This is an automated email from the ASF dual-hosted git repository.
davsclaus pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git
The following commit(s) were added to refs/heads/main by this push:
new b7bba87d2968 chore: camel-spring-ws - exclude transitive opensaml
dependencies
b7bba87d2968 is described below
commit b7bba87d29687a8b7da70fdc17dc57b81f0dd079
Author: Claus Ibsen <[email protected]>
AuthorDate: Tue Jun 16 13:51:21 2026 +0200
chore: camel-spring-ws - exclude transitive opensaml dependencies
Exclude org.opensaml:* transitive dependencies from spring-ws-security
in camel-spring-ws. The OpenSAML artifacts are hosted on a third-party
Maven repository (build.shibboleth.net) that has proven unreliable,
causing intermittent CI and build failures. Camel's Spring-WS component
does not use OpenSAML.
Closes #24046
---
components/camel-spring-parent/camel-spring-ws/pom.xml | 4 ++++
.../user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_21.adoc | 6 ++++++
2 files changed, 10 insertions(+)
diff --git a/components/camel-spring-parent/camel-spring-ws/pom.xml
b/components/camel-spring-parent/camel-spring-ws/pom.xml
index 9f99d6ceb20a..d3f7ec111533 100644
--- a/components/camel-spring-parent/camel-spring-ws/pom.xml
+++ b/components/camel-spring-parent/camel-spring-ws/pom.xml
@@ -116,6 +116,10 @@
<groupId>xalan</groupId>
<artifactId>xalan</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>org.opensaml</groupId>
+ <artifactId>*</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
diff --git
a/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_21.adoc
b/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_21.adoc
index e8faf1620b88..1d28db3c3884 100644
--- a/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_21.adoc
+++ b/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_21.adoc
@@ -1036,6 +1036,12 @@ that namespace are no longer propagated as `Exchange`
headers. Routes that relie
header names from inbound SOAP headers can supply a custom
`headerFilterStrategy` (via the new
`headerFilterStrategy` endpoint option) to restore the previous behaviour.
+The transitive `org.opensaml` dependencies pulled in by `spring-ws-security`
have been excluded.
+Camel's Spring-WS component does not use OpenSAML, and these artifacts are
hosted on a third-party
+Maven repository (`build.shibboleth.net`) that has proven unreliable, causing
intermittent CI and
+build failures. If your project depends on OpenSAML for SAML-based
WS-Security, you will need to
+add the `org.opensaml` dependencies explicitly.
+
=== camel-lucene
The Exchange header values exposed by `LuceneConstants` have been renamed to
follow the standard
