Bump jlineVersion from 3.30.15 to 3.30.16 by dependabot[bot] · Pull Request #12518 · apache/maven

dependabot · 2026-07-22T01:05:09Z

Bumps jlineVersion from 3.30.15 to 3.30.16.
Updates org.jline:jansi-core from 3.30.15 to 3.30.16

Release notes

Sourced from org.jline:jansi-core's releases.

JLine 3.30.16 is a bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements.

💥 Breaking Changes

fix: only forward the ssh agent when -A is given (3.x backport of #2106) (#2109) @gnodet

SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it

🐛 Bug Fixes

fix: reject overlong hex components in OSC color responses (3.x backport of #2105) (#2108) @gnodet

fix: strip OSC and other escape sequences in ansiAppend (backport of #2099) (#2103) @gnodet

fix: search multiple lib paths for versioned libutil.so (backport of #2100) (#2102) @gnodet

fix: use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF (#2095) @gnodet

fix: check closed flag in PtyInputStream to prevent hang on empty input (#2090) @gnodet

fix: confine ConfigurationPath lookups to the config directory (backport of #2045) (#2076) @gnodet

fix: disable Read File command in nano restricted mode (backport of #2055) (#2075) @gnodet

fix: drain buffered data before EOF in NonBlockingPumpInputStream (backport of #2054) (#2074) @gnodet

fix: look up openpty in libc.so.6 for glibc 2.34+ (backport of #2068) (#2073) @gnodet

fix: guard styleMatches and highlighter rules against ReDoS (#2072) @gnodet

fix: backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) (#2000) @gnodet

fix: propagate EOF in PtyInputStream to avoid infinite loop (#1961, #1963) (#2069) @thomasrebele

📦 Dependency Updates

chore: bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 (#2098)

chore: bump actions/setup-node from 6 to 7 (#2091)

chore: bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#2060)

chore: bump sshd.version from 2.18.0 to 2.19.0 (#2058)

chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 (#2042)

chore: bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 (#2025)

chore: bump com.diffplug.spotless:spotless-maven-plugin (#2024)

Full Changelog: jline/jline3@jline-3.30.15...jline-3.30.16

Commits

fcfe320 [maven-release-plugin] prepare release jline-3.30.16
a34e0c4 fix: only forward the ssh agent when -A is given (3.x backport)
398c81b fix: reject overlong hex components in OSC color responses (3.x backport)
b1ca3bf Merge pull request #2098 from jline/dependabot/maven/jline-3.x/org.apache.ivy...
b390cf3 Merge pull request #2102 from jline/backport/2100-libutil-3x
8a84437 Merge pull request #2103 from jline/backport/2099-osc-strip-3x
5bab62e Merge pull request #2095 from jline/backport/2052-ssrf-jline-3.x
4364c2f fix: re-interrupt thread when catching InterruptedException (S2142)
0110211 fix: catch Exception instead of Throwable in uname process block
551ad41 fix: strip OSC and other escape sequences in ansiAppend (backport #2099)
Additional commits viewable in compare view

Updates org.jline:jline-terminal from 3.30.15 to 3.30.16

Release notes

Sourced from org.jline:jline-terminal's releases.

JLine 3.30.16 is a bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements.

💥 Breaking Changes

fix: only forward the ssh agent when -A is given (3.x backport of #2106) (#2109) @gnodet

SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it

🐛 Bug Fixes

fix: reject overlong hex components in OSC color responses (3.x backport of #2105) (#2108) @gnodet

fix: strip OSC and other escape sequences in ansiAppend (backport of #2099) (#2103) @gnodet

fix: search multiple lib paths for versioned libutil.so (backport of #2100) (#2102) @gnodet

fix: use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF (#2095) @gnodet

fix: check closed flag in PtyInputStream to prevent hang on empty input (#2090) @gnodet

fix: confine ConfigurationPath lookups to the config directory (backport of #2045) (#2076) @gnodet

fix: disable Read File command in nano restricted mode (backport of #2055) (#2075) @gnodet

fix: drain buffered data before EOF in NonBlockingPumpInputStream (backport of #2054) (#2074) @gnodet

fix: look up openpty in libc.so.6 for glibc 2.34+ (backport of #2068) (#2073) @gnodet

fix: guard styleMatches and highlighter rules against ReDoS (#2072) @gnodet

fix: backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) (#2000) @gnodet

fix: propagate EOF in PtyInputStream to avoid infinite loop (#1961, #1963) (#2069) @thomasrebele

📦 Dependency Updates

chore: bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 (#2098)

chore: bump actions/setup-node from 6 to 7 (#2091)

chore: bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#2060)

chore: bump sshd.version from 2.18.0 to 2.19.0 (#2058)

chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 (#2042)

chore: bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 (#2025)

chore: bump com.diffplug.spotless:spotless-maven-plugin (#2024)

Full Changelog: jline/jline3@jline-3.30.15...jline-3.30.16

Commits

fcfe320 [maven-release-plugin] prepare release jline-3.30.16
a34e0c4 fix: only forward the ssh agent when -A is given (3.x backport)
398c81b fix: reject overlong hex components in OSC color responses (3.x backport)
b1ca3bf Merge pull request #2098 from jline/dependabot/maven/jline-3.x/org.apache.ivy...
b390cf3 Merge pull request #2102 from jline/backport/2100-libutil-3x
8a84437 Merge pull request #2103 from jline/backport/2099-osc-strip-3x
5bab62e Merge pull request #2095 from jline/backport/2052-ssrf-jline-3.x
4364c2f fix: re-interrupt thread when catching InterruptedException (S2142)
0110211 fix: catch Exception instead of Throwable in uname process block
551ad41 fix: strip OSC and other escape sequences in ansiAppend (backport #2099)
Additional commits viewable in compare view

Updates org.jline:jline-terminal-jni from 3.30.15 to 3.30.16

Release notes

Sourced from org.jline:jline-terminal-jni's releases.

JLine 3.30.16 is a bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements.

💥 Breaking Changes

fix: only forward the ssh agent when -A is given (3.x backport of #2106) (#2109) @gnodet

SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it

🐛 Bug Fixes

fix: reject overlong hex components in OSC color responses (3.x backport of #2105) (#2108) @gnodet

fix: strip OSC and other escape sequences in ansiAppend (backport of #2099) (#2103) @gnodet

fix: search multiple lib paths for versioned libutil.so (backport of #2100) (#2102) @gnodet

fix: use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF (#2095) @gnodet

fix: check closed flag in PtyInputStream to prevent hang on empty input (#2090) @gnodet

fix: confine ConfigurationPath lookups to the config directory (backport of #2045) (#2076) @gnodet

fix: disable Read File command in nano restricted mode (backport of #2055) (#2075) @gnodet

fix: drain buffered data before EOF in NonBlockingPumpInputStream (backport of #2054) (#2074) @gnodet

fix: look up openpty in libc.so.6 for glibc 2.34+ (backport of #2068) (#2073) @gnodet

fix: guard styleMatches and highlighter rules against ReDoS (#2072) @gnodet

fix: backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) (#2000) @gnodet

fix: propagate EOF in PtyInputStream to avoid infinite loop (#1961, #1963) (#2069) @thomasrebele

📦 Dependency Updates

chore: bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 (#2098)

chore: bump actions/setup-node from 6 to 7 (#2091)

chore: bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#2060)

chore: bump sshd.version from 2.18.0 to 2.19.0 (#2058)

chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 (#2042)

chore: bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 (#2025)

chore: bump com.diffplug.spotless:spotless-maven-plugin (#2024)

Full Changelog: jline/jline3@jline-3.30.15...jline-3.30.16

Commits

fcfe320 [maven-release-plugin] prepare release jline-3.30.16
a34e0c4 fix: only forward the ssh agent when -A is given (3.x backport)
398c81b fix: reject overlong hex components in OSC color responses (3.x backport)
b1ca3bf Merge pull request #2098 from jline/dependabot/maven/jline-3.x/org.apache.ivy...
b390cf3 Merge pull request #2102 from jline/backport/2100-libutil-3x
8a84437 Merge pull request #2103 from jline/backport/2099-osc-strip-3x
5bab62e Merge pull request #2095 from jline/backport/2052-ssrf-jline-3.x
4364c2f fix: re-interrupt thread when catching InterruptedException (S2142)
0110211 fix: catch Exception instead of Throwable in uname process block
551ad41 fix: strip OSC and other escape sequences in ansiAppend (backport #2099)
Additional commits viewable in compare view

Updates org.jline:jline-terminal-ffm from 3.30.15 to 3.30.16

Release notes

Sourced from org.jline:jline-terminal-ffm's releases.

JLine 3.30.16 is a bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements.

💥 Breaking Changes

fix: only forward the ssh agent when -A is given (3.x backport of #2106) (#2109) @gnodet

SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it

🐛 Bug Fixes

fix: reject overlong hex components in OSC color responses (3.x backport of #2105) (#2108) @gnodet

fix: strip OSC and other escape sequences in ansiAppend (backport of #2099) (#2103) @gnodet

fix: search multiple lib paths for versioned libutil.so (backport of #2100) (#2102) @gnodet

fix: use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF (#2095) @gnodet

fix: check closed flag in PtyInputStream to prevent hang on empty input (#2090) @gnodet

fix: confine ConfigurationPath lookups to the config directory (backport of #2045) (#2076) @gnodet

fix: disable Read File command in nano restricted mode (backport of #2055) (#2075) @gnodet

fix: drain buffered data before EOF in NonBlockingPumpInputStream (backport of #2054) (#2074) @gnodet

fix: look up openpty in libc.so.6 for glibc 2.34+ (backport of #2068) (#2073) @gnodet

fix: guard styleMatches and highlighter rules against ReDoS (#2072) @gnodet

fix: backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) (#2000) @gnodet

fix: propagate EOF in PtyInputStream to avoid infinite loop (#1961, #1963) (#2069) @thomasrebele

📦 Dependency Updates

chore: bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 (#2098)

chore: bump actions/setup-node from 6 to 7 (#2091)

chore: bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#2060)

chore: bump sshd.version from 2.18.0 to 2.19.0 (#2058)

chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 (#2042)

chore: bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 (#2025)

chore: bump com.diffplug.spotless:spotless-maven-plugin (#2024)

Full Changelog: jline/jline3@jline-3.30.15...jline-3.30.16

Commits

fcfe320 [maven-release-plugin] prepare release jline-3.30.16
a34e0c4 fix: only forward the ssh agent when -A is given (3.x backport)
398c81b fix: reject overlong hex components in OSC color responses (3.x backport)
b1ca3bf Merge pull request #2098 from jline/dependabot/maven/jline-3.x/org.apache.ivy...
b390cf3 Merge pull request #2102 from jline/backport/2100-libutil-3x
8a84437 Merge pull request #2103 from jline/backport/2099-osc-strip-3x
5bab62e Merge pull request #2095 from jline/backport/2052-ssrf-jline-3.x
4364c2f fix: re-interrupt thread when catching InterruptedException (S2142)
0110211 fix: catch Exception instead of Throwable in uname process block
551ad41 fix: strip OSC and other escape sequences in ansiAppend (backport #2099)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `jlineVersion` from 3.30.15 to 3.30.16. Updates `org.jline:jansi-core` from 3.30.15 to 3.30.16 - [Release notes](https://github.com/jline/jline3/releases) - [Commits](jline/jline3@jline-3.30.15...jline-3.30.16) Updates `org.jline:jline-terminal` from 3.30.15 to 3.30.16 - [Release notes](https://github.com/jline/jline3/releases) - [Commits](jline/jline3@jline-3.30.15...jline-3.30.16) Updates `org.jline:jline-terminal-jni` from 3.30.15 to 3.30.16 - [Release notes](https://github.com/jline/jline3/releases) - [Commits](jline/jline3@jline-3.30.15...jline-3.30.16) Updates `org.jline:jline-terminal-ffm` from 3.30.15 to 3.30.16 - [Release notes](https://github.com/jline/jline3/releases) - [Commits](jline/jline3@jline-3.30.15...jline-3.30.16) --- updated-dependencies: - dependency-name: org.jline:jansi-core dependency-version: 3.30.16 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.jline:jline-terminal dependency-version: 3.30.16 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.jline:jline-terminal-jni dependency-version: 3.30.16 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.jline:jline-terminal-ffm dependency-version: 3.30.16 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file mvn3 labels Jul 22, 2026

Bukama self-assigned this Jul 22, 2026

Bukama merged commit 9ec1f35 into maven-3.10.x Jul 22, 2026
21 checks passed

Bukama deleted the dependabot/maven/maven-3.10.x/jlineVersion-3.30.16 branch July 22, 2026 06:58

github-actions Bot added this to the 3.10.0 milestone Jul 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump jlineVersion from 3.30.15 to 3.30.16#12518

Bump jlineVersion from 3.30.15 to 3.30.16#12518
Bukama merged 1 commit into
maven-3.10.xfrom
dependabot/maven/maven-3.10.x/jlineVersion-3.30.16

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

💥 Breaking Changes

🐛 Bug Fixes

📦 Dependency Updates

💥 Breaking Changes

🐛 Bug Fixes

📦 Dependency Updates

💥 Breaking Changes

🐛 Bug Fixes

📦 Dependency Updates

💥 Breaking Changes

🐛 Bug Fixes

📦 Dependency Updates

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant