From 24d551ce637d17344416b9ad21ab6a9bebd05d7e Mon Sep 17 00:00:00 2001
From: Eric Pugh <epugh@opensourceconnections.com>
Date: Sat, 27 Jun 2026 13:44:35 -0400
Subject: [PATCH 1/2] Upgrade to recently released OpenNLP 1.9.5 that fixes
 cves

---
 versions.lock  | 2 +-
 versions.props | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/versions.lock b/versions.lock
index db1c3154cffd..689b56d24e29 100644
--- a/versions.lock
+++ b/versions.lock
@@ -11,7 +11,7 @@ org.antlr:antlr4-runtime:4.11.1 (1 constraints: 39053f3b)
 org.apache.commons:commons-compress:1.19 (1 constraints: df04fa30)
 org.apache.httpcomponents:httpclient:4.5.13 (1 constraints: 3f054e3b)
 org.apache.httpcomponents:httpcore:4.4.13 (1 constraints: 591016a2)
-org.apache.opennlp:opennlp-tools:1.9.4 (1 constraints: 10050f36)
+org.apache.opennlp:opennlp-tools:1.9.5 (1 constraints: 11051036)
 org.carrot2:morfologik-fsa:2.1.9 (1 constraints: db0d9c36)
 org.carrot2:morfologik-polish:2.1.9 (1 constraints: 0e050136)
 org.carrot2:morfologik-stemming:2.1.9 (2 constraints: 1312040d)
diff --git a/versions.props b/versions.props
index 35d91f794713..7f62d4d6d437 100644
--- a/versions.props
+++ b/versions.props
@@ -10,7 +10,7 @@ net.sourceforge.nekohtml:nekohtml=1.9.17
 org.antlr:antlr4*=4.11.1
 org.apache.commons:commons-compress=1.19
 org.apache.httpcomponents:httpclient=4.5.13
-org.apache.opennlp:opennlp-tools=1.9.4
+org.apache.opennlp:opennlp-tools=1.9.5
 org.assertj:*=3.21.0
 org.carrot2:morfologik-*=2.1.9
 org.eclipse.jetty:*=9.4.41.v20210516
@@ -19,4 +19,4 @@ org.locationtech.jts:jts-core=1.17.0
 org.locationtech.spatial4j:*=0.8
 org.ow2.asm:*=7.2
 ua.net.nlp:morfologik-ukrainian-search=4.9.1
-xerces:xercesImpl=2.12.0
\ No newline at end of file
+xerces:xercesImpl=2.12.0

From ad1132e401d83392d205005946d86a9f33736fb9 Mon Sep 17 00:00:00 2001
From: Eric Pugh <epugh@opensourceconnections.com>
Date: Sat, 27 Jun 2026 13:48:09 -0400
Subject: [PATCH 2/2] Add in changelog entry

---
 lucene/CHANGES.txt | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lucene/CHANGES.txt b/lucene/CHANGES.txt
index 405f626bfd3e..23cf6617e6e7 100644
--- a/lucene/CHANGES.txt
+++ b/lucene/CHANGES.txt
@@ -3,6 +3,8 @@ Lucene Change Log
 For more information on past and future Lucene versions, please see:
 http://s.apache.org/luceneversions
 
+* GITHUB#16301: Upgrade OpenNLP to 1.9.5. (Eric Pugh)
+
 ======================== Lucene 9.12.4 =======================
 
 Bug Fixes