davsclaus commented on PR #28290: URL: https://github.com/apache/camel/pull/28290#issuecomment-6351596454
Tested locally on top of `main` (5aac7df76b83) with this bump applied, together with the other 7 Dependabot bumps opened today (28286-28294, each touching different modules). Built into a scratch Maven repo with core, tooling and the affected modules rebuilt from source. All tests pass: `camel-jackson` 106, `camel-jacksonxml` 42, `camel-jackson-avro` 27, `camel-jackson-protobuf` 25, `camel-rest-openapi` 186, `camel-telemetry-dev` 13, `camel-salesforce-component` 190 (1 skipped). `camel-telegram` compiles; its 37 tests are skipped without credentials. 2.22.4 carries the same security fixes as Jackson 3.2.4: databind CVE-2026-110879, plus protobuf, avro and smile CVEs. The databind fix makes `PolymorphicTypeValidator` stricter. camel-salesforce builds on it in `AsNestedPropertyResolver`, and its tests pass. LGTM to merge. _Claude Code on behalf of davsclaus_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
