xoai-3.4.1

Release Notes

• Requires JDK 11+
• Patch for potential XXE attack in OAIPMHParser. This class is unused by DSpace but may be used by others who use xoai. See #104
• Update many dependencies to latest versions via @dependabot

Available via Maven Central:

<dependency>
    <groupId>org.dspace</groupId>
    <artifactId>xoai</artifactId>
    <version>3.4.1</version>
</dependency>

What's Changed

• Bump the build-tools group with 8 updates by @dependabot in #95
• Bump org.apache.logging.log4j:log4j-core from 2.20.0 to 2.24.3 by @dependabot in #97
• Update JAXB dependencies to be compile-only by @tdonohue in #103
• Bump com.google.guava:guava from 32.0.0-jre to 32.1.3-jre by @dependabot in #101
• Bump com.fasterxml.woodstox:woodstox-core from 6.4.0 to 6.7.0 by @dependabot in #100
• Bump the apache-commons group with 4 updates by @dependabot in #96
• Bump net.sf.saxon:Saxon-HE from 9.8.0-14 to 9.9.1-8 by @dependabot in #99
• Bump org.glassfish.jaxb:jaxb-runtime from 2.3.8 to 2.3.9 by @dependabot in #98
• Bump jaxen:jaxen from 1.1.4 to 2.0.0 by @dependabot in #102
• Potential fix for code scanning alert no. 1: Resolving XML external entity in user-controlled data by @tdonohue in #104

Full Changelog: xoai-3.4.0...xoai-3.4.1

3.4.0 Release

Release Notes

• Requires JDK 11+
• Update many dependencies to latest versions. Avoid using very old dependencies
• Decrease memory usage by moving to javax.xml.transform.Templates (thread-safe) instead of javax.xml.transform.Transformer #86

Available via Maven Central:

<dependency>
    <groupId>org.dspace</groupId>
    <artifactId>xoai</artifactId>
    <version>3.4.0</version>
</dependency>

What's Changed

• Fix: MaxListIdentifiersSize cannot be configured. by @ChrisBethgster in #79
• Update POM based on DSpace/DSpace POM. Upgrade Maven plugins by @tdonohue in #89
• Update dependencies by @tdonohue in #90
• Remove unmaintained Lyncode dependencies and copy their exact code into codebase by @tdonohue in #91
• Bump com.fasterxml.woodstox:woodstox-core from 6.2.4 to 6.4.0 by @dependabot in #92
• Fix/3 x use templates instead of transformer by @ChrisBethgster in #86

New Contributors

• @ChrisBethgster made their first contribution in #79

Full Changelog: xoai-3.3.0...xoai-3.4.0

3.3.0 Release

Release Notes

Updates dependencies to be compatible with JDK11 (primarily for DSpace 7.x platform): https://github.com/DSpace/xoai/issues?q=milestone%3A3.3.0

These updates remove any warnings that say "An illegal reflective access operation has occurred" when using JDK9-11

Available via Maven Central:

<dependency>
    <groupId>org.dspace</groupId>
    <artifactId>xoai</artifactId>
    <version>3.3.0</version>
</dependency>

xoai-3.2.11

3.2.11 Release

Includes the following bug fixes to 3.2.x (primarily for DSpace 7.x platform): https://github.com/DSpace/xoai/issues?q=milestone%3A3.2.11

Available via Maven Central:

<dependency>
    <groupId>org.dspace</groupId>
    <artifactId>xoai</artifactId>
    <version>3.2.11</version>
</dependency>

NOTICE: As noted in the example above, the groupId has changed to org.dspace as of version 3.2.10. In versions <=3.2.9 it was previously com.lyncode. However, this release is compatible with all previous 3.2.x releases, as the API itself has not changed.

xoai-3.2.10

3.2.10 Release

Includes the following bug fixes to 3.2.x (primarily for DSpace 5.x platform): https://github.com/DSpace/xoai/issues?q=milestone%3A3.2.10

Available via Maven Central:

<dependency>
    <groupId>org.dspace</groupId>
    <artifactId>xoai</artifactId>
    <version>3.2.10</version>
</dependency>

NOTICE: As noted in the example above, the groupId has changed to org.dspace. In versions <=3.2.9 it was previously com.lyncode. However, this release is compatible with all previous 3.2.x releases, as the API itself has not changed.