Skip to content

Bump org.apache.tika:tika-core from 3.3.1 to 3.3.2 in the prod-deps group#723

Merged
thmarx merged 1 commit into
mainfrom
dependabot/maven/prod-deps-9eda5bafd1
Jul 22, 2026
Merged

Bump org.apache.tika:tika-core from 3.3.1 to 3.3.2 in the prod-deps group#723
thmarx merged 1 commit into
mainfrom
dependabot/maven/prod-deps-9eda5bafd1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 1 update: org.apache.tika:tika-core.

Updates org.apache.tika:tika-core from 3.3.1 to 3.3.2

Changelog

Sourced from org.apache.tika:tika-core's changelog.

Release 3.3.2 - 7/16/2026

  • Dependency upgrades (TIKA-4738).

  • tika-server now requires enableUnsecureFeatures=true when the /pipes, /async, or /status endpoints are selected; the server refuses to start otherwise (TIKA-4760).

  • Port the 4.x SAX-based OOXML parsers to 3.x and make SAX default. The docx/pptx/xlsx/vsdx SAX parsers gain field-code hyperlink extraction, inlined footnotes/endnotes/comments, balanced-XHTML recovery on error, and XMLBeans-free xlsx/xlsb reading. The DOM docx/pptx parsers can still be configured via useSAXDocxExtractor/useSAXPptxExtractor (TIKA-4692, TIKA-4708, TIKA-4790).

Release 3.3.1 - 5/20/2026

  • Dependency upgrades (TIKA-4695).

  • Use the IANA-registered text/markdown as the primary media type, with text/x-web-markdown and text/x-markdown kept as aliases (TIKA-4724).

  • Fix several potential resource/file-handle leaks across the OOXML and ODF parsers, the HTTP fetcher, the gRPC server, and ForkClient (TIKA-4704).

  • The resourceName of a nested tarball no longer includes the parent directories of its parent gzip file, and fix a typo in the .gz extension (TIKA-4705).

Release 3.3.0 - 3/18/2026

  • Switch to poi-ooxml-full (TIKA-4563).

  • Users need to add "allowAbsolutePaths=true" for the FileSystemFetcher to fetch an absolute path (TIKA-4649).

  • Add a markdown option for content handlers (TIKA-4563).

  • Improve zip parsing (TIKA-4650).

  • Add detection of compressed bmp (TIKA-4511).

  • Allow per file timeouts in tika-pipes (TIKA-4497).

  • Add matroska detector (TIKA-1180).

  • Allow multiple values for many Dublin Core keys (TIKA-4466).

  • Extract macros by default in tika-app's commandline and gui (TIKA-4472).

  • Improve extraction of Javascript from PDFs (TIKA-4465).

... (truncated)

Commits
  • b8a6916 [maven-release-plugin] prepare release 3.3.2-rc1
  • bf67012 Prep for 3.3.2 rc1, another day...
  • a2d8362 Prep for 3.3.2 rc1, bump maven version
  • df5130f Prep for 3.3.2 rc1, roll back release version
  • d6cc513 Prep for 3.3.2 rc1, javadocs
  • 73865f9 [maven-release-plugin] prepare for next development iteration
  • c8a2d64 [maven-release-plugin] prepare release 3.3.2-rc1
  • 63f4a95 Prep for 3.3.2 rc1
  • 3cecc5b TIKA-4790 -- make sax parsing default in 3.x (#2957)
  • 883805d backport javadocs aggregate fix from main (#2958)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 1 update: [org.apache.tika:tika-core](https://github.com/apache/tika).


Updates `org.apache.tika:tika-core` from 3.3.1 to 3.3.2
- [Changelog](https://github.com/apache/tika/blob/3.3.2/CHANGES.txt)
- [Commits](apache/tika@3.3.1...3.3.2)

---
updated-dependencies:
- dependency-name: org.apache.tika:tika-core
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 22, 2026
@thmarx
thmarx merged commit 333dce0 into main Jul 22, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/maven/prod-deps-9eda5bafd1 branch July 22, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant