Update dependency org.jline:jline-terminal-ffm to v4.4.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.jline:jline-terminal-ffm	4.4.1 → 4.4.3

---

Release Notes

jline/jline3 (org.jline:jline-terminal-ffm)

v4.4.3: JLine 4.4.3

Compare Source

JLine 4.4.3 is a security patch release addressing multiple vulnerabilities reported by AFINE/CERT.PL, plus bug fixes and dependency updates.

🔒 Security Fixes

• Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6)
• Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj)
• Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3)
• TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6)

🐛 Bug Fixes

• fix: verify server host keys in the ssh client builtin (#​2236) @​uchiha-bug-hunter
• fix: address remaining security vulnerabilities reported by AFINE/CERT.PL (#​2235) @​gnodet
• fix: use Release Drafter draft for GitHub release and fail closed on lookup errors (#​2232) @​gnodet

📦 Dependency updates

• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.11 to 1.1.12 (#​2242) @​dependabot[bot]
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.10.1 to 3.10.2 (#​2246) @​dependabot[bot]
• chore: bump groovy.version from 5.1.1 to 5.1.2 (#​2245) @​dependabot[bot]
• chore: bump slf4j.version from 2.0.18 to 2.0.19 (#​2244) @​dependabot[bot]
• chore: bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 (#​2234) @​dependabot[bot]

v4.4.2: JLine 4.4.2

Compare Source

JLine 4.4.2 is a bugfix release focused on terminal I/O reliability. It eliminates a race condition where the pump thread could steal keystrokes from subprocesses (e.g. less), fixes mouse event corruption on Windows at large column positions, and replaces wall-clock deadlines with monotonic timing to prevent misbehavior under NTP adjustments.

🐛 Bug Fixes

• fix: use poll(2) in pump thread to prevent tty keystroke theft (fixes #​2219) (#​2222) @​gnodet
• fix: use poll(2) for probe and PTY reads (fixes #​2223) (#​2229) @​gnodet
• fix: use System.nanoTime() for monotonic deadline accounting (fixes #​2230) (#​2231) @​gnodet
• fix: use SGR mouse encoding on Windows to avoid corruption at column >= 96 (#​2221) @​gnodet
• fix: add mouse support capability to Windows terminal types (fixes #​2217) (#​2218) @​gnodet

📦 Dependency updates

• chore: bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 (#​2225) @​dependabot
• chore: bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 (#​2227) @​dependabot
• chore: bump org.graalvm.buildtools:native-maven-plugin from 1.1.10 to 1.1.11 (#​2215) @​dependabot
• chore: bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 (#​2214) @​dependabot
• chore: bump eu.maveniverse.maven.nisse:extension from 0.9.8 to 0.9.10 (#​2213) @​dependabot

Full Changelog: jline/jline3@4.4.1...4.4.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.