diff --git a/README.md b/README.md
index e3b8fa9..e9b5ed2 100644
--- a/README.md
+++ b/README.md
@@ -60,7 +60,7 @@ Production gates still include volume/retained-storage restore; isolated compile
 | Directory | Artifact | Notes |
 | --- | --- | --- |
 | `foundation` | `com.kingsrook.qbits:qbit-document-generation` | Metadata, services, ports and schema. Depends on QQQ core only (RDBMS optional). |
-| `renderer/vendor/openhtml-1.1.105-qqq-p1` | `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1` | LGPL-2.1-or-later patched OpenHTML (one file differs from upstream 1.1.105), built from the tracked source with its notices; the renderer depends on it. |
+| `renderer/vendor/openhtml-1.1.105-qqq-p1` | `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:<family revision> (upstream 1.1.105 + QQQ patch p1)` | LGPL-2.1-or-later patched OpenHTML (one file differs from upstream 1.1.105), built from the tracked source with its notices; the renderer depends on it. |
 | `renderer` | `com.kingsrook.qbits:qbit-document-renderer` | Standalone isolated renderer CLI/image source; no QQQ dependency. |
 | `bridges/renderer` | `qbit-document-generation-renderer` | `IsolatedRenderer` port implementation for the renderer. |
 | `bridges/remote-renderer` | `remote-renderer-parent` -> `qqq-remote-renderer-transport`, `qbit-document-generation-remote-renderer` | Remote renderer service and adapter. |
diff --git a/bridges/printing/pom.xml b/bridges/printing/pom.xml
index fd8876e..957621b 100644
--- a/bridges/printing/pom.xml
+++ b/bridges/printing/pom.xml
@@ -1,12 +1,13 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-printing</artifactId><version>${revision}</version>
    <name>Document Generation Printing Bridge</name>
-   <properties><qqq.version>4.1.0-RC.21</qqq.version><revision>0.1.0-SNAPSHOT</revision><!-- Owner-supplied sibling QBit coordinates (not yet published): set to the released version --><qbit-record-files.version>0.1.0-SNAPSHOT</qbit-record-files.version><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+   <properties><qqq.version>4.1.0-RC.21</qqq.version><!-- Owner-supplied sibling QBit coordinates (not yet published): set to the released version --><qbit-record-files.version>0.1.0-SNAPSHOT</qbit-record-files.version><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
       <!-- Released Printing 1.0.0: RetainedPrintFacade.Acceptance carries title/optionsJson and PrintingService enforces options.mediaProfile id+revision. -->
-      <qbit-printing.version>1.0.0</qbit-printing.version></properties>
-   <dependencyManagement><dependencies>
+      <qbit-printing.version>1.0.0</qbit-printing.version><enforcer.skip>true</enforcer.skip></properties>
+   <dependencyManagement><dependencies><dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-bom-pom</artifactId><version>${qqq.version}</version><type>pom</type><scope>import</scope></dependency>
       <dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-backend-core</artifactId><version>${qqq.version}</version></dependency>
       <dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-backend-module-rdbms</artifactId><version>${qqq.version}</version></dependency>
    </dependencies></dependencyManagement>
@@ -34,7 +35,7 @@
          </execution></executions>
       </plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version><configuration><showWarnings>true</showWarnings><failOnWarning>true</failOnWarning><compilerArgs><arg>-Xlint:deprecation</arg><arg>-Xlint:unchecked</arg><arg>-Werror</arg></compilerArgs></configuration></plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version></plugin>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-checkstyle-plugin</artifactId><version>3.3.1</version><dependencies><dependency><groupId>com.puppycrawl.tools</groupId><artifactId>checkstyle</artifactId><version>10.12.6</version></dependency></dependencies><configuration><configLocation>${project.basedir}/checkstyle/config.xml</configLocation><propertyExpansion>checkstyle.reactor.root=${project.basedir}</propertyExpansion><includeTestSourceDirectory>true</includeTestSourceDirectory><consoleOutput>true</consoleOutput><violationSeverity>warning</violationSeverity><failOnViolation>true</failOnViolation></configuration><executions><execution><phase>validate</phase><goals><goal>check</goal></goals></execution></executions></plugin>
       <plugin>
          <!-- Publish a self-contained POM: ${revision}/property versions are resolved at build time, so a consumer needs no -Drevision -->
diff --git a/bridges/record-files/pom.xml b/bridges/record-files/pom.xml
index f2ebe1a..873f8c6 100644
--- a/bridges/record-files/pom.xml
+++ b/bridges/record-files/pom.xml
@@ -1,10 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-record-files</artifactId><version>${revision}</version>
    <name>Document Generation Record Files Bridge</name>
-   <properties><qqq.version>4.1.0-RC.21</qqq.version><revision>0.1.0-SNAPSHOT</revision><!-- Owner-supplied sibling QBit coordinates (not yet published): set to the released version --><qbit-record-files.version>0.1.0-SNAPSHOT</qbit-record-files.version><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
-   <dependencyManagement><dependencies>
+   <properties><qqq.version>4.1.0-RC.21</qqq.version><!-- Owner-supplied sibling QBit coordinates (not yet published): set to the released version --><qbit-record-files.version>0.1.0-SNAPSHOT</qbit-record-files.version><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>true</enforcer.skip></properties>
+   <dependencyManagement><dependencies><dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-bom-pom</artifactId><version>${qqq.version}</version><type>pom</type><scope>import</scope></dependency>
       <dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-backend-core</artifactId><version>${qqq.version}</version></dependency>
       <dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-backend-module-rdbms</artifactId><version>${qqq.version}</version></dependency>
    </dependencies></dependencyManagement>
@@ -32,7 +33,7 @@
          </execution></executions>
       </plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version><configuration><showWarnings>true</showWarnings><failOnWarning>true</failOnWarning><compilerArgs><arg>-Xlint:deprecation</arg><arg>-Xlint:unchecked</arg><arg>-Werror</arg></compilerArgs></configuration></plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version></plugin>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-checkstyle-plugin</artifactId><version>3.3.1</version><dependencies><dependency><groupId>com.puppycrawl.tools</groupId><artifactId>checkstyle</artifactId><version>10.12.6</version></dependency></dependencies><configuration><configLocation>${project.basedir}/checkstyle/config.xml</configLocation><propertyExpansion>checkstyle.reactor.root=${project.basedir}</propertyExpansion><includeTestSourceDirectory>true</includeTestSourceDirectory><consoleOutput>true</consoleOutput><violationSeverity>warning</violationSeverity><failOnViolation>true</failOnViolation></configuration><executions><execution><phase>validate</phase><goals><goal>check</goal></goals></execution></executions></plugin>
       <plugin>
          <!-- Publish a self-contained POM: ${revision}/property versions are resolved at build time, so a consumer needs no -Drevision -->
diff --git a/bridges/remote-renderer/pom.xml b/bridges/remote-renderer/pom.xml
index c74af55..a37d047 100644
--- a/bridges/remote-renderer/pom.xml
+++ b/bridges/remote-renderer/pom.xml
@@ -1,8 +1,10 @@
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId><artifactId>remote-renderer-parent</artifactId><version>${revision}</version><packaging>pom</packaging>
    <modules><module>../renderer</module><module>transport</module><module>adapter</module></modules>
-   <properties><revision>0.1.0-SNAPSHOT</revision><maven.compiler.release>21</maven.compiler.release><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
+   <properties><maven.compiler.release>21</maven.compiler.release><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>true</enforcer.skip><jackson-bom.version>2.22.4</jackson-bom.version></properties>
+   <dependencyManagement><dependencies><dependency><groupId>com.fasterxml.jackson</groupId><artifactId>jackson-bom</artifactId><version>${jackson-bom.version}</version><type>pom</type><scope>import</scope></dependency></dependencies></dependencyManagement>
    <build><plugins>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-resources-plugin</artifactId><version>3.3.1</version>
          <executions><execution><id>own-license-notice</id><phase>process-resources</phase><goals><goal>copy-resources</goal></goals>
@@ -10,7 +12,7 @@
          </execution></executions>
       </plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version></plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version></plugin>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-checkstyle-plugin</artifactId><version>3.3.1</version>
          <dependencies><dependency><groupId>com.puppycrawl.tools</groupId><artifactId>checkstyle</artifactId><version>10.12.6</version></dependency></dependencies>
          <configuration><configLocation>${project.basedir}/../../renderer/checkstyle/config.xml</configLocation><propertyExpansion>checkstyle.reactor.root=${project.basedir}/../../renderer</propertyExpansion><includeTestSourceDirectory>true</includeTestSourceDirectory><consoleOutput>true</consoleOutput><violationSeverity>warning</violationSeverity><failOnViolation>true</failOnViolation></configuration>
diff --git a/bridges/renderer/pom.xml b/bridges/renderer/pom.xml
index f0b9870..d5a7aba 100644
--- a/bridges/renderer/pom.xml
+++ b/bridges/renderer/pom.xml
@@ -1,9 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-renderer</artifactId><version>${revision}</version>
    <name>Document Generation Isolated Renderer Bridge</name>
-   <properties><revision>0.1.0-SNAPSHOT</revision><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
+   <properties><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>true</enforcer.skip><jackson-bom.version>2.22.4</jackson-bom.version></properties>
+   <dependencyManagement><dependencies><dependency><groupId>com.fasterxml.jackson</groupId><artifactId>jackson-bom</artifactId><version>${jackson-bom.version}</version><type>pom</type><scope>import</scope></dependency></dependencies></dependencyManagement>
    <dependencies>
       <dependency><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation</artifactId><version>${revision}</version><exclusions>
          <exclusion><groupId>com.openhtmltopdf</groupId><artifactId>openhtmltopdf-pdfbox</artifactId></exclusion>
@@ -32,7 +34,7 @@
          </execution></executions>
       </plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version><configuration><showWarnings>true</showWarnings><failOnWarning>true</failOnWarning><compilerArgs><arg>-Xlint:all</arg><arg>-Werror</arg></compilerArgs></configuration></plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version></plugin>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-dependency-plugin</artifactId><version>3.8.1</version><executions><execution><id>runtime-distribution</id><phase>package</phase><goals><goal>copy-dependencies</goal></goals><configuration><includeScope>runtime</includeScope><outputDirectory>${project.build.directory}/lib</outputDirectory></configuration></execution></executions></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-checkstyle-plugin</artifactId><version>3.3.1</version><dependencies><dependency><groupId>com.puppycrawl.tools</groupId><artifactId>checkstyle</artifactId><version>10.12.6</version></dependency></dependencies><configuration><configLocation>${project.basedir}/checkstyle/config.xml</configLocation><propertyExpansion>checkstyle.reactor.root=${project.basedir}</propertyExpansion><includeTestSourceDirectory>true</includeTestSourceDirectory><consoleOutput>true</consoleOutput><violationSeverity>warning</violationSeverity><failOnViolation>true</failOnViolation></configuration><executions><execution><phase>validate</phase><goals><goal>check</goal></goals></execution></executions></plugin>
       <plugin>
diff --git a/bridges/scripting/pom.xml b/bridges/scripting/pom.xml
index 50bdde6..feb5bb2 100644
--- a/bridges/scripting/pom.xml
+++ b/bridges/scripting/pom.xml
@@ -1,10 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
-   <parent><groupId>com.kingsrook</groupId><artifactId>qbit-build-parent</artifactId><version>2.0.0</version><relativePath/></parent>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-scripting</artifactId><version>${revision}</version>
    <name>Document Generation Scripting Bridge</name>
-   <properties><qqq.version>4.1.0-RC.21</qqq.version><revision>0.1.0-SNAPSHOT</revision><!-- Owner-supplied sibling QBit coordinates (not yet published): set to the released version --><qbit-scripting.version>0.1.0-SNAPSHOT</qbit-scripting.version><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
+   <licenses><license><name>GNU Affero General Public License v3.0</name><url>https://www.gnu.org/licenses/agpl-3.0-standalone.html</url><distribution>repo</distribution></license></licenses>
+   <properties><qqq.version>4.1.0-RC.21</qqq.version><!-- Owner-supplied sibling QBit coordinates (not yet published): set to the released version --><qbit-scripting.version>0.1.0-SNAPSHOT</qbit-scripting.version><maven.compiler.release>21</maven.compiler.release><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>true</enforcer.skip></properties>
    <dependencyManagement><dependencies>
       <dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-backend-core</artifactId><version>${qqq.version}</version></dependency>
       <dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-backend-module-rdbms</artifactId><version>${qqq.version}</version></dependency>
@@ -31,7 +32,7 @@
          </execution></executions>
       </plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version></plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version></plugin>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-checkstyle-plugin</artifactId><version>3.3.1</version>
          <dependencies><dependency><groupId>com.puppycrawl.tools</groupId><artifactId>checkstyle</artifactId><version>10.12.6</version></dependency></dependencies>
          <configuration><configLocation>${project.basedir}/checkstyle/config.xml</configLocation><propertyExpansion>checkstyle.reactor.root=${project.basedir}</propertyExpansion><includeTestSourceDirectory>true</includeTestSourceDirectory><violationSeverity>warning</violationSeverity><failOnViolation>true</failOnViolation></configuration>
diff --git a/foundation/pom.xml b/foundation/pom.xml
index db66f96..92cb84f 100644
--- a/foundation/pom.xml
+++ b/foundation/pom.xml
@@ -1,13 +1,13 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
-   <parent><groupId>com.kingsrook</groupId><artifactId>qbit-build-parent</artifactId><version>2.1.1</version><relativePath/></parent>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId>
    <artifactId>qbit-document-generation</artifactId>
    <version>${revision}</version>
    <name>QBit Document Generation</name>
    <description>User-defined document templates and generation coordination for QQQ</description>
-   <properties><qqq.version>4.1.0-RC.21</qqq.version><revision>0.1.0-SNAPSHOT</revision><maven.compiler.source>21</maven.compiler.source><maven.compiler.target>21</maven.compiler.target><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
+   <properties><qqq.version>4.1.0-RC.21</qqq.version><maven.compiler.source>21</maven.compiler.source><maven.compiler.target>21</maven.compiler.target><maven.compiler.proc>none</maven.compiler.proc><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>false</enforcer.skip></properties>
    <licenses><license><name>Apache License, Version 2.0</name><url>https://www.apache.org/licenses/LICENSE-2.0</url><distribution>repo</distribution></license></licenses>
    <dependencyManagement><dependencies><dependency><groupId>com.kingsrook.qqq</groupId><artifactId>qqq-bom-pom</artifactId><version>${qqq.version}</version><type>pom</type><scope>import</scope></dependency></dependencies></dependencyManagement>
    <dependencies>
diff --git a/pom.xml b/pom.xml
index 5dade11..ba36843 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1,14 +1,20 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
-   <!-- Aggregator only. It is not a parent of any module: every module keeps its own dependency boundary and installs on its own. -->
+   <!-- Reactor root AND parent of every module, so the one revision property below is the single version source: the release pipeline rewrites only this root property and passes
+        no -Drevision, so a module that declared its own revision would stay at the SNAPSHOT. The root takes qbit-build-parent 2.1.1 (the version foundation already used);
+        modules that had no parent now inherit its defaults and this Apache-2.0 license (the vendored OpenHTML module keeps its explicit LGPL-2.1+; bridges/scripting keeps
+        its previously inherited AGPL-3.0 explicitly). Each module still keeps its own dependency boundary and builds on its own through its relative parent. -->
+   <parent><groupId>com.kingsrook</groupId><artifactId>qbit-build-parent</artifactId><version>2.1.1</version><relativePath/></parent>
    <groupId>com.kingsrook.qbits</groupId>
    <artifactId>qbit-document-generation-reactor</artifactId>
    <version>${revision}</version>
    <packaging>pom</packaging>
    <name>QBit Document Generation (reactor)</name>
+   <url>https://github.com/Kingsrook/qbit-bom</url>
+   <scm><connection>scm:git:https://github.com/Kingsrook/qbit-bom.git</connection><developerConnection>scm:git:ssh://git@github.com/Kingsrook/qbit-bom.git</developerConnection><url>https://github.com/Kingsrook/qbit-bom</url><tag>HEAD</tag></scm>
    <licenses><license><name>Apache License, Version 2.0</name><url>https://www.apache.org/licenses/LICENSE-2.0</url><distribution>repo</distribution></license></licenses>
-   <properties><revision>0.1.0-SNAPSHOT</revision><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
+   <properties><revision>0.1.0-SNAPSHOT</revision><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>true</enforcer.skip></properties>
    <!-- Every module of the repository, so one release builds and publishes every GAV. Maven orders the reactor by dependency (the patched OpenHTML
         module before the renderer; foundation before the bridges). Build a subset with -pl <module> -am. -->
    <modules>
@@ -20,4 +26,15 @@
       <module>bridges/printing</module>
       <module>bridges/scripting</module>
    </modules>
+   <build><plugins>
+      <plugin>
+         <!-- The reactor root is itself a published pom-packaging module: publish a consumer POM with ${revision} resolved. -->
+         <groupId>org.codehaus.mojo</groupId><artifactId>flatten-maven-plugin</artifactId><version>1.7.3</version>
+         <configuration><updatePomFile>true</updatePomFile><flattenMode>ossrh</flattenMode></configuration>
+         <executions>
+            <execution><id>flatten</id><phase>process-resources</phase><goals><goal>flatten</goal></goals></execution>
+            <execution><id>flatten.clean</id><phase>clean</phase><goals><goal>clean</goal></goals></execution>
+         </executions>
+      </plugin>
+   </plugins></build>
 </project>
diff --git a/renderer/Dockerfile b/renderer/Dockerfile
index 43d400c..578ffba 100644
--- a/renderer/Dockerfile
+++ b/renderer/Dockerfile
@@ -10,7 +10,10 @@ COPY Dockerfile ./
 RUN apt-get update && apt-get install -y --no-install-recommends gcc g++ libc6-dev make cmake patch \
     && sh ./build-zint.sh
 
+# The renderer's version comes from its parent, the repository reactor POM (../pom.xml). Build from this directory with that file as a named BuildKit context:
+#   docker build --build-context reactor=<repository root> ...   (the reactor POM is copied to /pom.xml, where ../pom.xml resolves for /renderer/pom.xml)
 FROM ${BUILD_IMAGE} AS build
+COPY --from=reactor pom.xml /pom.xml
 WORKDIR /renderer
 COPY vendor/openhtml-1.1.105-qqq-p1 ./vendor/openhtml-1.1.105-qqq-p1
 RUN sh ./vendor/openhtml-1.1.105-qqq-p1/build-openhtml.sh /renderer/openhtml-build /renderer/.m2
diff --git a/renderer/README.md b/renderer/README.md
index 9dc146e..ec32bf7 100644
--- a/renderer/README.md
+++ b/renderer/README.md
@@ -7,7 +7,7 @@ This standalone Java CLI renders user-authored PDF layouts and typed ZPL label s
 ## Source build
 
 The PDF output dependency is a separately built, narrowly patched OpenHTML
-module under `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1`.
+module under `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:<family revision> (upstream 1.1.105 + QQQ patch p1)`.
 Build it from the retained source into an isolated Maven repository before a
 local renderer build; use that same repository with `-Dmaven.repo.local=...`.
 See [the source build instructions](vendor/openhtml-1.1.105-qqq-p1/README.md).
diff --git a/renderer/THIRD-PARTY.md b/renderer/THIRD-PARTY.md
index fc5aa75..36d2467 100644
--- a/renderer/THIRD-PARTY.md
+++ b/renderer/THIRD-PARTY.md
@@ -4,7 +4,7 @@ Runtime libraries are separate JARs, not shaded into an opaque binary. Their lic
 
 | Component | Pinned version | License / source |
 | --- | --- | --- |
-| OpenHTMLtoPDF PDFBox output / core | 1.1.105-qqq-p1 / 1.1.105 | LGPL-2.1-or-later; [complete local source and patch](vendor/openhtml-1.1.105-qqq-p1/README.md), [official source tag](https://github.com/openhtmltopdf/openhtmltopdf/tree/1.1.105), [published upstream POM](https://repo.maven.apache.org/maven2/io/github/openhtmltopdf/openhtmltopdf-pdfbox/1.1.105/openhtmltopdf-pdfbox-1.1.105.pom) |
+| OpenHTMLtoPDF PDFBox output / core | family revision (upstream 1.1.105 + QQQ patch p1) / 1.1.105 | LGPL-2.1-or-later; [complete local source and patch](vendor/openhtml-1.1.105-qqq-p1/README.md), [official source tag](https://github.com/openhtmltopdf/openhtmltopdf/tree/1.1.105), [published upstream POM](https://repo.maven.apache.org/maven2/io/github/openhtmltopdf/openhtmltopdf-pdfbox/1.1.105/openhtmltopdf-pdfbox-1.1.105.pom) |
 | PDFBox, FontBox, PDFBox IO, XMPBox | 3.0.8 | Apache-2.0; [project](https://pdfbox.apache.org/), [security advisories](https://pdfbox.apache.org/security.html) |
 | FreeMarker | 2.3.35 | Apache-2.0; [release notes](https://freemarker.apache.org/docs/versions_2_3_35.html), [security model](https://github.com/apache/freemarker/security) |
 | Jsoup | 1.23.2 | MIT; [project license](https://github.com/jhy/jsoup/blob/master/LICENSE) |
@@ -14,7 +14,7 @@ Runtime libraries are separate JARs, not shaded into an opaque binary. Their lic
 | graphics2d | 3.0.1 | Apache-2.0; [project](https://github.com/rototor/pdfbox-graphics2d) |
 | Commons Logging | 1.4.0 | Apache-2.0; [project](https://commons.apache.org/proper/commons-logging/) |
 
-The maintained upstream OpenHTMLtoPDF group is `io.github.openhtmltopdf`. The PDFBox output module is now source-built under the distinct `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1` identity; the official core remains unchanged at 1.1.105. One upstream Java file is modified to preserve the complete image stream dictionary when disabling interpolation, including PNG predictor and JPEG filter metadata. The full source archive, exact patch, original LGPL notices, dated modification notice and reproducible build recipe are retained under `vendor/openhtml-1.1.105-qqq-p1` and shipped at `/usr/share/doc/qqq-openhtml` in the image. The library remains a separate replaceable JAR. Do not substitute this fork under the upstream GAV or distribute it without corresponding source/notices. Private vendor regression evidence does not replace the renderer consumer and exact-image gates.
+The maintained upstream OpenHTMLtoPDF group is `io.github.openhtmltopdf`. The PDFBox output module is now source-built under the distinct `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:<family revision> (upstream 1.1.105 + QQQ patch p1)` identity; the official core remains unchanged at 1.1.105. One upstream Java file is modified to preserve the complete image stream dictionary when disabling interpolation, including PNG predictor and JPEG filter metadata. The full source archive, exact patch, original LGPL notices, dated modification notice and reproducible build recipe are retained under `vendor/openhtml-1.1.105-qqq-p1` and shipped at `/usr/share/doc/qqq-openhtml` in the image. The library remains a separate replaceable JAR. Do not substitute this fork under the upstream GAV or distribute it without corresponding source/notices. Private vendor regression evidence does not replace the renderer consumer and exact-image gates.
 
 The upstream POM already depends on PDFBox 3.0.8. This renderer does not reuse the trusted proof's old OpenHTMLtoPDF 1.0.10/PDFBox 2 baseline. PDFBox's 2026 path-traversal advisories concern its examples module, which is not shipped here; moving to the current branch is not a claim that the proof exercised those vulnerable examples.
 
diff --git a/renderer/pom.xml b/renderer/pom.xml
index 3c44537..2085e25 100644
--- a/renderer/pom.xml
+++ b/renderer/pom.xml
@@ -1,11 +1,13 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
+   <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../pom.xml</relativePath></parent>
    <groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-renderer</artifactId><version>${revision}</version>
    <name>QQQ isolated document renderer</name>
-   <properties><revision>0.1.0-SNAPSHOT</revision><maven.compiler.release>21</maven.compiler.release><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
+   <properties><maven.compiler.release>21</maven.compiler.release><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><enforcer.skip>true</enforcer.skip><jackson-bom.version>2.22.4</jackson-bom.version></properties>
+   <dependencyManagement><dependencies><dependency><groupId>com.fasterxml.jackson</groupId><artifactId>jackson-bom</artifactId><version>${jackson-bom.version}</version><type>pom</type><scope>import</scope></dependency></dependencies></dependencyManagement>
    <dependencies>
-      <dependency><groupId>com.kingsrook.thirdparty</groupId><artifactId>openhtmltopdf-pdfbox</artifactId><version>1.1.105-qqq-p1</version></dependency>
+      <dependency><groupId>com.kingsrook.thirdparty</groupId><artifactId>openhtmltopdf-pdfbox</artifactId><version>${revision}</version></dependency>
       <dependency><groupId>org.apache.pdfbox</groupId><artifactId>pdfbox</artifactId><version>3.0.8</version></dependency>
       <dependency><groupId>org.freemarker</groupId><artifactId>freemarker</artifactId><version>2.3.35</version></dependency>
       <dependency><groupId>org.jsoup</groupId><artifactId>jsoup</artifactId><version>1.23.2</version></dependency>
@@ -30,7 +32,7 @@
          </execution></executions>
       </plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version><configuration><showWarnings>true</showWarnings><failOnWarning>true</failOnWarning><compilerArgs><arg>-XDcompilePolicy=simple</arg><arg>--should-stop=ifError=FLOW</arg><arg>-XDaddTypeAnnotationsToSymbol=true</arg><arg>-Xplugin:ErrorProne -Xep:UnnecessaryParentheses:OFF -Xep:NotJavadoc:OFF</arg><arg>-Xlint:all</arg><arg>-Werror</arg></compilerArgs><annotationProcessorPaths><path><groupId>com.google.errorprone</groupId><artifactId>error_prone_core</artifactId><version>2.49.0</version></path></annotationProcessorPaths></configuration></plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><systemPropertyVariables><java.awt.headless>true</java.awt.headless><pdfbox.fontcache>${project.build.directory}</pdfbox.fontcache></systemPropertyVariables></configuration></plugin>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/><systemPropertyVariables><java.awt.headless>true</java.awt.headless><pdfbox.fontcache>${project.build.directory}</pdfbox.fontcache></systemPropertyVariables></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-dependency-plugin</artifactId><version>3.9.0</version><executions><execution><id>runtime-libraries</id><phase>package</phase><goals><goal>copy-dependencies</goal></goals><configuration><includeScope>runtime</includeScope><outputDirectory>${project.build.directory}/lib</outputDirectory></configuration></execution></executions></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-jar-plugin</artifactId><version>3.4.2</version><configuration><archive><manifest><mainClass>com.kingsrook.qbits.renderer.RendererMain</mainClass><addClasspath>true</addClasspath><classpathPrefix>lib/</classpathPrefix></manifest></archive></configuration></plugin>
       <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-checkstyle-plugin</artifactId><version>3.3.1</version><dependencies><dependency><groupId>com.puppycrawl.tools</groupId><artifactId>checkstyle</artifactId><version>10.12.6</version></dependency></dependencies><configuration><configLocation>${project.basedir}/checkstyle/config.xml</configLocation><propertyExpansion>checkstyle.reactor.root=${project.basedir}</propertyExpansion><includeTestSourceDirectory>true</includeTestSourceDirectory><consoleOutput>true</consoleOutput><violationSeverity>warning</violationSeverity><failOnViolation>true</failOnViolation></configuration><executions><execution><phase>validate</phase><goals><goal>check</goal></goals></execution></executions></plugin>
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/QQQ-MODIFICATIONS.txt b/renderer/vendor/openhtml-1.1.105-qqq-p1/QQQ-MODIFICATIONS.txt
index c9d9e6d..80b9af5 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/QQQ-MODIFICATIONS.txt
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/QQQ-MODIFICATIONS.txt
@@ -14,7 +14,7 @@ bytes, preserve actual copied stream Length, force Interpolate=false on the
 clone, and close raw input even when copying fails.
 Original upstream notices and LGPL licenses remain in META-INF.
 
-Artifact: com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1
+Artifact: com.kingsrook.thirdparty:openhtmltopdf-pdfbox:<family revision> (upstream 1.1.105 + QQQ patch p1)
 Corresponding modified sources: same GAV with classifier sources.
 The full-source bundle also contains the standalone Maven POM, trusted
 regression tests, exact patch and reproduction instructions. Distribute it
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/README.md b/renderer/vendor/openhtml-1.1.105-qqq-p1/README.md
index a762ad5..b43a197 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/README.md
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/README.md
@@ -2,7 +2,7 @@
 
 This directory contains the complete corresponding LGPL-2.1-or-later sources,
 original notices, dated modification notice and exact patch for:
-`com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1`.
+`com.kingsrook.thirdparty:openhtmltopdf-pdfbox:<family revision> (upstream 1.1.105 + QQQ patch p1)`.
 
 Upstream: actual tag 1.1.105, commit 54b31598f14ea77139ec435106810ba67bd68656.
 Source JAR: https://repo.maven.apache.org/maven2/io/github/openhtmltopdf/openhtmltopdf-pdfbox/1.1.105/openhtmltopdf-pdfbox-1.1.105-sources.jar
@@ -43,7 +43,8 @@ known supported PNG/JPEG background path; it is not a universal PDF sanitizer.
 
 ## Maven reactor module
 
-This directory is also a standard Maven module: `pom.xml` and `src/` are the `module/` tree of the complete-source archive, byte for byte
-(`sh verify-module-source.sh` checks the archive hash and compares). The repository reactor builds it, with its 15 regression tests, before the
-renderer, producing `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1` and its `-sources` jar. `build-openhtml.sh` (used by the
+This directory is also a standard Maven module: `src/` is the `module/src` tree of the complete-source archive and `pom.xml` is its `module/pom.xml` except for the parent's relativePath
+(`../../../pom.xml` here, `../parent/pom.xml` inside the archive, which also ships `parent/pom.xml`, a copy of the reactor POM; `sh verify-module-source.sh` checks the archive hash and compares both).
+The module's version comes from the reactor parent's single `<revision>`; its explicit LGPL-2.1-or-later license entry is unchanged and is not overridden by the parent's Apache-2.0. The repository reactor builds it, with its 15 regression tests, before the
+renderer, producing `com.kingsrook.thirdparty:openhtmltopdf-pdfbox:<family revision> (upstream 1.1.105 + QQQ patch p1)` and its `-sources` jar. `build-openhtml.sh` (used by the
 renderer Dockerfile into a private builder repository) is unchanged and still validates the same hashes.
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/build-openhtml.sh b/renderer/vendor/openhtml-1.1.105-qqq-p1/build-openhtml.sh
index 23dd4bb..b0cbd53 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/build-openhtml.sh
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/build-openhtml.sh
@@ -11,6 +11,7 @@ test ! -e "$work"
 mkdir -p "$work" "$repository"
 (cd "$work" && jar xf "$vendor/openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip")
 printf '%s  %s\n' 34f4f40a95c7ed607fb76f9ecfd1c8f47c185c2c9258822c7f96d8e9fbee3ecb "$work/provenance/upstream-sources.jar" | sha256sum -c -
+rev=$(sed -n 's:.*<revision>\(.*\)</revision>.*:\1:p' "$work/parent/pom.xml" | head -n 1)
 # verify includes the fifteen real upstream-clone/background regressions.
 mvn -B -f "$work/module/pom.xml" "-Dmaven.repo.local=$repository" verify
 # Install only the verified artifact into this discarded builder's private repo.
@@ -18,7 +19,8 @@ mvn -B -f "$work/module/pom.xml" "-Dmaven.repo.local=$repository" -DskipTests in
 mkdir "$work/corresponding-source"
 cp "$vendor"/* "$work/corresponding-source/"
 cp "$work/module/pom.xml" "$work/corresponding-source/build-pom.xml"
-cp "$work/module/target/openhtmltopdf-pdfbox-1.1.105-qqq-p1-sources.jar" "$work/corresponding-source/"
+cp "$work/parent/pom.xml" "$work/corresponding-source/build-parent-pom.xml"
+cp "$work/module/target/openhtmltopdf-pdfbox-$rev-sources.jar" "$work/corresponding-source/"
 cp "$work/module/target/surefire-reports/com.kingsrook.thirdparty.RasterMetadataTest.txt" "$work/corresponding-source/vendor-test-results.txt"
 (java -version; mvn -version) > "$work/corresponding-source/build-toolchain.txt" 2>&1
-(cd "$work/module/target" && sha256sum openhtmltopdf-pdfbox-1.1.105-qqq-p1.jar openhtmltopdf-pdfbox-1.1.105-qqq-p1-sources.jar) > "$work/corresponding-source/built-artifacts.sha256"
+(cd "$work/module/target" && sha256sum openhtmltopdf-pdfbox-$rev.jar openhtmltopdf-pdfbox-$rev-sources.jar) > "$work/corresponding-source/built-artifacts.sha256"
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/inputs.sha256 b/renderer/vendor/openhtml-1.1.105-qqq-p1/inputs.sha256
index 4118e48..dec5321 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/inputs.sha256
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/inputs.sha256
@@ -1,2 +1,2 @@
-83daf8fd1e5ec3d27933028bb8d484674b7c40ab7f492dce0093aa344c73a441  openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip
+9cfe3426e7f198a3aa97c99d073738e5050c8047c360e11167743e147c384920  openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip
 8dab8e86c45393a6bfea32d755f1e130b3ebeef8f77a46e6593af223080c5d25  openhtml-image-dictionary.patch
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip b/renderer/vendor/openhtml-1.1.105-qqq-p1/openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip
index 71ed6f8..5913678 100644
Binary files a/renderer/vendor/openhtml-1.1.105-qqq-p1/openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip and b/renderer/vendor/openhtml-1.1.105-qqq-p1/openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip differ
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/pom.xml b/renderer/vendor/openhtml-1.1.105-qqq-p1/pom.xml
index 0b0a23a..14f0c59 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/pom.xml
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/pom.xml
@@ -1,11 +1,15 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>
- <groupId>com.kingsrook.thirdparty</groupId><artifactId>openhtmltopdf-pdfbox</artifactId><version>1.1.105-qqq-p1</version>
+ <parent><groupId>com.kingsrook.qbits</groupId><artifactId>qbit-document-generation-reactor</artifactId><version>${revision}</version><relativePath>../../../pom.xml</relativePath></parent>
+ <groupId>com.kingsrook.thirdparty</groupId><artifactId>openhtmltopdf-pdfbox</artifactId><version>${revision}</version>
  <name>OpenHTML PDFBox raster metadata correction</name>
- <description>Source-built OpenHTML1.1.105 with a narrow image-copy correction; LGPL2.1-or-later.</description>
+ <description>Source-built OpenHTML1.1.105 with a narrow image-copy correction; LGPL2.1-or-later. Not an original upstream release: its Maven version is the QBit Document Generation family version; the upstream version and the QQQ patch level are in the openhtml.* properties.</description>
+ <url>https://github.com/danfickle/openhtmltopdf</url>
+ <!-- Upstream source provenance only (the scm below is NOT this repository): tag 1.1.105. The explicit LGPL license above applies to this module; it does not inherit any other license. -->
+ <scm><connection>scm:git:https://github.com/danfickle/openhtmltopdf.git</connection><url>https://github.com/danfickle/openhtmltopdf/tree/1.1.105</url><tag>1.1.105</tag></scm>
  <licenses><license><name>GNU Lesser General Public License2.1 or later</name><url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url></license></licenses>
- <properties><maven.compiler.release>8</maven.compiler.release><maven.compiler.testRelease>21</maven.compiler.testRelease><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><project.build.outputTimestamp>2026-10-31T00:00:00Z</project.build.outputTimestamp></properties>
+ <properties><openhtml.upstream.version>1.1.105</openhtml.upstream.version><openhtml.upstream.commit>54b31598f14ea77139ec435106810ba67bd68656</openhtml.upstream.commit><openhtml.qqq.patch>p1</openhtml.qqq.patch><maven.compiler.release>8</maven.compiler.release><maven.compiler.testRelease>21</maven.compiler.testRelease><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><project.build.outputTimestamp>2026-10-31T00:00:00Z</project.build.outputTimestamp><enforcer.skip>true</enforcer.skip></properties>
  <dependencies>
   <dependency><groupId>org.apache.pdfbox</groupId><artifactId>pdfbox</artifactId><version>3.0.8</version></dependency>
   <dependency><groupId>org.apache.pdfbox</groupId><artifactId>xmpbox</artifactId><version>3.0.8</version></dependency>
@@ -15,9 +19,10 @@
  </dependencies>
  <build><plugins>
   <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-resources-plugin</artifactId><version>3.3.1</version></plugin>
-  <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version></plugin>
-  <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><systemPropertyVariables><java.awt.headless>true</java.awt.headless><pdfbox.fontcache>${project.build.directory}</pdfbox.fontcache></systemPropertyVariables></configuration></plugin>
+  <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version><configuration><source>8</source><target>8</target></configuration></plugin>
+  <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><dependenciesToScan combine.self="override"/><systemPropertyVariables><java.awt.headless>true</java.awt.headless><pdfbox.fontcache>${project.build.directory}</pdfbox.fontcache></systemPropertyVariables></configuration></plugin>
   <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-jar-plugin</artifactId><version>3.4.2</version></plugin>
   <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-source-plugin</artifactId><version>3.3.1</version><executions><execution><goals><goal>jar-no-fork</goal></goals></execution></executions></plugin>
+ <plugin><groupId>org.codehaus.mojo</groupId><artifactId>flatten-maven-plugin</artifactId><version>1.7.3</version><configuration><updatePomFile>true</updatePomFile><flattenMode>ossrh</flattenMode></configuration><executions><execution><id>flatten</id><phase>process-resources</phase><goals><goal>flatten</goal></goals></execution><execution><id>flatten.clean</id><phase>clean</phase><goals><goal>clean</goal></goals></execution></executions></plugin>
  </plugins></build>
 </project>
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/src/main/resources/META-INF/QQQ-MODIFICATIONS.txt b/renderer/vendor/openhtml-1.1.105-qqq-p1/src/main/resources/META-INF/QQQ-MODIFICATIONS.txt
index c9d9e6d..6fc64be 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/src/main/resources/META-INF/QQQ-MODIFICATIONS.txt
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/src/main/resources/META-INF/QQQ-MODIFICATIONS.txt
@@ -14,7 +14,10 @@ bytes, preserve actual copied stream Length, force Interpolate=false on the
 clone, and close raw input even when copying fails.
 Original upstream notices and LGPL licenses remain in META-INF.
 
-Artifact: com.kingsrook.thirdparty:openhtmltopdf-pdfbox:1.1.105-qqq-p1
+Artifact: com.kingsrook.thirdparty:openhtmltopdf-pdfbox, published at the QBit Document Generation
+family version. The modified library is upstream 1.1.105 with QQQ patch level 1 (originally
+distributed as version 1.1.105-qqq-p1); the version numbers it is based on are recorded in the
+POM properties openhtml.upstream.version and openhtml.qqq.patch.
 Corresponding modified sources: same GAV with classifier sources.
 The full-source bundle also contains the standalone Maven POM, trusted
 regression tests, exact patch and reproduction instructions. Distribute it
diff --git a/renderer/vendor/openhtml-1.1.105-qqq-p1/verify-module-source.sh b/renderer/vendor/openhtml-1.1.105-qqq-p1/verify-module-source.sh
index d69a7d1..fa82fc3 100644
--- a/renderer/vendor/openhtml-1.1.105-qqq-p1/verify-module-source.sh
+++ b/renderer/vendor/openhtml-1.1.105-qqq-p1/verify-module-source.sh
@@ -7,5 +7,10 @@ work=$(mktemp -d)
 trap 'rm -rf "$work"' EXIT
 (cd "$work" && jar xf "$vendor/openhtmltopdf-pdfbox-1.1.105-qqq-p1-complete-source.zip")
 diff -r "$work/module/src" "$vendor/src"
-cmp "$work/module/pom.xml" "$vendor/pom.xml"
+# the archive's module POM differs from the repository module POM only in the parent's relativePath (inside the archive: ../parent/pom.xml)
+strip() { sed 's#<relativePath>[^<]*</relativePath>#<relativePath/>#' "$1"; }
+strip "$work/module/pom.xml" > "$work/module-pom.normalized"
+strip "$vendor/pom.xml" > "$work/repository-pom.normalized"
+cmp "$work/module-pom.normalized" "$work/repository-pom.normalized"
+cmp "$work/parent/pom.xml" "$vendor/../../../pom.xml"
 echo "module source identical to archive"