dependabot[bot] opened a new pull request, #166: URL: https://github.com/apache/opennlp-addons/pull/166
Bumps `opennlp.version` from 3.0.0-M3 to 3.0.0-M4. Updates `org.apache.opennlp:opennlp-api` from 3.0.0-M3 to 3.0.0-M4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/opennlp/releases";>org.apache.opennlp:opennlp-api's releases</a>.</em></p> <blockquote> <h2>OpenNLP 3.0.0-M4</h2> <blockquote> <p>[!NOTE] This releases fixes <strong>CVE-2026-43825</strong>: Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel.</p> </blockquote> <h2>What's Changed</h2> <ul> <li> <p>OPENNLP-1823: Harden SvmDoccatModel.deserialize() with ObjectInputFilter and resource limits by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1029";>apache/opennlp#1029</a></p> </li> <li> <p>OPENNLP-1824: Update ONNX runtime to 1.25.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1031";>apache/opennlp#1031</a></p> </li> <li> <p>OPENNLP-1826 : Prevent OOM during Array Allocation by <a href="https://github.com/subbudvk";><code>@subbudvk</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1035";>apache/opennlp#1035</a></p> </li> <li> <p>OPENNLP-1829: Transfer DirectoryModelFinder to OpenNLP core by <a href="https://github.com/mawiesne";><code>@mawiesne</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1045";>apache/opennlp#1045</a></p> </li> <li> <p>OPENNLP-1828: Move to Apache Parent 38 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1048";>apache/opennlp#1048</a></p> </li> <li> <p>OPENNLP-1831: Update Slf4j to 2.0.18 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1050";>apache/opennlp#1050</a></p> </li> <li> <p>OPENNLP-1824: Update ONNX runtime to 1.26.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1046";>apache/opennlp#1046</a></p> </li> <li> <p>OPENNLP-1827: Update log4j2 to 2.26.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1049";>apache/opennlp#1049</a></p> </li> <li> <p>OPENNLP-660: Include list of stop words for various languages by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1056";>apache/opennlp#1056</a></p> </li> <li> <p>OPENNLP-660: Template needs to hold the NOTICE content too by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1059";>apache/opennlp#1059</a></p> </li> <li> <p>OPENNLP-1834: Update JUnit to 6.1.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1061";>apache/opennlp#1061</a></p> </li> <li> <p>OPENNLP-1835: Tolerate unsupported XML parser security options by <a href="https://github.com/RankoR";><code>@RankoR</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1067";>apache/opennlp#1067</a></p> </li> <li> <p>OPENNLP-1832: Add SymSpell-based SpellChecker component by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1057";>apache/opennlp#1057</a></p> </li> <li> <p>OPENNLP-1837: Add BertTokenizer with BERT basic tokenization by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1073";>apache/opennlp#1073</a></p> </li> <li> <p>OPENNLP-1839: Fix native memory leak and vocabulary NPE in DocumentCategorizerDL by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1074";>apache/opennlp#1074</a></p> </li> <li> <p>OPENNLP-1840: Fix native memory leak and vocabulary NPE in NameFinderDL by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1076";>apache/opennlp#1076</a></p> </li> <li> <p>OPENNLP-1836: Fix input encoding in SentenceVectorsDL by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1072";>apache/opennlp#1072</a></p> </li> <li> <p>OPENNLP-1843: Override surefire skip so eval tests run again by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1082";>apache/opennlp#1082</a></p> </li> <li> <p>OPENNLP-1838: Adopt BertTokenizer in opennlp-dl components by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1075";>apache/opennlp#1075</a></p> </li> <li> <p>OPENNLP-1848: Update Morfologik to 2.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1087";>apache/opennlp#1087</a></p> </li> <li> <p>OPENNLP-1849: Update junit5-system-exit to 2.0.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1089";>apache/opennlp#1089</a></p> </li> <li> <p>OPENNLP-1845: Fix numerically unstable softmax in DocumentCategorizerDL by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1085";>apache/opennlp#1085</a></p> </li> <li> <p>OPENNLP-1844: Make opennlp-dl components thread-safe by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1084";>apache/opennlp#1084</a></p> </li> <li> <p>OPENNLP-1846: Fix NameFinderDL only worked with Person, expand to all types by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1086";>apache/opennlp#1086</a></p> </li> <li> <p>OPENNLP-1851: Fix DocumentCategorizerDLEval.categorizeFailsLoudlyOnFa… by <a href="https://github.com/krickert";><code>@krickert</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1102";>apache/opennlp#1102</a></p> </li> <li> <p>OPENNLP-1853: Extend DictionaryStopwordFilterTest towards edge cases by <a href="https://github.com/vasiliy-mikhailov";><code>@vasiliy-mikhailov</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1107";>apache/opennlp#1107</a></p> </li> <li> <p>OPENNLP-1854: Resolve DocBook DTD from local catalog instead of remote URL by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/opennlp/pull/1117";>apache/opennlp#1117</a></p> </li> <li> <p>Bump com.ruleoftech:markdown-page-generator-plugin to 2.5.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1051";>apache/opennlp#1051</a></p> </li> <li> <p>Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1063";>apache/opennlp#1063</a></p> </li> <li> <p>Bump actions/checkout from 6.0.2 to 6.0.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1068";>apache/opennlp#1068</a></p> </li> <li> <p>Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1071";>apache/opennlp#1071</a></p> </li> <li> <p>Bump actions/setup-java from 5.2.0 to 5.3.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1096";>apache/opennlp#1096</a></p> </li> <li> <p>Bump actions/checkout from 6.0.3 to 7.0.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1098";>apache/opennlp#1098</a></p> </li> <li> <p>Bump actions/cache from 5.0.5 to 6.0.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/opennlp/pull/1113";>apache/opennlp#1113</a></p> </li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/vasiliy-mikhailov";><code>@vasiliy-mikhailov</code></a> made their first contribution in <a href="https://redirect.github.com/apache/opennlp/pull/1107";>apache/opennlp#1107</a></li> </ul> <p><strong>Full Changelogs</strong>:</p> <ul> <li>JIRA: <a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12356941";>https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12356941</a></li> <li>GitHub: <a href="https://github.com/apache/opennlp/compare/opennlp-3.0.0-M3...opennlp-3.0.0-M4";>https://github.com/apache/opennlp/compare/opennlp-3.0.0-M3...opennlp-3.0.0-M4</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/opennlp/commit/1e05d1ef5a7c35b83015ebce87bb9a43c55e2226";><code>1e05d1e</code></a> [maven-release-plugin] prepare release opennlp-3.0.0-M4</li> <li><a href="https://github.com/apache/opennlp/commit/b2c0a901957bf27a5123731d02000fa4805679bf";><code>b2c0a90</code></a> OPENNLP-1854: Resolve DocBook DTD from local catalog instead of remote URL (#...</li> <li><a href="https://github.com/apache/opennlp/commit/c3ce060c03c95e8b12344ab0f3075d78bc37b7f3";><code>c3ce060</code></a> Include APIdocs in assembly of binary distr (<a href="https://redirect.github.com/apache/opennlp/issues/1116";>#1116</a>)</li> <li><a href="https://github.com/apache/opennlp/commit/f2f1cd2a8c79173bb38e2481e77143394f5c1344";><code>f2f1cd2</code></a> Include opennlp-spellcheck extension in opennlp-distr aggregator (<a href="https://redirect.github.com/apache/opennlp/issues/1115";>#1115</a>)</li> <li><a href="https://github.com/apache/opennlp/commit/6115b18c9ab3f1ad17c4184be509cabc7e677c32";><code>6115b18</code></a> Bump actions/cache from 5.0.5 to 6.0.0 (<a href="https://redirect.github.com/apache/opennlp/issues/1113";>#1113</a>)</li> <li><a href="https://github.com/apache/opennlp/commit/30f127cf34b0f2726b73e57e3892a6aea41a131e";><code>30f127c</code></a> OPENNLP-1853: Extend DictionaryStopwordFilterTest towards edge cases (<a href="https://redirect.github.com/apache/opennlp/issues/1107";>#1107</a>)</li> <li><a href="https://github.com/apache/opennlp/commit/6963b1cb2e06fbf65dc9ff2c4f97223d7bc4ebf8";><code>6963b1c</code></a> OPENNLP-1851: Fix DocumentCategorizerDLEval.categorizeFailsLoudlyOnFailure (#...</li> <li><a href="https://github.com/apache/opennlp/commit/4dcf7eff4cee296d9fdd9bee28479b8716942bfa";><code>4dcf7ef</code></a> OPENNLP-1846: Fix NameFinderDL only worked with Person, expand to all types (...</li> <li><a href="https://github.com/apache/opennlp/commit/758fcf4fdc560664becea9209ad78d34dd7c9ded";><code>758fcf4</code></a> Bump actions/checkout from 6.0.3 to 7.0.0 (<a href="https://redirect.github.com/apache/opennlp/issues/1098";>#1098</a>)</li> <li><a href="https://github.com/apache/opennlp/commit/39d8cb6b907d748aba241f035a32f0b345ddcc4f";><code>39d8cb6</code></a> Bump actions/setup-java from 5.2.0 to 5.3.0 (<a href="https://redirect.github.com/apache/opennlp/issues/1096";>#1096</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/opennlp/compare/opennlp-3.0.0-M3...opennlp-3.0.0-M4";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.opennlp:opennlp-runtime` from 3.0.0-M3 to 3.0.0-M4 Updates `org.apache.opennlp:opennlp-formats` from 3.0.0-M3 to 3.0.0-M4 Updates `org.apache.opennlp:opennlp-cli` from 3.0.0-M3 to 3.0.0-M4 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
