Skip to content

Update dependency org.jline:jline-terminal to v4.4.5 - #95

Open
renovate-bot wants to merge 1 commit into
koppor:mainfrom
renovate-bot:renovate/org.jline-jline-terminal-4.x
Open

renovate-bot wants to merge 1 commit into
koppor:mainfrom
renovate-bot:renovate/org.jline-jline-terminal-4.x

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
org.jline:jline-terminal 4.3.14.4.5 age confidence

Release Notes

jline/jline3 (org.jline:jline-terminal)

v4.4.5: JLine 4.4.5

Compare Source

JLine 4.4.5 is a bug fix release addressing terminal color palette initialization, FFM signal handling, and paginated list rendering, along with dependency updates.

🐛 Bug Fixes

  • fix: palette sized before infocmp capabilities are parsed (#​2260) @​gnodet
  • fix: ColorPalette.loadPalette() falls back to default when terminal does not answer OSC 4 (#​2261) @​gnodet
  • fix: prevent FFM provider from overwriting JVM-reserved SIGQUIT with SIG_DFL (#​2271) @​gnodet
  • fix: correct paginated list/checkbox layout defects (#​2273) @​gnodet
  • fix: replace ReDoS-vulnerable regex with simple string checks in DefaultPrinter (#​2247) @​gnodet

📦 Dependency Updates

Full Changelog: jline/jline3@4.4.3...4.4.5

v4.4.3: JLine 4.4.3

Compare Source

JLine 4.4.3 is a security patch release addressing multiple vulnerabilities reported by AFINE/CERT.PL, plus bug fixes and dependency updates.

🔒 Security Fixes
  • Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6)
  • Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj)
  • Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3)
  • TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6)
🐛 Bug Fixes
📦 Dependency updates

v4.4.2: JLine 4.4.2

Compare Source

JLine 4.4.2 is a bugfix release focused on terminal I/O reliability. It eliminates a race condition where the pump thread could steal keystrokes from subprocesses (e.g. less), fixes mouse event corruption on Windows at large column positions, and replaces wall-clock deadlines with monotonic timing to prevent misbehavior under NTP adjustments.

🐛 Bug Fixes
📦 Dependency updates

Full Changelog: jline/jline3@4.4.1...4.4.2

v4.4.1: JLine 4.4.1

Compare Source

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes
📦 Dependency updates

v4.4.0: JLine 4.4.0

Compare Source

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

  • Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#​2007)
  • In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#​2021, #​2198)
  • Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#​2022)
  • musl libc support — native libraries now load on Alpine and other musl-based distributions (#​2197)
  • JdkConsoleProvider — drop-in JLine console that can replace System.console() (#​2031)
  • Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#​2151, #​2153)
  • Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
  • FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#​2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#​2186), and SSH agent forwarding now requires the explicit -A flag (#​2106).

💥 Breaking changes

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

📦 Dependency updates

👻 Maintenance


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot force-pushed the renovate/org.jline-jline-terminal-4.x branch from 98601dd to 4e34f15 Compare August 31, 2026 23:08
@renovate-bot renovate-bot changed the title Update dependency org.jline:jline-terminal to v4.4.0 Update dependency org.jline:jline-terminal to v4.4.1 Aug 31, 2026
@renovate-bot
renovate-bot force-pushed the renovate/org.jline-jline-terminal-4.x branch from 4e34f15 to f7652bb Compare September 3, 2026 13:27
@renovate-bot renovate-bot changed the title Update dependency org.jline:jline-terminal to v4.4.1 Update dependency org.jline:jline-terminal to v4.4.2 Sep 3, 2026
@renovate-bot
renovate-bot force-pushed the renovate/org.jline-jline-terminal-4.x branch from f7652bb to b27d73e Compare September 8, 2026 07:54
@renovate-bot renovate-bot changed the title Update dependency org.jline:jline-terminal to v4.4.2 Update dependency org.jline:jline-terminal to v4.4.3 Sep 8, 2026
@renovate-bot
renovate-bot force-pushed the renovate/org.jline-jline-terminal-4.x branch from b27d73e to 6876224 Compare September 17, 2026 22:15
@renovate-bot renovate-bot changed the title Update dependency org.jline:jline-terminal to v4.4.3 Update dependency org.jline:jline-terminal to v4.4.5 Sep 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant