You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/22 07:38:20 UTC

[PR] KNOX-3525: Upgrade JLine to 3.30.17 [knox]

hanicz opened a new pull request, #1464:
URL: https://github.com/apache/knox/pull/1464

   [KNOX-3525](https://issues.apache.org/jira/browse/KNOX-3525) - Upgrade JLine to 3.30.17
   
   ## What changes were proposed in this pull request?
   
   - Upgrade JLine from 3.30.6 to 3.30.17 to fix `CVE-2026-77420`, `CVE-2026-77421`, `CVE-2026-77422`, `CVE-2026-77423` and `GHSA-6r3w-6jpj-x5w6`.
   
   ## How was this patch tested?
   
   - `mvn -Prelease,package clean install -am -pl gateway-shell,gateway-shell-release`: unit tests pass, and all JLine modules bundled in `knoxshell.jar` are 3.30.17
   - Full `mvn install -DskipTests`: dependency convergence passes on every module
   - Re-ran the manual tests from #1181 against a local gateway (demo LDAP):
     - REPL: banner, `:help`/`:h`/`?`, `:import`, `:show`, `:purge`, `:load`/`.`, tab completion, Ctrl+C at the prompt, Ctrl+D, history file
     - `:ds add`/`remove`/`list`
     - Filenames with spaces, on the command line and in the REPL (same results as #1181)
     - Logging via `-e`, and `buildTrustStore`
     - `ExampleManagerListResources.groovy` and `ExampleManagerResourceDeployment.groovy`, run from the command line and with `:load`
   - Ran the REPL tests against a 3.30.6 build as well, and the results were the same
   - Not tested (need a cluster or Postgres): WebHDFS samples, `:fs`, `:ds select`, `:sql`
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] KNOX-3525: Upgrade JLine to 3.30.17 [knox]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #1464:
URL: https://github.com/apache/knox/pull/1464#issuecomment-6348617753

   ## Test Results
     4 files    4 suites   1m 29s ⏱️
   145 tests 145 ✅ 0 💤 0 ❌
   169 runs  169 ✅ 0 💤 0 ❌
   
   Results for commit a4815a8a.
   
   [test-results]:data:application/gzip;base64,H4sIAEta2moC/13MSw7CIBSF4a00jB2U9l4DbsZcXgmxLYbCyLh3kVREh99/kvNgzi92Z5cBTgPbs08NJkdKPmyFQhaXJb03DvjRdc9a/6ebv5c0tuDILz/BxhjiUWLe6udZHmiXXfk+VneH1f2fDuvqUwEjEBxJkEU+zYaDlm5WglABysnxUVsl0QCx5wvgGAoTBAEAAA==
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] KNOX-3525: Upgrade JLine to 3.30.17 [knox]

Posted by "hanicz (via GitHub)" <gi...@apache.org>.
hanicz merged PR #1464:
URL: https://github.com/apache/knox/pull/1464


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org