chore(deps): upgrade Jena to v4.3.2 (DEV-473)

[mpro7]

resolves DEV-473

[subotic]

@mpro7 could you also please remove:

maven.artifact(
                group = "org.apache.jena",
                artifact = "jena-text",
                version = JENA_VERSION,
                exclusions = [
                    "org.slf4j:slf4j-log4j12",
                ],
            ),

and

"org.apache.logging.log4j:log4j:2.17.0", # needed by apache-jena-libs. explicitly setting latest version (log4shell) to override the one used by jena.

from dsp-api/third_party/dependencies.bzl?

Both are not needed anymore, now that the Jena library is updated and pulls in the correct log4j version.

[mpro7]

@subotic are you sure about your request? I tried to do that and at least jena-text is still used:

webapi/src/main/scala/org/knora/webapi/store/triplestore/embedded/JenaTDBActor.scala:14: error: object text is not a member of package org.apache.jena.query
import org.apache.jena.query.text._

[subotic]

@mpro7 yes, you are right. you would need to add jena-text in the same way the other jena libraries are added. What this bit of code does is to exclude the old verson of org.slf4j:slf4j-log4j12. Now we don't need to exclude it anymore but we still need to add the dependency to jena-text.

[mpro7]

@subotic everything is clear now, thanks.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information