This is an automated email from the ASF dual-hosted git repository.
ppalaga pushed a commit to branch 3.33.x
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git
The following commit(s) were added to refs/heads/3.33.x by this push:
new c677d878db Upgrade com.rabbitmq:amqp-client to 5.37.0 to address CVEs
c677d878db is described below
commit c677d878db061e4c93222293e1bce3ecd6fe85b0
Author: Peter Palaga <[email protected]>
AuthorDate: Thu Oct 29 18:49:37 2026 +0100
Upgrade com.rabbitmq:amqp-client to 5.37.0 to address CVEs
---
pom.xml | 1 +
poms/bom/pom.xml | 5 +++++
poms/bom/src/main/generated/flattened-full-pom.xml | 5 +++++
poms/bom/src/main/generated/flattened-reduced-pom.xml | 5 +++++
poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml | 5 +++++
5 files changed, 21 insertions(+)
diff --git a/pom.xml b/pom.xml
index b9fe787154..c2f01c8828 100644
--- a/pom.xml
+++ b/pom.xml
@@ -162,6 +162,7 @@
<opentelemetry-semconv-legacy.version>1.29.0-alpha</opentelemetry-semconv-legacy.version><!--
Alignment for camel-opentelemetry and google-pubsub -->
<org.json.version>20240303</org.json.version><!-- Used by
amazon-kinesis-client, google-cloud-bigquery and com.ibm.mq.jakarta.client -->
<re2j.version>1.7</re2j.version><!-- Used by google-cloud-pubsub and
amazon-kinesis-client -->
+
<rabbitmq-amqp-client.version>5.37.0</rabbitmq-amqp-client.version><!-- Upgrade
over spring-rabbit transitive to address CVEs -->
<reactor-netty.version>${reactor-netty-version}</reactor-netty.version>
<retrofit.version>3.0.0</retrofit.version><!-- @sync
org.kiwiproject:consul-client:${consul-client-version} prop:retrofit.version -->
<rhino.version>1.7.15.1</rhino.version><!-- Used by Apache FOP, to
sync with transitive dependencies -->
diff --git a/poms/bom/pom.xml b/poms/bom/pom.xml
index f2181504dd..ccfa6e1815 100644
--- a/poms/bom/pom.xml
+++ b/poms/bom/pom.xml
@@ -7542,6 +7542,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.rabbitmq</groupId>
+ <artifactId>amqp-client</artifactId>
+ <version>${rabbitmq-amqp-client.version}</version>
+ </dependency>
<dependency>
<groupId>com.sangupta</groupId>
<artifactId>murmur</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-full-pom.xml
b/poms/bom/src/main/generated/flattened-full-pom.xml
index 0a9a15143f..7bb039dd87 100644
--- a/poms/bom/src/main/generated/flattened-full-pom.xml
+++ b/poms/bom/src/main/generated/flattened-full-pom.xml
@@ -7425,6 +7425,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.rabbitmq</groupId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
+ <artifactId>amqp-client</artifactId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
+ <version>5.37.0</version><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
+ </dependency>
<dependency>
<groupId>com.sangupta</groupId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
<artifactId>murmur</artifactId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
diff --git a/poms/bom/src/main/generated/flattened-reduced-pom.xml
b/poms/bom/src/main/generated/flattened-reduced-pom.xml
index 8fcb58a154..20a08454af 100644
--- a/poms/bom/src/main/generated/flattened-reduced-pom.xml
+++ b/poms/bom/src/main/generated/flattened-reduced-pom.xml
@@ -7389,6 +7389,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.rabbitmq</groupId>
+ <artifactId>amqp-client</artifactId>
+ <version>5.37.0</version>
+ </dependency>
<dependency>
<groupId>com.sangupta</groupId>
<artifactId>murmur</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
b/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
index c601c07e4c..a1e4729b32 100644
--- a/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
+++ b/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
@@ -7389,6 +7389,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.rabbitmq</groupId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
+ <artifactId>amqp-client</artifactId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
+ <version>5.37.0</version><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
+ </dependency>
<dependency>
<groupId>com.sangupta</groupId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
<artifactId>murmur</artifactId><!--
org.apache.camel.quarkus:camel-quarkus-bom:${project.version} -->
