Bump org.jline:jline-reader from 3.27.0 to 3.30.15 in /test/org/rascalmpl/util/maven/poms/rascal

[dependabot]

Bumps org.jline:jline-reader from 3.27.0 to 3.30.15.

Release notes

Sourced from org.jline:jline-reader's releases.

JLine 3.30.15 is a security patch release addressing ReDoS and other security vulnerabilities.

🔒 Security Fixes

• fix: guard regex matching against catastrophic backtracking (ReDoS) (#2018, backport of #2012) @​gnodet
  • Adds SafeRegex utility with TimeoutCharSequence to enforce wall-clock deadlines during regex matching
  • Fixes 8 locations across terminal, reader, and builtins where user-controlled input could trigger catastrophic backtracking
  • Addresses GHSA-r2xf-8xr9-62gw, GHSA-2v9w-34q6-wpqx, GHSA-ph9c-7hw9-vhhw, GHSA-5q95-hrpc-m3w3
• fix: backport security hardening (#1986, #1995)
  • Create persisted history file with owner-only permissions
  • Use exclusive create for extracted native library temp files

🐛 Bug Fixes

• fix: warn on insecure permissions when history file created concurrently @​gnodet

📦 Dependency Updates

• chore: bump eu.maveniverse.maven.njord:extension3 from 0.9.8 to 0.9.9 (#1999)
• chore: bump com.palantir.javaformat:palantir-java-format (#1991)
• chore: bump actions/cache from 5 to 6 (#1989)

Full Changelog: jline/jline3@jline-3.30.14...jline-3.30.15

JLine 3.30.14

Bug Fixes

• Fix swap rows/columns in openpty winsize constructor call (#1910)
• Fix filter-by-commitish in 3.x release drafter config

Security

• Limit telnet NEW-ENVIRON variable count and NAWS geometry bounds (backport of GHSA-47qp, GHSA-2r2c)

Dependency Upgrades

• Bump Groovy from 4.0.31 to 4.0.32
• Bump SLF4J from 2.0.17 to 2.0.18
• Bump JNA from 5.18.1 to 5.19.1
• Bump Apache SSHD from 2.17.1 to 2.18.0
• Bump Spotless Maven Plugin from 3.4.0 to 3.7.0
• Bump Palantir Java Format from 2.90.0 to 2.93.0
• Bump GMavenPlus Plugin from 4.3.1 to 5.0.0
• Bump Maven Enforcer Plugin from 3.6.2 to 3.6.3
• Bump Maven Surefire Plugin from 3.5.5 to 3.5.6
• Bump Maven Dependency Plugin from 3.10.0 to 3.11.0
• Bump Njord Extension from 0.9.5 to 0.9.8
• Bump actions/checkout from 6 to 7

JLine 3.30.13 is a patch release fixing status bar rendering after terminal resize.

... (truncated)

Commits

• b880666 [maven-release-plugin] prepare release jline-3.30.15
• 341ee69 fix: guard regex matching against catastrophic backtracking (ReDoS)
• 1d12a0d fix: warn on insecure permissions when history file created concurrently
• e307915 fix: backport security hardening to jline-3.x (#1986, #1995)
• 6212e6c chore: Bump eu.maveniverse.maven.njord:extension3 from 0.9.8 to 0.9.9 (#1999)
• 6c80118 chore: Bump com.palantir.javaformat:palantir-java-format (#1991)
• 04287c4 chore: Bump actions/cache from 5 to 6 (#1989)
• febc3b3 [maven-release-plugin] prepare for next development iteration
• c02dd46 [maven-release-plugin] prepare release jline-3.30.14
• 3ea9cad Merge pull request #2000 from jline/backport/jline-3.x/telnet-security-fixes
• Additional commits viewable in compare view

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[DavyLandman]

We have to wait for a bugfix release.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.