Skip to content

chore: update all dependencies with patch changes - #1899

Open
renovate[bot] wants to merge 1 commit into
nightlyfrom
renovate/all-dependencies-with-patch-changes
Open

chore: update all dependencies with patch changes#1899
renovate[bot] wants to merge 1 commit into
nightlyfrom
renovate/all-dependencies-with-patch-changes

Conversation

@renovate

@renovate renovate Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.github.ben-manes.caffeine:caffeine 3.3.0 → 3.3.1 age confidence
com.konghq:unirest-modules-gson 4.10.1 → 4.10.2 age confidence
com.konghq:unirest-java-core 4.10.1 → 4.10.2 age confidence
com.github.oshi:oshi-core-ffm 7.7.0 → 7.7.2 age confidence
org.jline:jline-terminal-ffm 4.4.6 → 4.4.8 age confidence
org.jline:jline-reader 4.4.6 → 4.4.8 age confidence
org.jline:jansi-core 4.4.6 → 4.4.8 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)

v3.3.1: 3.3.1

Compare Source

  • Added a workaround for ForkJoinPool queue corruption caused by resubmitting a reusable ForkJoinTask (#​2021)
  • Improved JCache read performance when using access expiration
  • Fixed various minor issues found using AI audits
Kong/unirest-java (com.konghq:unirest-modules-gson)

v4.10.2

  • Encode URL-encoded form field names with the configured charset, matching form values. Callers that pre-encoded names to work around this defect should pass the original unencoded name instead.
oshi/oshi (com.github.oshi:oshi-core-ffm)

v7.7.2

New Features
  • #​3745: The FFM implementation now reads NetBSD natively, through sysctl, getloadavg, _lwp_self and getrlimit, where it previously ran commands and parsed their output - @​dbwiddis.
  • #​3709,
    #​3757: Display.getCurrentMode() returns the mode a display is driven in: its logical and pixel resolution, refresh rate, rotation, and position on the desktop. Display.isBuiltIn() reports whether it is a built-in panel, and Display.isPrimary() whether it is the primary display. All three are available on Windows, macOS, and on Linux and the other UNIX platforms through X11 - @​ayonization, @​dbwiddis.
Bug Fixes and Improvements
  • #​3723: Windows Sensors now reads CPU temperature, fan speed and voltage from the ROOT\LibreHardwareMonitor WMI namespace when the LibreHardwareMonitor application is running, in addition to the ROOT\OpenHardwareMonitor namespace it already read. Users running the maintained LibreHardwareMonitor previously got its GPU metrics but no CPU sensor data - @​dbwiddis.
  • #​3727: The oshi.os.windows.ohm.disabled and oshi.os.windows.lhm.disabled configuration properties now skip the Open Hardware Monitor and Libre Hardware Monitor WMI namespaces, which OSHI otherwise queries on each sensor read until one returns data. The latter also covers GPU metrics - @​dbwiddis.
  • #​3730: Fixed Sensors.getCpuVoltage() on Windows when using the voltage published by Open Hardware Monitor or LibreHardwareMonitor - @​dbwiddis.
  • #​3742: NetworkParams.getRoutes() on NetBSD now reads the routing table from the kernel where the JNA native library is available - @​dbwiddis.
  • #​3743: Fixed three HWDiskStore faults on NetBSD: read and write byte totals that could decrease between readings, a doubled getTransferTime(), and a 1-byte disk or 512-byte partition size where the size is unknown, which also affected OpenBSD - @​dbwiddis.
  • #​3744: Fixed OSProcess naming on NetBSD: getPath() and getName() were truncated to seven characters, and where the kernel withholds a process's arguments, getCommandLine() returned ps's (command) placeholder and getName() kept its parentheses - @​dbwiddis.
  • #​3754: OperatingSystem.getProcessId() and getThreadId() return 0 when the ID is unknown on every platform. On NetBSD without JNA, getThreadId() returned a Java thread ID, and on failure some implementations returned -1, which led getCurrentProcess() to return an arbitrary process on the BSDs, Solaris and AIX. getProcess() with a negative PID now returns null on Solaris and AIX - @​dbwiddis.
  • #​3763: Standardizes connection reporting from InternetProtocolStats.getConnections() on the UNIX platforms. It now includes listening and unconnected sockets, as on Linux, and returns connections on Solaris, where it returned none. A tcp6 or udp6 connection to an IPv4 peer now has a 16-byte IPv4-mapped address rather than a 4-byte one - @​dbwiddis.
  • #​3771: Fixed Firmware.getManufacturer() on Linux, which never read the BIOS vendor from sysfs - @​dbwiddis.
  • #​3774: LogicalVolumeGroup.getPhysicalVolumes() on Linux now runs pvs through the oshi.os.linux.privileged.prefix when pvs is in oshi.os.linux.privileged.allowlist, so physical volumes that hold no logical volume can be listed without running the application as root - @​dbwiddis.
  • #​3777: Fixed the heap corruption behind intermittent JVM crashes on Solaris and illumos - @​dbwiddis.
  • #​3781: Sensors.getCpuTemperature() now returns a 0.0 sentinel on all platforms when the temperature is unavailable. FreeBSD previously returned NaN - @​dbwiddis.
  • #​3776,
    #​3782: Fixed intermittent JVM crashes on Solaris (illumos), OpenBSD and DragonFly BSD when libcups is not installed - @​dbwiddis.
  • #​3785: Fixed DragonFly BSD reporting 0 total swap, and the FFM implementation failing every sysctl read there - @​dbwiddis.
  • #​3785,
    #​3795,
    #​3800,
    #​3801,
    #​3803,
    #​3822,
    #​3831: Fixed the TCP and UDP statistics from InternetProtocolStats on Linux, macOS, AIX, FreeBSD, OpenBSD, NetBSD and DragonFly BSD, where many counters were read from the wrong field or at the wrong width. Counters a platform does not keep now report 0, including IPv6 UDP on FreeBSD and macOS, and connection failures and UDP receive errors on AIX - @​dbwiddis.
  • #​3787,
    #​3816: ComputerSystem, Firmware and Baseboard now report SMBIOS values without root on FreeBSD and DragonFly BSD, and at all on NetBSD, where every value was unknown; NetBSD's serial numbers and UUID still need root. Firmware.getReleaseDate() is no longer garbled on any platform when the firmware does not write the date as MM/DD/YYYY - @​dbwiddis.
  • #​3788,
    #​3807,
    #​3814,
    #​3824: Fixed NetworkIF on the BSDs: traffic statistics were 0 on OpenBSD and DragonFly BSD, and on NetBSD for interfaces without a link-level address, and getSpeed() was always 0 on FreeBSD, OpenBSD and NetBSD. NetworkParams now reports DragonFly BSD's default gateways and reads NetBSD's routing table from the kernel - @​dbwiddis.
  • #​3789,
    #​3792,
    #​3799,
    #​3812,
    #​3818: Fixed CentralProcessor on FreeBSD, NetBSD and DragonFly BSD, which miscounted cores, packages or logical processors and left identification and caches unknown, and on NetBSD ARM threw a StackOverflowError. AMD processors of family 16 and later now get the right family on OpenBSD and the right ProcessorID where OSHI builds one. FreeBSD context switch and interrupt counts no longer wrap at 2^32 - @​dbwiddis.
  • #​3791,
    #​3798,
    #​3819,
    #​3833: Fixed getDiskStores() on the BSDs: DragonFly BSD returned no disks, FreeBSD listed each disk as a partition of the next, and NetBSD listed each wedge as a separate disk. Partitions now sit under their disk with their mount points, and on OpenBSD and NetBSD without root they no longer include another disk's or misread their size when BLOCKSIZE is set - @​dbwiddis.
  • #​3793,
    #​3810,
    #​3817,
    #​3821,
    #​3827,
    #​3829,
    #​3832: Fixed OSProcess on the BSDs. getPath() now returns the executable's full path from the kernel on FreeBSD, DragonFly BSD and NetBSD, as does getCurrentWorkingDirectory() on NetBSD. DragonFly BSD now reports bitness and affinity, FreeBSD other processes' open-file limits, and NetBSD every thread of a process and only real descriptors in getOpenFiles(). getServices() skips rcorder placeholders - @​dbwiddis.
  • #​3797,
    #​3805,
    #​3826: Fixed getPowerSources() on FreeBSD and DragonFly BSD, which reported a battery on machines with none and only one of several, with units and signs now matching other platforms; getGraphicsCards() on current FreeBSD, which reported the wrong vendor and no device ID; and getUsbDevices() on FreeBSD, which was empty - @​dbwiddis.
  • #​3808,
    #​3820,
    #​3823,
    #​3825: Fixed FileSystem and OSFileStore on the BSDs. getMaxFileDescriptorsPerProcess() returns the per-process limit, NetBSD's getOpenFileDescriptors() is no longer 0, FreeBSD's getUUID() is found for every volume, and mount points with spaces and NetBSD and OpenBSD inode counts are read correctly - @​dbwiddis.

v7.7.1

New Features
  • #​3745: The FFM implementation now reads NetBSD natively, through sysctl, getloadavg, _lwp_self and getrlimit, where it previously ran commands and parsed their output - @​dbwiddis.
  • #​3709,
    #​3757: Display.getCurrentMode() returns the mode a display is driven in: its logical and pixel resolution, refresh rate, rotation, and position on the desktop. Display.isBuiltIn() reports whether it is a built-in panel, and Display.isPrimary() whether it is the primary display. All three are available on Windows, macOS, and on Linux and the other UNIX platforms through X11 - @​ayonization, @​dbwiddis.
Bug Fixes and Improvements
  • #​3723: Windows Sensors now reads CPU temperature, fan speed and voltage from the ROOT\LibreHardwareMonitor WMI namespace when the LibreHardwareMonitor application is running, in addition to the ROOT\OpenHardwareMonitor namespace it already read. Users running the maintained LibreHardwareMonitor previously got its GPU metrics but no CPU sensor data - @​dbwiddis.
  • #​3727: The oshi.os.windows.ohm.disabled and oshi.os.windows.lhm.disabled configuration properties now skip the Open Hardware Monitor and Libre Hardware Monitor WMI namespaces, which OSHI otherwise queries on each sensor read until one returns data. The latter also covers GPU metrics - @​dbwiddis.
  • #​3730: Fixed Sensors.getCpuVoltage() on Windows when using the voltage published by Open Hardware Monitor or LibreHardwareMonitor - @​dbwiddis.
  • #​3742: NetworkParams.getRoutes() on NetBSD now reads the routing table from the kernel where the JNA native library is available - @​dbwiddis.
  • #​3743: Fixed three HWDiskStore faults on NetBSD: read and write byte totals that could decrease between readings, a doubled getTransferTime(), and a 1-byte disk or 512-byte partition size where the size is unknown, which also affected OpenBSD - @​dbwiddis.
  • #​3744: Fixed OSProcess naming on NetBSD: getPath() and getName() were truncated to seven characters, and where the kernel withholds a process's arguments, getCommandLine() returned ps's (command) placeholder and getName() kept its parentheses - @​dbwiddis.
  • #​3754: OperatingSystem.getProcessId() and getThreadId() return 0 when the ID is unknown on every platform. On NetBSD without JNA, getThreadId() returned a Java thread ID, and on failure some implementations returned -1, which led getCurrentProcess() to return an arbitrary process on the BSDs, Solaris and AIX. getProcess() with a negative PID now returns null on Solaris and AIX - @​dbwiddis.
  • #​3763: Standardizes connection reporting from InternetProtocolStats.getConnections() on the UNIX platforms. It now includes listening and unconnected sockets, as on Linux, and returns connections on Solaris, where it returned none. A tcp6 or udp6 connection to an IPv4 peer now has a 16-byte IPv4-mapped address rather than a 4-byte one - @​dbwiddis.
  • #​3771: Fixed Firmware.getManufacturer() on Linux, which never read the BIOS vendor from sysfs - @​dbwiddis.
  • #​3774: LogicalVolumeGroup.getPhysicalVolumes() on Linux now runs pvs through the oshi.os.linux.privileged.prefix when pvs is in oshi.os.linux.privileged.allowlist, so physical volumes that hold no logical volume can be listed without running the application as root - @​dbwiddis.
  • #​3777: Fixed the heap corruption behind intermittent JVM crashes on Solaris and illumos - @​dbwiddis.
  • #​3781: Sensors.getCpuTemperature() now returns a 0.0 sentinel on all platforms when the temperature is unavailable. FreeBSD previously returned NaN - @​dbwiddis.
  • #​3776,
    #​3782: Fixed intermittent JVM crashes on Solaris (illumos), OpenBSD and DragonFly BSD when libcups is not installed - @​dbwiddis.
  • #​3785: Fixed DragonFly BSD reporting 0 total swap, and the FFM implementation failing every sysctl read there - @​dbwiddis.
  • #​3785,
    #​3795,
    #​3800,
    #​3801,
    #​3803,
    #​3822,
    #​3831: Fixed the TCP and UDP statistics from InternetProtocolStats on Linux, macOS, AIX, FreeBSD, OpenBSD, NetBSD and DragonFly BSD, where many counters were read from the wrong field or at the wrong width. Counters a platform does not keep now report 0, including IPv6 UDP on FreeBSD and macOS, and connection failures and UDP receive errors on AIX - @​dbwiddis.
  • #​3787,
    #​3816: ComputerSystem, Firmware and Baseboard now report SMBIOS values without root on FreeBSD and DragonFly BSD, and at all on NetBSD, where every value was unknown; NetBSD's serial numbers and UUID still need root. Firmware.getReleaseDate() is no longer garbled on any platform when the firmware does not write the date as MM/DD/YYYY - @​dbwiddis.
  • #​3788,
    #​3807,
    #​3814,
    #​3824: Fixed NetworkIF on the BSDs: traffic statistics were 0 on OpenBSD and DragonFly BSD, and on NetBSD for interfaces without a link-level address, and getSpeed() was always 0 on FreeBSD, OpenBSD and NetBSD. NetworkParams now reports DragonFly BSD's default gateways and reads NetBSD's routing table from the kernel - @​dbwiddis.
  • #​3789,
    #​3792,
    #​3799,
    #​3812,
    #​3818: Fixed CentralProcessor on FreeBSD, NetBSD and DragonFly BSD, which miscounted cores, packages or logical processors and left identification and caches unknown, and on NetBSD ARM threw a StackOverflowError. AMD processors of family 16 and later now get the right family on OpenBSD and the right ProcessorID where OSHI builds one. FreeBSD context switch and interrupt counts no longer wrap at 2^32 - @​dbwiddis.
  • #​3791,
    #​3798,
    #​3819,
    #​3833: Fixed getDiskStores() on the BSDs: DragonFly BSD returned no disks, FreeBSD listed each disk as a partition of the next, and NetBSD listed each wedge as a separate disk. Partitions now sit under their disk with their mount points, and on OpenBSD and NetBSD without root they no longer include another disk's or misread their size when BLOCKSIZE is set - @​dbwiddis.
  • #​3793,
    #​3810,
    #​3817,
    #​3821,
    #​3827,
    #​3829,
    #​3832: Fixed OSProcess on the BSDs. getPath() now returns the executable's full path from the kernel on FreeBSD, DragonFly BSD and NetBSD, as does getCurrentWorkingDirectory() on NetBSD. DragonFly BSD now reports bitness and affinity, FreeBSD other processes' open-file limits, and NetBSD every thread of a process and only real descriptors in getOpenFiles(). getServices() skips rcorder placeholders - @​dbwiddis.
  • #​3797,
    #​3805,
    #​3826: Fixed getPowerSources() on FreeBSD and DragonFly BSD, which reported a battery on machines with none and only one of several, with units and signs now matching other platforms; getGraphicsCards() on current FreeBSD, which reported the wrong vendor and no device ID; and getUsbDevices() on FreeBSD, which was empty - @​dbwiddis.
  • #​3808,
    #​3820,
    #​3823,
    #​3825: Fixed FileSystem and OSFileStore on the BSDs. getMaxFileDescriptorsPerProcess() returns the per-process limit, NetBSD's getOpenFileDescriptors() is no longer 0, FreeBSD's getUUID() is found for every volume, and mount points with spaces and NetBSD and OpenBSD inode counts are read correctly - @​dbwiddis.
jline/jline3 (org.jline:jline-terminal-ffm)

v4.4.8: JLine 4.4.8

Compare Source

JLine 4.4.8 is a bugfix and enhancement release addressing an AnsiConsole stream-routing bug and improving command help output.

The AnsiConsole fix corrects a long-standing issue where ansiStream() used terminal.output() for both stdout and stderr, causing the non-terminal-backed stream to be silently redirected to the wrong file descriptor (for example, stderr output going to stdout when the terminal was selected via SysOut). The fix routes each stream to its correct fd: the terminal-backed stream goes through terminal.output(), while the other writes to the original system stream. ANSI mode for the non-terminal-backed stream is now auto-detected per-fd (preserving colors when it is a tty, stripping when redirected), with jansi.out.mode/jansi.err.mode properties still honoured as overrides. The enhancement from @​FSeidinger makes detailed command help richer: it now displays every non-empty line of the main description via CommandDescription#describe(), argument descriptions appear alongside argument names, and additional description lines are indented beneath the first for easier reading.

🐛 Bug Fixes
  • fix: AnsiConsole.systemInstall() no longer redirects the non-terminal stream to the wrong fd (#​2317) @​gnodet
✨ Enhancements
📦 Dependency Updates

Full Changelog: jline/jline3@4.4.7...4.4.8

v4.4.7: JLine 4.4.7

Compare Source

JLine 4.4.7 is a security and bug fix release addressing two security vulnerabilities and one rendering correctness bug.

The history /PATTERN search in HistoryCommands was compiling user-supplied regex patterns with a raw Pattern.compile + Matcher.find() call, with no execution-time guard — the only unprotected regex path in the project. A pathological pattern like (a+)+z would hang the session thread indefinitely via catastrophic backtracking (GHSA-vrw4-fppg-3rhf). The fix routes through SafeRegex, consistent with all other regex call sites. The telnet NEW-ENVIRON handler (TelnetIO.readNEVariables) enforced its 100-variable limit only within a single subnegotiation frame via a local counter that reset on each call. An unauthenticated client could send multiple frames to accumulate an unbounded number of environment entries and exhaust server heap (GHSA-7qh2-r6cc-r47w, bypassing the incomplete fix for CVE-2026-56740); the fix also checks the persistent connection-level map size. Finally, AttributedStringBuilder.setLength did not recompute lastLineLength after truncation, causing subsequent tab stops to be calculated against the wrong position; three regression tests covering cleared builder, newline removal, and last-line shortening were added by the contributor.

🐛 Bug Fixes
📦 Dependency Updates
  • chore: bump sshd.version from 2.19.0 to 2.20.0
  • chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.10.2 to 3.10.3
  • chore: bump com.palantir.javaformat:palantir-java-format from 2.98.0 to 2.100.0
  • chore: bump slf4j.version from 2.0.19 to 2.0.20 (#​2289)
  • chore: bump org.graalvm.sdk:graal-sdk from 25.3.4.1 to 25.4.4.1.1 (#​2292)

Full Changelog: jline/jline3@4.4.6...4.4.7

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the t: dependencies A pull request / issue targeting dependency updates label Oct 3, 2026
@renovate
renovate Bot requested review from 0utplay and derklaro October 3, 2026 07:13
@github-actions

github-actions Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Test Results

 56 files  ±0   56 suites  ±0   3m 27s ⏱️ -47s
572 tests ±0  572 ✅ ±0  0 💤 ±0  0 ❌ ±0 
939 runs  ±0  939 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 9ae15f0. ± Comparison against base commit 78c02d1.

This pull request removes 36 and adds 36 tests. Note that renamed tests count towards both. 
eu.cloudnetservice.driver.impl.document.DocumentSerialisationTest ‑ [4] {"b":1,"s":2,"i":3,"l":4,"f":5.0,"d":6.0,"c":"/","string":"Hello, World!","bol":true,"cloud":["Ben?","Yes","No","HoHoHoHo"],"world":{"hello":"world","this":"is","insane":"!"}}, PRETTY
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [14] 2026-10-04
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [23] 15:57:48.980187951
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [28] 15:57:48.980312803Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [29] 15:57:48.980337069Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [30] 15:57:48.980346837+05:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [31] 15:57:48.980370822-03:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [34] 2026-10-04T15:57:48.980508027
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [39] 2026-10-04T15:57:48.980661172Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [4] 2026-10-04T15:57:48.972964948Z
…

eu.cloudnetservice.driver.impl.document.DocumentSerialisationTest ‑ [4] {"b":1,"s":2,"i":3,"l":4,"f":5.0,"d":6.0,"c":"/","string":"Hello, World!","bol":true,"cloud":["Ben?","Yes","No","HoHoHoHo"],"world":{"this":"is","insane":"!","hello":"world"}}, PRETTY
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [14] 2026-10-20
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [23] 20:17:34.427686228
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [28] 20:17:34.427790673Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [29] 20:17:34.427810481Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [30] 20:17:34.427818345+05:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [31] 20:17:34.427837431-03:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [34] 2026-10-20T20:17:34.427951834
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [39] 2026-10-20T20:17:34.428076437Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [4] 2026-10-20T20:17:34.421400043Z
…

♻️ This comment has been updated with latest results.

@renovate
renovate Bot force-pushed the renovate/all-dependencies-with-patch-changes branch 5 times, most recently from ce7d887 to cec2761 Compare October 17, 2026 22:00
@renovate
renovate Bot force-pushed the renovate/all-dependencies-with-patch-changes branch from cec2761 to 9ae15f0 Compare October 20, 2026 20:14

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@0utplay 0utplay Awaiting requested review from 0utplay
@derklaro derklaro Awaiting requested review from derklaro

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

t: dependencies A pull request / issue targeting dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants