Skip to content

Updating to JDK 21 using Jena 6.2.0 #445

Description

@Horcrux7

Are you planning to release version 0.14 soon? The artifact org.odftoolkit:odfdom-java:0.13.0:jar-with-dependencies include some CVEs. (CVE-2025-50151, CVE-2025-49656).

Alternative is it possible to use org.odftoolkit:odfdom-java:0.13.0 and the newest versions of the dependencies like org.apache.jena 5.6.0?

Activity

  1. svanteschubert commented on Sep 20, 2026

    @svanteschubert
    Contributor

    I am pretty occupied, so I will take a look at this at the end of the week.
    A release update should be possible (I hope/guess)

  2. changed the title [-]Release of Version 0.14[/-] [+]Updating to JDK 21 using Jena 6.2.0[/+] on Sep 29, 2026
  3. svanteschubert commented on Sep 29, 2026

    @svanteschubert
    Contributor

    Let us move from JDK 11 to JDK 21, allowing the usage of Jena 6.2.0, which has JDK 21 as a minimum.

  4. added this to the 0.14.0 milestone on Sep 29, 2026
  5. svanteschubert commented on Sep 29, 2026

    @svanteschubert
    Contributor

    @Horcrux7 and all RDF(a) users:
    I have created #446
    If this would be too much of a burden to update to Jena 6.2.0 and RDFa using JDK 21, it is not a big deal to drop the PR and stick with Jena 5.2.0 and JDK 17.
    But RDFa is still a beta and has not been maintained for a long time, and we used only a subset of the functionality.
    If there are broken APIs at your clients, I would suggest to use AI to fix those - this is by far not so painful as in the past! :-)

    So what do you say? Thumbs up/down?

  6. xzel23 commented on Sep 29, 2026

    @xzel23
    Collaborator

    I'm all in for going to Java 21. But I need some time to review (busy in RL).

  7. Horcrux7 commented on Sep 29, 2026

    @Horcrux7
    Author

    @svanteschubert All is nice with JDK 21 dependency.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

review wantedFour eyes notice more than two

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions