[TIKA-2535] Use latest org.opengis:geoapi to avoid rejected/EOL'd jsr-275 dependency

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.16, 1.17
• Fix Version/s: 1.18, 2.0.0
• Component/s: parser

Environment

All

• Assignee: Tim Allison
• Reporter: Richard Jones
• Created: 03/Jan/18 15:02
• Updated: 12/Apr/21 13:00
• Resolved: 23/Jan/18 16:21

Description

Tika currently depends on the very old (June 2011) 3.0.0 version of org.opengis:geoapi
which in turn unfortunately pulls in the rejected jsr-275 as a dependency (which is EOL).

However the latest 3.0.1 version of org.opengis:geoapi released recently (Sept 2017) switches to depending on the active 1.0 version of javax.measure.unit-api which is an implementation of jsr-363 which was accepted and effectively replaced the rejected jsr-275.

Therefore requesting that Tika move to the 3.0.1 version of org.opengis:geoapi

Issue Links

• is depended upon by: NIFI-4806 Upgrade to Tika/Tika-Parsers 1.19 to resolve TIKA-2535 and CVEs reported against all releases prior to 1.19
• is related to: TIKA-2541 Referenced version of Apache SIS (org.apache.sis) is branch EOL
• is related to: SIS-372 Upgrade to GeoAPI 3.0.1
• is related to: SIS-334 Replace JSR-275 dependency by JSR-363
• is related to: LEGAL-360 Is JSR-275 0.9.3 Category A or B (or X)?