Update xom from 1.3.7 to 1.3.8 to hopefully make the transitive depen…

…dency xerces unneeded (it has a security vulnerability). I do not believe the features of xom which CoreNLP uses needs xerces
stanfordnlp · Jan 4, 2023 · 3ded6f0 · 3ded6f0
1 parent b118082
commit 3ded6f0
Show file tree

Hide file tree

Showing 9 changed files with 14 additions and 14 deletions.
diff --git a/.classpath b/.classpath
@@ -16,7 +16,7 @@
 	<classpathentry exported="true" kind="lib" path="lib/javax.servlet.jar" sourcepath="libsrc/tomcat/apache-tomcat-7.0.12-src.zip"/>
 	<classpathentry exported="true" kind="lib" path="lib/AppleJavaExtensions.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/jflex-full-1.8.2.jar" sourcepath="libsrc/jflex-1.8.2.zip"/>
-	<classpathentry exported="true" kind="lib" path="lib/xom-1.3.7.jar" sourcepath="libsrc/xom-1.3.7-sources.jar"/>
+	<classpathentry exported="true" kind="lib" path="lib/xom-1.3.8.jar" sourcepath="libsrc/xom-1.3.8-sources.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/joda-time.jar" sourcepath="libsrc/joda-time-2.10.5-sources.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/jollyday-0.4.9.jar" sourcepath="libsrc/jollyday-0.4.9-sources.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-lang3-3.1.jar" sourcepath="libsrc/commons-lang3-3.1-sources.jar"/>

diff --git a/doc/corenlp/pom-full.xml b/doc/corenlp/pom-full.xml
@@ -86,7 +86,7 @@
     <dependency>
       <groupId>xom</groupId>
       <artifactId>xom</artifactId>
-      <version>1.3.7</version>
+      <version>1.3.8</version>
     </dependency>
 
     <dependency>

diff --git a/lib/README b/lib/README
@@ -8,14 +8,14 @@ This directory is intended to contain only *current and necessary*
 .jar files used with CoreNLP.
 
 Each file here should have a name that includes a version number,
-such as lib/xom-1.3.7.jar and should have a corresponding sources
-archive such as libsrc/xom-1.3.7-src.{zip,jar}.
+such as lib/xom-1.3.8.jar and should have a corresponding sources
+archive such as libsrc/xom-1.3.8-src.{zip,jar}.
 
 Our original model was that each jar file in lib should be without
 its version number but include a corresponding source .zip/.jar file
 with a full version number in the libsrc folder.  For example, if
 there is a file  lib/xom.jar there should be a corresponding and
-up-to-date libsrc/xom-1.3.7-src.{zip,jar}. That model had some good
+up-to-date libsrc/xom-1.3.8-src.{zip,jar}. That model had some good
 properties but can also be a nuisance in the modern world, and so
 doing this is now deprecated but not quite yet eliminated.
 
@@ -201,13 +201,13 @@ LAST UPDATE: 2007/09/18
 LAST UPDATE BY: Anna Rafferty.
 
 -----------------------------------------------------------------------
-xom-1.3.7.jar
+xom-1.3.8.jar
 
-ORIGINAL JAR NAME: xom-1.3.7.jar
+ORIGINAL JAR NAME: xom-1.3.8.jar
 
-VERSION: 1.3.7
+VERSION: 1.3.8
 
-RELEASE DATE: 2019-03-31
+RELEASE DATE: 2022-09-11
 
 SOURCE AVAILABLE: yes
 
@@ -218,9 +218,9 @@ URL: http://www.xom.nu/
 USED BY: StanfordCoreNLP.java
 Needed by CoreNLP distributions
 
-LAST UPDATE: 2019-10-24
+LAST UPDATE: 2023-01-04
 
-LAST UPDATE BY: Jason Bolton
+LAST UPDATE BY: John Bauer
 
 -----------------------------------------------------------------------
 jflex-full-1.8.2.jar

diff --git a/lib/xom-1.3.7.jar → lib/xom-1.3.8.jar b/lib/xom-1.3.7.jar → lib/xom-1.3.8.jar
diff --git a/libsrc/xom-1.3.7-sources.jar b/libsrc/xom-1.3.7-sources.jar
diff --git a/libsrc/xom-1.3.8-sources.jar b/libsrc/xom-1.3.8-sources.jar
diff --git a/pom-java-11.xml b/pom-java-11.xml
@@ -84,7 +84,7 @@
     <dependency>
       <groupId>xom</groupId>
       <artifactId>xom</artifactId>
-      <version>1.3.7</version>
+      <version>1.3.8</version>
     </dependency>
 
     <dependency>

diff --git a/pom-java-17.xml b/pom-java-17.xml
@@ -84,7 +84,7 @@
     <dependency>
       <groupId>xom</groupId>
       <artifactId>xom</artifactId>
-      <version>1.3.7</version>
+      <version>1.3.8</version>
     </dependency>
 
     <dependency>

diff --git a/pom.xml b/pom.xml
@@ -86,7 +86,7 @@
     <dependency>
       <groupId>xom</groupId>
       <artifactId>xom</artifactId>
-      <version>1.3.7</version>
+      <version>1.3.8</version>
     </dependency>
 
     <dependency>