Global announcements

docx4j release

To get this release, please see https://www.docx4java.org/downloads.html

Please note that with this release, if you are processing files > 50MB in size, you will need to set properties docx4j.openpackaging.package.MAX_UNCOMPRESSED_SIZE.unzip.error and docx4j.openpackaging.parts.MAX_BYTES.unzip.error to larger values. See https://github.com/plutext/docx4j/blob/ ... erties#L53

Release highlights:

PDF via XSL FO output: map symbol font characters to UTF-8; specify font to use for these on Linux and Windows ...

Legacy docx4j 8.3.15 and docx4j-ImportXHTML 8.3.15 for Java 8 users are now available in Maven Central .

Changes:

- Security: bump commons-lang to 3.18.0 addressing https://www.cve.org/CVERecord?id=CVE-2025-48924

- Bump other dependencies, including:

Code: Select all

   org.apache.pdfbox:pdfbox ............................ 2.0.30 -> 2.0.34
   org.apache.pdfbox:xmpbox ............................ 2.0.24 -> 2.0.34
   org.slf4j:slf4j-api ................................. 2.0.13 -> 2.0.17
   org.apache.james:apache-mime4j-core ................. 0.8.11 -> 0.8.13
   ch.qos.logback:logback-classic ...................... 1.3.14 -> 1.3.15


For instructions on getting docx4j 8.3.15, see ...

docx4j release

Thanks to those who contributed, as listed at https://github.com/plutext/docx4j/blob/ ... ANGELOG.md

To get this release, please see https://www.docx4java.org/downloads.html

Release highlights:

Security: bump commons-lang to 3.18.0 addressing https://www.cve.org/CVERecord?id=CVE-2025-48924
and addressing https://github.com/plutext/docx4j/secur ... endabot/19 and fixes #625

Bump other dependencies:

com.thoughtworks.qdox:qdox ............................ 1.12 -> 1.12.1
commons-codec:commons-codec ......................... 1.17.0 -> 1.19.0 ...

docx4j 11.5.4 and docx4j-ImportXHTML 11.5.4 are now available in Maven Central.

11.5.4 adds support for Table of Figures (TOC C switch and SEQ field), and fixes various reported issues (535, 576, 619, 624).

-ImportXHML targets Java 11 (correcting an inadvertent target in 11.5.3)

For instructions on getting docx4j 11.5.4, see https://www.docx4java.org/downloads.html

For ImportXHTML:


<dependency>
<groupId>org.docx4j</groupId>
<artifactId>docx4j-ImportXHTML-core</artifactId>
<version>11.5.4</version>
</dependency>


docx4j-ImportXHTML is also included in the docx4j-community zip distribution, ...

docx4j 11.5.3 and docx4j-ImportXHTML 11.5.3 are now available in Maven Central.

The main point of these releases is to migrate FontBox 3 (from v2). To make this possible we were waiting for FOP 2.11 (released this week) which is used for PDF generation via export-fo.

With FontBox 3 support in place, -ImportXHTML now uses the actively maintained https://github.com/openhtmltopdf/openhtmltopdf

Added also in docx4j is an option to use StAX for ...

docx4j 11.5.2 and 8.3.14 are now available in Maven Central. For downloads, go to https://www.docx4java.org/downloads.html

Fixes a bug introduced in 11.5.1 and 8.3.13: StackOverflow error caused by PropertyResolver constructor indirectly calling itself, triggered by documents in which the Normal style's hierarchy includes numbering. Users of 11.5.1 and 8.3.13 should upgrade.

11.5.2 also includes a fix for #603: getRPrChange in org.docx4j.wml.ParaRPr

docx4j 11.5.1 and 8.3.1 are now available in Maven Central. For downloads, go to https://www.docx4java.org/downloads.html

w16sdtfl has started to show up in Word releases, despite not yet being specified in . So the immediate driver for these releases is to ensure the namespace corresponding to the w16sdtfl is declared when docx4j manipulates a docx containing that prefix (which will be the case for documents edited in Word after the ...

docx4j 11.5.0 and docx4j-ImportXHTML 11.5.0 are now available in Maven Central.

Changes:

- Jakarta XML Binding 4.0 implementation (compare 11.4.x, which used the 3.0 API). Both JAXB implementations (reference/glassfish, and MOXy) are providers of jakarta.xml.bind.JAXBContextFactory, so each can be automagically discovered and loaded using service-provider loading facilities as described in the spec. The dep change from 3.0 to 4.0 API does not change docx4j at all, but makes integration easier with other jars which expect ...

docx4j-ImportXHTML 11.4.10 is now available in Maven Central at https://search.maven.org/artifact/org.d ... 1.4.10/jar

Changes:

- Update code to work with docx4j 11.4.10

- Bump pdfbox to address font initialization errors

- Bump other deps

- When converting a list which specifies a Word style, support normal paragraph styles (ie in addition to numbering styles)

See further https://github.com/plutext/docx4j-ImportXHTML

docx4j 11.4.11 is now available in Maven Central. For downloads, go to https://www.docx4java.org/downloads.html

This is a minor release; its purpose is to address recent upstream security advisories for commons-compress and batik (used in export-fo) by using mitigated versions.

The logic behind the version number is as follows:
- its docx4j 11 since it targets Java 11; If you are not using Java 11 or later, you should stick with ...