Skip to content

Bump org.jline:jline from 4.4.3 to 4.4.6 - #219

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.jline-jline-4.4.6
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.jline-jline-4.4.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps org.jline:jline from 4.4.3 to 4.4.6.

Release notes

Sourced from org.jline:jline's releases.

JLine 4.4.6 is a bugfix release addressing two correctness issues and updating several dependencies.

The main fix resolves a boot layer initialization failure (InvalidModuleDescriptorException) that affected Java 17+ projects with jline-terminal-ffm on the module path: the module-info.class was compiled at Java 22 and placed at the jar root, causing the JVM to reject it. The module is now packaged as a proper Multi-Release JAR, with the module descriptor in META-INF/versions/22/, so Java 17 consumers load the jar without issues while Java 22+ still gets the full JPMS module. The second fix corrects codePointAt/codePointBefore in AttributedString to respect subsequence bounds, preventing surrogates from being combined with characters outside the logical range.

🐛 Bug Fixes

  • fix: make jline-terminal-ffm a Multi-Release JAR to fix Java 17 boot layer failure (#2285) @​gnodet
  • fix: respect attributed sequence bounds when reading code points (#2278) @​jakezwang

📦 Dependency Updates

Full Changelog: jline/jline3@4.4.5...4.4.6

JLine 4.4.5 is a bug fix release addressing terminal color palette initialization, FFM signal handling, and paginated list rendering, along with dependency updates.

🐛 Bug Fixes

  • fix: palette sized before infocmp capabilities are parsed (#2260) @​gnodet
  • fix: ColorPalette.loadPalette() falls back to default when terminal does not answer OSC 4 (#2261) @​gnodet
  • fix: prevent FFM provider from overwriting JVM-reserved SIGQUIT with SIG_DFL (#2271) @​gnodet
  • fix: correct paginated list/checkbox layout defects (#2273) @​gnodet
  • fix: replace ReDoS-vulnerable regex with simple string checks in DefaultPrinter (#2247) @​gnodet

📦 Dependency Updates

  • chore: bump eu.maveniverse.maven.nisse:extension from 0.9.10 to 0.9.11 (#2253) @​dependabot[bot]
  • chore: bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.98.0 (#2254) @​dependabot[bot]
  • chore: bump actions/setup-java from 6.0.0 to 6.0.1 (#2258) @​dependabot[bot]
  • chore: bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 (#2266) @​dependabot[bot]
  • chore: bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 (#2268) @​dependabot[bot]
  • chore: bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 (#2269) @​dependabot[bot]
  • chore: bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#2270) @​dependabot[bot]

Full Changelog: jline/jline3@4.4.3...4.4.5

Commits
  • 2ab1d06 fix: make jline-terminal-ffm a Multi-Release JAR to fix Java 17 boot layer fa...
  • c59e109 fix: respect attributed sequence bounds when reading code points
  • 1a5900b chore: bump groovy.version from 5.1.2 to 6.0.0
  • b640a9c chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.12 to 1.1.14
  • 696fc40 chore: bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0
  • 8476e8c chore: add njord auto-publish parameters to release workflow
  • a5cd208 chore: ignore Groovy major version bumps on jline-3.x (#2283)
  • 2e88bc9 fix: correct paginated list/checkbox layout defects (fixes #2272)
  • dad6bb6 chore: bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#2270)
  • 3ff7a09 chore: bump org.apache.maven.plugins:maven-install-plugin (#2269)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jline:jline](https://github.com/jline/jline3) from 4.4.3 to 4.4.6.
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.4.3...4.4.6)

---
updated-dependencies:
- dependency-name: org.jline:jline
  dependency-version: 4.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #223.

@dependabot dependabot Bot closed this Oct 9, 2026
@dependabot
dependabot Bot deleted the dependabot/gradle/org.jline-jline-4.4.6 branch October 9, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants