Note
This releases fixes CVE-2026-43825: Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel.
What's Changed
-
OPENNLP-1823: Harden SvmDoccatModel.deserialize() with ObjectInputFilter and resource limits by @rzo1 in #1029
-
OPENNLP-1824: Update ONNX runtime to 1.25.1 by @dependabot[bot] in #1031
-
OPENNLP-1826 : Prevent OOM during Array Allocation by @subbudvk in #1035
-
OPENNLP-1829: Transfer DirectoryModelFinder to OpenNLP core by @mawiesne in #1045
-
OPENNLP-1828: Move to Apache Parent 38 by @dependabot[bot] in #1048
-
OPENNLP-1831: Update Slf4j to 2.0.18 by @dependabot[bot] in #1050
-
OPENNLP-1824: Update ONNX runtime to 1.26.0 by @dependabot[bot] in #1046
-
OPENNLP-1827: Update log4j2 to 2.26.0 by @dependabot[bot] in #1049
-
OPENNLP-660: Include list of stop words for various languages by @rzo1 in #1056
-
OPENNLP-660: Template needs to hold the NOTICE content too by @rzo1 in #1059
-
OPENNLP-1834: Update JUnit to 6.1.0 by @dependabot[bot] in #1061
-
OPENNLP-1835: Tolerate unsupported XML parser security options by @RankoR in #1067
-
OPENNLP-1832: Add SymSpell-based SpellChecker component by @rzo1 in #1057
-
OPENNLP-1837: Add BertTokenizer with BERT basic tokenization by @krickert in #1073
-
OPENNLP-1839: Fix native memory leak and vocabulary NPE in DocumentCategorizerDL by @krickert in #1074
-
OPENNLP-1840: Fix native memory leak and vocabulary NPE in NameFinderDL by @krickert in #1076
-
OPENNLP-1836: Fix input encoding in SentenceVectorsDL by @krickert in #1072
-
OPENNLP-1843: Override surefire skip so eval tests run again by @krickert in #1082
-
OPENNLP-1838: Adopt BertTokenizer in opennlp-dl components by @krickert in #1075
-
OPENNLP-1848: Update Morfologik to 2.2.0 by @dependabot[bot] in #1087
-
OPENNLP-1849: Update junit5-system-exit to 2.0.3 by @dependabot[bot] in #1089
-
OPENNLP-1845: Fix numerically unstable softmax in DocumentCategorizerDL by @krickert in #1085
-
OPENNLP-1844: Make opennlp-dl components thread-safe by @krickert in #1084
-
OPENNLP-1846: Fix NameFinderDL only worked with Person, expand to all types by @krickert in #1086
-
OPENNLP-1851: Fix DocumentCategorizerDLEval.categorizeFailsLoudlyOnFa… by @krickert in #1102
-
OPENNLP-1853: Extend DictionaryStopwordFilterTest towards edge cases by @vasiliy-mikhailov in #1107
-
OPENNLP-1854: Resolve DocBook DTD from local catalog instead of remote URL by @rzo1 in #1117
-
Bump com.ruleoftech:markdown-page-generator-plugin to 2.5.2 by @dependabot[bot] in #1051
-
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6 by @dependabot[bot] in #1063
-
Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1068
-
Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by @dependabot[bot] in #1071
-
Bump actions/setup-java from 5.2.0 to 5.3.0 by @dependabot[bot] in #1096
-
Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #1098
-
Bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in #1113
New Contributors
- @vasiliy-mikhailov made their first contribution in #1107
Full Changelogs:
