hanicz opened a new pull request, #1464: URL: https://github.com/apache/knox/pull/1464
[KNOX-3525](https://issues.apache.org/jira/browse/KNOX-3525) - Upgrade JLine to 3.30.17 ## What changes were proposed in this pull request? - Upgrade JLine from 3.30.6 to 3.30.17 to fix `CVE-2026-77420`, `CVE-2026-77421`, `CVE-2026-77422`, `CVE-2026-77423` and `GHSA-6r3w-6jpj-x5w6`. ## How was this patch tested? - `mvn -Prelease,package clean install -am -pl gateway-shell,gateway-shell-release`: unit tests pass, and all JLine modules bundled in `knoxshell.jar` are 3.30.17 - Full `mvn install -DskipTests`: dependency convergence passes on every module - Re-ran the manual tests from #1181 against a local gateway (demo LDAP): - REPL: banner, `:help`/`:h`/`?`, `:import`, `:show`, `:purge`, `:load`/`.`, tab completion, Ctrl+C at the prompt, Ctrl+D, history file - `:ds add`/`remove`/`list` - Filenames with spaces, on the command line and in the REPL (same results as #1181) - Logging via `-e`, and `buildTrustStore` - `ExampleManagerListResources.groovy` and `ExampleManagerResourceDeployment.groovy`, run from the command line and with `:load` - Ran the REPL tests against a 3.30.6 build as well, and the results were the same - Not tested (need a cluster or Postgres): WebHDFS samples, `:fs`, `:ds select`, `:sql` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
