This is an automated email from the ASF dual-hosted git repository.
davsclaus pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git
The following commit(s) were added to refs/heads/main by this push:
new d5c7d0d149c3 CAMEL-25787: upgrade guide notes for the maintenance
lines (#28167)
d5c7d0d149c3 is described below
commit d5c7d0d149c3a35888cdd8558c033b04eea947bd
Author: Andrea Cosentino <[email protected]>
AuthorDate: Tue Oct 20 11:46:14 2026 +0200
CAMEL-25787: upgrade guide notes for the maintenance lines (#28167)
Co-Authored-By: Claude Opus 5.5 <[email protected]>
---
.../ROOT/pages/camel-4x-upgrade-guide-4_18.adoc | 22 ++++++++++++++++++++++
.../ROOT/pages/camel-4x-upgrade-guide-4_22.adoc | 22 ++++++++++++++++++++++
2 files changed, 44 insertions(+)
diff --git
a/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_18.adoc
b/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_18.adoc
index b0b45181dba8..a5c6fe07b79c 100644
--- a/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_18.adoc
+++ b/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_18.adoc
@@ -150,6 +150,28 @@ authenticate it itself, with `authenticate(new
TokenCredentials(token))` on the
For any other message, such as one from camel-undertow, the processors keep
reading the message headers, but leave out
a value that also appears in the query string of the request.
+=== camel-smooks - allowExternalEntities applies to Smooks Source bodies and
to a reader declared without a class
+
+The Smooks component and `SmooksProcessor` now parse a message body that is
already a Smooks `Source`
+(`org.smooks.io.source.StringSource`, `ReaderSource`, `StreamSource`,
`ByteSource` or `URLSource`) with the same XML
+reader settings as the other message bodies, so external entities in it are
only resolved when `allowExternalEntities`
+is `true`. Before, such a body was handed to Smooks as it was. The bytes of a
`StreamSource`, `ByteSource` or
+`URLSource` are decoded with the exchange charset, or UTF-8, as before. These
bodies are now parsed into a DOM before
+Smooks processes them, which uses more memory for very large inputs.
`DOMSource` and `JavaSource` bodies are unchanged.
+
+A Smooks configuration whose `<reader>` declares no `class` only sets
handlers, features or parameters of the default
+XML reader. The Smooks component, `SmooksProcessor` and the Smooks data format
now apply `allowExternalEntities` to
+such a configuration as they do to a configuration without a `<reader>`, so
the handlers and features of that reader no
+longer take part in parsing the XML unless `allowExternalEntities` is `true`.
Configurations that declare a reader
+class, such as EDI, CSV, JSON, DFDL or a custom reader, are unchanged.
+
+A document with a document type declaration (`<!DOCTYPE ...>`) is now
processed with these settings for every body
+type, `String`, `byte[]` and `InputStream` bodies included, which failed
before: the entities of its internal subset are
+expanded, and the declaration itself is not passed on to Smooks.
+
+Set `allowExternalEntities=true` on the endpoint or on the data format for
documents that rely on external entities or
+an external DTD.
+
=== camel-chunk - message data printed with a direct tag is rendered literally
Previously the `chunk` component bound the message body, headers and variables
into the Chunk engine so that
diff --git
a/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_22.adoc
b/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_22.adoc
index 6a6fff28fc45..1a476f3f5ee2 100644
--- a/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_22.adoc
+++ b/docs/user-manual/modules/ROOT/pages/camel-4x-upgrade-guide-4_22.adoc
@@ -52,6 +52,28 @@ when `enableSniffer` is set, the nodes the sniffer finds,
matching the scheme, h
registered for any host. A request to another host, including the host of a
node with another scheme or port, is now
sent without them. A client set with the `restClient` option is not changed.
+=== camel-smooks - allowExternalEntities applies to Smooks Source bodies and
to a reader declared without a class
+
+The Smooks component and `SmooksProcessor` now parse a message body that is
already a Smooks `Source`
+(`org.smooks.io.source.StringSource`, `ReaderSource`, `StreamSource`,
`ByteSource` or `URLSource`) with the same XML
+reader settings as the other message bodies, so external entities in it are
only resolved when `allowExternalEntities`
+is `true`. Before, such a body was handed to Smooks as it was. The bytes of a
`StreamSource`, `ByteSource` or
+`URLSource` are decoded with the exchange charset, or UTF-8, as before. These
bodies are now parsed into a DOM before
+Smooks processes them, which uses more memory for very large inputs.
`DOMSource` and `JavaSource` bodies are unchanged.
+
+A Smooks configuration whose `<reader>` declares no `class` only sets
handlers, features or parameters of the default
+XML reader. The Smooks component, `SmooksProcessor` and the Smooks data format
now apply `allowExternalEntities` to
+such a configuration as they do to a configuration without a `<reader>`, so
the handlers and features of that reader no
+longer take part in parsing the XML unless `allowExternalEntities` is `true`.
Configurations that declare a reader
+class, such as EDI, CSV, JSON, DFDL or a custom reader, are unchanged.
+
+A document with a document type declaration (`<!DOCTYPE ...>`) is now
processed with these settings for every body
+type, `String`, `byte[]` and `InputStream` bodies included, which failed
before: the entities of its internal subset are
+expanded, and the declaration itself is not passed on to Smooks.
+
+Set `allowExternalEntities=true` on the endpoint or on the data format for
documents that rely on external entities or
+an external DTD.
+
=== camel-ssh - known_hosts entries are matched as in OpenSSH
When `knownHostsResource` is set, the entries of the `known_hosts` file are
now matched as OpenSSH
