davsclaus commented on PR #28292: URL: https://github.com/apache/camel/pull/28292#issuecomment-6351595987
Tested locally on top of `main` (5aac7df76b83) with this bump applied, together with the other 7 Dependabot bumps opened today (28286-28294, each touching different modules). Built into a scratch Maven repo with core, tooling and the affected modules rebuilt from source. All tests pass: `camel-jackson3` 116, `camel-jackson3xml` 45, `camel-jackson3-avro` 26, `camel-jackson3-protobuf` 24, `camel-jolt` 4, `camel-toon` 22. 3.2.4 is a security release worth taking: - databind CVE-2026-110879: type parameters and array element types of polymorphic type ids are now checked by `PolymorphicTypeValidator`. - core CVE-2026-110729: hex number length is now checked in the non-blocking parser. - protobuf, avro and smile CVEs in dataformats-binary. LGTM to merge. _Claude Code on behalf of davsclaus_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
