You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2023/01/23 12:11:15 UTC

[camel] branch main updated (84c7d6ff7fb -> 1d89b272ca4)

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git


    from 84c7d6ff7fb Remove Maven Bundle Plugin version placeholder
     new fdb86cf39c2 Upgrade Libthrift to version 0.17.0
     new 5362b13ec43 Sync deps
     new 1d89b272ca4 Regen SBOM

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 camel-dependencies/pom.xml |   2 +-
 camel-sbom/camel-sbom.json | 272 ++++++---------------------------------------
 camel-sbom/camel-sbom.xml  | 146 ++++++------------------
 parent/pom.xml             |   2 +-
 4 files changed, 67 insertions(+), 355 deletions(-)


[camel] 01/03: Upgrade Libthrift to version 0.17.0

Posted by ac...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git

commit fdb86cf39c2e0e2a12161cb4d68d2c226b646fa3
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Mon Jan 23 12:59:38 2023 +0100

    Upgrade Libthrift to version 0.17.0
    
    Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 969a1159dbf..3ad041d7e38 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -302,7 +302,7 @@
         <jib-version>0.21.0</jib-version>
         <jira-guava-version>30.1.1-jre</jira-guava-version>
         <jira-rest-client-api-version>5.2.4</jira-rest-client-api-version>
-        <libthrift-version>0.14.1</libthrift-version>
+        <libthrift-version>0.17.0</libthrift-version>
         <jodatime2-version>2.11.1</jodatime2-version>
         <jolokia-version>1.7.2</jolokia-version>
         <jolt-version>0.1.7</jolt-version>


[camel] 03/03: Regen SBOM

Posted by ac...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git

commit 1d89b272ca4ad5fe1f95e936db98fd68b17f1343
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Mon Jan 23 13:10:56 2023 +0100

    Regen SBOM
    
    Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
 camel-sbom/camel-sbom.json | 272 ++++++---------------------------------------
 camel-sbom/camel-sbom.xml  | 146 ++++++------------------
 2 files changed, 65 insertions(+), 353 deletions(-)

diff --git a/camel-sbom/camel-sbom.json b/camel-sbom/camel-sbom.json
index 8ebd5e950f6..b3bcbccf92c 100644
--- a/camel-sbom/camel-sbom.json
+++ b/camel-sbom/camel-sbom.json
@@ -1,10 +1,10 @@
 {
   "bomFormat" : "CycloneDX",
   "specVersion" : "1.4",
-  "serialNumber" : "urn:uuid:dd08712f-d1ee-47b7-9153-5647b6acf58a",
+  "serialNumber" : "urn:uuid:6f152ddc-82d5-4011-a2b3-f9ea9f5bbd8d",
   "version" : 1,
   "metadata" : {
-    "timestamp" : "2023-01-23T09:05:59Z",
+    "timestamp" : "2023-01-23T12:09:32Z",
     "tools" : [
       {
         "vendor" : "OWASP Foundation",
@@ -84857,7 +84857,6 @@
       "name" : "cache-api",
       "version" : "1.1.0",
       "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
-      "scope" : "required",
       "hashes" : [
         {
           "alg" : "MD5",
@@ -115247,44 +115246,43 @@
       "bom-ref" : "pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar"
     },
     {
-      "publisher" : "The Apache Software Foundation",
-      "group" : "org.apache.servicemix.bundles",
-      "name" : "org.apache.servicemix.bundles.javax-cache-api",
-      "version" : "1.1.1_1",
-      "description" : "This OSGi bundle wraps cache-api 1.1.1 jar file.",
+      "group" : "javax.cache",
+      "name" : "cache-api",
+      "version" : "1.1.1",
+      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
       "scope" : "required",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "0d7fe9916395b21846169a9eff6b8a7c"
+          "content" : "dfdac9358e140e61c574abb1ada84dc9"
         },
         {
           "alg" : "SHA-1",
-          "content" : "7d44c39b1ae76a47a839fad1e34780cb547729b6"
+          "content" : "c56fb980eb5208bfee29a9a5b9d951aba076bd91"
         },
         {
           "alg" : "SHA-256",
-          "content" : "8270b602351d6e195837cddf60f46287c5d6b133be95021591e95e03da141d94"
+          "content" : "9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b"
         },
         {
           "alg" : "SHA-512",
-          "content" : "2c0097b8eb7354e85ecb07901898f91c372134c9e62b9bda300514957bbfa05a80044b81f50cc0bc83679277622cda3d8e3eb8801291ad4c05ba0796ec3c9aab"
+          "content" : "7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5"
         },
         {
           "alg" : "SHA-384",
-          "content" : "1bedbf0fa4fbc51de0797e95db8b34390a337e104bcd82a05dc2b7df8bec51c4852f1a1baf8a077e527af0384325a19c"
+          "content" : "3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "3c6b8b5dbf34e55fbcb34e4b1aa2539d19651ea52131cde9f525ea808047ea59b51ee79083f184109cb860b8df2ae526"
+          "content" : "49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "ae364c83245c3f1ea0a08cb87bb69c4eb609d7d1f57f5439b8753cabbe139b13"
+          "content" : "ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "a8d4e0fd5bcbf98ecc3920432359cb3a89ddbe4b8e228d0744a47f0ea9daf2ef58e905f5742c028dd333bf025652ab8bf0ebe828e9d8fefa19923ad2279388ac"
+          "content" : "8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0"
         }
       ],
       "licenses" : [
@@ -115294,31 +115292,19 @@
           }
         }
       ],
-      "purl" : "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar",
+      "purl" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
       "externalReferences" : [
         {
           "type" : "website",
-          "url" : "http://servicemix.apache.org/bundles-pom/org.apache.servicemix.bundles.javax-cache-api/"
+          "url" : "https://github.com/jsr107/jsr107spec"
         },
         {
           "type" : "distribution",
-          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
-        },
-        {
-          "type" : "issue-tracker",
-          "url" : "http://issues.apache.org/activemq/browse/SM"
-        },
-        {
-          "type" : "mailing-list",
-          "url" : "http://servicemix.apache.org/discussion-forums.html#nabble-f12051"
-        },
-        {
-          "type" : "vcs",
-          "url" : "https://gitbox.apache.org/repos/asf?p=servicemix-bundles.git"
+          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"
+      "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
     },
     {
       "publisher" : "The Apache Software Foundation",
@@ -139133,66 +139119,6 @@
       "type" : "library",
       "bom-ref" : "pkg:maven/org.redisson/redisson@3.16.7?type=jar"
     },
-    {
-      "group" : "javax.cache",
-      "name" : "cache-api",
-      "version" : "1.1.1",
-      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "dfdac9358e140e61c574abb1ada84dc9"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "c56fb980eb5208bfee29a9a5b9d951aba076bd91"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0"
-        }
-      ],
-      "licenses" : [
-        {
-          "license" : {
-            "id" : "Apache-2.0"
-          }
-        }
-      ],
-      "purl" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
-      "externalReferences" : [
-        {
-          "type" : "website",
-          "url" : "https://github.com/jsr107/jsr107spec"
-        },
-        {
-          "type" : "distribution",
-          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
-    },
     {
       "publisher" : "reactor",
       "group" : "io.projectreactor",
@@ -148662,41 +148588,41 @@
     {
       "group" : "org.apache.thrift",
       "name" : "libthrift",
-      "version" : "0.14.1",
+      "version" : "0.17.0",
       "description" : "Thrift is a software framework for scalable cross-language services development.",
       "scope" : "required",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "ef7e068f5319c5a9deee83990e8ef557"
+          "content" : "b4e4d44f7c3b3bb7f1b77b7131a534b9"
         },
         {
           "alg" : "SHA-1",
-          "content" : "85348a0c44c298bbec5ae747e67ae12e60b3aef6"
+          "content" : "36aec83a463d233ab537407df7612c383727b03f"
         },
         {
           "alg" : "SHA-256",
-          "content" : "5b3510fe72e6f0725e29cef6ebdb1eabacccc69d79fc4ed50b681600a87667ec"
+          "content" : "91135681b23af6132865725509f1ba8e7f8a0d89076b6105ce4d9b9fec4024cc"
         },
         {
           "alg" : "SHA-512",
-          "content" : "392590d79e520a9ee07c9332be11c4295ea572c25aa5adbceccdede22085cc5d019c1510befce9dcc747ca9923c2267e4d23adb2276df227cf1fd79d6228158c"
+          "content" : "644937dc90b43b81a145d2b737d91cd37644b3f90e1fbc56d2ce190d9b591ebccfb4f4fc1fe663bcf636355a24aed4d6e12bf96e89c310c10f4c49aaadc68112"
         },
         {
           "alg" : "SHA-384",
-          "content" : "4cf645f0233fd1bb530afb6d92e13dfc05b98b22d7f8e90bf6026e72b9f0c392a263499ab63b05f27453d8fe52c150d0"
+          "content" : "3136aee7d34f35e26aecb82864699d9878b648674b57ec4d44f56f8f076cc1fd1fe8196b4de68deca2632f3ffe0d3cdb"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "c407638c126efb91233170b38db81d776383b13719715c962ad03163813aa90c69cebea9a9c94a11de89b2c513181de3"
+          "content" : "fee843072f2646688fe7f8d28a2357c3f8c5553d3321a2e153923290e01d8e3488d44e0d4ce68d697c8687b0877013a6"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "cd064ebd555683f27049a9caf303d3201f7350ee8b2c980a6f73f53716f4a886"
+          "content" : "99f23ef5e6a16a6f6f25aa63380c72341d64d80a022500f9641e1c9c9f1d7f35"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "c8ce5f46b491799bc74862c0ed24094bbe0a395ed535874bc24b9b83a24cd18f461b267582346714dfaafc7a6e9e3b70e9e7faeb2059cdeae5e0f700f36dc5a5"
+          "content" : "4f93b054e4d4e6a617efa576f53bc1c8bbce959be9ef9de6dc69b42c238da73adc62b3df3b2cd1ed95c1606f856a05386db1c757772dade1e4d4d679fca00790"
         }
       ],
       "licenses" : [
@@ -148706,7 +148632,7 @@
           }
         }
       ],
-      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar",
+      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar",
       "externalReferences" : [
         {
           "type" : "website",
@@ -148718,119 +148644,7 @@
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"
-    },
-    {
-      "group" : "org.apache.tomcat.embed",
-      "name" : "tomcat-embed-core",
-      "version" : "8.5.46",
-      "description" : "Core Tomcat implementation",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "45378afdce63a61c488db97d2a6e9fbd"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "5d686394334d143f48251827435ab086a161e75e"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "be5f854448d2ee5d6e0036feb2b4f713163079a1b6b9a7a97508e55917ad35c2"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "f85371c45348625c5854e99cc6efcdedd2724cca20dbaa6c9a76141492a70e8c882a4b66de63b0d1cdd170e23f18f86efaa52bdafc05cc903d4b83f1ac4799a1"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "5feffe14a4874d5d738e35e65b06ada607e67cef9b44c4e29feae1897bee63787faca034f4bde301b9e3e1ad60118232"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "318450bba37870cfddf798fe0273f9f494b17a5e37019b28a26f15293a026ce2ee10e2182957c0a5c2398b6cf4d267d4"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "859ca4f24d9aa0c8b7287a39a5818b1e94d9a7563074a52fce0b1abeedd9a419"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "101144ddd60df18c01e6aea47a0c7620fad87913c0b24e3184b8ff5ee133c631945455b7c51c76aa173666ac90921dd0db1407d5395e11b43abe4e58a46f3985"
-        }
-      ],
-      "licenses" : [
-        {
-          "license" : {
-            "id" : "Apache-2.0"
-          }
-        }
-      ],
-      "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar",
-      "externalReferences" : [
-        {
-          "type" : "website",
-          "url" : "https://tomcat.apache.org/"
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"
-    },
-    {
-      "group" : "org.apache.tomcat",
-      "name" : "tomcat-annotations-api",
-      "version" : "8.5.46",
-      "description" : "Annotations Package",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "24d29eeee84c155a9a9fe72bbd98c0b7"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "56c67699de192c603afd6f029e80e5ff8d98e7e9"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "6a6b46d0e6958644514c0ca3658b3b07e6123a682a20ee36d3795242735fabc3"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "249c77fc30f1b054e35531aa5a52b242f05ef3e16f83f8c7751d766d490da5a8ea24f798605d35b8b1c8651834c50abd19c4ac0f93c483b020d7a90758ab832e"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "f4bb78d0c7e12d733d46378b2ab75afb057a631d69957af5527dfbd89399f1c89c8562e56df95b2c691023987b6696e3"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "fcde30303d433881f6b20aa07715a26b93c4702c5b5705e5747a141c94b1aeef40737dc5d0fa262d07224a763734d3e1"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "85fdca9eb886ab8e4e1610422b176880a8dc3b195153bd53460ad861900967ac"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "81455e112788bc580b229733e21aa5d3077237b2798c7a134cefd9f0db722ec48f220ecff50428c296285f2c47da5d12f90be8bfd4c9b5d88fc5266ceb07a3d7"
-        }
-      ],
-      "licenses" : [
-        {
-          "license" : {
-            "id" : "Apache-2.0"
-          }
-        }
-      ],
-      "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar",
-      "externalReferences" : [
-        {
-          "type" : "website",
-          "url" : "https://tomcat.apache.org/"
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"
+      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"
     },
     {
       "publisher" : "The Apache Software Foundation",
@@ -177821,11 +177635,11 @@
       "ref" : "pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar",
       "dependsOn" : [
         "pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar",
-        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"
+        "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
       ]
     },
     {
-      "ref" : "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar",
+      "ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
       "dependsOn" : [ ]
     },
     {
@@ -180764,10 +180578,6 @@
         "pkg:maven/org.jodd/jodd-bean@5.1.6?type=jar"
       ]
     },
-    {
-      "ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
-      "dependsOn" : [ ]
-    },
     {
       "ref" : "pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar",
       "dependsOn" : [
@@ -181974,29 +181784,13 @@
       "ref" : "pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar",
       "dependsOn" : [
         "pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar",
-        "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar",
+        "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar",
         "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
         "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
       ]
     },
     {
-      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar",
-      "dependsOn" : [
-        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
-        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
-        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
-        "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar",
-        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
-      ]
-    },
-    {
-      "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar",
-      "dependsOn" : [
-        "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"
-      ]
-    },
-    {
-      "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar",
+      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar",
       "dependsOn" : [ ]
     },
     {
diff --git a/camel-sbom/camel-sbom.xml b/camel-sbom/camel-sbom.xml
index b208309f8f8..cc4c7f7ce5d 100644
--- a/camel-sbom/camel-sbom.xml
+++ b/camel-sbom/camel-sbom.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:dd08712f-d1ee-47b7-9153-5647b6acf58a" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
+<bom serialNumber="urn:uuid:6f152ddc-82d5-4011-a2b3-f9ea9f5bbd8d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
   <metadata>
-    <timestamp>2023-01-23T09:05:59Z</timestamp>
+    <timestamp>2023-01-23T12:09:32Z</timestamp>
     <tools>
       <tool>
         <vendor>OWASP Foundation</vendor>
@@ -31146,7 +31146,6 @@ data-binding.</description>
       <name>cache-api</name>
       <version>1.1.0</version>
       <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
-      <scope>required</scope>
       <hashes>
         <hash alg="MD5">ac907ad12e9a7ac5d41abf703855002f</hash>
         <hash alg="SHA-1">77bdcff7814076dfa61611b0db88487c515150b6</hash>
@@ -42472,30 +42471,29 @@ GraalVM removes the isolation between programming languages and enables interope
       <purl>pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar</purl>
       <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/components/camel-jcache</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscribe@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/re [...]
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.servicemix.bundles</group>
-      <name>org.apache.servicemix.bundles.javax-cache-api</name>
-      <version>1.1.1_1</version>
-      <description>This OSGi bundle wraps cache-api 1.1.1 jar file.</description>
+    <component type="library" bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar">
+      <group>javax.cache</group>
+      <name>cache-api</name>
+      <version>1.1.1</version>
+      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
       <scope>required</scope>
       <hashes>
-        <hash alg="MD5">0d7fe9916395b21846169a9eff6b8a7c</hash>
-        <hash alg="SHA-1">7d44c39b1ae76a47a839fad1e34780cb547729b6</hash>
-        <hash alg="SHA-256">8270b602351d6e195837cddf60f46287c5d6b133be95021591e95e03da141d94</hash>
-        <hash alg="SHA-512">2c0097b8eb7354e85ecb07901898f91c372134c9e62b9bda300514957bbfa05a80044b81f50cc0bc83679277622cda3d8e3eb8801291ad4c05ba0796ec3c9aab</hash>
-        <hash alg="SHA-384">1bedbf0fa4fbc51de0797e95db8b34390a337e104bcd82a05dc2b7df8bec51c4852f1a1baf8a077e527af0384325a19c</hash>
-        <hash alg="SHA3-384">3c6b8b5dbf34e55fbcb34e4b1aa2539d19651ea52131cde9f525ea808047ea59b51ee79083f184109cb860b8df2ae526</hash>
-        <hash alg="SHA3-256">ae364c83245c3f1ea0a08cb87bb69c4eb609d7d1f57f5439b8753cabbe139b13</hash>
-        <hash alg="SHA3-512">a8d4e0fd5bcbf98ecc3920432359cb3a89ddbe4b8e228d0744a47f0ea9daf2ef58e905f5742c028dd333bf025652ab8bf0ebe828e9d8fefa19923ad2279388ac</hash>
+        <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash>
+        <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash>
+        <hash alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash>
+        <hash alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash>
+        <hash alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash>
+        <hash alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash>
+        <hash alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash>
+        <hash alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://servicemix.apache.org/bundles-pom/org.apache.servicemix.bundles.javax-cache-api/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/activemq/browse/SM</url></reference><reference type="mailing-list"><url>http://servicemix.apache.org/discussion-forums.html#nabble-f12051</url></refe [...]
+      <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://github.com/jsr107/jsr107spec</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tracing@4.0.0-SNAPSHOT?type=jar">
       <publisher>The Apache Software Foundation</publisher>
@@ -51274,29 +51272,6 @@ flexible messaging model and an intuitive client API.</description>
       <purl>pkg:maven/org.redisson/redisson@3.16.7?type=jar</purl>
       <externalReferences><reference type="website"><url>http://redisson.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:redisson/redisson.git/redisson</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar">
-      <group>javax.cache</group>
-      <name>cache-api</name>
-      <version>1.1.1</version>
-      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
-      <hashes>
-        <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash>
-        <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash>
-        <hash alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash>
-        <hash alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash>
-        <hash alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash>
-        <hash alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash>
-        <hash alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash>
-        <hash alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://github.com/jsr107/jsr107spec</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
-    </component>
     <component type="library" bom-ref="pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar">
       <publisher>reactor</publisher>
       <group>io.projectreactor</group>
@@ -54792,76 +54767,30 @@ SAX2 and Stax2 APIs</description>
       <purl>pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar</purl>
       <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/components/camel-thrift</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscribe@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/re [...]
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar">
       <group>org.apache.thrift</group>
       <name>libthrift</name>
-      <version>0.14.1</version>
+      <version>0.17.0</version>
       <description>Thrift is a software framework for scalable cross-language services development.</description>
       <scope>required</scope>
       <hashes>
-        <hash alg="MD5">ef7e068f5319c5a9deee83990e8ef557</hash>
-        <hash alg="SHA-1">85348a0c44c298bbec5ae747e67ae12e60b3aef6</hash>
-        <hash alg="SHA-256">5b3510fe72e6f0725e29cef6ebdb1eabacccc69d79fc4ed50b681600a87667ec</hash>
-        <hash alg="SHA-512">392590d79e520a9ee07c9332be11c4295ea572c25aa5adbceccdede22085cc5d019c1510befce9dcc747ca9923c2267e4d23adb2276df227cf1fd79d6228158c</hash>
-        <hash alg="SHA-384">4cf645f0233fd1bb530afb6d92e13dfc05b98b22d7f8e90bf6026e72b9f0c392a263499ab63b05f27453d8fe52c150d0</hash>
-        <hash alg="SHA3-384">c407638c126efb91233170b38db81d776383b13719715c962ad03163813aa90c69cebea9a9c94a11de89b2c513181de3</hash>
-        <hash alg="SHA3-256">cd064ebd555683f27049a9caf303d3201f7350ee8b2c980a6f73f53716f4a886</hash>
-        <hash alg="SHA3-512">c8ce5f46b491799bc74862c0ed24094bbe0a395ed535874bc24b9b83a24cd18f461b267582346714dfaafc7a6e9e3b70e9e7faeb2059cdeae5e0f700f36dc5a5</hash>
+        <hash alg="MD5">b4e4d44f7c3b3bb7f1b77b7131a534b9</hash>
+        <hash alg="SHA-1">36aec83a463d233ab537407df7612c383727b03f</hash>
+        <hash alg="SHA-256">91135681b23af6132865725509f1ba8e7f8a0d89076b6105ce4d9b9fec4024cc</hash>
+        <hash alg="SHA-512">644937dc90b43b81a145d2b737d91cd37644b3f90e1fbc56d2ce190d9b591ebccfb4f4fc1fe663bcf636355a24aed4d6e12bf96e89c310c10f4c49aaadc68112</hash>
+        <hash alg="SHA-384">3136aee7d34f35e26aecb82864699d9878b648674b57ec4d44f56f8f076cc1fd1fe8196b4de68deca2632f3ffe0d3cdb</hash>
+        <hash alg="SHA3-384">fee843072f2646688fe7f8d28a2357c3f8c5553d3321a2e153923290e01d8e3488d44e0d4ce68d697c8687b0877013a6</hash>
+        <hash alg="SHA3-256">99f23ef5e6a16a6f6f25aa63380c72341d64d80a022500f9641e1c9c9f1d7f35</hash>
+        <hash alg="SHA3-512">4f93b054e4d4e6a617efa576f53bc1c8bbce959be9ef9de6dc69b42c238da73adc62b3df3b2cd1ed95c1606f856a05386db1c757772dade1e4d4d679fca00790</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar</purl>
+      <purl>pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar</purl>
       <externalReferences><reference type="website"><url>http://thrift.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/thrift</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar">
-      <group>org.apache.tomcat.embed</group>
-      <name>tomcat-embed-core</name>
-      <version>8.5.46</version>
-      <description>Core Tomcat implementation</description>
-      <hashes>
-        <hash alg="MD5">45378afdce63a61c488db97d2a6e9fbd</hash>
-        <hash alg="SHA-1">5d686394334d143f48251827435ab086a161e75e</hash>
-        <hash alg="SHA-256">be5f854448d2ee5d6e0036feb2b4f713163079a1b6b9a7a97508e55917ad35c2</hash>
-        <hash alg="SHA-512">f85371c45348625c5854e99cc6efcdedd2724cca20dbaa6c9a76141492a70e8c882a4b66de63b0d1cdd170e23f18f86efaa52bdafc05cc903d4b83f1ac4799a1</hash>
-        <hash alg="SHA-384">5feffe14a4874d5d738e35e65b06ada607e67cef9b44c4e29feae1897bee63787faca034f4bde301b9e3e1ad60118232</hash>
-        <hash alg="SHA3-384">318450bba37870cfddf798fe0273f9f494b17a5e37019b28a26f15293a026ce2ee10e2182957c0a5c2398b6cf4d267d4</hash>
-        <hash alg="SHA3-256">859ca4f24d9aa0c8b7287a39a5818b1e94d9a7563074a52fce0b1abeedd9a419</hash>
-        <hash alg="SHA3-512">101144ddd60df18c01e6aea47a0c7620fad87913c0b24e3184b8ff5ee133c631945455b7c51c76aa173666ac90921dd0db1407d5395e11b43abe4e58a46f3985</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://tomcat.apache.org/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar">
-      <group>org.apache.tomcat</group>
-      <name>tomcat-annotations-api</name>
-      <version>8.5.46</version>
-      <description>Annotations Package</description>
-      <hashes>
-        <hash alg="MD5">24d29eeee84c155a9a9fe72bbd98c0b7</hash>
-        <hash alg="SHA-1">56c67699de192c603afd6f029e80e5ff8d98e7e9</hash>
-        <hash alg="SHA-256">6a6b46d0e6958644514c0ca3658b3b07e6123a682a20ee36d3795242735fabc3</hash>
-        <hash alg="SHA-512">249c77fc30f1b054e35531aa5a52b242f05ef3e16f83f8c7751d766d490da5a8ea24f798605d35b8b1c8651834c50abd19c4ac0f93c483b020d7a90758ab832e</hash>
-        <hash alg="SHA-384">f4bb78d0c7e12d733d46378b2ab75afb057a631d69957af5527dfbd89399f1c89c8562e56df95b2c691023987b6696e3</hash>
-        <hash alg="SHA3-384">fcde30303d433881f6b20aa07715a26b93c4702c5b5705e5747a141c94b1aeef40737dc5d0fa262d07224a763734d3e1</hash>
-        <hash alg="SHA3-256">85fdca9eb886ab8e4e1610422b176880a8dc3b195153bd53460ad861900967ac</hash>
-        <hash alg="SHA3-512">81455e112788bc580b229733e21aa5d3077237b2798c7a134cefd9f0db722ec48f220ecff50428c296285f2c47da5d12f90be8bfd4c9b5d88fc5266ceb07a3d7</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://tomcat.apache.org/</url></reference></externalReferences>
-    </component>
     <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tika@4.0.0-SNAPSHOT?type=jar">
       <publisher>The Apache Software Foundation</publisher>
       <group>org.apache.camel</group>
@@ -69352,9 +69281,9 @@ configuration files as if there was implied nesting structure (by default using
     <dependency ref="pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0?type=jar"/>
     <dependency ref="pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar">
       <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"/>
+      <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
     </dependency>
-    <dependency ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"/>
+    <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
     <dependency ref="pkg:maven/org.apache.camel/camel-tracing@4.0.0-SNAPSHOT?type=jar">
       <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
     </dependency>
@@ -71130,7 +71059,6 @@ configuration files as if there was implied nesting structure (by default using
       <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.11.0?type=jar"/>
       <dependency ref="pkg:maven/org.jodd/jodd-bean@5.1.6?type=jar"/>
     </dependency>
-    <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
     <dependency ref="pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar">
       <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar"/>
     </dependency>
@@ -71864,21 +71792,11 @@ configuration files as if there was implied nesting structure (by default using
     </dependency>
     <dependency ref="pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar">
       <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"/>
       <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
       <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
     </dependency>
-    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar">
-      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"/>
-      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar">
-      <dependency ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"/>
     <dependency ref="pkg:maven/org.apache.camel/camel-tika@4.0.0-SNAPSHOT?type=jar">
       <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
       <dependency ref="pkg:maven/org.apache.tika/tika-core@2.6.0?type=jar"/>


[camel] 02/03: Sync deps

Posted by ac...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git

commit 5362b13ec436b43278a7419a6614a3ed2f53647c
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Mon Jan 23 13:02:18 2023 +0100

    Sync deps
    
    Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
 camel-dependencies/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/camel-dependencies/pom.xml b/camel-dependencies/pom.xml
index 2c082a844f4..5329e0b466b 100644
--- a/camel-dependencies/pom.xml
+++ b/camel-dependencies/pom.xml
@@ -307,7 +307,7 @@
         <jib-version>0.21.0</jib-version>
         <jira-guava-version>30.1.1-jre</jira-guava-version>
         <jira-rest-client-api-version>5.2.4</jira-rest-client-api-version>
-        <libthrift-version>0.14.1</libthrift-version>
+        <libthrift-version>0.17.0</libthrift-version>
         <jodatime2-version>2.11.1</jodatime2-version>
         <jolokia-version>1.7.2</jolokia-version>
         <jolt-version>0.1.7</jolt-version>