Global announcements

docx4j 17.0.0 is now available. This version number signifies some significant changes in this release, including some minor breaking API changes.

To get this release, please see https://www.docx4java.org/downloads.html

It targets Java 11, and is compatible with Java 11, 17, 21, and we expect Java 25.

Changes in this release:

- Configurable font cache location. Fixes #677

- Embedded fonts are supposed to be obfuscated, but some producers (eg Google ...

docx4j 11.5.14 is now available.

This is an important security update because it addresses a potential denial of service attack against
an application that processes untrusted or erroneous docx files.

Thanks to https://github.com/Isopach for the report.

To get this release, please see https://www.docx4java.org/downloads.html

Changes in this release:

- PDF via FO: in multi-threaded environments, support use of a single FopFactory, configuring
fonts on ...

docx4j 11.5.13 is now available.

To get this release, please see https://www.docx4java.org/downloads.html

As per https://github.com/plutext/docx4j/blob/ ... ANGELOG.md the changes in this release:

PDF via FO: improved handling of temp files created from embedded fonts for multi-threaded environments.
The only docx4j.openpackaging.parts.WordprocessingML.ObfuscatedFontPart property which now has any effect is tmpFontDir.
Files are now not deleted until exit, unless you explicitly invoke FontTablePart's deleteEmbeddedFontTempFiles().

Misc fixes: ...

docx4j 11.5.12 is now available.

To get this release, please see https://www.docx4java.org/downloads.html

Changes in this release:

• FORMTEXT fields: Support merging data into them; better, converting to data-bound content controls.
  
• OpenDoPE XHTML importing. New property docx4j.model.datastorage.BindingTraverser.XHTML.PrioritiseRPr.
  Everything in the SDT rPr is applied. (Selecting the SDT in Word and applying direct formatting is the easiest way to configure the SDT rPr).
  This setting determines whether the rPr or ...

docx4j 11.5.11 is now available.

(docx4j 11.5.10 is identical and that release number is skipped)

To get this release, please see https://www.docx4java.org/downloads.html

Changes in this release:

OLE handling:
- change default, so OleObjectBinaryPart is compressed by default on save for reduced file sizes.
If you need the old behaviour (eg for playing WMV files in 32-bit Powerpoint 2010),
then set new property docx4j.openpackaging.io3.stores.ZipPartStore.shouldCompress.OleObjectBinaryPart=false
- refresh of POI poifs code ...

docx4j 11.5.9 is now available.

To get this release, please see https://www.docx4java.org/downloads.html

Changes in this release:

Import "Strict" docx|pptx|xlsx

PDF via XSL FO output, more font enhancements:
- distribute metrically compatible substitute fonts for Calibri, Cambria, Times New Roman etc
(Windows users may wish to exclude these from docx4j-export-fo) and map them automatically.
(see further, Getting Started appendix 2)
- update font file ingestion code from Apache Fop
- ...

docx4j 11.5.8 is now available.

To get this release, please see https://www.docx4java.org/downloads.html

This purpose of this release is further improvements in font handling in PDF via XSL FO output, including:

• discover fonts in jars, for ease of deployment. By default it looks in /fonts in your jars (path configurable via property docx4j.fonts.PhysicalFonts.Jars.PathPrefix and can be turned off entirely with org.docx4j.fonts.discoverJarFonts.enabled=false)
• distribute symbol substitute fonts in a docx4j-export-fo-fonts-symbol jar ...

docx4j 11.5.7 is now available.

Thanks to those who contributed, see https://github.com/plutext/docx4j/blob/ ... ANGELOG.md

To get this release, please see https://www.docx4java.org/downloads.html

Changes:

PDF via XSL FO output again: symbol/bullet fixes

OpenDoPE: allow use of XPath 2 boolean semantics (org.opendope.conditions.Xpathref.XPathBoolean=cast2), and provide ability to circumvent strict type checking where a boolean is being compared to a string by casting the string (org.docx4j.openpackaging.parts.XmlPart.xpath2.typechecking=cast2). Requires Saxon ...

docx4j release

To get this release, please see https://www.docx4java.org/downloads.html

Please note that with this release, if you are processing files > 50MB in size, you will need to set properties docx4j.openpackaging.package.MAX_UNCOMPRESSED_SIZE.unzip.error and docx4j.openpackaging.parts.MAX_BYTES.unzip.error to larger values. See https://github.com/plutext/docx4j/blob/ ... erties#L53

Release highlights:

PDF via XSL FO output: map symbol font characters to UTF-8; specify font to use for these on Linux and Windows ...

Legacy docx4j 8.3.15 and docx4j-ImportXHTML 8.3.15 for Java 8 users are now available in Maven Central .

Changes:

- Security: bump commons-lang to 3.18.0 addressing https://www.cve.org/CVERecord?id=CVE-2025-48924

- Bump other dependencies, including:

Code: Select all

   org.apache.pdfbox:pdfbox ............................ 2.0.30 -> 2.0.34
   org.apache.pdfbox:xmpbox ............................ 2.0.24 -> 2.0.34
   org.slf4j:slf4j-api ................................. 2.0.13 -> 2.0.17
   org.apache.james:apache-mime4j-core ................. 0.8.11 -> 0.8.13
   ch.qos.logback:logback-classic ...................... 1.3.14 -> 1.3.15


For instructions on getting docx4j 8.3.15, see ...