Repository navigation
Conversation
rjrudin
requested review from
RitaChen609,
jonmille,
ngodugu-marklogic and
rjdew-progress
as code owners
September 28, 2026 14:46
rjrudin
force-pushed
the
feature/archive-write-progress
branch
from
September 28, 2026 17:02
3de9328 to
9de2b84
Compare
rjrudin
force-pushed
the
feature/incremental-write-source-uri
branch
from
September 29, 2026 15:05
610eb86 to
852607d
Compare
MLE-33310-CODEOWNERS-Update
## Summary Flux has CVEs flagged on `opennlp`, a transitive dependency pulled in via `langchain4j`. Flux's shipped/runtime langchain4j version comes through this connector's dependency declaration, not through Flux's own build file, so the fix needs to originate here. This PR bumps `langchain4jVersion` from `1.17.2` to `1.21.0`. ## Changes - Updated `langchain4jVersion` in `gradle.properties` from `1.17.2` to `1.21.0`. - `langchain4j-embeddings-all-minilm-l6-v2` remains intentionally pinned to `1.14.1-beta24` (see comment in `marklogic-spark-connector/build.gradle`) due to a GLIBC 2.29 requirement for newer betas on the CI build server. This is unrelated to the CVE and was left unchanged. ## Testing - `./gradlew :marklogic-spark-connector:compileJava compileTestJava` — passes, no API breakage from the langchain4j upgrade. - `./gradlew :marklogic-spark-connector:dependencies --configuration runtimeClasspath` — confirms `opennlp-tools` resolves to `2.5.11` (fixed version) with no dependency conflicts. - `./gradlew test` (full suite, against local Docker MarkLogic instance) — BUILD SUCCESSFUL, all tests pass. ## Follow-up Once this is merged and released, Flux's `connectorVersion` needs to be bumped to pick up this change, completing the CVE remediation end-to-end (tracked in Flux PR for MLE-29630).
MLE-33310: Update CODEOWNERS file for Dev Tools
MLE-29630: Bump langchain4j to latest version
Allows for storing the source URI as a metadata key on a document.
rjrudin
force-pushed
the
feature/incremental-write-source-uri
branch
from
October 12, 2026 13:43
852607d to
add540e
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Allows for storing the source URI as a metadata key on a document.
This is intended to be rebased once the feature/archive-write-progress PR is merged.
Depends on marklogic/java-client-api#1980 being merged and the Java Client being published internally first.