[FOP-3107] Update fontbox dependency

• Type: Wish
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.8
• Fix Version/s: 2.9
• Assignee: Simon Steiner
• Reporter: Joshua Marquart
• Created: 09/Nov/22 18:12
• Updated: 10/Nov/22 13:15
• Resolved: 10/Nov/22 13:15

Description

fop 2.8 was released with the same fontbox June 2021 version 2.0.24 dependency as 2.7.

At the time of this issue creation, the minor version of org.apache.pdfbox.fontbox JAR is  2.0.27 with non-cumulative release notes identified as follows:

2.0.27: https://archive.apache.org/dist/pdfbox/2.0.27/RELEASE-NOTES.txt

2.0.26: https://archive.apache.org/dist/pdfbox/2.0.26/RELEASE-NOTES.txt

2.0.25: https://archive.apache.org/dist/pdfbox/2.0.25/RELEASE-NOTES.txt

This will clearly require testing before updating.

WORKAROUND: fop users wishing to use the higher fontbox version must explicitly override dependency inclusion with the later version.