yakov-feldman · Sep 11, 2026 · Feb 2, 2026 · Feb 3, 2026 · Feb 4, 2026 · Feb 5, 2026
diff --git a/.copyrightconfig b/.copyrightconfig
@@ -0,0 +1,14 @@
+# COPYRIGHT VALIDATION CONFIG
+# ---------------------------------
+# Required start year (keep fixed; end year auto-updates in check output)
+startyear: 2011
+
+# Optional exclusions list (comma-separated). Leave commented if none.
+# Rules:
+#   - Relative paths (no leading ./)
+#   - Simple * wildcard only (no recursive **)
+#   - Use sparingly (third_party, generated, binary assets)
+#   - Dotfiles already skipped automatically
+# Enable by removing the leading '# ' from the next line and editing values.
+# filesexcluded: third_party/*, docs/generated/*.md, assets/*.png, scripts/temp_*.py, vendor/lib.js
+filesexcluded: .github/*, README.md
diff --git a/.gitignore b/.gitignore
@@ -4,3 +4,4 @@
 target
 deliverable
 .idea
+.vscode
diff --git a/NOTICE.txt b/NOTICE.txt
diff --git a/README.md b/README.md
@@ -15,13 +15,21 @@ The MarkLogic Connector for Hadoop is an extension to Hadoop’s MapReduce frame
 
 ## Release Notes
 
+### What's New in mlcp 12.1
+
+- Added support for isolated HTTP and XDBC requests. **Note:** as a result of this change, older versions of mlcp are no longer compatible with MarkLogic Server 12.1.0 and beyond; please refer to the [release notes](https://docs.progress.com/bundle/marklogic-server-whats-new-12/page/topics/release-notes.html) for details.
+- Upgraded Apache Avro to address a known security vulnerability.
+- Strengthened TLS security by removing support for the outdated TLSv1 protocol.
+- Fixed several security and stability issues.
+- Various reliability and robustness improvements based on static code analysis.
+
 ### What's New in mlcp 12.0.1
 
 - No new updates
-  
+
 ### What's New in mlcp 12.0.0
 
-- Replaced the commons-csv-marklogic library with the standard Apache Commons CSV library for improved compatibility and maintainability
+- Replaced the commons-csv-marklogic library with the standard Apache Commons CSV library for improved compatibility and maintainability.
 - Upgraded commons-csv and commons-io libraries to the latest stable versions.
 - Upgraded commons-beanutils, xstream and avro libraries to mitigate security vulnerabilities.
 - Removed unused dependencies: hadoop-shaded-protobuf_3_25, jena-shaded-guava.

diff --git a/pom.xml b/pom.xml
@@ -3,7 +3,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>com.marklogic</groupId>
   <artifactId>mlcp</artifactId>
-  <version>12.0.1</version>
+  <version>12.1.0</version>
   <name>MarkLogic Content Pump</name>
   <description>MarkLogic Content Pump</description>
   <url>https://github.com/marklogic/marklogic-contentpump</url>
@@ -17,7 +17,7 @@
   </licenses>
 
   <properties>
-    <versionString>12.0.1</versionString>
+    <versionString>12.1.0</versionString>
     <xccVersion>${versionString}</xccVersion>
     <hadoopVersion>3.4.0</hadoopVersion>
     <jacksonVersion>2.17.1</jacksonVersion>
@@ -1615,7 +1615,7 @@
     <dependency>
       <groupId>org.apache.avro</groupId>
       <artifactId>avro</artifactId>
-      <version>1.11.4</version>
+      <version>1.11.5</version>
     </dependency>
     <dependency>
       <groupId>commons-cli</groupId>

diff --git a/src/lib/marklogic-xcc-12.0.1.jar b/src/lib/marklogic-xcc-12.0.1.jar
diff --git a/src/lib/marklogic-xcc-12.1.0.jar b/src/lib/marklogic-xcc-12.1.0.jar
diff --git a/src/main/java/com/marklogic/contentpump/AggregateXMLInputFormat.java b/src/main/java/com/marklogic/contentpump/AggregateXMLInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/AggregateXMLReader.java b/src/main/java/com/marklogic/contentpump/AggregateXMLReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2025 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -110,6 +110,16 @@ public void initialize(InputSplit inSplit, TaskAttemptContext context)
         initAggConf(context);
 
         f = XMLInputFactory.newInstance();
+        try {
+            f.setProperty(XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, false);
+        } catch (IllegalArgumentException e) {
+            LOG.warn("Failed configuring XXE-prevention security property IS_SUPPORTING_EXTERNAL_ENTITIES on XMLInputFactory", e);
+        }
+        try {
+            f.setProperty(XMLInputFactory.SUPPORT_DTD, false);
+        } catch (IllegalArgumentException e) {
+            LOG.warn("Failed configuring XXE-prevention security property SUPPORT_DTD on XMLInputFactory", e);
+        }
         setFile(((FileSplit) inSplit).getPath());
         fs = file.getFileSystem(context.getConfiguration());
         FileStatus status = fs.getFileStatus(file);

diff --git a/src/main/java/com/marklogic/contentpump/ArchiveInputFormat.java b/src/main/java/com/marklogic/contentpump/ArchiveInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2015 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/ArchiveOutputFormat.java b/src/main/java/com/marklogic/contentpump/ArchiveOutputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2015 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/ArchiveRecordReader.java b/src/main/java/com/marklogic/contentpump/ArchiveRecordReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2017 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/ColumnDataType.java b/src/main/java/com/marklogic/contentpump/ColumnDataType.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -35,7 +35,7 @@ public Object parse(String s) throws Exception {
     NUMBER {
         @Override
         public Object parse(String s) throws Exception {
-            s.trim();
+            s = s.trim();
             if ("".equals(s)) {
                 throw new Exception("missing value");
             }
@@ -46,14 +46,14 @@ public Object parse(String s) throws Exception {
     BOOLEAN {
         @Override
         public Object parse(String s) throws Exception {
-            s.trim();
+            s = s.trim();
             if ("".equals(s)) {
                 throw new Exception("missing value");
             } else if (!"true".equalsIgnoreCase(s) && 
                     !"false".equalsIgnoreCase(s)) {
                 throw new ParseException("", 0);
             }
-            return new Boolean(s);
+            return Boolean.valueOf(s);
         }
 
     };

diff --git a/src/main/java/com/marklogic/contentpump/CombineDocumentInputFormat.java b/src/main/java/com/marklogic/contentpump/CombineDocumentInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CombineDocumentReader.java b/src/main/java/com/marklogic/contentpump/CombineDocumentReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CombineDocumentSplit.java b/src/main/java/com/marklogic/contentpump/CombineDocumentSplit.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedAggXMLInputFormat.java b/src/main/java/com/marklogic/contentpump/CompressedAggXMLInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedAggXMLReader.java b/src/main/java/com/marklogic/contentpump/CompressedAggXMLReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -69,6 +69,16 @@ public void initialize(InputSplit inSplit, TaskAttemptContext context)
         initConfig(context);
         initAggConf(context);
         f = XMLInputFactory.newInstance();
+        try {
+            f.setProperty(XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, false);
+        } catch (IllegalArgumentException e) {
+            LOG.warn("Failed configuring XXE-prevention security property IS_SUPPORTING_EXTERNAL_ENTITIES on XMLInputFactory", e);
+        }
+        try {
+            f.setProperty(XMLInputFactory.SUPPORT_DTD, false);
+        } catch (IllegalArgumentException e) {
+            LOG.warn("Failed configuring XXE-prevention security property SUPPORT_DTD on XMLInputFactory", e);
+        }
         setFile(((FileSplit) inSplit).getPath());
         fs = file.getFileSystem(context.getConfiguration());
 

diff --git a/src/main/java/com/marklogic/contentpump/CompressedDelimitedJSONInputFormat.java b/src/main/java/com/marklogic/contentpump/CompressedDelimitedJSONInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2015 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedDelimitedTextInputFormat.java b/src/main/java/com/marklogic/contentpump/CompressedDelimitedTextInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2015 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedDelimitedTextReader.java b/src/main/java/com/marklogic/contentpump/CompressedDelimitedTextReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2017 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedDocumentInputFormat.java b/src/main/java/com/marklogic/contentpump/CompressedDocumentInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedDocumentReader.java b/src/main/java/com/marklogic/contentpump/CompressedDocumentReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2017 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedRDFInputFormat.java b/src/main/java/com/marklogic/contentpump/CompressedRDFInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/CompressedRDFReader.java b/src/main/java/com/marklogic/contentpump/CompressedRDFReader.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2023 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/ContentPump.java b/src/main/java/com/marklogic/contentpump/ContentPump.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -333,7 +333,11 @@ public boolean accept(File dir, String name) {
 
         // set lib jars
         StringBuilder jars = new StringBuilder();
-        for (File jar : cpHomeDir.listFiles(filter)) {
+        File[] libJars = cpHomeDir.listFiles(filter);
+        if (libJars == null) {
+            throw new RuntimeException("Unable to list library jars in directory: " + cpHomeDir.getAbsolutePath());
+        }
+        for (File jar : libJars) {
             if (jars.length() > 0) {
                 jars.append(',');
             }

diff --git a/src/main/java/com/marklogic/contentpump/ContentPumpReporter.java b/src/main/java/com/marklogic/contentpump/ContentPumpReporter.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2013 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/ContentWithFileNameWritable.java b/src/main/java/com/marklogic/contentpump/ContentWithFileNameWritable.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/DatabaseContentInputFormat.java b/src/main/java/com/marklogic/contentpump/DatabaseContentInputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2020 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2016 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

diff --git a/src/main/java/com/marklogic/contentpump/DatabaseContentOutputFormat.java b/src/main/java/com/marklogic/contentpump/DatabaseContentOutputFormat.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2011-2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+ * Copyright (c) 2011-2021 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,3 +4,4 @@ @@
     target
     deliverable
     .idea
+    .vscode