davsclaus opened a new pull request, #27452: URL: https://github.com/apache/camel/pull/27452
https://issues.apache.org/jira/browse/CAMEL-25401 Dependabot bumped `io.atlassian.fugue:fugue` from 6.1.5 to 7.0.1 (bac605380ad3, 2026-09-14). fugue 7.0.1 is compiled for **Java 25** (class file version 69; 6.1.5 is Java 8, version 52), so on Java 17 and 21 camel-jira fails with: ``` UnsupportedClassVersionError: io/atlassian/fugue/Suppliers has been compiled by a more recent version of the Java Runtime (class file version 69.0) ``` **How it was found:** the jira-source Kamelet route of the camel-kamelets integration tests fails with that error on Java 21, and starts and calls Jira on Java 25. The camel-kamelets `JiraIT` failed in every run once its Camel apps ran on Java 21. The Camel build didn't catch it, because the camel-jira tests mock the Jira client and never load a fugue class. **Changes:** - `atlassian-fugue-version` goes back to **6.1.5**, the version 4.22.x ships. No known vulnerability is listed for any fugue version (OSV). - `JiraFugueJavaVersionTest` loads a fugue class. With fugue 7.0.1 on JDK 21 the build now fails: `class file has wrong version 69.0, should be 65.0`. - Dependabot ignores fugue's major 7. Even with Java 17 dropped after 4.23.0, Camel's minimum Java will be 21, and fugue 7 needs 25. **Tests:** on JDK 21, camel-jira passes 46 of 46. The camel-sbom entry for fugue is generated, so the regen patch from CI updates it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01STT6whBgK1AqsSsUKrnE8m -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
