You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@fesod.apache.org by "alaahong (via GitHub)" <gi...@apache.org> on 2026/10/07 05:47:11 UTC
[PR] docs: add blog post for 2.1.0-incubating release [fesod]
alaahong opened a new pull request, #1185:
URL: https://github.com/apache/fesod/pull/1185
## Summary
- Add the official release blog post for **2.1.0-incubating** in both English and Chinese.
- English: `website/blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md`
- Chinese: `website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md`
## Content
- Milestone significance: 110 PRs, 10 new contributors, reproducible builds, security hardening
- Global community highlight: contributors from China (13), Ireland (1), Latvia (1), South Korea (1)
- Key highlights: new features (column-based read/write, freeze panes, etc.), security & compliance, stability fixes
- Acknowledgments and how to get involved
## Test plan
- [ ] Files follow existing blog format (e.g., 2.0.1 post structure, ASF license header, `<!-- truncate -->` marker)
- [ ] Author metadata `alaahong` resolves to Zhe Zhang in `authors.json`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [PR] docs: add blog post for 2.1.0-incubating release [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on code in PR #1185:
URL: https://github.com/apache/fesod/pull/1185#discussion_r4203695729
##########
website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating 正式发布"
+description: "Apache Fesod (Incubating) 社区欣然宣布，Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！"
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**2026年10月** —— Apache Fesod (Incubating) 社区欣然宣布，**Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！**
+
+这是 Fesod 在 **Apache 软件基金会 (ASF)** 孵化器治理下持续推进的一次版本迭代。本版本共合并 **110 个 Pull Request**，汇聚了来自全球各地贡献者的智慧，带来了按列读写等重磅新能力、更完善的 Excel 格式兼容性、性能优化，并通过完全可复现的构建进一步强化了供应链安全。
+
+<!-- truncate -->
+
+## 里程碑意义：从合规走向能力
+
+在 2.0.x 系列打牢合规与治理基础之后，2.1.0 标志着 Fesod 从"整理内务"转向**规模化交付新功能**：
+
+* **110 个 PR 合并：** 涵盖新功能、缺陷修复、重构、文档、测试与构建自动化等各个方面。
+* **10 位新贡献者，来自四个国家：** 中国、爱尔兰、拉脱维亚与韩国——社区持续成长，国际化程度日益加深。
+* **可复现构建：** 通过固定的 `project.build.outputTimestamp` 实现字节级一致的可复现构件，这是供应链安全的关键改进。
+* **安全加固：** 远程 URL 图片访问必须显式加入白名单，同时修复了多项依赖漏洞（含 XXE、CVE）。
+
+## 版本核心亮点
+
+### 1. 新特性：更灵活的 Excel 处理
+
+* **冻结窗格（Freeze Pane）：** 写入时可通过 `@FreezePane` 注解或自定义 `WriteHandler` 冻结行与列。
+* **XLS 与 CSV 按列读取：** 在原有 XLSX 按列读取的基础上，2.1.0 将列级读取控制扩展至老旧的 **XLS** 与 **CSV** 文件，可按需只读取所需列。
+* **无 Bean 模式流式表头 API：** 不使用注解 Bean 时，可通过流式 API 以编程方式构建表头。
+* **`java.time.LocalTime` 转换器：** 读写链路原生支持 `LocalTime` 值的转换。
+* **图片转换器精细化：** `StringImageConverter` 拆分为专用的 `Pathname` 与 `Base64` 两个转换器，图片处理更清晰、更安全。
+* **`FesodDoc` 初始结构：** 新模块为未来支持 Word 文档（`.docx`）打下基础。
Review Comment:
已在 a1b5c541 中删除：亮点列表与「关键变更概览」中的 \FesodDoc\ 条目均已移除。
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [PR] docs: add blog post for 2.1.0-incubating release [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on code in PR #1185:
URL: https://github.com/apache/fesod/pull/1185#discussion_r4203699213
##########
website/blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating Officially Released"
+description: "The Apache Fesod community is pleased to announce the official release of Apache Fesod (Incubating) 2.1.0-incubating."
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**October 2026** — The Apache Fesod (Incubating) community is pleased to announce the official release of **Apache Fesod (Incubating) 2.1.0-incubating**.
+
+This release continues Fesod's steady evolution under the Apache Software Foundation (ASF) Incubator. With **110 pull requests** merged by contributors from around the world, it delivers significant new capabilities for column-based reading and writing, enhanced Excel format compatibility, performance optimizations, and strengthened supply-chain security through fully reproducible builds.
+
+<!-- truncate -->
+
+## Milestone Significance: From Compliance to Capability
+
+After laying a solid compliance and governance foundation in the 2.0.x releases, version 2.1.0 marks Fesod's transition from "getting the house in order" to **shipping meaningful new features at scale**:
+
+* **110 PRs Merged:** Covering features, bug fixes, refactoring, documentation, testing, and build automation.
+* **10 New Contributors from Four Countries:** Hailing from **China, Ireland, Latvia, and South Korea**, this release's contributors reflect Fesod's growing international reach.
+* **Reproducible Builds:** Fixed `project.build.outputTimestamp` guarantees byte-for-byte reproducible artifacts — a key supply-chain security improvement.
+* **Security Hardening:** Remote URL image access now requires an explicit allowlist, and multiple dependency vulnerabilities (XXE, CVE fixes) were resolved.
+
+## Key Highlights
+
+### 1. New Features for Flexible Excel Processing
+
+* **Freeze Pane Support:** Freeze rows and columns when writing via the `@FreezePane` annotation or a custom `WriteHandler`.
+* **Column-Based Reading for XLS and CSV:** In addition to existing column-based reading for XLSX, `2.1.0` extends column-level read control to legacy **XLS** and **CSV** files, letting you read only the columns you need.
+* **Fluent Header API for No-Bean Mode:** Build headers programmatically with a fluent API when you are not using annotated beans.
+* **`java.time.LocalTime` Converters:** Native conversion support for `LocalTime` values in read and write paths.
+* **Image Converter Refinement:** `StringImageConverter` was split into dedicated `Pathname` and `Base64` converters for clearer, safer image handling.
+* **`FesodDoc` Initial Structure:** A new module lays the groundwork for future Word document (`.docx`) support.
Review Comment:
Removed in a1b5c541: the `FesodDoc` highlight and the matching line under the "Key Changes at a Glance" section are gone.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [PR] docs: add blog post for 2.1.0-incubating release [fesod]
Posted by "Copilot (via GitHub)" <gi...@apache.org>.
Copilot commented on code in PR #1185:
URL: https://github.com/apache/fesod/pull/1185#discussion_r4203630284
##########
website/blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating Officially Released"
+description: "The Apache Fesod community is pleased to announce the official release of Apache Fesod (Incubating) 2.1.0-incubating."
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**October 2026** — The Apache Fesod (Incubating) community is pleased to announce the official release of **Apache Fesod (Incubating) 2.1.0-incubating**.
+
+This release continues Fesod's steady evolution under the Apache Software Foundation (ASF) Incubator. With **110 pull requests** merged by contributors from around the world, it delivers significant new capabilities for column-based reading and writing, enhanced Excel format compatibility, performance optimizations, and strengthened supply-chain security through fully reproducible builds.
Review Comment:
The tagged 2.1.0 commit ends at PR #1146 and contains 109 PRs merged to `main` after the 2.0.2 tag. The apparent 110th PR is this blog PR (#1183), merged after the release tag, while PR #936 targeted `dev-word-branch`. Please report 109 so the release metric reflects what was actually shipped.
This issue also appears on line 35 of the same file.
##########
website/blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating Officially Released"
+description: "The Apache Fesod community is pleased to announce the official release of Apache Fesod (Incubating) 2.1.0-incubating."
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**October 2026** — The Apache Fesod (Incubating) community is pleased to announce the official release of **Apache Fesod (Incubating) 2.1.0-incubating**.
+
+This release continues Fesod's steady evolution under the Apache Software Foundation (ASF) Incubator. With **110 pull requests** merged by contributors from around the world, it delivers significant new capabilities for column-based reading and writing, enhanced Excel format compatibility, performance optimizations, and strengthened supply-chain security through fully reproducible builds.
+
+<!-- truncate -->
+
+## Milestone Significance: From Compliance to Capability
+
+After laying a solid compliance and governance foundation in the 2.0.x releases, version 2.1.0 marks Fesod's transition from "getting the house in order" to **shipping meaningful new features at scale**:
+
+* **110 PRs Merged:** Covering features, bug fixes, refactoring, documentation, testing, and build automation.
+* **10 New Contributors from Four Countries:** Hailing from **China, Ireland, Latvia, and South Korea**, this release's contributors reflect Fesod's growing international reach.
Review Comment:
This attributes all four countries to the 10 newcomers, but the later community section explicitly attributes the four-country distribution to all 16 named contributors. Keep those two metrics separate so the milestone does not overstate the newcomers' geographic distribution.
##########
website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating 正式发布"
+description: "Apache Fesod (Incubating) 社区欣然宣布，Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！"
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**2026年10月** —— Apache Fesod (Incubating) 社区欣然宣布，**Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！**
+
+这是 Fesod 在 **Apache 软件基金会 (ASF)** 孵化器治理下持续推进的一次版本迭代。本版本共合并 **110 个 Pull Request**，汇聚了来自全球各地贡献者的智慧，带来了按列读写等重磅新能力、更完善的 Excel 格式兼容性、性能优化，并通过完全可复现的构建进一步强化了供应链安全。
+
+<!-- truncate -->
+
+## 里程碑意义：从合规走向能力
+
+在 2.0.x 系列打牢合规与治理基础之后，2.1.0 标志着 Fesod 从"整理内务"转向**规模化交付新功能**：
+
+* **110 个 PR 合并：** 涵盖新功能、缺陷修复、重构、文档、测试与构建自动化等各个方面。
+* **10 位新贡献者，来自四个国家：** 中国、爱尔兰、拉脱维亚与韩国——社区持续成长，国际化程度日益加深。
Review Comment:
这里把四国分布归到了 10 位新贡献者身上，但后文明确说明四国分布对应的是全部 16 位具名贡献者。请拆开两个统计口径，避免夸大新贡献者的地域分布。
##########
website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating 正式发布"
+description: "Apache Fesod (Incubating) 社区欣然宣布，Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！"
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**2026年10月** —— Apache Fesod (Incubating) 社区欣然宣布，**Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！**
+
+这是 Fesod 在 **Apache 软件基金会 (ASF)** 孵化器治理下持续推进的一次版本迭代。本版本共合并 **110 个 Pull Request**，汇聚了来自全球各地贡献者的智慧，带来了按列读写等重磅新能力、更完善的 Excel 格式兼容性、性能优化，并通过完全可复现的构建进一步强化了供应链安全。
Review Comment:
2.1.0 标签在 2.0.2 之后实际包含 109 个合并到 `main` 的 PR，而不是 110 个。第 110 个是发布标签之后才合并的当前博客 PR #1183；PR #936 则合并到了 `dev-word-branch`。请将发布指标改为 109。
This issue also appears on line 35 of the same file.
##########
website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating 正式发布"
+description: "Apache Fesod (Incubating) 社区欣然宣布，Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！"
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**2026年10月** —— Apache Fesod (Incubating) 社区欣然宣布，**Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！**
+
+这是 Fesod 在 **Apache 软件基金会 (ASF)** 孵化器治理下持续推进的一次版本迭代。本版本共合并 **110 个 Pull Request**，汇聚了来自全球各地贡献者的智慧，带来了按列读写等重磅新能力、更完善的 Excel 格式兼容性、性能优化，并通过完全可复现的构建进一步强化了供应链安全。
+
+<!-- truncate -->
+
+## 里程碑意义：从合规走向能力
+
+在 2.0.x 系列打牢合规与治理基础之后，2.1.0 标志着 Fesod 从"整理内务"转向**规模化交付新功能**：
+
+* **110 个 PR 合并：** 涵盖新功能、缺陷修复、重构、文档、测试与构建自动化等各个方面。
+* **10 位新贡献者，来自四个国家：** 中国、爱尔兰、拉脱维亚与韩国——社区持续成长，国际化程度日益加深。
+* **可复现构建：** 通过固定的 `project.build.outputTimestamp` 实现字节级一致的可复现构件，这是供应链安全的关键改进。
+* **安全加固：** 远程 URL 图片访问必须显式加入白名单，同时修复了多项依赖漏洞（含 XXE、CVE）。
+
+## 版本核心亮点
+
+### 1. 新特性：更灵活的 Excel 处理
+
+* **冻结窗格（Freeze Pane）：** 写入时可通过 `@FreezePane` 注解或自定义 `WriteHandler` 冻结行与列。
+* **XLS 与 CSV 按列读取：** 在原有 XLSX 按列读取的基础上，2.1.0 将列级读取控制扩展至老旧的 **XLS** 与 **CSV** 文件，可按需只读取所需列。
+* **无 Bean 模式流式表头 API：** 不使用注解 Bean 时，可通过流式 API 以编程方式构建表头。
+* **`java.time.LocalTime` 转换器：** 读写链路原生支持 `LocalTime` 值的转换。
+* **图片转换器精细化：** `StringImageConverter` 拆分为专用的 `Pathname` 与 `Base64` 两个转换器，图片处理更清晰、更安全。
+* **`FesodDoc` 初始结构：** 新模块为未来支持 Word 文档（`.docx`）打下基础。
Review Comment:
`FesodDoc` 并未包含在 2.1.0 中：PR #936 合并到了 `dev-word-branch`，发布标签中也没有 `fesod-doc` 路径或 `FesodDoc` 类。请删除此亮点，避免用户误以为该版本提供了无法下载的模块。
This issue also appears on line 87 of the same file.
##########
website/blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating Officially Released"
+description: "The Apache Fesod community is pleased to announce the official release of Apache Fesod (Incubating) 2.1.0-incubating."
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**October 2026** — The Apache Fesod (Incubating) community is pleased to announce the official release of **Apache Fesod (Incubating) 2.1.0-incubating**.
+
+This release continues Fesod's steady evolution under the Apache Software Foundation (ASF) Incubator. With **110 pull requests** merged by contributors from around the world, it delivers significant new capabilities for column-based reading and writing, enhanced Excel format compatibility, performance optimizations, and strengthened supply-chain security through fully reproducible builds.
+
+<!-- truncate -->
+
+## Milestone Significance: From Compliance to Capability
+
+After laying a solid compliance and governance foundation in the 2.0.x releases, version 2.1.0 marks Fesod's transition from "getting the house in order" to **shipping meaningful new features at scale**:
+
+* **110 PRs Merged:** Covering features, bug fixes, refactoring, documentation, testing, and build automation.
+* **10 New Contributors from Four Countries:** Hailing from **China, Ireland, Latvia, and South Korea**, this release's contributors reflect Fesod's growing international reach.
+* **Reproducible Builds:** Fixed `project.build.outputTimestamp` guarantees byte-for-byte reproducible artifacts — a key supply-chain security improvement.
+* **Security Hardening:** Remote URL image access now requires an explicit allowlist, and multiple dependency vulnerabilities (XXE, CVE fixes) were resolved.
+
+## Key Highlights
+
+### 1. New Features for Flexible Excel Processing
+
+* **Freeze Pane Support:** Freeze rows and columns when writing via the `@FreezePane` annotation or a custom `WriteHandler`.
+* **Column-Based Reading for XLS and CSV:** In addition to existing column-based reading for XLSX, `2.1.0` extends column-level read control to legacy **XLS** and **CSV** files, letting you read only the columns you need.
+* **Fluent Header API for No-Bean Mode:** Build headers programmatically with a fluent API when you are not using annotated beans.
+* **`java.time.LocalTime` Converters:** Native conversion support for `LocalTime` values in read and write paths.
+* **Image Converter Refinement:** `StringImageConverter` was split into dedicated `Pathname` and `Base64` converters for clearer, safer image handling.
+* **`FesodDoc` Initial Structure:** A new module lays the groundwork for future Word document (`.docx`) support.
Review Comment:
`FesodDoc` is not included in the 2.1.0 release: PR #936 was merged into `dev-word-branch`, and the release tag has no `fesod-doc` path or `FesodDoc` symbol. Remove this highlight so users do not expect a module that cannot be downloaded from the release.
This issue also appears on line 87 of the same file.
##########
website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating 正式发布"
+description: "Apache Fesod (Incubating) 社区欣然宣布，Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！"
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**2026年10月** —— Apache Fesod (Incubating) 社区欣然宣布，**Apache Fesod (Incubating) 2.1.0-incubating 版本正式发布！**
+
+这是 Fesod 在 **Apache 软件基金会 (ASF)** 孵化器治理下持续推进的一次版本迭代。本版本共合并 **110 个 Pull Request**，汇聚了来自全球各地贡献者的智慧，带来了按列读写等重磅新能力、更完善的 Excel 格式兼容性、性能优化，并通过完全可复现的构建进一步强化了供应链安全。
+
+<!-- truncate -->
+
+## 里程碑意义：从合规走向能力
+
+在 2.0.x 系列打牢合规与治理基础之后，2.1.0 标志着 Fesod 从"整理内务"转向**规模化交付新功能**：
+
+* **110 个 PR 合并：** 涵盖新功能、缺陷修复、重构、文档、测试与构建自动化等各个方面。
+* **10 位新贡献者，来自四个国家：** 中国、爱尔兰、拉脱维亚与韩国——社区持续成长，国际化程度日益加深。
+* **可复现构建：** 通过固定的 `project.build.outputTimestamp` 实现字节级一致的可复现构件，这是供应链安全的关键改进。
+* **安全加固：** 远程 URL 图片访问必须显式加入白名单，同时修复了多项依赖漏洞（含 XXE、CVE）。
+
+## 版本核心亮点
+
+### 1. 新特性：更灵活的 Excel 处理
+
+* **冻结窗格（Freeze Pane）：** 写入时可通过 `@FreezePane` 注解或自定义 `WriteHandler` 冻结行与列。
+* **XLS 与 CSV 按列读取：** 在原有 XLSX 按列读取的基础上，2.1.0 将列级读取控制扩展至老旧的 **XLS** 与 **CSV** 文件，可按需只读取所需列。
+* **无 Bean 模式流式表头 API：** 不使用注解 Bean 时，可通过流式 API 以编程方式构建表头。
+* **`java.time.LocalTime` 转换器：** 读写链路原生支持 `LocalTime` 值的转换。
+* **图片转换器精细化：** `StringImageConverter` 拆分为专用的 `Pathname` 与 `Base64` 两个转换器，图片处理更清晰、更安全。
+* **`FesodDoc` 初始结构：** 新模块为未来支持 Word 文档（`.docx`）打下基础。
+* **性能提升：** 日期与数字格式化器现在会被缓存，减少大规模读取时的重复解析开销。
+
+### 2. 安全与合规
+
+* **远程 URL 图片白名单：** `read` 要求远程 URL 图片必须显式加入白名单，规避 SSRF 类风险。
Review Comment:
这里把白名单描述成读取要求，但 `UrlImageConverter` 仅注册在写转换器中（`DefaultConverterLoader.java:169-173`），并在 `convertToExcelData` 中下载图片。请改为说明这是写入远程 URL 图片时的要求，以免误导使用者。
##########
website/blog/2026-10-07-apache-fesod-2-1-0-incubating-released.md:
##########
@@ -0,0 +1,139 @@
+---
+title: "Apache Fesod (Incubating) 2.1.0-incubating Officially Released"
+description: "The Apache Fesod community is pleased to announce the official release of Apache Fesod (Incubating) 2.1.0-incubating."
+authors: [alaahong]
+tags: [announcement, release]
+---
+
+<!--
+- Licensed to the Apache Software Foundation (ASF) under one or more
+- contributor license agreements. See the NOTICE file distributed with
+- this work for additional information regarding copyright ownership.
+- The ASF licenses this file to You under the Apache License, Version 2.0
+- (the "License"); you may not use this file except in compliance with
+- the License. You may obtain a copy of the License at
+-
+- http://www.apache.org/licenses/LICENSE-2.0
+-
+- Unless required by applicable law or agreed to in writing, software
+- distributed under the License is distributed on an "AS IS" BASIS,
+- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+- See the License for the specific language governing permissions and
+- limitations under the License.
+-->
+
+**October 2026** — The Apache Fesod (Incubating) community is pleased to announce the official release of **Apache Fesod (Incubating) 2.1.0-incubating**.
+
+This release continues Fesod's steady evolution under the Apache Software Foundation (ASF) Incubator. With **110 pull requests** merged by contributors from around the world, it delivers significant new capabilities for column-based reading and writing, enhanced Excel format compatibility, performance optimizations, and strengthened supply-chain security through fully reproducible builds.
+
+<!-- truncate -->
+
+## Milestone Significance: From Compliance to Capability
+
+After laying a solid compliance and governance foundation in the 2.0.x releases, version 2.1.0 marks Fesod's transition from "getting the house in order" to **shipping meaningful new features at scale**:
+
+* **110 PRs Merged:** Covering features, bug fixes, refactoring, documentation, testing, and build automation.
+* **10 New Contributors from Four Countries:** Hailing from **China, Ireland, Latvia, and South Korea**, this release's contributors reflect Fesod's growing international reach.
+* **Reproducible Builds:** Fixed `project.build.outputTimestamp` guarantees byte-for-byte reproducible artifacts — a key supply-chain security improvement.
+* **Security Hardening:** Remote URL image access now requires an explicit allowlist, and multiple dependency vulnerabilities (XXE, CVE fixes) were resolved.
+
+## Key Highlights
+
+### 1. New Features for Flexible Excel Processing
+
+* **Freeze Pane Support:** Freeze rows and columns when writing via the `@FreezePane` annotation or a custom `WriteHandler`.
+* **Column-Based Reading for XLS and CSV:** In addition to existing column-based reading for XLSX, `2.1.0` extends column-level read control to legacy **XLS** and **CSV** files, letting you read only the columns you need.
+* **Fluent Header API for No-Bean Mode:** Build headers programmatically with a fluent API when you are not using annotated beans.
+* **`java.time.LocalTime` Converters:** Native conversion support for `LocalTime` values in read and write paths.
+* **Image Converter Refinement:** `StringImageConverter` was split into dedicated `Pathname` and `Base64` converters for clearer, safer image handling.
+* **`FesodDoc` Initial Structure:** A new module lays the groundwork for future Word document (`.docx`) support.
+* **Performance:** Date and number formatters are now cached to reduce repeated parsing overhead during large reads.
+
+### 2. Security & Compliance
+
+* **Remote URL Image Allowlist:** `read` now requires an explicit allowlist for remote URL images, mitigating SSRF-style risks.
Review Comment:
This describes the allowlist as a read-path requirement, but `UrlImageConverter` is registered only as a write converter (`DefaultConverterLoader.java:169-173`) and fetches the URL from `convertToExcelData`. Calling it `read` misdirects users configuring URL-backed images; describe this as a write-time requirement.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [PR] docs: add blog post for 2.1.0-incubating release [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei merged PR #1185:
URL: https://github.com/apache/fesod/pull/1185
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org