| [lyo-dev] New 7.0.0 alpha releases |
_(originally posted on [https://forum.open-services.net/t/ann-new-lyo-7-0-alpha-releases/942](https://forum.open-services.net/t/ann-new-lyo-7-0-alpha-releases/942))_ Hi everyone, We have a few alpha release announcements for you: * Lyo 7.0.0.Alpha4 * Introduces Lyo BOM (https://forum.open-services.net/t/ann-introducing-lyo-bill-of-materials-bom-to-simplify-your-dependencies/917 for more details) * Apache Commons Lang 1 dependency was removed in favour of Apache Commons Lang 3. **Addresses [CVE-2025-48924](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48924)** * Lyo 7.0.0.Alpha5 * Prevent stack overflow in JenaModelHelper when resource graph contains loops (#827, thanks to Benjamin Röhl and PTC for the contribution!) * Lyo 7.0.0.Alpha7 * Migrate to Jena 5.5 (last Jena version targeting JDK 17; thanks to @Frej and SodiusWillert for the the migration pointers and code) * `lyo-validation` was removed from the build/release due to Jena 5.x incompatibility in SHACLex. * Lyo 7.0.0-SNAPSHOT (7.0.0.Alpha8 to be released) * Migrate to Jena 5.6 (bumps the baseline to JDK 21; last Jena 5.x version) * Upgrade from Jersey 3.1.10 to 3.1.11 The recommendation is the following: * Upgrade to Lyo 6.0.0.Final * Upgrade to JDK 21 * Upgrade to Lyo 7.0.0.Alpha7. If there is any issue with the upgrade, go back in alphas (skip Alpha6) until it is working. There should be virtually no difference between 6.0.0.Final and 7.0.0.Alpha1. If you were on 7.0.0-SNAPSHOT already but are not ready to migrate just yet, switch to 7.0.0.Alpha4. /Andrew