dependabot[bot] opened a new pull request, #586: URL: https://github.com/apache/opennlp-sandbox/pull/586
Bumps [org.docx4j:docx4j-core](https://github.com/plutext/docx4j) from 11.5.14 to 17.2.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/plutext/docx4j/blob/VERSION_17_2_1/CHANGELOG.md";>org.docx4j:docx4j-core's changelog</a>.</em></p> <blockquote> <h1>Version 17.2.1</h1> <h2>Release date</h2> <p>26 September 2026</p> <h2>Contributors to this release</h2> <p>Jason Harrop</p> <p>Claude Fable 5.1, with Opus 5 on the Getting Started assessment.</p> <h2>Changes in Version 17.2.1</h2> <p>Anonymiser (org.docx4j.anon, CR-019):</p> <ul> <li> <p>The anonymiser is now part of docx4j-core; com.thedeanda:lorem is gone. docx4j-docx-anon is no longer released (17.2.0 is its last version); depend on docx4j-core instead. The CLI is java -cp ... org.docx4j.anon.AnonymizeCli.</p> </li> <li> <p>pptx and xlsx are supported.</p> </li> </ul> <p>PDF via XSL FO:</p> <ul> <li> <p>The docx4j FO renderer, org.docx4j:docx4j-fo-renderer (an upstream-tracking fork of Apache FOP 2.11 with the fixes docx4j has found in FOP and the hooks for the Word layout rules), is released: 2.11-docx4j.1 on Maven Central.</p> <p>No compelling reason to switch yet though; Apache FOP 2.11 stays the default dependency of docx4j-export-fo; the switch is planned for 17.3.0.</p> <p>To use the fork now, depend on org.docx4j:docx4j-fo-renderer-core:2.11-docx4j.1 in place of org.apache.xmlgraphics:fop and exclude Apache's fop from docx4j-export-fo (the two must never share a classpath; FopCapabilities warns when they do). docx4j-export-fo/README.md has the recipe.</p> </li> </ul> <p>The 17.2.0 warning "N byte(s) after the zip end of central directory record" fired on every package larger than 64K, because the count was wrong. Diagnostic only: no package was altered either way.</p> <p>Various other improvements and fixes; for details, see <a href="https://github.com/plutext/docx4j/blob/1779e60d2b46723179b84141d71b0c8166194055/CHANGELOG.md";>https://github.com/plutext/docx4j/blob/1779e60d2b46723179b84141d71b0c8166194055/CHANGELOG.md</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/plutext/docx4j/commit/0e8e7633ef46012e0d3603339728b83ed21d5045";><code>0e8e763</code></a> Anonymize/sanitize feature</li> <li><a href="https://github.com/plutext/docx4j/commit/b7a8ec4b0a3a424b9bd0d0dd508cfa6a91cafe0d";><code>b7a8ec4</code></a> possible (partial?) fix for publishing error (doesn't like relocation).</li> <li><a href="https://github.com/plutext/docx4j/commit/d165700007f76f7d5e4ce0dcfd2ba36deb0903cf";><code>d165700</code></a> Getting Started: anonymising a document before you share it</li> <li><a href="https://github.com/plutext/docx4j/commit/b203459caa7e69164e21dcd464364f02138a5f67";><code>b203459</code></a> 17.2.1: docx4j-docx-anon is not released (dropped from the reactor)</li> <li><a href="https://github.com/plutext/docx4j/commit/c142bf82c2666b708dd501b4435534cbe5913aae";><code>c142bf8</code></a> prepare for 17.2.1 release</li> <li><a href="https://github.com/plutext/docx4j/commit/404e8f58273942d660f1b9c0adf600847ed7a085";><code>404e8f5</code></a> Getting Started: the install instructions say 17.2.1</li> <li><a href="https://github.com/plutext/docx4j/commit/e7d5a5bbea46282285b2d72c26f6d0a1f197952c";><code>e7d5a5b</code></a> Getting Started: Jason's 17.2.1 edits, and the md, html and pdf regenerated</li> <li><a href="https://github.com/plutext/docx4j/commit/4a9f39566f5203b90706da61b546e10fc3c0ab5c";><code>4a9f395</code></a> Getting Started: the six GitHub links point at VERSION_17_2_1 (they named VER...</li> <li><a href="https://github.com/plutext/docx4j/commit/1779e60d2b46723179b84141d71b0c8166194055";><code>1779e60</code></a> 17.2.1: CHANGELOG release blocks and the PDF via XSL FO section; Getting Star...</li> <li><a href="https://github.com/plutext/docx4j/commit/6bee61b19ddaa6be68f85e4ec9425e04fa3c9b43";><code>6bee61b</code></a> CR-022 §20, CR-021 §8.13: Excel accepts a worksheet's controls without the mc...</li> <li>Additional commits viewable in <a href="https://github.com/plutext/docx4j/compare/docx4j-11.5.14...docx4j-17.2.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
