Skip to content

build(deps): bump jena.version from 5.3.0 to 6.1.0 - #389

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/jena.version-6.1.0
Open

build(deps): bump jena.version from 5.3.0 to 6.1.0#389
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/jena.version-6.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps jena.version from 5.3.0 to 6.1.0.
Updates org.apache.jena:jena-arq from 5.3.0 to 6.1.0

Updates org.apache.jena:jena-core from 5.3.0 to 6.1.0

Updates org.apache.jena:jena-rdfconnection from 5.3.0 to 6.1.0

Updates org.apache.jena:apache-jena-libs from 5.3.0 to 6.1.0

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 21, 2026
@anbo-de

anbo-de commented Jun 21, 2026

Copy link
Copy Markdown
Member

Evaluated 2026-06-21: builds + full mvn clean test + the offline E2E all pass — including the Virtuoso/VirtGraph runtime path (pipeline answers the test question correctly on Jena 6.1). Intentionally held, not merged yet: Jena 6 is a major upgrade right after the Jena 5 migration, so the WDAqua component ecosystem should be checked before the framework moves. Technically ready when that decision is made.

@anbo-de

anbo-de commented Jun 21, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot dependabot Bot changed the title Bump jena.version from 5.3.0 to 6.1.0 build(deps): bump jena.version from 5.3.0 to 6.1.0 Jun 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/jena.version-6.1.0 branch from 60d6c7a to 293b5fe Compare June 21, 2026 16:07
@anbo-de anbo-de closed this Jun 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@anbo-de anbo-de reopened this Jun 21, 2026
@github-actions

github-actions Bot commented Jun 21, 2026

Copy link
Copy Markdown

JaCoCo coverage report

There is no coverage information present for the Files changed

@anbo-de

anbo-de commented Jun 21, 2026

Copy link
Copy Markdown
Member

Correction after running fresh CI on the rebased branch: #389 does not pass and is not mergeable as-is. CI fails (test + integration-tests) with:

NoSuchMethodError: org.apache.commons.lang3.concurrent.BasicThreadFactory.builder()
  -> NoClassDefFoundError: org.apache.jena.atlas.lib.AlarmClock

Jena 6.1's AlarmClock needs commons-lang3 BasicThreadFactory.builder(); that method exists in commons-lang3 ≥ 3.18.0, but with Jena 6.1 on the classpath the build resolves an older commons-lang3 (3.17.0) despite the commons-lang3.version=3.18.0 property pin — i.e. Jena 6 changes dependency resolution and the property override isn't winning. Making Jena 6 mergeable needs an explicit <dependencyManagement> entry forcing commons-lang3 to a version with builder() (and re-verifying commons-configuration2 2.15 + Spring Boot 3.5 stay happy). (My earlier local E2E 'passed' only because the local Maven cache served a newer commons-lang3 — CI's clean resolution is authoritative.)

@anbo-de anbo-de mentioned this pull request Jun 21, 2026
Closed
@anbo-de

anbo-de commented Jun 21, 2026

Copy link
Copy Markdown
Member

Final verdict (see #404 for the attempt): Jena 6 is blocked, not mergeable. Two problems — (1) commons-lang3 needs an explicit dependencyManagement pin for Jena 6's AlarmClock.builder() (fixable), but (2) the real blocker is the OpenLink Virtuoso driver virt_jena_v5_3 (Jena-5-only): Jena 6 breaks its execConstruct via a changed ModelUtils.tripleToStatement signature, and no virt_jena_v6 exists. Recommend leaving this parked until a Jena-6 Virtuoso driver is available.

anbo-de added a commit that referenced this pull request Jun 27, 2026
@anbo-de @claude
Integrate compatible Dependabot dependency bumps (Boot 4)
2a21329 
Fold the open Dependabot PRs that are compatible with the Spring Boot 4 /
5.0.0 branch into this PR (they target old master, so they cannot merge
as-is without reverting the Boot 4 work):

- spring-boot-admin 4.0.4 -> 4.1.1                  (#417)
- org.aspectj:aspectjtools 1.9.25 -> 1.9.25.1       (#418)
- commons-cli 1.9.0 -> 1.11.0                       (#419)
- testcontainers 1.20.4 -> 1.21.4                   (#420)
- maven-release-plugin 3.0.1 -> 3.3.1              (#421)
- pitest-junit5-plugin 1.2.2 -> 1.2.3              (#422)
- findsecbugs-plugin 1.13.0 -> 1.14.0              (#423)
- central-publishing-maven-plugin 0.8.0 -> 0.11.0  (#425)

springdoc 3.0.3 (#424) is already on this branch. jena 6.1.0 (#389) is
deliberately NOT integrated: the Virtuoso-Jena adapter (virt_jena_v5_3)
only supports Jena 5.3, so Jena 6 stays blocked independently of Boot 4.

While here, dropped the inline aspectjtools / commons-cli <version> literals
in the component and pipeline modules so they track the centralized
aspectjtools.version property / the managed commons-cli version (that scatter
is what forced Dependabot to touch 3-4 files per bump).

Verified: reactor `mvn clean install` is green on Boot 4.0.5 / JDK 21 (all
tests pass; SBA 4.1.1 client+server resolve and the registration tests pass),
and the offline Qanary_minimal_Python_example E2E is 3/3 PASS ("Sam
Panopoulos") with a freshly built pipeline image and all four components
registering via SBA 4.1.1.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@dependabot
build(deps): bump jena.version from 5.3.0 to 6.1.0
c23c8d8 
Bumps `jena.version` from 5.3.0 to 6.1.0.

Updates `org.apache.jena:jena-arq` from 5.3.0 to 6.1.0

Updates `org.apache.jena:jena-core` from 5.3.0 to 6.1.0

Updates `org.apache.jena:jena-rdfconnection` from 5.3.0 to 6.1.0

Updates `org.apache.jena:apache-jena-libs` from 5.3.0 to 6.1.0

---
updated-dependencies:
- dependency-name: org.apache.jena:apache-jena-libs
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.jena:jena-arq
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.jena:jena-core
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.jena:jena-rdfconnection
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/jena.version-6.1.0 branch from 293b5fe to c23c8d8 Compare June 27, 2026 09:22
@sonarqubecloud

sonarqubecloud Bot commented Jun 27, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file help wanted java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@anbo-de