Updating for 1.9 EOL

src/main/jbake/assets/sitemap.xml

@@ -91,14 +91,24 @@
 </url>
 <url>
   <loc>https://opennlp.apache.org/security.html</loc>
-  <lastmod>2026-08-05T00:00:00+00:00</lastmod>
+  <lastmod>2026-08-10T00:00:00+00:00</lastmod>
   <priority>0.80</priority>
 </url>
 <url>
   <loc>https://opennlp.apache.org/privacy-policy.html</loc>
   <lastmod>2017-11-02T10:51:58+00:00</lastmod>
   <priority>0.80</priority>
 </url>
+<url>
+  <loc>https://opennlp.apache.org/news/news-2026-08-10.html</loc>
+  <lastmod>2026-08-10T00:00:00+00:00</lastmod>
+  <priority>0.68</priority>
+</url>
+<url>
+  <loc>https://opennlp.apache.org/news/release-195.html</loc>
+  <lastmod>2026-06-18T00:00:00+00:00</lastmod>
+  <priority>0.66</priority>
+</url>
 <url>
   <loc>https://opennlp.apache.org/news/release-251.html</loc>
   <lastmod>2024-12-06T09:30:00+00:00</lastmod>

src/main/jbake/content/news/news-2026-08-10.ad

@@ -0,0 +1,63 @@
+////
+   Licensed to the Apache Software Foundation (ASF) under one
+   or more contributor license agreements.  See the NOTICE file
+   distributed with this work for additional information
+   regarding copyright ownership.  The ASF licenses this file
+   to you under the Apache License, Version 2.0 (the
+   "License"); you may not use this file except in compliance
+   with the License.  You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing,
+   software distributed under the License is distributed on an
+   "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+   KIND, either express or implied.  See the License for the
+   specific language governing permissions and limitations
+   under the License.
+////
+= Apache OpenNLP 1.9.x has reached End of Life
+Apache OpenNLP
+2026-08-10
+:jbake-type: post
+:jbake-tags: news
+:jbake-status: published
+:category: news
+:idprefix:
+
+The Apache OpenNLP team announces that the 1.9.x release line, and with it the whole 1.x series, has reached
+end of life. link:/news/release-195.html[Apache OpenNLP 1.9.5], released in June 2026, is the final
+release of that line.
+
+== What this means
+
+* There will be no further 1.9.x releases.
+* No bug fixes, dependency updates or security fixes will be made for 1.9.x or any earlier version.
+* Issues can only be addressed on a supported release.
+
+The supported release lines are the 2.x and 3.x series. The current releases of both are on our
+link:/download.html[download page]. See our link:/security.html[security page] for the version support policy.
+
+Existing 1.x artifacts remain available from https://repo1.maven.org/maven2/org/apache/opennlp/[Maven Central]
+and the https://archive.apache.org/dist/opennlp/[Apache archive], but they are unmaintained and are not
+recommended for new or existing deployments.
+
+== Upgrading to a supported release
+
+We encourage all users still on 1.x to upgrade. A few things to be aware of:
+
+* OpenNLP 1.9.x builds on Java 8. OpenNLP 2.5.x requires Java 17 or later, and OpenNLP 3.x
+  requires Java 21 or later.
+* The `org.apache.opennlp:opennlp-tools` coordinates are unchanged in the 2.x line, so the dependency
+  itself does not need to be replaced. In 3.x the project has been modularized and `opennlp-runtime`
+  becomes the entry-point dependency. See the link:/maven-dependency.html[Maven]
+  and link:/gradle-dependency.html[Gradle] pages for the current coordinates.
+* Models trained with OpenNLP 1.x still load in 2.x and 3.x. New pre-trained models for a
+  growing number of languages are available on our link:/models.html[models page].
+* The current developer manual and Javadoc are on the link:/docs/index.html[documentation page].
+  The archived 1.x documentation remains available link:/docs/legacy.html[here].
+
+If you run into problems while upgrading, please reach out on the
+link:/mailing-lists.html[users mailing list]. We are happy to help.
+
+--The Apache OpenNLP Team

src/main/jbake/content/news/release-195.ad

@@ -0,0 +1,62 @@
+////
+   Licensed to the Apache Software Foundation (ASF) under one
+   or more contributor license agreements.  See the NOTICE file
+   distributed with this work for additional information
+   regarding copyright ownership.  The ASF licenses this file
+   to you under the Apache License, Version 2.0 (the
+   "License"); you may not use this file except in compliance
+   with the License.  You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing,
+   software distributed under the License is distributed on an
+   "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+   KIND, either express or implied.  See the License for the
+   specific language governing permissions and limitations
+   under the License.
+////
+= Apache OpenNLP 1.9.5 released
+Apache OpenNLP
+2026-06-18
+:jbake-type: post
+:jbake-tags: community
+:jbake-status: published
+:category: news
+:idprefix:
+
+The Apache OpenNLP team is pleased to announce the release of Apache OpenNLP 1.9.5.
+
+The Apache OpenNLP library is a machine learning based toolkit for the processing of natural language text.
+
+It supports the most common NLP tasks, such as tokenization, sentence segmentation, part-of-speech tagging, named entity extraction, chunking, parsing, and coreference resolution.
+
+Apache OpenNLP 1.9.5 binary and source distributions are available from the
+https://archive.apache.org/dist/opennlp/[Apache archive,role=external,window=_blank].
+
+The OpenNLP library is distributed by Maven Central as well. See the link:/maven-dependency.html[Maven dependency] page for more details.
+
+== What's new in Apache OpenNLP 1.9.5
+
+This is a *maintenance release* on the 1.9.x line. It addresses several security vulnerabilities affecting
+Apache Lucene 8.x and Apache Solr 8.x, which depend on OpenNLP 1.9.x.
+
+=== Security fixes:
+* `DictionaryEntryPersistor` now parses XML through the hardened `XmlUtil` helper (OPENNLP-1819)
+* `ExtensionLoader` is now restricted to allowlisted package prefixes (OPENNLP-1820)
+* `AbstractModelReader` now guards against oversized array allocation from a crafted model (OPENNLP-1821, OPENNLP-1826)
+* Unsupported XML parser hardening options are now tolerated instead of failing (OPENNLP-1835)
+
+=== Dependency Updates
+* Update Apache UIMA uimaj-core to 3.3.1
+* Update Morfologik to 2.1.9
+* Update the Jersey/GlassFish dependency to address CVE-2021-28168
+* Update test-scope JUnit to 4.13.1 and Commons IO to 2.7
+
+For background on this release, see the
+https://lists.apache.org/thread/nvzl4g2b6rc149nf54xpnorjso5h0mlp[discussion on the dev mailing list,role=external,window=_blank].
+
+NOTE: Apache OpenNLP 1.9.5 is the final release of the 1.9.x line. See the
+link:/news/news-2026-08-10.html[end of life announcement] for details.
+
+--The Apache OpenNLP Team

src/main/jbake/content/security.ad

@@ -34,8 +34,8 @@ describes what to expect.
 == Supported Versions
 
 Security fixes are made to the most recent release of the 2.x line and to the current 3.x line.
-Apache OpenNLP 1.x is end of life and receives no fixes; users still on 1.x should
-link:/download.html[upgrade].
+Apache OpenNLP 1.x is link:/news/news-2026-08-10.html[end of life] and receives no fixes; users still on 1.x
+should link:/download.html[upgrade].
 
 == Security Model