Release Notes

6.0.0

RDF4J 6.0.0 is a major release of the Eclipse RDF4J framework. It adds broad RDF 1.2 and SPARQL 1.2 support, moves the project to Java 25 and Jakarta, replaces the public Apache HttpClient 4 integration, and includes improvements to LMDB, FedX, query execution, security and deployment. The 6.0.0 milestone contains 46 completed issues.

Highlights

• RDF 1.2 triple terms, literals with base direction, version announcements and updated RDF formats across the model, Rio, protocols and stores.
• SPARQL 1.2 grammar and evaluation.
• Correlated queries with LATERAL, implemented separately from SPARQL 1.2.
• Java 25, Jakarta Servlet, Spring 7, Jetty 12, Tomcat 11, Lucene 10, Elasticsearch 9 and Jackson 3.
• A client-neutral HTTP API with Apache HttpComponents 5 and JDK backends, plus Server HTTP support for gzip, deflate, Brotli and Zstandard compression.
• LMDB value-ID, regular-import, reader-recovery and cardinality-estimation improvements.
• FedX grouped source selection and initial RDF 1.2 query support.
• Query circuit breakers, slow-query logging and additional query-planning work.
• Hardened XML processing and broad dependency-security updates.

For a complete overview, see all issues completed for 6.0.0.

5.3.2

RDF4J 5.3.2 is a patch release that fixes 2 issues, including a security fix for XML parsing.

For a complete overview, see all issues fixed in 5.3.2.

Security

This release fixes XML parsing paths that were not fully covered by the earlier fix for CVE-2018-1000644. The vulnerability class is XML External Entity (XXE) processing: specially crafted XML input may attempt to make the parser resolve external entities or DTDs, with risks such as confidential data disclosure, denial of service, or server-side requests.

5.3.1

RDF4J 5.3.1 is a patch release that fixes 2 performance issues.

For a complete overview, see all issues fixed in 5.3.1.

Acknowledgements

This release was made possible by contributions from Håvard M. Ottestad.

• ««
• «
• 1
• 2
• 3
• 4
• 5
• »
• »»

About

Eclipse RDF4J™ is a powerful Java framework for processing and handling RDF data. This includes creating, parsing, scalable storage, reasoning and querying with RDF and Linked Data. It offers an easy-to-use API that can be connected to all leading RDF database solutions. It allows you to connect with SPARQL endpoints and create applications that leverage the power of linked data and Semantic Web.