chore(deps): Bump the avro group across 1 directory with 5 updates

[dependabot]

Bumps the avro group with 5 updates in the / directory:

Package	From	To
org.apache.avro:avro	1.12.1	1.12.2
org.apache.avro:avro-maven-plugin	1.12.1	1.12.2
org.apache.avro:avro-compiler	1.12.1	1.12.2
org.apache.avro:avro-ipc-jetty	1.12.1	1.12.2
org.apache.avro:avro-ipc-netty	1.12.1	1.12.2

Updates org.apache.avro:avro from 1.12.1 to 1.12.2

Updates org.apache.avro:avro-maven-plugin from 1.12.1 to 1.12.2

Updates org.apache.avro:avro-compiler from 1.12.1 to 1.12.2

Updates org.apache.avro:avro-ipc-jetty from 1.12.1 to 1.12.2

Updates org.apache.avro:avro-ipc-netty from 1.12.1 to 1.12.2

Updates org.apache.avro:avro-maven-plugin from 1.12.1 to 1.12.2

Updates org.apache.avro:avro-compiler from 1.12.1 to 1.12.2

[github-actions]

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

• First-time contributors require MANUAL approval for the GitHub Actions to run
• You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
• You can label PRs using skip-tests and test-dependents to fine-tune the checks executed by this PR.
• Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

[github-actions]

🧪 CI tested the following changed modules:

• parent

✅ POM dependency changes: targeted tests included

Changed properties: avro-ipc-jetty-version,avro-ipc-netty-version,avro-version

Modules affected by dependency changes (8)

• :camel-avro-rpc-jetty
• :camel-avro-rpc-spi
• :camel-avro-rpc
• :camel-jackson3-avro
• :camel-avro
• :camel-salesforce
• :camel-salesforce-codegen
• :camel-jackson-avro

---

🔬 Scalpel shadow comparison — Scalpel: 22 tested, 27 compile-only — current: 0 all tested

Maveniverse Scalpel detected 49 affected modules (current approach: 0).

⚠️ Modules only in Scalpel (49)

• apache-camel
• camel-allcomponents
• camel-avro
• camel-avro-rpc
• camel-avro-rpc-jetty
• camel-avro-rpc-spi
• camel-catalog
• camel-catalog-console
• camel-catalog-maven
• camel-catalog-suggest
• camel-componentdsl
• camel-endpointdsl
• camel-endpointdsl-support
• camel-itest
• camel-jackson-avro
• camel-jackson3-avro
• camel-jbang-core
• camel-jbang-it
• camel-jbang-main
• camel-jbang-mcp
• camel-jbang-plugin-edit
• camel-jbang-plugin-generate
• camel-jbang-plugin-kubernetes
• camel-jbang-plugin-mcp
• camel-jbang-plugin-route-parser
• camel-jbang-plugin-test
• camel-jbang-plugin-tui
• camel-jbang-plugin-validate
• camel-kamelet
• camel-kamelet-main
• camel-launcher
• camel-launcher-container
• camel-report-maven-plugin
• camel-route-parser
• camel-salesforce
• camel-salesforce-codegen
• camel-salesforce-maven-plugin
• camel-state-store
• camel-test-main-junit5
• camel-test-main-junit6
• camel-xml-io-dsl
• camel-yaml-dsl
• camel-yaml-dsl-deserializers
• camel-yaml-dsl-maven-plugin
• camel-yaml-dsl-validator
• camel-yaml-dsl-validator-maven-plugin
• coverage
• docs
• dummy-component

Changed properties: avro-ipc-jetty-version, avro-ipc-netty-version, avro-version

Skip-tests mode would test 22 modules (8 direct + 14 downstream), skip tests for 27 (generated code, meta-modules)

Modules Scalpel would test (22)

• camel-avro
• camel-avro-rpc
• camel-avro-rpc-jetty
• camel-avro-rpc-spi
• camel-jackson-avro
• camel-jackson3-avro
• camel-jbang-mcp
• camel-jbang-plugin-mcp
• camel-jbang-plugin-route-parser
• camel-jbang-plugin-tui
• camel-jbang-plugin-validate
• camel-kamelet
• camel-launcher-container
• camel-salesforce
• camel-salesforce-codegen
• camel-salesforce-maven-plugin
• camel-state-store
• camel-test-main-junit5
• camel-test-main-junit6
• camel-xml-io-dsl
• camel-yaml-dsl-validator
• camel-yaml-dsl-validator-maven-plugin

Modules with tests skipped (27)

• apache-camel
• camel-allcomponents
• camel-catalog
• camel-catalog-console
• camel-catalog-maven
• camel-catalog-suggest
• camel-componentdsl
• camel-endpointdsl
• camel-endpointdsl-support
• camel-itest
• camel-jbang-core
• camel-jbang-it
• camel-jbang-main
• camel-jbang-plugin-edit
• camel-jbang-plugin-generate
• camel-jbang-plugin-kubernetes
• camel-jbang-plugin-test
• camel-kamelet-main
• camel-launcher
• camel-report-maven-plugin
• camel-route-parser
• camel-yaml-dsl
• camel-yaml-dsl-deserializers
• camel-yaml-dsl-maven-plugin
• coverage
• docs
• dummy-component

ℹ️ Shadow mode — Scalpel observes but does not affect test execution. Learn more

All tested modules (50 modules)

• Camel :: All Components Sync point
• Camel :: Assembly
• Camel :: Avro
• Camel :: Avro RPC
• Camel :: Avro RPC :: Jetty
• Camel :: Avro RPC :: Spi
• Camel :: Catalog :: Camel Catalog
• Camel :: Catalog :: Camel Report Maven Plugin
• Camel :: Catalog :: Camel Route Parser
• Camel :: Catalog :: Console
• Camel :: Catalog :: Dummy Component
• Camel :: Catalog :: Maven
• Camel :: Catalog :: Suggest
• Camel :: Component DSL
• Camel :: Coverage
• Camel :: Docs
• Camel :: Endpoint DSL
• Camel :: Endpoint DSL :: Support
• Camel :: Integration Tests
• Camel :: JBang :: Core
• Camel :: JBang :: Integration tests
• Camel :: JBang :: MCP
• Camel :: JBang :: Main
• Camel :: JBang :: Plugin :: Edit
• Camel :: JBang :: Plugin :: Generate
• Camel :: JBang :: Plugin :: Kubernetes
• Camel :: JBang :: Plugin :: MCP
• Camel :: JBang :: Plugin :: Route Parser
• Camel :: JBang :: Plugin :: TUI
• Camel :: JBang :: Plugin :: Testing
• Camel :: JBang :: Plugin :: Validate
• Camel :: Jackson 3 Avro
• Camel :: Jackson Avro
• Camel :: Kamelet
• Camel :: Kamelet Main
• Camel :: Launcher
• Camel :: Launcher :: Container
• Camel :: Parent
• Camel :: Salesforce
• Camel :: Salesforce :: CodeGen
• Camel :: Salesforce :: Maven Plugin
• Camel :: State Store
• Camel :: Test :: Main :: JUnit5
• Camel :: Test :: Main :: JUnit6
• Camel :: XML DSL with camel-xml-io
• Camel :: YAML DSL
• Camel :: YAML DSL :: Deserializers
• Camel :: YAML DSL :: Maven Plugins
• Camel :: YAML DSL :: Validator
• Camel :: YAML DSL :: Validator Maven Plugin

---

⚙️ View full build and test results

[davsclaus]

@dependabot rebase

[davsclaus]

Closing this dependency bump for now — Avro 1.12.2 introduces a new schema-class security check (org.apache.avro.util.ClassSecurityValidator) that breaks camel-avro-rpc (61/64 tests fail, Security Forbidden org.apache.avro.ipc.HandshakeRequest!) and appears to affect camel-avro as well. See CI run: https://github.com/apache/camel/actions/runs/33479975446/job/99767198741

Tracked in CAMEL-24578 — the fix needs to configure a trusted class/package allowlist for the Avro classes/packages these components legitimately use before this bump can go in. Will reopen/re-trigger once that's resolved.

Comment posted by an AI agent on behalf of davsclaus.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml