From 430ce48ee5560c4203248d30ff9b50d46feb8515 Mon Sep 17 00:00:00 2001
From: Kal Ahmed <kal.ahmed@epimorphics.com>
Date: Tue, 25 Nov 2025 10:00:24 +0000
Subject: [PATCH] Bump Jena and Tomcat versions Jena 5.5 -> 5.6 Tomcat 11.0.10
 -> 11.0.12 Both updates are to address reported vulnerabilities in the older
 versions

---
 pom.xml   | 4 ++--
 v4_0_0.md | 3 +--
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index dae4f2b..171b242 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,8 +14,8 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <maven.compiler.source>21</maven.compiler.source>
     <maven.compiler.target>21</maven.compiler.target>
-    <tomcat.version>11.0.10</tomcat.version>
-    <jena.version>5.5.0</jena.version>
+    <tomcat.version>11.0.12</tomcat.version>
+    <jena.version>5.6.0</jena.version>
     <lib.version>4.0.0-SNAPSHOT</lib.version>
     <jersey.version>3.1.11</jersey.version>
   </properties>
diff --git a/v4_0_0.md b/v4_0_0.md
index 7d29ebf..17c3f66 100644
--- a/v4_0_0.md
+++ b/v4_0_0.md
@@ -4,7 +4,7 @@ Appbase Version 4.0.0
 * This version upgrades the following dependencies with major impact.
   This may cause backwards compatibility issues for applications using Appbase:
   * Tomcat 9.0 -> 11.0
-  * Jena 3.9 -> 5.5
+  * Jena 3.9 -> 5.6
   * Lib 3.1 -> 4.0
   * Jersey 2.25 -> 3.1
 * Replaced all usages of javax servlet infrastructure with jakarta.
@@ -13,4 +13,3 @@ Appbase Version 4.0.0
   * It is directly implemented by RDFConnectionDatasetAccessor and indirectly by various wrapper classes which are unchanged from the previous version.
   * It has removed the `containsModel` method since no Jena 5 equivalent exists.
     Instead, use `getModel` to obtain the model, then `isEmpty` on the model.
-