Bump org.jline:jline-reader from 3.30.13 to 3.30.15

[dependabot]

Bumps org.jline:jline-reader from 3.30.13 to 3.30.15.

Release notes

Sourced from org.jline:jline-reader's releases.

JLine 3.30.15 is a security patch release addressing ReDoS and other security vulnerabilities.

🔒 Security Fixes

• fix: guard regex matching against catastrophic backtracking (ReDoS) (#2018, backport of #2012) @​gnodet
  • Adds SafeRegex utility with TimeoutCharSequence to enforce wall-clock deadlines during regex matching
  • Fixes 8 locations across terminal, reader, and builtins where user-controlled input could trigger catastrophic backtracking
  • Addresses GHSA-r2xf-8xr9-62gw, GHSA-2v9w-34q6-wpqx, GHSA-ph9c-7hw9-vhhw, GHSA-5q95-hrpc-m3w3
• fix: backport security hardening (#1986, #1995)
  • Create persisted history file with owner-only permissions
  • Use exclusive create for extracted native library temp files

🐛 Bug Fixes

• fix: warn on insecure permissions when history file created concurrently @​gnodet

📦 Dependency Updates

• chore: bump eu.maveniverse.maven.njord:extension3 from 0.9.8 to 0.9.9 (#1999)
• chore: bump com.palantir.javaformat:palantir-java-format (#1991)
• chore: bump actions/cache from 5 to 6 (#1989)

Full Changelog: jline/jline3@jline-3.30.14...jline-3.30.15

JLine 3.30.14

Bug Fixes

• Fix swap rows/columns in openpty winsize constructor call (#1910)
• Fix filter-by-commitish in 3.x release drafter config

Security

• Limit telnet NEW-ENVIRON variable count and NAWS geometry bounds (backport of GHSA-47qp, GHSA-2r2c)

Dependency Upgrades

• Bump Groovy from 4.0.31 to 4.0.32
• Bump SLF4J from 2.0.17 to 2.0.18
• Bump JNA from 5.18.1 to 5.19.1
• Bump Apache SSHD from 2.17.1 to 2.18.0
• Bump Spotless Maven Plugin from 3.4.0 to 3.7.0
• Bump Palantir Java Format from 2.90.0 to 2.93.0
• Bump GMavenPlus Plugin from 4.3.1 to 5.0.0
• Bump Maven Enforcer Plugin from 3.6.2 to 3.6.3
• Bump Maven Surefire Plugin from 3.5.5 to 3.5.6
• Bump Maven Dependency Plugin from 3.10.0 to 3.11.0
• Bump Njord Extension from 0.9.5 to 0.9.8
• Bump actions/checkout from 6 to 7

Commits

• b880666 [maven-release-plugin] prepare release jline-3.30.15
• 341ee69 fix: guard regex matching against catastrophic backtracking (ReDoS)
• 1d12a0d fix: warn on insecure permissions when history file created concurrently
• e307915 fix: backport security hardening to jline-3.x (#1986, #1995)
• 6212e6c chore: Bump eu.maveniverse.maven.njord:extension3 from 0.9.8 to 0.9.9 (#1999)
• 6c80118 chore: Bump com.palantir.javaformat:palantir-java-format (#1991)
• 04287c4 chore: Bump actions/cache from 5 to 6 (#1989)
• febc3b3 [maven-release-plugin] prepare for next development iteration
• c02dd46 [maven-release-plugin] prepare release jline-3.30.14
• 3ea9cad Merge pull request #2000 from jline/backport/jline-3.x/telnet-security-fixes
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.jline:jline-reader	[>= 4.a0, < 5]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)