..d724709f02f 100644
--- a/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
+++ b/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
@@ -44,6 +44,12 @@
"type": "java.lang.Boolean",
"sourceType":
"org.apache.camel.spring.boot.ComponentConfigurationPropertiesCommon$CustomizerProperties"
},
+ {
+ "name": "camel.component.jgroups.deserialization-filter",
+ "type": "java.lang.String",
+ "description": "Sets an ObjectInputFilter pattern (jdk.serialFilter
syntax) applied as a defense-in-depth check on the class of the message body
deserialized by org.jgroups.Message.getObject(). The pattern is evaluated after
JGroups has deserialized the payload, so this option alone does not prevent
gadget-chain execution that happens inside the JGroups receive path; to block
such attacks, also configure the JVM-wide -Djdk.serialFilter and secure the
channel with AUTH and encryptio [...]
+ "sourceType":
"org.apache.camel.component.jgroups.springboot.JGroupsComponentConfiguration"
+ },
{
"name": "camel.component.jgroups.enable-view-messages",
"type": "java.lang.Boolean",
diff --git
a/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
b/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
index 8a0f857a444..d066ddf3a2a 100644
---
a/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
+++
b/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
@@ -83,6 +83,19 @@ public class JGroupsComponentConfiguration
* etc.
*/
private Boolean autowiredEnabled = true;
+ /**
+ * Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a
+ * defense-in-depth check on the class of the message body deserialized by
+ * org.jgroups.Message.getObject(). The pattern is evaluated after JGroups
+ * has deserialized the payload, so this option alone does not prevent
+ * gadget-chain execution that happens inside the JGroups receive path; to
+ * block such attacks, also configure the JVM-wide -Djdk.serialFilter and
+ * secure the channel with AUTH and encryption. When this option is not set
+ * and no JVM-wide filter is configured, a conservative default filter
+ * denying java.net. and otherwise allowing java., javax. and
+ * org.apache.camel. is applied. Use to accept any type.
+ */
+ private String deserializationFilter;
public JChannel getChannel() {
return channel;
@@ -131,4 +144,12 @@ public class JGroupsComponentConfiguration
public void setAutowiredEnabled(Boolean autowiredEnabled) {
this.autowiredEnabled = autowiredEnabled;
}
+
+ public String getDeserializationFilter() {
+ return deserializationFilter;
+ }
+
+ public void setDeserializationFilter(String deserializationFilter) {
+ this.deserializationFilter = deserializationFilter;
+ }
}
\ No newline at end of file
diff --git a/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
b/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
index c2a34cb55b2..6b1ea77f3c3 100644
--- a/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
+++ b/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
@@ -23,7 +23,7 @@ Please refer to the above links for usage and configuration
details.
== Spring Boot Auto-Configuration
-The starter supports 7 options, which are listed below.
+The starter supports 8 options, which are listed below.
[width="100%",cols="2,5,^1,2",options="header"]
|===
@@ -32,6 +32,7 @@ The starter supports 7 options, which are listed below.
| camel.component.jgroups.bridge-error-handler | Allows for bridging the
consumer to the Camel routing Error Handler, which mean any exceptions (if
possible) occurred while the Camel consumer is trying to pickup incoming
messages, or the likes, will now be processed as a message and handled by the
routing Error Handler. Important: This is only possible if the 3rd party
component allows Camel to be alerted if an exception was thrown. Some
components handle this internally only, and theref [...]
| camel.component.jgroups.channel | Channel to use. The option is a
org.jgroups.JChannel type. | | JChannel
| camel.component.jgroups.channel-properties | Specifies configuration
properties of the JChannel used by the endpoint. | | String
+| camel.component.jgroups.deserialization-filter | Sets an ObjectInputFilter
pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the
class of the message body deserialized by org.jgroups.Message.getObject(). The
pattern is evaluated after JGroups has deserialized the payload, so this option
alone does not prevent gadget-chain execution that happens inside the JGroups
receive path; to block such attacks, also configure the JVM-wide
-Djdk.serialFilter and secure the ch [...]
| camel.component.jgroups.enable-view-messages | If set to true, the consumer
endpoint will receive org.jgroups.View messages as well (not only
org.jgroups.Message instances). By default only regular messages are consumed
by the endpoint. | false | Boolean
| camel.component.jgroups.enabled | Whether to enable auto configuration of
the jgroups component. This is enabled by default. | | Boolean
| camel.component.jgroups.lazy-start-producer | Whether the producer should be
started lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a producer may otherwise
fail during starting and cause the route to fail being started. By deferring
this startup to be lazy then the startup failure can be handled during routing
messages via Camel's routing error handlers. Beware that when the first message
is processed then [...]
diff --git a/tooling/camel-spring-boot-dependencies/pom.xml
b/tooling/camel-spring-boot-dependencies/pom.xml
index a1fd3f1246b..2974eb071ef 100644
--- a/tooling/camel-spring-boot-dependencies/pom.xml
+++ b/tooling/camel-spring-boot-dependencies/pom.xml
@@ -48,7 +48,7 @@
<dependency>
<groupId>com.aliyun</groupId>
<artifactId>eventbridge20200401</artifactId>
- <version>7.4.0</version>
+ <version>7.5.0</version>
</dependency>
<dependency>
<groupId>com.aliyun</groupId>
@@ -305,12 +305,12 @@
<dependency>
<groupId>net.bytebuddy</groupId>
<artifactId>byte-buddy</artifactId>
- <version>1.18.12</version>
+ <version>1.18.13</version>
</dependency>
<dependency>
<groupId>net.bytebuddy</groupId>
<artifactId>byte-buddy-agent</artifactId>
- <version>1.18.12</version>
+ <version>1.18.13</version>
</dependency>
<dependency>
<groupId>org.apache.avro</groupId>
