Update dependency org.jline:jline-reader to v4.4.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.jline:jline-reader	4.4.1 → 4.4.5

---

Release Notes

jline/jline3 (org.jline:jline-reader)

v4.4.5: JLine 4.4.5

Compare Source

JLine 4.4.5 is a bug fix release addressing terminal color palette initialization, FFM signal handling, and paginated list rendering, along with dependency updates.

🐛 Bug Fixes

• fix: palette sized before infocmp capabilities are parsed (#​2260) @​gnodet
• fix: ColorPalette.loadPalette() falls back to default when terminal does not answer OSC 4 (#​2261) @​gnodet
• fix: prevent FFM provider from overwriting JVM-reserved SIGQUIT with SIG_DFL (#​2271) @​gnodet
• fix: correct paginated list/checkbox layout defects (#​2273) @​gnodet
• fix: replace ReDoS-vulnerable regex with simple string checks in DefaultPrinter (#​2247) @​gnodet

📦 Dependency Updates

• chore: bump eu.maveniverse.maven.nisse:extension from 0.9.10 to 0.9.11 (#​2253) @​dependabot[bot]
• chore: bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.98.0 (#​2254) @​dependabot[bot]
• chore: bump actions/setup-java from 6.0.0 to 6.0.1 (#​2258) @​dependabot[bot]
• chore: bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 (#​2266) @​dependabot[bot]
• chore: bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 (#​2268) @​dependabot[bot]
• chore: bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 (#​2269) @​dependabot[bot]
• chore: bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#​2270) @​dependabot[bot]

Full Changelog: jline/jline3@4.4.3...4.4.5

v4.4.3: JLine 4.4.3

Compare Source

JLine 4.4.3 is a security patch release addressing multiple vulnerabilities reported by AFINE/CERT.PL, plus bug fixes and dependency updates.

🔒 Security Fixes

• Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6)
• Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj)
• Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3)
• TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6)

🐛 Bug Fixes

• fix: verify server host keys in the ssh client builtin (#​2236) @​uchiha-bug-hunter
• fix: address remaining security vulnerabilities reported by AFINE/CERT.PL (#​2235) @​gnodet
• fix: use Release Drafter draft for GitHub release and fail closed on lookup errors (#​2232) @​gnodet

📦 Dependency updates

• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.11 to 1.1.12 (#​2242) @​dependabot[bot]
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.10.1 to 3.10.2 (#​2246) @​dependabot[bot]
• chore: bump groovy.version from 5.1.1 to 5.1.2 (#​2245) @​dependabot[bot]
• chore: bump slf4j.version from 2.0.18 to 2.0.19 (#​2244) @​dependabot[bot]
• chore: bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 (#​2234) @​dependabot[bot]

v4.4.2: JLine 4.4.2

Compare Source

JLine 4.4.2 is a bugfix release focused on terminal I/O reliability. It eliminates a race condition where the pump thread could steal keystrokes from subprocesses (e.g. less), fixes mouse event corruption on Windows at large column positions, and replaces wall-clock deadlines with monotonic timing to prevent misbehavior under NTP adjustments.

🐛 Bug Fixes

• fix: use poll(2) in pump thread to prevent tty keystroke theft (fixes #​2219) (#​2222) @​gnodet
• fix: use poll(2) for probe and PTY reads (fixes #​2223) (#​2229) @​gnodet
• fix: use System.nanoTime() for monotonic deadline accounting (fixes #​2230) (#​2231) @​gnodet
• fix: use SGR mouse encoding on Windows to avoid corruption at column >= 96 (#​2221) @​gnodet
• fix: add mouse support capability to Windows terminal types (fixes #​2217) (#​2218) @​gnodet

📦 Dependency updates

• chore: bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 (#​2225) @​dependabot
• chore: bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 (#​2227) @​dependabot
• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.10 to 1.1.11 (#​2215) @​dependabot
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 (#​2214) @​dependabot
• chore: bump eu.maveniverse.maven.nisse:extension from 0.9.8 to 0.9.10 (#​2213) @​dependabot

Full Changelog: jline/jline3@4.4.1...4.4.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.