Bump org.jline:jline-reader from 3.30.13 to 3.30.16

[dependabot]

Bumps org.jline:jline-reader from 3.30.13 to 3.30.16.

Release notes

Sourced from org.jline:jline-reader's releases.

JLine 3.30.16 is a bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements.

💥 Breaking Changes

• fix: only forward the ssh agent when -A is given (3.x backport of #2106) (#2109) @​gnodet
  • SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it

🐛 Bug Fixes

• fix: reject overlong hex components in OSC color responses (3.x backport of #2105) (#2108) @​gnodet
• fix: strip OSC and other escape sequences in ansiAppend (backport of #2099) (#2103) @​gnodet
• fix: search multiple lib paths for versioned libutil.so (backport of #2100) (#2102) @​gnodet
• fix: use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF (#2095) @​gnodet
• fix: check closed flag in PtyInputStream to prevent hang on empty input (#2090) @​gnodet
• fix: confine ConfigurationPath lookups to the config directory (backport of #2045) (#2076) @​gnodet
• fix: disable Read File command in nano restricted mode (backport of #2055) (#2075) @​gnodet
• fix: drain buffered data before EOF in NonBlockingPumpInputStream (backport of #2054) (#2074) @​gnodet
• fix: look up openpty in libc.so.6 for glibc 2.34+ (backport of #2068) (#2073) @​gnodet
• fix: guard styleMatches and highlighter rules against ReDoS (#2072) @​gnodet
• fix: backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) (#2000) @​gnodet
• fix: propagate EOF in PtyInputStream to avoid infinite loop (#1961, #1963) (#2069) @​thomasrebele

📦 Dependency Updates

• chore: bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 (#2098)
• chore: bump actions/setup-node from 6 to 7 (#2091)
• chore: bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#2060)
• chore: bump sshd.version from 2.18.0 to 2.19.0 (#2058)
• chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 (#2042)
• chore: bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 (#2025)
• chore: bump com.diffplug.spotless:spotless-maven-plugin (#2024)

Full Changelog: jline/jline3@jline-3.30.15...jline-3.30.16

JLine 3.30.15 is a security patch release addressing ReDoS and other security vulnerabilities.

🔒 Security Fixes

• fix: guard regex matching against catastrophic backtracking (ReDoS) (#2018, backport of #2012) @​gnodet
  • Adds SafeRegex utility with TimeoutCharSequence to enforce wall-clock deadlines during regex matching
  • Fixes 8 locations across terminal, reader, and builtins where user-controlled input could trigger catastrophic backtracking
  • Addresses GHSA-r2xf-8xr9-62gw, GHSA-2v9w-34q6-wpqx, GHSA-ph9c-7hw9-vhhw, GHSA-5q95-hrpc-m3w3
• fix: backport security hardening (#1986, #1995)
  • Create persisted history file with owner-only permissions
  • Use exclusive create for extracted native library temp files

🐛 Bug Fixes

• fix: warn on insecure permissions when history file created concurrently @​gnodet

... (truncated)

Commits

• fcfe320 [maven-release-plugin] prepare release jline-3.30.16
• a34e0c4 fix: only forward the ssh agent when -A is given (3.x backport)
• 398c81b fix: reject overlong hex components in OSC color responses (3.x backport)
• b1ca3bf Merge pull request #2098 from jline/dependabot/maven/jline-3.x/org.apache.ivy...
• b390cf3 Merge pull request #2102 from jline/backport/2100-libutil-3x
• 8a84437 Merge pull request #2103 from jline/backport/2099-osc-strip-3x
• 5bab62e Merge pull request #2095 from jline/backport/2052-ssrf-jline-3.x
• 4364c2f fix: re-interrupt thread when catching InterruptedException (S2142)
• 0110211 fix: catch Exception instead of Throwable in uname process block
• 551ad41 fix: strip OSC and other escape sequences in ansiAppend (backport #2099)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.jline:jline-reader	[>= 4.a0, < 5]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)