OpenNLP 3.0.0-M3

Apache OpenNLP 3.0.0-M3

This release focuses on security hardening, new NLP capabilities, and dependency maintenance.

Security Fixes

Three security issues are addressed in this release (also backported to 2.5.9).

XXE in DictionaryEntryPersistor (OPENNLP-1819)

The DictionaryEntryPersistor previously used a SAXParserFactory that did not enable secure processing or disable DTD handling, leaving external entity resolution active. A malicious dictionary file could exploit this for local file disclosure or SSRF before any dictionary entry was processed.

The parsing path is now aligned with the project's existing XmlUtil helper, which properly sets FEATURE_SECURE_PROCESSING and disallow-doctype-decl.

Arbitrary Class Instantiation in ExtensionLoader (OPENNLP-1820)

ExtensionLoader.instantiateExtension() performed its isAssignableFrom type check after Class.forName() had already executed the target class's static initializer, allowing a crafted model archive to trigger the static initializer of any class on the classpath.

The fix introduces a package-prefix allowlist consulted before Class.forName() is invoked:

• Classes under opennlp.* remain permitted by default.
• Other packages must be opted in via ExtensionLoader.registerAllowedPackage(String) or the OPENNLP_EXT_ALLOWED_PACKAGES system property (comma-separated list).

OOM via Unbounded Array Allocation in AbstractModelReader (OPENNLP-1821)

getOutcomes(), getOutcomePatterns(), and getPredicates() read attacker-controlled 32-bit count fields from binary model streams and passed them directly to array allocations. A crafted .bin file could trigger an immediate OutOfMemoryError and crash the JVM.

Each count is now bounded (default 10,000,000, configurable via -DOPENNLP_MAX_ENTRIES=<n>), with negative or oversized values failing fast via IllegalArgumentException.

⚠️ For all three issues, users who cannot upgrade immediately should restrict input (dictionary and model files) to trusted sources only.

New Features & Improvements

• Roberta-based model support via ONNX — OPENNLP-1518 (#998)
• Byte Pair Encoding (BPE) tokenization — OPENNLP-1220 (#1011)
• Parse.createFromTokens() convenience method for tokenized input — OPENNLP-53 (#1012)
• Thread-safe ME classes by eliminating shared mutable instance state — OPENNLP-1816 (#1003)

What's Changed

• Apache OpenNLP 3.0.0-M2 by @mawiesne in #996
• OPENNLP-1518: Roberta-based Models - Add support for utilization via Onxx by @rzo1 in #998
• OPENNLP-1817: Update log4j2 to 2.25.4 by @dependabot[bot] in #1001
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #1009
• OPENNLP-1818: Update zlibsvm-core to 3.0.0 by @dependabot[bot] in #1000
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #1010
• OPENNLP-53: Add Parse.createFromTokens() for convenient tokenized input by @mawiesne in #1012
• OPENNLP-1220: Add support for Byte Pair Encoding (BPE) by @mawiesne in #1011
• Bump com.ruleoftech:markdown-page-generator-plugin from 2.4.2 to 2.4.3 by @dependabot[bot] in #1016
• Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #1014
• Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #1017
• OPENNLP-1819: Align DictionaryEntryPersistor XML parsing with XmlUtil by @rzo1 in #1019
• OPENNLP-1816: Make ME classes thread-safe by eliminating shared mutable instance state by @krickert in #1003
• OPENNLP-1822: Update ONNX runtime to 1.25.0 by @dependabot[bot] in #1024
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #1025
• OPENNLP-1821: Prevent OutOfMemory Due To Huge Array Allocation by @subbudvk in #1022
• OPENNLP-1820: Restrict ExtensionLoader to allowlisted package prefixes by @subbudvk in #1021

New Contributors

• @krickert made their first contribution in #1003
• @subbudvk made their first contribution in #1022

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12356813

OpenNLP 2.5.9

Apache OpenNLP 2.5.9

This is a maintenance and security release on the 2.x line. It backports the security fixes shipped in 3.0.0-M3 and refreshes several dependencies.

Security Fixes

Three security issues are addressed in this release (also fixed in 3.0.0-M3 on the 3.x line).

XXE in DictionaryEntryPersistor (OPENNLP-1819)

The DictionaryEntryPersistor previously used a SAXParserFactory that did not enable secure processing or disable DTD handling, leaving external entity resolution active. A malicious dictionary file could exploit this for local file disclosure or SSRF before any dictionary entry was processed.

The parsing path is now aligned with the project's existing XmlUtil helper, which properly sets FEATURE_SECURE_PROCESSING and disallow-doctype-decl.

Arbitrary Class Instantiation in ExtensionLoader (OPENNLP-1820)

ExtensionLoader.instantiateExtension() performed its isAssignableFrom type check after Class.forName() had already executed the target class's static initializer, allowing a crafted model archive to trigger the static initializer of any class on the classpath.

The fix introduces a package-prefix allowlist consulted before Class.forName() is invoked:

• Classes under opennlp.* remain permitted by default.
• Other packages must be opted in via ExtensionLoader.registerAllowedPackage(String) or the OPENNLP_EXT_ALLOWED_PACKAGES system property (comma-separated list).

OOM via Unbounded Array Allocation in AbstractModelReader (OPENNLP-1821)

getOutcomes(), getOutcomePatterns(), and getPredicates() read attacker-controlled 32-bit count fields from binary model streams and passed them directly to array allocations. A crafted .bin file could trigger an immediate OutOfMemoryError and crash the JVM.

Each count is now bounded (default 10,000,000, configurable via -DOPENNLP_MAX_ENTRIES=<n>), with negative or oversized values failing fast via IllegalArgumentException.

⚠️ For all three issues, users who cannot upgrade immediately should restrict input (dictionary and model files) to trusted sources only.

What's Changed

• Apache OpenNLP 2.5.8 by @mawiesne in #1004
• [2.x]: OPENNLP-1817: Update log4j2 to 2.25.4 by @dependabot[bot] in #999
• [2.x] Regenerated NOTICE file after dependency changes by @github-actions[bot] in #1008
• [2.x]: Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #1018
• [2.x]: Bump com.ruleoftech:markdown-page-generator-plugin from 2.4.2 to 2.4.3 by @dependabot[bot] in #1015
• [2.x]: Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #1013
• [2.x] OPENNLP-1819: Align DictionaryEntryPersistor XML parsing with XmlUtil by @rzo1 in #1020
• [2.x]: OPENNLP-1822: Update ONNX runtime to 1.25.0 by @dependabot[bot] in #1023
• [2.x] Regenerated NOTICE file after dependency changes by @github-actions[bot] in #1026

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12356814

OpenNLP 2.5.8

Summary

Maintenance Infos:

• Bug Fixes:
  • The SentenceDetector got three fixes in handling edge cases with abbreviation dictionaries (OPENNLP-1809, OPENNLP-1810, OPENNLP-1811)
• Improvements:
  • The OpenNLP developer manual (HTML + PDF) got an uplift for the UIMA documentation part, being largely extended (OPENNLP-49)
  • Some updates of dependencies

What's Changed

• OpenNLP 2.5.7 by @rzo1 in #911
• [2.x]: OPENNLP-1789: Update log4j2 to 2.25.3 by @dependabot[bot] in #917
• [2.x]: Bump org.codehaus.mojo:license-maven-plugin from 2.7.0 to 2.7.1 by @dependabot[bot] in #923
• [2.x]: OPENNLP-1794: Update JUnit to 6.0.2 by @dependabot[bot] in #928
• [2.x]: OPENNLP-1795: Move to Apache Parent 36 by @dependabot[bot] in #925
• [2.x]: OPENNLP-1796: Update logcaptor to 2.12.2 by @dependabot[bot] in #932
• [2.x]: OPENNLP-1795: Move to Apache Parent 37 by @dependabot[bot] in #934
• [2.x]: Bump actions/setup-java from 5.1.0 to 5.2.0 by @dependabot[bot] in #937
• [2.x]: Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #939
• [2.x]: Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by @dependabot[bot] in #935
• [2.x]: Bump net.sf.xslthl:xslthl from 2.0.1 to 2.1.3 by @dependabot[bot] in #941
• [2.x]: Bump net.sf.offo:fop-hyph from 1.2 to 2.0 by @dependabot[bot] in #944
• [2.x]: OPENNLP-1797: Update ONNX runtime to 1.24.1 by @dependabot[bot] in #951
• [2.x]: Bump junit.version from 6.0.2 to 6.0.3 by @dependabot[bot] in #954
• [2.x]: Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 by @dependabot[bot] in #963
• [2.x]: OPENNLP-1802: Update ONNX runtime to 1.24.2 by @dependabot[bot] in #961
• [2.x]: OPENNLP-1805: Update logcaptor to 2.12.5 by @dependabot[bot] in #970
• [2.x]: OPENNLP-1802: Update ONNX runtime to 1.24.3 by @dependabot[bot] in #973
• [2.x]: Bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #978
• [2.x]: OPENNLP-1805: Update logcaptor to 2.12.6 by @dependabot[bot] in #991

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12356577&projectId=12311215

OpenNLP 3.0.0-M2

Summary

The 3.x release line of Apache OpenNLP introduces no known breaking changes while significantly modularizing the project to improve library usage and future extensibility. The core API remains stable and fully compatible with 2.x, so existing projects can continue using the opennlp-tools artifact without (substantial) modifications.

Key Highlights:

• Notable Changes:
  • The minimum Java compiler level was raised to 21 (OPENNLP-1735)
  • The artifact 'opennlp-models' was renamed to 'opennlp-model-resolver'. It can be used to detect and load OpenNLP compliant models from the classpath (OPENNLP-1807)
• New Features:
  • Apache OpenNLP can now detect sentiment from text (OPENNLP-855)
  • The eval corpus format for GermEval2014 is now supported (OPENNLP-976)
  • Document Categorization is now possible via a binding to LibSVM (OPENNLP-1808)
• Bug Fixes:
  • The SentenceDetector got three fixes in handling edge cases with abbreviation dictionaries (OPENNLP-1809, OPENNLP-1810, OPENNLP-1811) - NOTE: These fixes will be back-ported to the upcoming OpenNLP release 2.5.8 as well.
• Improvements:
  • Language Codes passed in are now stricter validated to comply with ISO-693 standard (OPENNLP-991)
  • The OpenNLP developer manual (HTML + PDF) got an uplift for the UIMA documentation part, being largely extended (OPENNLP-49)

What's Changed

• OPENNLP-1800: Evaluation Build Failure after Docs module packaging was switched to JAR by @rzo1 in #959
• Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 by @dependabot[bot] in #964
• OPENNLP-1802: Update ONNX runtime to 1.24.2 by @dependabot[bot] in #962
• Adjust Badge for Maven Central in README.md by @mawiesne in #960
• OPENNLP-1804: Fix artifact name in doc section on model-loading by @mawiesne in #966
• OPENNLP-1805: Update logcaptor to 2.12.5 by @dependabot[bot] in #967
• OPENNLP-976: Implement GermEval2014 Format by @rzo1 in #971
• OPENNLP-1802: Update ONNX runtime to 1.24.3 by @dependabot[bot] in #972
• OPENNLP-1735: Upgrade minimum Java compiler level to 21 by @mawiesne in #975
• OPENNLP-1806: Update checkstyle plugin to 13.x by @dependabot[bot] in #968
• Bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #977
• OPENNLP-1714: Adjust Dev Manual to modularized structure by @rzo1 in #976
• OPENNLP-1807: Rename opennlp-models to opennlp-model-resolver by @rzo1 in #979
• OPENNLP-1803: Fix missing apidocs for all modules aside from opennlp-tools by @mawiesne in #982
• OPENNLP-1801: Extract eval tests into separate opennlp-eval-tests module by @rzo1 in #980
• OPENNLP-1809: SentenceDetector misses multi-letter abbreviations at sentence start by @mawiesne in #983
• OPENNLP-1810: Fix SentenceDetector fails to detect multiple identical abbreviations in the same sentence by @rzo1 in #984
• OPENNLP-1808: Add SVM-based document categorization via zlibsvm by @rzo1 in #981
• OPENNLP-855: Add SentimentDetector to derive sentiment from text by @mawiesne in #579
• OPENNLP-1811: Fix SentenceDetector missing abbreviations at non-first sentence start with useTokenEnd=false by @rzo1 in #985
• OPENNLP-1812: Move opennlp-tools util classes to core components by @mawiesne in #987
• OPENNLP-49: Update documentation for the uima integration by @rzo1 in #988
• OPENNLP-991: Validate all passed in language codes by @rzo1 in #989
• OPENNLP-1805: Update logcaptor to 2.12.6 by @dependabot[bot] in #990
• OPENNLP-1814: Ensure NOTICE file in opennlp-distr is updated via GH action by @mawiesne in #992
• OPENNLP-1815: Adjust maven-release-plugin config to skip tests by default by @mawiesne in #995

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12356724&projectId=12311215

OpenNLP 3.0.0-M1

Summary

The 3.x release line of Apache OpenNLP introduces no known breaking changes while significantly modularizing the project to improve library usage and future extensibility.
The core API remains stable and fully compatible with 2.x, so existing projects can continue using the opennlp-tools artifact without modifications.

Key Highlights and Recommendations:
• Modularization: The project is now organized into multiple modules:
• opennlp-api, opennlp-core, opennlp-cli, opennlp-extensions, ML modules (e.g., opennlp-ml-maxent, opennlp-ml-perceptron), and more.
• Users can include only the modules needed, reducing dependency footprint.
• Only opennlp-runtime is mandatory for basic functionality.
• CLI Stability: Existing command-line usage remains unchanged.

What's Changed

• OPENNLP-1708: Raise OpenNLP version to 3.x on main branch by @mawiesne in #785
• OPENNLP-1724: Update JUnit to 5.13.0 by @dependabot[bot] in #787
• Remove code review requirement for 2.x branch to allow cherry picking already reviewed commits by @rzo1 in #788
• Disable merge request requirement for opennlp-2.x by @rzo1 in #789
• OPENNLP-1724: Update JUnit to 5.13.1 by @dependabot[bot] in #790
• OPENNLP-1746: Move to Apache Parent 35 by @dependabot[bot] in #793
• OPENNLP-1747: Update build-helper-maven-plugin to 3.6.1 by @dependabot[bot] in #791
• OPENNLP-1708: Introduce new OpenNLP module structure by @mawiesne in #786
• OPENNLP-1751: Update log4j2 to 2.25.0 by @dependabot[bot] in #797
• OPENNLP-1752 Update license-maven-plugin to 2.6.0 by @dependabot[bot] in #796
• OPENNLP-1747: Update build-helper-maven-plugin to 3.6.1 by @dependabot[bot] in #795
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #798
• OPENNLP-1754 - Convert GH Action Tags into Pinned SHA by @rzo1 in #800
• OPENNLP-1745: SentenceDetector - Add Junit test for useTokenEnd = false by @NishantShri4 in #792
• Fix Eval Build for OpenNLP 3.x by @rzo1 in #794
• OPENNLP-1754: Update actions/setup-java to 4.7.1 by @dependabot[bot] in #802
• OPENNLP-1753: Switch to pre-trained Model binaries v1.3 by @mawiesne in #799
• OPENNLP-1724: Update JUnit to 5.13.2 by @dependabot[bot] in #804
• OPENNLP-1755 - Align Module Names with OpenNLP Models Name by @rzo1 in #803
• OPENNLP-1756: Update classgraph to 4.8.180 by @dependabot[bot] in #805
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #807
• OPENNLP-1724: Update JUnit to 5.13.3 by @dependabot[bot] in #808
• OPENNLP-1758: Enhance Javadoc of UIMA extension by @mawiesne in #813
• OPENNLP-1760: Make SourceForge URLs in Tests configurable to avoid 403/Rate limiting issues by @rzo1 in #817
• OPENNLP-1753: Switch to Models v1.3 - Follow up by @mawiesne in #815
• OPENNLP-1757: Expose probs() method in thread-safe probabilistic ME classes by @mawiesne in #812
• OPENNLP-1759: Optimize computation of hashCode in StringList by @mawiesne in #814
• OPENNLP-1751: Update log4j2 to 2.25.1 by @dependabot[bot] in #818
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #819
• Update copyright year in several files by @mawiesne in #820
• OPENNLP-1764: Update classgraph to 4.8.181 by @dependabot[bot] in #824
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #825
• OPENNLP-1762: Fix mvn clean install by setting default download property to SourceForge for surefire/failsafe by @rzo1 in #821
• OPENNLP-1766: Update logcaptor to 2.12.0 by @dependabot[bot] in #827
• OPENNLP-1767: Fix sentence detection when an abbreviation overlaps at sentence end by @mawiesne in #829
• Bump actions/cache from 4.2.3 to 4.2.4 by @dependabot[bot] in #830
• Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #832
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 by @dependabot[bot] in #833
• Bump actions/setup-java from 4.7.1 to 5.0.0 by @dependabot[bot] in #834
• OPENNLP-1766: Update logcaptor to 2.12.1 by @dependabot[bot] in #836
• OPENNLP-1769: Update maven-failsafe-plugin to 3.5.4 by @dependabot[bot] in #837
• Enable dependabot for non default branches (2.x) by @rzo1 in #838
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 by @dependabot[bot] in #850
• Bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #852
• Bump junit.version from 5.13.3 to 5.13.4 by @dependabot[bot] in #843
• Enable Java 25 as additional CI Java version since it is GA now. by @rzo1 in #839
• OPENNLP-1771: Update ONNX runtime to 1.23.0 by @dependabot[bot] in #854
• OPENNLP-1772: Update log4j2 to 2.25.2 by @dependabot[bot] in #855
• OPENNLP-1773: Update license-maven-plugin to 2.7.0 by @dependabot[bot] in #858
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #862
• OPENNLP-1774: Update JUnit to 6.0.0 by @dependabot[bot] in #868
• OPENNLP-1776: Update forbiddenapis plugin to 3.10 by @dependabot[bot] in #869
• OPENNLP-1775: Update Uimaj to 3.6.1 by @dependabot[bot] in #867
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #870
• Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 by @dependabot[bot] in #879
• OPENNLP-1777: Update ONNX runtime to 1.23.1 by @dependabot[bot] in #878
• OPENNLP-1778: Update classgraph to 4.8.184 by @dependabot[bot] in #873
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #880
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #881
• OPENNLP-1781: SentenceDetectorME throws StringIndexOutOfBoundsException when sentence starts with an abbreviation by @rzo1 in #883
• OPENNLP-1779: Update Checkstyle to 12.0.1 by @dependabot[bot] in #875
• OPENNLP-1783: Update ONNX runtime to 1.23.2 by @dependabot[bot] in #886
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #887
• OPENNLP-1784: Update JUnit to 6.0.1 by @dependabot[bot] in #888
• OPENNLP-1782: Add tagging examples to verify French POS model by @meriam2303 in #863
• Bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #890
• Bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #893
• Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #898
• OPENNLP-1785: Ignore ParserConfigurationException in DocumentBuilder when setting XML secure processing feature unsupported on Android by @soupslurpr in #896
• OPENNLP-1788: Enhance opennlp.tools.util.Version to parse suffixed version by @rsvoboda in #899
• Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.1 to 3.8.0 by @dependabot[bot] in #901
• Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #903
• Bump actions/setup-java from 5.0.0 to 5.1.0 by @dependabot[bot] in #905
• OPENNLP-1770: Updating logo for docs by @jzonthemtn in #895
• Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 by @dependabot[bot] in #908
• Bump actions/cache from 4.3.0 to 5.0.0 by @dependabot[bot] in #912
• Bump peter-evans/create-pull-request from 7.0.11 to...

OpenNLP 2.5.7

What's Changed

• OPENNLP 2.5.6.1 by @rzo1 in #884
• [2.x]: OPENNLP-1783: Update ONNX runtime to 1.23.2 by @dependabot[bot] in #885
• [2.x]: OPENNLP-1784: Update JUnit to 6.0.1 by @dependabot[bot] in #889
• [2.x]: Bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #891
• [2.x]: Bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #894
• [2.x] OPENNLP-1785: Ignore ParserConfigurationException in DocumentBuilder when setting XML secure processing feature unsupported on Android by @soupslurpr in #892
• [2.x]: Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #897
• [2.x] OPENNLP-1788: Enhance opennlp.tools.util.Version to parse suffixed version by @rsvoboda in #900
• [2.x]: Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.1 to 3.8.0 by @dependabot[bot] in #902
• [2.x]: Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #904
• [2.x]: Bump actions/setup-java from 5.0.0 to 5.1.0 by @dependabot[bot] in #906

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12356333

OpenNLP 2.5.6.1

What's Changed

• Release OpenNLP 2.5.6 by @mawiesne in #871
• [2.x]: Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 by @dependabot[bot] in #872
• [2.x]: OPENNLP-1777: Update ONNX runtime to 1.23.1 by @dependabot[bot] in #874
• [2.x]: OPENNLP-1778: Update classgraph to 4.8.184 by @dependabot[bot] in #877
• [2.x] OPENNLP-1781: SentenceDetectorME throws StringIndexOutOfBoundsException when sentence starts with an abbreviation by @rzo1 in #882
• [2.x]: OPENNLP-1779: Update Checkstyle to 12.0.1 by @dependabot[bot] in #876

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12356312

OpenNLP 2.5.6

What's Changed

• Release OpenNLP 2.5.5 by @mawiesne in #826
• OPENNLP-1762: Fix mvn clean install by setting default download property to SourceForge for surefire/failsafe (OpenNLP 2.x) by @rzo1 in #822
• [2.x]: Bump actions/cache from 4.2.3 to 4.2.4 by @dependabot[bot] in #840
• [2.x]: Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #841
• [2.x]: Bump actions/setup-java from 4.7.1 to 5.0.0 by @dependabot[bot] in #842
• [2.x]: Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 by @dependabot[bot] in #848
• [2.x]: Bump io.github.hakky54:logcaptor from 2.12.0 to 2.12.1 by @dependabot[bot] in #849
• [2.x]: Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #844
• [2.x]: Bump junit.version from 5.13.3 to 5.13.4 by @dependabot[bot] in #845
• [2.x]: Bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #853
• [2.x]: Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 by @dependabot[bot] in #851
• [2.x]: OPENNLP-1771: Update ONNX runtime to 1.23.0 by @dependabot[bot] in #861
• [2.x]: OPENNLP-1772: Update log4j2 to 2.25.2 by @dependabot[bot] in #857
• [2.x]: OPENNLP-1773: Update license-maven-plugin to 2.7.0 by @dependabot[bot] in #856
• [2.x]: OPENNLP-1774: Update JUnit to 6.0.0 by @dependabot[bot] in #864
• [2.x]: OPENNLP-1776: Update forbiddenapis plugin to 3.10 by @dependabot[bot] in #865
• [2.x]: OPENNLP-1775: Update Uimaj to 3.6.1 by @dependabot[bot] in #866

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12355253

OpenNLP 2.5.5

What's Changed

• OPENNLP-1724: Update JUnit to 5.12.2 by @dependabot[bot] in #764
• OPENNLP-1725: Update logcaptor to 2.11.0 by @dependabot[bot] in #770
• OPENNLP-1727: Correct example snippet for loading a model from the classpath by @mawiesne in #771
• OPENNLP-1728: Improve JavaDoc of opennlp.tools.models package by @mawiesne in #772
• OPENNLP-124: Maxent/Perceptron training should report progress back via an API by @NishantShri4 in #758
• OPENNLP-1729: Provide easier loading of Models for given model lang and type by @mawiesne in #775
• OPENNLP-1730: Update ONNX runtime to 1.21.1 by @dependabot[bot] in #774
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #776
• OPENNLP-1730: Update ONNX runtime to 1.22.0 by @dependabot[bot] in #782
• OPENNLP-1732: Eliminate use of raw types for StopCriteria by @mawiesne in #779
• OPENNLP-1733: Remove implements Serializable from LanguageDetector by @mawiesne in #780
• Regenerated NOTICE file after dependency changes by @github-actions[bot] in #783
• OPENNLP-1731: Add Junits for NGramLanguageModelTool by @NishantShri4 in #778
• OPENNLP-1734: Adjust GH CI config to build with Java 25-ea by @mawiesne in #781
• OPENNLP-1545 - Close ZipInputStream in BaseModel by @rzo1 in #784
• OPENNLP-1754 - Convert GH Action Tags into Pinned SHA (2.x) by @rzo1 in #801
• Update GH action definitions (opennlp-2.x) by @rzo1 in #811
• OPENNLP-1745: SentenceDetector - Add Junit test for useTokenEnd = false (OpenNLP 2.x) by @mawiesne in #809
• OPENNLP-1753: Switch to pre-trained Model binaries v1.3 (OpenNLP 2.x) by @mawiesne in #810

Full Changelog: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311215&version=12355873

OpenNLP 2.5.4

What's Changed

• OPENNLP-1696: Update logcaptor to 2.10.1 by @dependabot in #738
• OPENNLP-1694: Enhance JavaDoc in util.featuregen package by @mawiesne in #739
• OPENNLP-1697 - GH action fail because of 403 returned by sourceforge by @rzo1 in #741
• OPENNLP-1688 - Add GH action to test binaries (*nix + win) in GH actions by @rzo1 in #740
• OPENNLP-1695: Add more tests for classes in formats package by @mawiesne in #742
• OPENNLP-1702: BratDocumentStream should process files in bratCorpusDir deterministically by @mawiesne in #745
• OPENNLP-1521: Add documentation to describe how to re-generate snowball stemmer code by @rzo1 in #744
• OPENNLP-1701: Re-generates Snowball Stemmer Code by @rzo1 in #743
• OPENNLP-1704 - Auto-generate NOTICE for OpenNLP Core Project by @rzo1 in #746
• OPENNLP-385: Add unit tests for OpenNLP UIMA component by @mawiesne in #748
• OPENNLP-1705: Update JUnit to 5.12.0 by @dependabot in #749
• Bump slf4j.version from 2.0.16 to 2.0.17 by @dependabot in #750
• OPENNLP-1707: Update ONNX Runtime to 1.21.0 by @dependabot in #752
• OPENNLP-1705: Update JUnit to 5.12.1 by @dependabot in #755
• OPENNLP-287: Extend POS Tagger documentation with more information about the tag dictionary by @NishantShri4 in #754
• OPENNLP-1720: Move to Apache Parent 34 by @dependabot in #756
• OPENNLP-1721: Update maven-failsafe-plugin to 3.5.3 by @dependabot in #759
• OPENNLP-1719: Add additional ITs for verification of UD POS models by @mawiesne in #757
• OPENNLP-1696: Update logcaptor to 2.10.2 by @dependabot in #762
• OPENNLP-1722: Update jacoco-maven-plugin to 0.8.13 by @dependabot in #761
• OPENNLP-1723: Update forbiddenapis plugin to 3.9 by @dependabot in #760

New Contributors

• @NishantShri4 made their first contribution in #754

Full Changelog: opennlp-2.5.3...opennlp-2.5.4