Update dependency org.jline:jline-terminal to v4.4.1

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
org.jline:jline-terminal	4.3.1 → 4.4.1

---

Release Notes

jline/jline3 (org.jline:jline-terminal)

v4.4.1: JLine 4.4.1

Compare Source

JLine 4.4.1 is a patch release with bug fixes focused on terminal rendering, line editing, and input safety. Highlights include a fix for first-line scrolling on terminals without the xenl capability, correct suffix handling during tab completion, a hard-timeout guard for terminal mode probing that could previously hang, and protection against exponential blowup in !# history expansion.

🐛 Bug Fixes

• fix: prevent first-line scroll on non-xenl terminals (fixes #​2206) (#​2212) @​gnodet
• fix: append suffix to buffer when not part of candidate value (fixes #​2208) (#​2211) @​gnodet
• fix: use hard-timeout daemon thread for terminal mode probing (fixes #​2209) (#​2210) @​gnodet
• fix: bound !# history expansion to prevent exponential blowup (#​2207) @​uchiha-bug-hunter
• strip control characters from file names in posix builtins (#​2200) @​uchiha-bug-hunter

📦 Dependency updates

• chore: bump org.graalvm.sdk:graal-sdk from 25.2.4 to 25.3.4.1 (#​2204) @​dependabot[bot]
• chore: bump actions/setup-java from 5.7.0 to 6.0.0 (#​2203) @​dependabot[bot]
• chore: bump groovy.version from 5.1.0 to 5.1.1 (#​2201) @​dependabot[bot]
• chore: bump eu.maveniverse.maven.nisse:extension from 0.9.7 to 0.9.8 (#​2199) @​dependabot[bot]

v4.4.0: JLine 4.4.0

Compare Source

JLine 4.4.0 is a feature-rich release bringing modern terminal protocol support, broader platform compatibility, and continued security hardening.

Highlights:

• Kitty Keyboard Protocol — full support for the Kitty keyboard protocol, enabling unambiguous key event reporting (#​2007)
• In-band window resize — support for mode 2048 resize notifications across the terminal, reader, and builtins (Nano, Less, Tmux) (#​2021, #​2198)
• Synchronized output — full mode 2026 support to eliminate flicker during rapid screen updates (#​2022)
• musl libc support — native libraries now load on Alpine and other musl-based distributions (#​2197)
• JdkConsoleProvider — drop-in JLine console that can replace System.console() (#​2031)
• Reproducible builds — source archives can now be built without a git checkout, thanks to nisse property fallbacks (#​2151, #​2153)
• Security hardening — path traversal guards, ReDoS protection, cross-origin rejection, control character stripping, and SSH agent forwarding tightened across multiple modules
• FFM signal handling rewrite — replaced shared Arena with self-pipe trick for reliable signal delivery (#​2141)

⚠️ Breaking: the ambiguous key binding timeout has been reduced from 1000ms to 100ms (#​2186), and SSH agent forwarding now requires the explicit -A flag (#​2106).

💥 Breaking changes

• fix: reduce ambiguous binding timeout from 1000ms to 100ms (#​2186) @​gnodet
• fix: only forward the ssh agent when -A is given (#​2106) @​uchiha-bug-hunter

🚀 New features and improvements

• feat: support in-band resize (mode 2048) in Nano, Less, and Tmux builtins (#​2198) @​gnodet
• feat: add musl libc support for native libraries (#​2197) @​gnodet
• feat: add Kitty Keyboard Protocol support (#​2007) @​gnodet
• feat: add configurable behavior for too many completion candidates (fixes #​2154) (#​2196) @​gnodet
• feat: support in-band window resize notifications (mode 2048) (#​2021) @​gnodet
• feat: add JdkConsoleProvider for drop-in JLine console (#​2031) @​gnodet
• feat: verify macOS native library signatures in CI (#​2173) @​gnodet
• feat: allow customizing the help source in Less pager (fixes #​2056) (#​2065) @​gnodet
• feat: full synchronized output (mode 2026) support (#​2022) @​gnodet
• refactor: batch DEC mode probing into single DECRQM round-trip (#​2023) @​gnodet
• feat: allow customizing the default prompt in Less pager (#​2036) @​gnodet
• feat: add factory to simplify LineDisciplineTerminal + ScreenTerminal wiring (#​2035) @​gnodet
• feat: add AttributedStringBuilder.appendCodePoint(int) (#​2163) @​gnodet
• Enable reproducible builds from source archives (#​2151) @​gnodet
• Add Terminal.getenv() for remote terminal environment support (#​2030) @​gnodet

🐛 Bug Fixes

• fix: remove eval from MVX demo launchers (fixes #​2191) (#​2193) @​gnodet
• fix: DefaultHistory.read() records per-file entry count instead of total (fixes #​2179) (#​2194) @​gnodet
• fix: handle IOError in BindingReader gracefully instead of crashing (fixes #​2155) (#​2195) @​gnodet
• fix: lower native library candidate log level from WARNING to DEBUG (fixes #​2185) (#​2192) @​gnodet
• fix: reimplement FFM signal handling with self-pipe trick (fixes #​2139) (#​2141) @​gnodet
• fix: add software signal interception to Windows terminals (fixes #​2127) (#​2148) @​gnodet
• fix: escape control chars in oversized line-buffer display (#​2175) @​uchiha-bug-hunter
• fix: escape IAC byte in the telnet data output stream (#​2164) @​uchiha-bug-hunter
• fix: strip control characters from Less status messages (#​2156) @​uchiha-bug-hunter
• fix: preserve termios baud rate when setting attributes (#​2170) (#​2172) @​arimu1
• fix: mask password value in DefaultPrompter result display (#​2167) @​uchiha-bug-hunter
• fix: keep image options inside the kitty and iterm2 sequences (#​2138) @​uchiha-bug-hunter
• fix: reject cross-origin keystroke POSTs in WebTerminal (#​2118) @​uchiha-bug-hunter
• fix: stop answering DSR 7/8 with plain text in ScreenTerminal (#​2128) @​uchiha-bug-hunter
• fix: reject theme path traversal in highlighter command (#​2112) @​uchiha-bug-hunter
• fix: strip control characters from ssh banner and prompts (#​2129) @​uchiha-bug-hunter
• fix: improve provider discovery for custom classloader environments (#​2119) @​gnodet
• fix: use Arena.ofAuto instead of Arena.ofShared in FfmSignalHandler (fixes #​2117) (#​2120) @​gnodet
• fix: clamp out-of-range truecolor SGR components in ScreenTerminal (#​2107) @​uchiha-bug-hunter
• fix: reject overlong hex components in OSC color responses (#​2105) @​uchiha-bug-hunter
• fix: search multiple lib paths for versioned libutil.so (#​2100) @​gnodet
• fix: strip OSC and other escape sequences in ansiAppend (#​2099) @​uchiha-bug-hunter
• fix: confine ConfigurationPath lookups to the config directory (#​2045) @​uchiha-bug-hunter
• fix: disable Read File command in nano restricted mode (#​2055) @​uchiha-bug-hunter
• fix: drain buffered data before signaling EOF in NonBlockingPumpInputStream (#​2063) @​gnodet
• fix: look up openpty in libc.so.6 for glibc 2.34+ (#​2071) @​gnodet
• fix: guard styleMatches and highlighter rules against ReDoS (#​2053) @​uchiha-bug-hunter
• fix: check NewObject() return in JNI newFileDescriptor/newRedirectPipe (fixes #​2046) (#​2047) @​gnodet
• fix: only read local jar: archives in PosixCommands getSources (#​2052) @​uchiha-bug-hunter
• fix: clear thread interrupt flag after UserInterruptException (fixes #​2039) (#​2049) @​gnodet
• fix: guard against null lines and null rules in syntax highlighting (fixes #​2040) (#​2048) @​gnodet
• fix: validate terminal type before passing to infocmp (#​2041) @​uchiha-bug-hunter
• fix: use ConcurrentHashMap for InfoCmp capability caches (#​2038) @​uchiha-bug-hunter

📝 Documentation updates

• docs: document macOS native library signing process (#​2180) @​gnodet

📦 Dependency updates

• chore: bump org.easymock:easymock from 5.6.0 to 5.7.0 (#​2189) @​dependabot[bot]
• chore: bump eu.maveniverse.maven.nisse:extension from 0.9.5 to 0.9.7 (#​2183) @​dependabot[bot]
• chore: bump com.google.jimfs:jimfs from 1.3.1 to 1.3.2 (#​2181) @​dependabot[bot]
• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.5 to 1.1.10 (#​2168) @​dependabot[bot]
• chore: bump junit.version from 6.1.2 to 6.1.3 (#​2162) @​dependabot[bot]
• chore: bump com.palantir.javaformat:palantir-java-format from 2.96.0 to 2.97.0 (#​2160) @​dependabot[bot]
• chore: bump release-drafter/release-drafter from 7.6.0 to 7.7.0 (#​2145) @​dependabot[bot]
• chore: bump actions/setup-java from 5.6.0 to 5.7.0 (#​2142) @​dependabot[bot]
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.9.0 to 3.10.0 (#​2171) @​dependabot[bot]
• chore: bump groovy.version from 5.0.7 to 5.1.0 (#​2169) @​dependabot[bot]
• chore: bump actions/setup-java from 5 to 5.6.0 (#​2135) @​dependabot[bot]
• chore: bump release-drafter/release-drafter from 7 to 7.6.0 (#​2130) @​dependabot[bot]
• chore: bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 (#​2131) @​dependabot[bot]
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0 (#​2122) @​dependabot[bot]
• chore: bump org.graalvm.sdk:graal-sdk from 25.1.3 to 25.2.4 (#​2124) @​dependabot[bot]
• chore: bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#​2114) @​dependabot[bot]
• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.4 to 1.1.5 (#​2104) @​dependabot[bot]
• chore: bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 (#​2097) @​dependabot[bot]
• chore: bump junit.version from 6.1.1 to 6.1.2 (#​2084) @​dependabot[bot]
• chore: bump actions/setup-node from 6 to 7 (#​2092) @​dependabot[bot]
• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.3 to 1.1.4 (#​2066) @​dependabot[bot]
• chore: bump sshd.version from 2.18.0 to 2.19.0 (#​2057) @​dependabot[bot]
• chore: bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#​2059) @​dependabot[bot]
• chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 (#​2043) @​dependabot[bot]
• chore: bump groovy.version from 5.0.6 to 5.0.7 (#​2050) @​dependabot[bot]
• chore: bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 (#​2027) @​dependabot[bot]
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 (#​2026) @​dependabot[bot]

👻 Maintenance

• chore: use nisse 0.9.5 with .mvn/nisse.properties for source-archive builds (#​2153) @​gnodet
• chore: use committer timestamp for archive date fallback (#​2152) @​gnodet
• chore: migrate Release Drafter configs to new when syntax (#​2177) @​gnodet
• chore: set correct target branch on GitHub releases (#​2174) @​gnodet
• chore: clarify merge policy to require label, milestone, and assignee (#​2121) @​gnodet
• chore: extract shared truecolor RGB clamping helper in csi_SGR (#​2111) @​gnodet
• chore: remove 4.0.x from Dependabot configuration (#​2094) @​gnodet

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.