LoginSign Up
← Back to all sparks
A

Apache OpenNLP

DEVOPS
Velocity5.0

Machine learning toolkit for natural language text processing

opennlp.apache.org ↗

Apache OpenNLP ships 3.0.0 final, closing a milestone track that ran since spring.

nlpjavaonnxunicodesecurity-hardening
◆Current state
Apache OpenNLP runs three release lines: 1.9.x for Lucene and Solr 8 users, 2.5.x as the stable line, and the 3.0 track that went through six milestones. On 12 November the project tagged 3.0.0 final alongside a 2.5.13 patch, again shipping both lines on the same day. The tags carry no release notes in the feed, so what changed since 3.0.0-M6 is not visible here.
◆Where it's heading
The 3.0 milestones combined security hardening (deserialization and XXE fixes, model-loading allowlists) with new text tooling such as the Unicode normalization engine and a SymSpell spell checker, while 2.5.x added RoBERTa inference through ONNX Runtime. With 3.0.0 out, the 2.5 line is likely to move to backports only, and new work should land on 3.x.
◆Prediction
Expect a 3.0.1 patch and continued 2.5.x security backports; whether 1.9.x gets further releases is unclear from these entries.

◆Recent moves

  1. 2d ago

    Apache OpenNLP 2.5.13 maintenance release

    A 2.5.x patch tagged the same day as 3.0.0 final, continuing the project's habit of shipping both lines together. The feed carries only the release-plugin tag, so the fixes it contains are not visible.

    View source ↗
  2. 2d ago

    Apache OpenNLP 3.0.0 final release

    The 3.0 line leaves milestone status after six previews that brought the Unicode normalization engine, a SymSpell spell checker and a string of security fixes. The tag itself carries no notes, so this marks the features as stable rather than adding new ones that can be seen here.

    View source ↗
  3. 2mo ago

    Apache OpenNLP 2.5.12 released

    Maven release plugin tag commit for the 2.5.12 maintenance release. The actual content of this release is not captured in the entry; it represents a patch-level bump on the stable 2.x line.

    View source ↗
  4. 2mo ago

    Apache OpenNLP 3.0.0-M6 milestone released

    Sixth milestone release on the 3.0.0 development track. Given that M5 shipped the Unicode normalization engine, M6 likely continues that work or adds adjacent NLP capabilities — the entry is a release tag only, without detailed change notes.

    View source ↗
  5. 3mo ago

    OpenNLP 3.0.0-M5

    ⚡ SPARK

    3.0.0-M5 introduces a dedicated Unicode normalization engine with CharClass, confusable character detection, and an offset/alignment layer for text span tracking. This is new NLP infrastructure — confusable detection matters for adversarial input handling and multilingual text normalization, and the alignment layer is foundational for any feature that needs to map processed text back to original positions.

    View source ↗
  6. 3mo ago

    OpenNLP 1.9.5

    Security maintenance release for the 1.9.x branch, targeting Apache Lucene 8.x and Solr 8.x deployments that still depend on OpenNLP 1.9.x. XML parser XXE hardening, ExtensionLoader package allowlisting, and OOM prevention address the same CVE class fixed in 3.0.0-M3.

    View source ↗