autodeployai / pmml4s

PMML scoring library for Scala
https://www.pmml4s.org/
Apache License 2.0
58 stars 9 forks source link

scala-xml compatible version is outdated. #25

Closed PokeyRenegade closed 1 year ago

PokeyRenegade commented 1 year ago

The XMLEventReader which is being used in the PMML4S library is available in scala-xml_2.12:1.2.0 is deprecated. There is a CVE in this version of scala-xml which we are trying to address and the solution is to increase the scala-xml version to scala-xml_2.12:2.1.0. The latest version does not have the XMLEventReader class. Is there a workaround for this? Will you be able to provide an update to sync the PMML4S library with the latest scala-xml version?

We use the PMML4S in our analytics product.

scorebot commented 1 year ago

@PokeyRenegade We're working on this feature that replaces the scala XMLEventReader with javax.xml.stream.XMLEventReader, it will be included in the next major release soon with the support of Scala 3.

PokeyRenegade commented 1 year ago

Is there a way we can get early access or any branch with the latest changes? Can you please give an ETA on the release with support for scala 3?

scorebot commented 1 year ago

The code is in the master branch, the new release version is 1.0.1

scorebot commented 1 year ago

The latest 1.0.1 is already in maven central, see here for details: https://mvnrepository.com/artifact/org.pmml4s/pmml4s

PokeyRenegade commented 1 year ago

Thanks!