dependabot[bot] opened a new pull request, #559:
URL: https://github.com/apache/opennlp-sandbox/pull/559

   Bumps [org.docx4j:docx4j-core](https://github.com/plutext/docx4j) from 
11.5.14 to 17.0.3.
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/plutext/docx4j/blob/VERSION_17_0_4/CHANGELOG.md";>org.docx4j:docx4j-core's
 changelog</a>.</em></p>
   <blockquote>
   <h1>Version 17.0.3</h1>
   <h2>Release date</h2>
   <p>18 August 2026</p>
   <h2>Contributors to this release</h2>
   <p>Jason Harrop</p>
   <p>Claude Opus 5</p>
   <h2>Changes in Version 17.0.3</h2>
   <p>PDF/HTML output:</p>
   <ul>
   <li>a PAGE, NUMPAGES or SECTIONPAGES field is now rendered in the font which 
applies to it.</li>
   <li>digit-based non-Latin page number formats are now honoured: w:pgNumType 
w:fmt of thaiNumbers,
   hindiNumbers, decimalFullWidth(2) and decimalZero now yield the 
corresponding digits (previously
   all fell back to Latin &quot;1, 2, 3&quot;)</li>
   </ul>
   <p>Font selection improvements</p>
   <p>Font memory management improvements</p>
   <ul>
   <li>loaded Typefaces are no longer retained for the life of the JVM.  They 
are now held only in
   GlyphCheck's cache (weak keys, soft values), not also on PhysicalFont</li>
   <li>our copy of FOP's MultiByteFont no longer loads glyph bounding boxes at 
all.</li>
   </ul>
   <h1>Version 17.0.2</h1>
   <h2>Release date</h2>
   <p>27 July 2026</p>
   <h2>Contributors to this release</h2>
   <p>Jason Harrop</p>
   <p>Claude Opus 5</p>
   <h2>Changes in Version 17.0.2</h2>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/plutext/docx4j/commit/823956a0f42bda59fa3b141bdca7feb7f9bd222b";><code>823956a</code></a>
 Note that PropertyResolver's view of the styles is a snapshot, as a TODO</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/01c2cff208c70b199aa5b80b50ac32c2204dfbb9";><code>01c2cff</code></a>
 FieldFontTest: don't assume Courier New, and add the styles in time</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/8fcd0609167c905b5b5c09edefd7eb875398cf37";><code>8fcd060</code></a>
 FieldFontTest: say what was produced when an assertion fails</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/c37cd0543e9ba064e16035e6ec983e9e3b3c0ed8";><code>c37cd05</code></a>
 Prepare for 17.0.3 release</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/55fa187dc07af0d0f90f0748c270c3a51bee43bc";><code>55fa187</code></a>
 Note that the U+2000-U+2EFF range is too broad, as a TODO</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/0aca89ff12096ff33df7df0af09cac8af4966624";><code>0aca89f</code></a>
 Note the discovery pass's inability to resolve fonts, as a TODO</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/118493d54ea8c3447d3776edbb5c8b2126af604f";><code>118493d</code></a>
 Don't warn about unrenderable characters during font discovery</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/2cef1041197e3fe4cd0c4c80f1279908b14c67e7";><code>2cef104</code></a>
 Header/footer extents: survive a font without the glyphs</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/b3c8288414d9db03c4bdae311dfd4a1f84c1e776";><code>b3c8288</code></a>
 RunFontSelector: glyph-check the font the document font maps to</li>
   <li><a 
href="https://github.com/plutext/docx4j/commit/1b07f9193fd55ad7d4a635b728ed1a4a6bd3ba31";><code>1b07f91</code></a>
 Glyph check: resolve embedded fonts; don't substitute for an embedded font</li>
   <li>Additional commits viewable in <a 
href="https://github.com/plutext/docx4j/compare/docx4j-11.5.14...docx4j-17.0.3";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.docx4j:docx4j-core&package-manager=maven&previous-version=11.5.14&new-version=17.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to