You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/29 23:56:45 UTC
[PR] build(deps): bump org.mozilla:rhino-engine from 1.8.1 to 1.9.1 (druid)
dependabot[bot] opened a new pull request, #19800:
URL: https://github.com/apache/druid/pull/19800
Bumps [org.mozilla:rhino-engine](https://github.com/mozilla/rhino) from 1.8.1 to 1.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/mozilla/rhino/releases">org.mozilla:rhino-engine's releases</a>.</em></p>
<blockquote>
<h1>Rhino 1.9.1</h1>
<h2>February 15, 2026</h2>
<p>This release fixes a few small regressions introduced in Rhino 1.9.0.</p>
<ul>
<li>Ensure that the "global" object is present, necessary for core-js to run</li>
<li>Prevent compiled methods from introducing illegal characters in their names</li>
<li>Support reserved words like "class" as names of XML attributes</li>
<li>Fix a performance regression in the RegExp engine.</li>
</ul>
<p>Thanks to all who contributed!</p>
<p><strong>Full Changelog</strong>: <a href="https://github.com/mozilla/rhino/compare/Rhino1_9_0_Release...Rhino1_9_1_Release">https://github.com/mozilla/rhino/compare/Rhino1_9_0_Release...Rhino1_9_1_Release</a></p>
<h2>Rhino 1.9.0</h2>
<p>This release represents about a year of work on Rhino by a growing team of contributors.</p>
<p>Some of the improvements include:</p>
<ul>
<li>Compatibility improvements in areas like destructuring and spread syntax.</li>
<li>Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode</li>
<li>Better support for generics and other things when Java integration is used.</li>
</ul>
<p>Some other improvements:</p>
<p>JavaScript Language Updates:</p>
<ul>
<li>ES6+: Significant advancements in destructuring, spread syntax for
arrays/objects, Symbol API, and improved let/const scoping.
TypedArray.from/of and BigInt.asUintN/asIntN fixes.</li>
<li>RegExp: New features like named capture groups, lookbehind
assertions, and Unicode mode support.</li>
<li>Future ES (ES2024/2025): Early implementation of proposals such as
Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and
new Set methods.</li>
</ul>
<p>Core Engine Enhancements:</p>
<ul>
<li>Major Refactoring: Extensive migration of built-in objects to a
lambda-based architecture and a comprehensive overhaul of the
interpreter bytecodes for better performance and maintainability.</li>
<li>Concurrency & Interop: Continued focus on thread safety improvements
and enhanced Java interoperability, including better generics
support.</li>
</ul>
<p>Going forward -- we have lots of plans for Rhino, including some changes that may
affect compatibility for projects that embed Rhino into larger frameworks. We think
that these changes will be worth it because they will unlock better language
compatibility and performance.</p>
<p>As such, the next version going forward will be 2.0.0-SNAPSHOT.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md">org.mozilla:rhino-engine's changelog</a>.</em></p>
<blockquote>
<h1>Rhino 1.9.0</h1>
<h2>December 22, 2025</h2>
<p>This release represents about a year of work on Rhino by a growing team of contributors.</p>
<p>Some of the improvements include:</p>
<ul>
<li>Compatibility improvements in areas like destructuring and spread syntax.</li>
<li>Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode</li>
<li>Better support for generics and other things when Java integration is used.</li>
</ul>
<p>Some other improvements:</p>
<p>JavaScript Language Updates:</p>
<ul>
<li>ES6+: Significant advancements in destructuring, spread syntax for
arrays/objects, Symbol API, and improved let/const scoping.
TypedArray.from/of and BigInt.asUintN/asIntN fixes.</li>
<li>RegExp: New features like named capture groups, lookbehind
assertions, and Unicode mode support.</li>
<li>Future ES (ES2024/2025): Early implementation of proposals such as
Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and
new Set methods.</li>
</ul>
<p>Core Engine Enhancements:</p>
<ul>
<li>Major Refactoring: Extensive migration of built-in objects to a
lambda-based architecture and a comprehensive overhaul of the
interpreter bytecodes for better performance and maintainability.</li>
<li>Concurrency & Interop: Continued focus on thread safety improvements
and enhanced Java interoperability, including better generics
support.</li>
</ul>
<p>Going forward -- we have lots of plans for Rhino, including some changes that may
affect compatibility for projects that embed Rhino into larger frameworks. We think
that these changes will be worth it because they will unlock better language
compatibility and performance.</p>
<p>As such, the next version going forward will be 2.0.0-SNAPSHOT.</p>
<p>Thanks to everyone who contributed!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/mozilla/rhino/commits">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] build(deps): bump org.mozilla:rhino-engine from 1.8.1 to 1.9.1 (druid)
Posted by "FrankChen021 (via GitHub)" <gi...@apache.org>.
FrankChen021 merged PR #19800:
URL: https://github.com/apache/druid/pull/19800
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org