Skip to content

build(deps-dev): bump org.jline:jline from 4.3.1 to 4.4.1 - #2848

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/org.jline-jline-4.4.1
Open

build(deps-dev): bump org.jline:jline from 4.3.1 to 4.4.1#2848
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/org.jline-jline-4.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps org.jline:jline from 4.3.1 to 4.4.1.

Release notes

Sourced from org.jline:jline's releases.

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

📦 Dependency updates

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#2021, #2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#2151, #2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#2186), and SSH agent forwarding now requires the explicit -A flag (#2106).

💥 Breaking changes

🚀 New features and improvements

  • feat: support in-band resize (mode 2048) in Nano, Less, and Tmux builtins (#2198) @​gnodet
  • feat: add musl libc support for native libraries (#2197) @​gnodet
  • feat: add Kitty Keyboard Protocol support (#2007) @​gnodet
  • feat: add configurable behavior for too many completion candidates (fixes #2154) (#2196) @​gnodet
  • feat: support in-band window resize notifications (mode 2048) (#2021) @​gnodet
  • feat: add JdkConsoleProvider for drop-in JLine console (#2031) @​gnodet
  • feat: verify macOS native library signatures in CI (#2173) @​gnodet
  • feat: allow customizing the help source in Less pager (fixes #2056) (#2065) @​gnodet
  • feat: full synchronized output (mode 2026) support (#2022) @​gnodet
  • refactor: batch DEC mode probing into single DECRQM round-trip (#2023) @​gnodet
  • feat: allow customizing the default prompt in Less pager (#2036) @​gnodet
  • feat: add factory to simplify LineDisciplineTerminal + ScreenTerminal wiring (#2035) @​gnodet

... (truncated)

Commits
  • 2f8b6a8 fix: prevent first-line scroll on non-xenl terminals (fixes #2206) (#2212)
  • 7544a9c fix: append suffix to buffer when not part of candidate value (fixes #2208) (...
  • 94af4af chore: bump org.graalvm.sdk:graal-sdk from 25.2.4 to 25.3.4.1 (#2204)
  • d956f9c chore: bump actions/setup-java from 5.7.0 to 6.0.0 (#2203)
  • 64df16b chore: bump groovy.version from 5.1.0 to 5.1.1 (#2201)
  • 01e7d26 fix: use hard-timeout daemon thread for terminal mode probing (fixes #2209)
  • 2688ac6 fix: bound !# history expansion to prevent exponential blowup
  • 92cb769 fix: strip control characters from file names in posix builtins
  • f1bef0e chore: bump eu.maveniverse.maven.nisse:extension from 0.9.7 to 0.9.8 (#2199)
  • 57f82ce fix: preserve pending buffer and message during Less resize
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jline:jline](https://github.com/jline/jline3) from 4.3.1 to 4.4.1.
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.3.1...4.4.1)

---
updated-dependencies:
- dependency-name: org.jline:jline
  dependency-version: 4.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 3, 2026
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown

Test Results

  702 files  ±0    702 suites  ±0   1h 19m 3s ⏱️ - 1m 16s
  932 tests ±0    884 ✅ ±0   48 💤 ±0  0 ❌ ±0 
2 796 runs  ±0  2 652 ✅ ±0  144 💤 ±0  0 ❌ ±0 

Results for commit 6354cea. ± Comparison against base commit 9e8d6e1.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants