With a version number of 2.19.0, I am expecting that users who want to use POI 5.2.2 or 5.2.3 with log4j 2.19.0 can just update their own build files. While I like to keep POI up to date, delaying releases to wait for downstream jars can be a real pain. Once one dependency is ready, whispers come through that yet another dependency is considering a release. Since I cut the RC1, graphics2d has already published a v0.41.
If there was a security issue, I would wait - but I checked the mailing lists and there is no evidence that 2.19.0 has any security implications. On Tuesday 13 September 2022 at 11:02:24 IST, Axel Howind <a...@apache.org> wrote: Hi, the colleagues over at log4j are preparing the 2.19.0 release (currently in RC) that adds a bugfix and support for SLF4J 2.0 that was requested by Spring devs. They have found a last minute issue that is currently being worked on and will probably release soon. Maybe it's worth to wait for that release and then go directly to log4j 2.19.0 as it seems both POI and log4j will release at about the same time. Axel On 2022/09/09 20:51:01 PJ Fanning wrote: > Hi everyone, > > The Apache POI project is pleased to announce the release of POI 5.2.3. > Featured are a handful of new areas of functionality, and numerous bug fixes. > > See the downloads page for binary and source distributions: > https://poi.apache.org/download.html > > > Release Notes > > Changes > ------------ > The most notable changes in this release are: > > * upgrade dependencies: log4j-api 2.18.0, xmlbeans 5.1.1, xmlsec 3.0.0, > graphics2d 0.40, pdfbox 2.0.26 ... > * Avoid some more possible overly large memory allocations on certain input > documents > * Support capitalized text in WordExtractors [#63575,#63576] > * Fix issues with some Excel functions > [#65988,#66022,#66047,#66087,#66098,#66181] > * Support more Excel functions > [#github-330,#58468,#66083,#66090,#66092,#66093,#66094,#66095,#66097,#66105] > * Shifting Excel rows or columns can damage formulas in tables [#66215] > * Some Password protected XLS files are not rea [#66115] > * SXSSF doesn't update dimension field [#65562] > * SXSSFWorkbook should work even when fonts not installed on OS [#66230] > * Issue with orphaned (in package) images and notes post slide removal > [#66242] > * Issues with XSSFTables [#66211,#66212,#66213] > > > A full list of changes is available in the change log: > https://poi.apache.org/changes.html. > > The artifacts are at: > > https://dist.apache.org/repos/dist/dev/poi/ > > > You can use this maven URL for your mvn/gradle builds: > > https://repository.apache.org/content/repositories/staging > > > I haven't updated the "provided" dependencies as those have to be activated > anyway explicitly. > > > Please vote to release the artifacts. Here is my +1. > > > The vote is open until 2022-09-16 23:00 UTC. > > Planned release announcement date is Sunday, 2022-09-17. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org > For additional commands, e-mail: dev-h...@poi.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org
