cyberborean / rdfbeans

Java persistence with RDF
Other
11 stars 12 forks source link

Update to current RDF4J version, removing transitive vulnerability. #48

Open chicoreus opened 9 months ago

chicoreus commented 9 months ago

Updating pom to rdf4j 4.3.8 (and current slf4j 2.0.9). With RDF4j 4.0, RDF4JException moved, updating references to new path: org.eclipse.rdf4j.common.exception.RDF4JException. Also commenting out invocations of initialize() on SailRepository as Repository class no longer has an exposed initialized method. A project using rdfbeans was getting transitive vulnerability warnings from maven central on release, arising from rdfbeans depending on rdf4j 2.2, which itself had a dependency on a library using CVE-2020-15250. Solution is to move to current rdf4j release, but between version 2 and version 4, rdf4j changed the API. This pull request updates the dependencies and addresses the (minor) changes in the rd4j API.