Skip to content

Bump org.jline:jline from 4.3.1 to 4.4.2 - #208

Merged
OakLoaf merged 1 commit into
mainfrom
dependabot/gradle/org.jline-jline-4.4.2
Sep 9, 2026
Merged

Bump org.jline:jline from 4.3.1 to 4.4.2#208
OakLoaf merged 1 commit into
mainfrom
dependabot/gradle/org.jline-jline-4.4.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps org.jline:jline from 4.3.1 to 4.4.2.

Release notes

Sourced from org.jline:jline's releases.

JLine 4.4.2 is a bugfix release focused on terminal I/O reliability. It eliminates a race condition where the pump thread could steal keystrokes from subprocesses (e.g. less), fixes mouse event corruption on Windows at large column positions, and replaces wall-clock deadlines with monotonic timing to prevent misbehavior under NTP adjustments.

🐛 Bug Fixes

📦 Dependency updates

  • chore: bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 (#2225) @​dependabot
  • chore: bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 (#2227) @​dependabot
  • chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.10 to 1.1.11 (#2215) @​dependabot
  • chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 (#2214) @​dependabot
  • chore: bump eu.maveniverse.maven.nisse:extension from 0.9.8 to 0.9.10 (#2213) @​dependabot

Full Changelog: jline/jline3@4.4.1...4.4.2

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

📦 Dependency updates

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#2021, #2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#2151, #2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#2186), and SSH agent forwarding now requires the explicit -A flag (#2106).

... (truncated)

Commits
  • a03c103 chore: bump org.apache.maven.plugins:maven-compiler-plugin (#2225)
  • 26a7c95 chore: bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 (#2227)
  • 6b86d17 fix: use System.nanoTime() for monotonic deadline accounting (fixes #2230)
  • 33dadd1 fix: use poll(2) for probe and PTY reads (fixes #2223)
  • 3ee98ca fix: use poll(2) in pump thread to prevent tty keystroke theft (#2222)
  • 7606536 chore: bump org.graalvm.buildtools:native-maven-plugin (#2215)
  • a487625 chore: bump com.diffplug.spotless:spotless-maven-plugin (#2214)
  • dbf3b0a chore: bump eu.maveniverse.maven.nisse:extension from 0.9.8 to 0.9.10 (#2213)
  • 82fe59d fix: switch Windows mouse encoding from X10 to SGR format (#2221)
  • d7031cc fix: add mouse support capability to Windows terminal types (fixes #2217)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jline:jline](https://github.com/jline/jline3) from 4.3.1 to 4.4.2.
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.3.1...4.4.2)

---
updated-dependencies:
- dependency-name: org.jline:jline
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 7, 2026
@OakLoaf
OakLoaf merged commit 137a95c into main Sep 9, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/org.jline-jline-4.4.2 branch September 9, 2026 11:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant