dependabot[bot] opened a new pull request, #611:
URL: https://github.com/apache/opennlp-sandbox/pull/611

   Bumps [org.docx4j:docx4j-core](https://github.com/plutext/docx4j) from 
11.5.14 to 17.3.5.
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/plutext/docx4j/blob/VERSION_17_3_6/CHANGELOG.md";>org.docx4j:docx4j-core's
 changelog</a>.</em></p>
   <blockquote>
   <h1>Version 17.3.5</h1>
   <h2>Release date</h2>
   <p>1 November 2026</p>
   <h2>Contributors to this release</h2>
   <p>Jason Harrop</p>
   <p>Cristian Vat (<a 
href="https://redirect.github.com/plutext/docx4j/issues/702";>#702</a>)</p>
   <p>berse2212 (<a 
href="https://redirect.github.com/plutext/docx4j/issues/701";>#701</a>)</p>
   <p>Claude Fable 5.1</p>
   <p>Claude Opus 5.5</p>
   <h2>Changes in Version 17.3.5</h2>
   <p><strong>Bump deps</strong></p>
   <p>commons-codec:commons-codec ......................... 1.19.0 -&gt; 1.23.0
   org.apache.commons:commons-collections4 .............   4.5.0 -&gt; 4.6.0
   org.apache.commons:commons-lang3 .................... 3.20.0 -&gt; 3.21.0
   org.slf4j:slf4j-api ................................. 2.0.18 -&gt; 2.0.20
   org.slf4j:jcl-over-slf4j ............................ 2.0.18 -&gt; 2.0.20</p>
   <p><strong>Fields as Word computes them</strong> (CR-067). One field 
evaluator now sits behind FieldUpdater, mail merge, text
   extraction and PDF/HTML output, and covers most of Word's fields, each 
checked against Word 365:</p>
   <ul>
   <li>dates and document information, REF and NOTEREF, formulas 
(<code>=</code>), IF, COMPARE and SET;</li>
   <li>LISTNUM, AUTONUM and SYMBOL, NUMWORDS, FILENAME and more.</li>
   </ul>
   <p>FieldUpdater updates every field it can, as Word's Update All does, and 
leaves locked fields alone. Mail merge
   handles SKIPIF, NEXT/NEXTIF, MERGEREC/MERGESEQ, ASK and FILLIN, and fills 
ADDRESSBLOCK and GREETINGLINE. An
   INDEX can be generated from the document's XE entries. A package can carry 
its own time zone for the dates
   it shows.</p>
   <p><strong>Text extraction closer to what the page shows</strong> (CR-069, 
CR-070).</p>
   <ul>
   <li>All Caps text comes out in capitals, as Word displays it.</li>
   <li>A drop cap is joined to its word.</li>
   <li>Markdown writes superscripts and subscripts as 
<code>&lt;sup&gt;</code>/<code>&lt;sub&gt;</code>.</li>
   <li>The <code>word-text</code> profile reproduces Word's own Save As plain 
text.</li>
   <li>Tracked-change and comment dates are the author's local time, as Word 
shows them.</li>
   <li>A host reading embedded objects itself can choose which ones the text 
includes.</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/plutext/docx4j/commit/64fae4cd0b433eff7f923cfe1ed9b7b6fa3bef0d";><code>64fae4c</code></a>
 Getting Started for 17.3.5: Jason's edits, the TOC updated, the md, html and 
...</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/b7a4d0f175ba7032ae03a219ad9ccf880db7d9fe";><code>b7a4d0f</code></a>
 prepare for 17.3.5 release</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/52cc9663f55dab5bf9a009617f52015ba597d60e";><code>52cc966</code></a>
 etc/build.xml: jar references at the versions the build resolves (Jason: 
&quot;upd...</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/e8093ef7196ad6a1121c0cd99726810ab34c8d95";><code>e8093ef</code></a>
 Dependencies for 17.3.5: slf4j 2.0.20, commons-lang3 3.21.0, commons-codec 
1....</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/00c39295f79248cab7e2619798afd81251cc261b";><code>00c3929</code></a>
 Parent pom: SNAPSHOT deploys go to the Central Portal's snapshot repository, 
...</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/4a10eed5b40b0bc5c56382738d7e4d672b537ada";><code>4a10eed</code></a>
 HTML markup view: an &lt;ins&gt; or &lt;del&gt; datetime in the text model's 
date form (W...</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/2b7ed3a3ef8f21d4f8a28f28f6139a0abe43870c";><code>2b7ed3a</code></a>
 CR-045 superseded by CR-060, checked item by item (Jason: &quot;if you are 
satisfi...</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/4f4ab08ef60b43f253814d7c606255ea8c023ec0";><code>4f4ab08</code></a>
 CR-068 and CR-050: their Getting Started sentences written as tracked 
changes...</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/9aeed06fb271589016935e6a3d8b1ec5866a6649";><code>9aeed06</code></a>
 CR-069 section 15.3: docx4j-tika writes sup and sub (docx4j-tika f124282)</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/c102d2ef6af564f135c855cf3e46f42700f506d6";><code>c102d2e</code></a>
 CR-069 phase 5: CHANGELOG for 17.3.5; Getting Started sentences as tracked 
ch...</li>
   <li>Additional commits viewable in <a 
href="https://github.com/plutext/docx4j/compare/docx4j-11.5.14...docx4j-17.3.5";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.docx4j:docx4j-core&package-manager=maven&previous-version=11.5.14&new-version=17.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to