Skip to content

Bump jline.version from 4.3.1 to 4.4.1 - #1759

Merged
slachiewicz merged 1 commit into
masterfrom
dependabot/maven/jline.version-4.4.1
Sep 5, 2026
Merged

Bump jline.version from 4.3.1 to 4.4.1#1759
slachiewicz merged 1 commit into
masterfrom
dependabot/maven/jline.version-4.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps jline.version from 4.3.1 to 4.4.1.
Updates org.jline:jline from 4.3.1 to 4.4.1

Release notes

Sourced from org.jline:jline's releases.

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

📦 Dependency updates

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#2021, #2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#2151, #2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#2186), and SSH agent forwarding now requires the explicit -A flag (#2106).

💥 Breaking changes

🚀 New features and improvements

  • feat: support in-band resize (mode 2048) in Nano, Less, and Tmux builtins (#2198) @​gnodet
  • feat: add musl libc support for native libraries (#2197) @​gnodet
  • feat: add Kitty Keyboard Protocol support (#2007) @​gnodet
  • feat: add configurable behavior for too many completion candidates (fixes #2154) (#2196) @​gnodet
  • feat: support in-band window resize notifications (mode 2048) (#2021) @​gnodet
  • feat: add JdkConsoleProvider for drop-in JLine console (#2031) @​gnodet
  • feat: verify macOS native library signatures in CI (#2173) @​gnodet
  • feat: allow customizing the help source in Less pager (fixes #2056) (#2065) @​gnodet
  • feat: full synchronized output (mode 2026) support (#2022) @​gnodet
  • refactor: batch DEC mode probing into single DECRQM round-trip (#2023) @​gnodet
  • feat: allow customizing the default prompt in Less pager (#2036) @​gnodet
  • feat: add factory to simplify LineDisciplineTerminal + ScreenTerminal wiring (#2035) @​gnodet

... (truncated)

Commits
  • 2f8b6a8 fix: prevent first-line scroll on non-xenl terminals (fixes #2206) (#2212)
  • 7544a9c fix: append suffix to buffer when not part of candidate value (fixes #2208) (...
  • 94af4af chore: bump org.graalvm.sdk:graal-sdk from 25.2.4 to 25.3.4.1 (#2204)
  • d956f9c chore: bump actions/setup-java from 5.7.0 to 6.0.0 (#2203)
  • 64df16b chore: bump groovy.version from 5.1.0 to 5.1.1 (#2201)
  • 01e7d26 fix: use hard-timeout daemon thread for terminal mode probing (fixes #2209)
  • 2688ac6 fix: bound !# history expansion to prevent exponential blowup
  • 92cb769 fix: strip control characters from file names in posix builtins
  • f1bef0e chore: bump eu.maveniverse.maven.nisse:extension from 0.9.7 to 0.9.8 (#2199)
  • 57f82ce fix: preserve pending buffer and message during Less resize
  • Additional commits viewable in compare view

Updates org.jline:jline-terminal from 4.3.1 to 4.4.1

Release notes

Sourced from org.jline:jline-terminal's releases.

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

📦 Dependency updates

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#2021, #2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#2151, #2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#2186), and SSH agent forwarding now requires the explicit -A flag (#2106).

💥 Breaking changes

🚀 New features and improvements

  • feat: support in-band resize (mode 2048) in Nano, Less, and Tmux builtins (#2198) @​gnodet
  • feat: add musl libc support for native libraries (#2197) @​gnodet
  • feat: add Kitty Keyboard Protocol support (#2007) @​gnodet
  • feat: add configurable behavior for too many completion candidates (fixes #2154) (#2196) @​gnodet
  • feat: support in-band window resize notifications (mode 2048) (#2021) @​gnodet
  • feat: add JdkConsoleProvider for drop-in JLine console (#2031) @​gnodet
  • feat: verify macOS native library signatures in CI (#2173) @​gnodet
  • feat: allow customizing the help source in Less pager (fixes #2056) (#2065) @​gnodet
  • feat: full synchronized output (mode 2026) support (#2022) @​gnodet
  • refactor: batch DEC mode probing into single DECRQM round-trip (#2023) @​gnodet
  • feat: allow customizing the default prompt in Less pager (#2036) @​gnodet
  • feat: add factory to simplify LineDisciplineTerminal + ScreenTerminal wiring (#2035) @​gnodet

... (truncated)

Commits
  • 2f8b6a8 fix: prevent first-line scroll on non-xenl terminals (fixes #2206) (#2212)
  • 7544a9c fix: append suffix to buffer when not part of candidate value (fixes #2208) (...
  • 94af4af chore: bump org.graalvm.sdk:graal-sdk from 25.2.4 to 25.3.4.1 (#2204)
  • d956f9c chore: bump actions/setup-java from 5.7.0 to 6.0.0 (#2203)
  • 64df16b chore: bump groovy.version from 5.1.0 to 5.1.1 (#2201)
  • 01e7d26 fix: use hard-timeout daemon thread for terminal mode probing (fixes #2209)
  • 2688ac6 fix: bound !# history expansion to prevent exponential blowup
  • 92cb769 fix: strip control characters from file names in posix builtins
  • f1bef0e chore: bump eu.maveniverse.maven.nisse:extension from 0.9.7 to 0.9.8 (#2199)
  • 57f82ce fix: preserve pending buffer and message during Less resize
  • Additional commits viewable in compare view

Updates org.jline:jansi-core from 4.3.1 to 4.4.1

Release notes

Sourced from org.jline:jansi-core's releases.

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

📦 Dependency updates

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#2021, #2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#2151, #2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#2186), and SSH agent forwarding now requires the explicit -A flag (#2106).

💥 Breaking changes

🚀 New features and improvements

  • feat: support in-band resize (mode 2048) in Nano, Less, and Tmux builtins (#2198) @​gnodet
  • feat: add musl libc support for native libraries (#2197) @​gnodet
  • feat: add Kitty Keyboard Protocol support (#2007) @​gnodet
  • feat: add configurable behavior for too many completion candidates (fixes #2154) (#2196) @​gnodet
  • feat: support in-band window resize notifications (mode 2048) (#2021) @​gnodet
  • feat: add JdkConsoleProvider for drop-in JLine console (#2031) @​gnodet
  • feat: verify macOS native library signatures in CI (#2173) @​gnodet
  • feat: allow customizing the help source in Less pager (fixes #2056) (#2065) @​gnodet
  • feat: full synchronized output (mode 2026) support (#2022) @​gnodet
  • refactor: batch DEC mode probing into single DECRQM round-trip (#2023) @​gnodet
  • feat: allow customizing the default prompt in Less pager (#2036) @​gnodet
  • feat: add factory to simplify LineDisciplineTerminal + ScreenTerminal wiring (#2035) @​gnodet

... (truncated)

Commits
  • 2f8b6a8 fix: prevent first-line scroll on non-xenl terminals (fixes #2206) (#2212)
  • 7544a9c fix: append suffix to buffer when not part of candidate value (fixes #2208) (...
  • 94af4af chore: bump org.graalvm.sdk:graal-sdk from 25.2.4 to 25.3.4.1 (#2204)
  • d956f9c chore: bump actions/setup-java from 5.7.0 to 6.0.0 (#2203)
  • 64df16b chore: bump groovy.version from 5.1.0 to 5.1.1 (#2201)
  • 01e7d26 fix: use hard-timeout daemon thread for terminal mode probing (fixes #2209)
  • 2688ac6 fix: bound !# history expansion to prevent exponential blowup
  • 92cb769 fix: strip control characters from file names in posix builtins
  • f1bef0e chore: bump eu.maveniverse.maven.nisse:extension from 0.9.7 to 0.9.8 (#2199)
  • 57f82ce fix: preserve pending buffer and message during Less resize
  • Additional commits viewable in compare view

Updates org.jline:jline-terminal-jni from 4.3.1 to 4.4.1

Release notes

Sourced from org.jline:jline-terminal-jni's releases.

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

📦 Dependency updates

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#2021, #2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#2151, #2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#2186), and SSH agent forwarding now requires the explicit -A flag (#2106).

💥 Breaking changes

🚀 New features and improvements

  • feat: support in-band resize (mode 2048) in Nano, Less, and Tmux builtins (#2198) @​gnodet
  • feat: add musl libc support for native libraries (#2197) @​gnodet
  • feat: add Kitty Keyboard Protocol support (#2007) @​gnodet
  • feat: add configurable behavior for too many completion candidates (fixes #2154) (#2196) @​gnodet
  • feat: support in-band window resize notifications (mode 2048) (#2021) @​gnodet
  • feat: add JdkConsoleProvider for drop-in JLine console (#2031) @​gnodet
  • feat: verify macOS native library signatures in CI (#2173) @​gnodet
  • feat: allow customizing the help source in Less pager (fixes #2056) (#2065) @​gnodet
  • feat: full synchronized output (mode 2026) support (#2022) @​gnodet
  • refactor: batch DEC mode probing into single DECRQM round-trip (#2023) @​gnodet
  • feat: allow customizing the default prompt in Less pager (#2036) @​gnodet
  • feat: add factory to simplify LineDisciplineTerminal + ScreenTerminal wiring (#2035) @​gnodet

... (truncated)

Commits
  • 2f8b6a8 fix: prevent first-line scroll on non-xenl terminals (fixes #2206) (#2212)
  • 7544a9c fix: append suffix to buffer when not part of candidate value (fixes #2208) (...
  • 94af4af chore: bump org.graalvm.sdk:graal-sdk from 25.2.4 to 25.3.4.1 (#2204)
  • d956f9c chore: bump actions/setup-java from 5.7.0 to 6.0.0 (#2203)
  • 64df16b chore: bump groovy.version from 5.1.0 to 5.1.1 (#2201)
  • 01e7d26 fix: use hard-timeout daemon thread for terminal mode probing (fixes #2209)
  • 2688ac6 fix: bound !# history expansion to prevent exponential blowup
  • 92cb769 fix: strip control characters from file names in posix builtins
  • f1bef0e chore: bump eu.maveniverse.maven.nisse:extension from 0.9.7 to 0.9.8 (#2199)
  • 57f82ce fix: preserve pending buffer and message during Less resize
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `jline.version` from 4.3.1 to 4.4.1.

Updates `org.jline:jline` from 4.3.1 to 4.4.1
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.3.1...4.4.1)

Updates `org.jline:jline-terminal` from 4.3.1 to 4.4.1
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.3.1...4.4.1)

Updates `org.jline:jansi-core` from 4.3.1 to 4.4.1
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.3.1...4.4.1)

Updates `org.jline:jline-terminal-jni` from 4.3.1 to 4.4.1
- [Release notes](https://github.com/jline/jline3/releases)
- [Commits](jline/jline3@4.3.1...4.4.1)

---
updated-dependencies:
- dependency-name: org.jline:jline
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jline:jline-terminal
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jline:jansi-core
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jline:jline-terminal-jni
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 4, 2026
@slachiewicz
slachiewicz merged commit 3d328d3 into master Sep 5, 2026
6 checks passed
@slachiewicz
slachiewicz deleted the dependabot/maven/jline.version-4.4.1 branch September 5, 2026 11:37
@github-actions github-actions Bot added this to the 2.0.0-rc-4 milestone Sep 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant