dependabot[bot] opened a new pull request, #15232: URL: https://github.com/apache/camel/pull/15232
Bumps `jython-version` from 2.7.3 to 2.7.4. Updates `org.python:jython-standalone` from 2.7.3 to 2.7.4 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jython/jython/blob/master/NEWS">org.python:jython-standalone's changelog</a>.</em></p> <blockquote> <h1>Jython 2.7.4</h1> <p>New Features</p> <pre><code>- When building a modular application or library, the jython-slim JAR may be placed on the *module* path [GH-325](https://github.com/jython/jython/issues/325). It will export its usual packages in an automatic module org.python.jython2. Application build tools that create a run script will generally add the dependencies of Jython to the module path automatically. The developer may have to add (via the build script) --add-modules ALL-MODULE-PATH to the java command to ensure that these dependencies are resolved. <ul> <li>The jython-standalone JAR (module org.python.jython2.standalone) may also be used. Many shaded (and some unshaded) dependencies are then duplicated in its module, which can be a problem. It may be necessary to --add-modules ALL-DEFAULT to ensure JDK classes are resolved. </code></pre></li> </ul> <p>Jython 2.7.4 is unchanged from 2.7.4rc1</p> <p>Jython 2.7.4rc1 Bugs fixed - [ <a href="https://redirect.github.com/jython/jython/issues/344">GH-344</a> ] Updated ucnhash.dat to Unicode 15.1. - [ <a href="https://redirect.github.com/jython/jython/issues/343">GH-343</a> ] Export xml.parsers and xml.etree in xml.<strong>all</strong>. - [ <a href="https://redirect.github.com/jython/jython/issues/342">GH-342</a> ] Update multiple JARs to latest available. - [ <a href="https://redirect.github.com/jython/jython/issues/331">GH-331</a> ] Catch IndexError possible when accessing sys.argv.</p> <p>Jython 2.7.4b2 Feature added - [ <a href="https://redirect.github.com/jython/jython/issues/325">GH-325</a> ] Upward compatibility to Java 9 Modularity</p> <p>Jython 2.7.4b1 Bugs fixed - [ <a href="https://redirect.github.com/jython/jython/issues/316">GH-316</a> ] Clash over META-INF in shaded JARs - [ <a href="https://redirect.github.com/jython/jython/issues/310">GH-310</a> ] CVE-2024-25710 and CVE-2024-26308 (commons-compress) - [ <a href="https://redirect.github.com/jython/jython/issues/304">GH-304</a> ] from java import * not working in Java 21 - [ <a href="https://redirect.github.com/jython/jython/issues/302">GH-302</a> ] Interactive interpreter awaits input instead of raising syntax error - [ <a href="https://redirect.github.com/jython/jython/issues/298">GH-298</a> ] Keep better accounts of contribution and CLA - [ <a href="https://redirect.github.com/jython/jython/issues/288">GH-288</a> ] Build fails when using modules (duplicate org.w3c from JARs) - [ <a href="https://redirect.github.com/jython/jython/issues/281">GH-281</a> ] Invoking the wrong overloaded Java constructor - [ <a href="https://redirect.github.com/jython/jython/issues/280">GH-280</a> ] LineNumberTable deprecated for removal in 2.6 still there - [ <a href="https://redirect.github.com/jython/jython/issues/277">GH-277</a> ] Argument coercion fails for Java interface with default methods - [ <a href="https://redirect.github.com/jython/jython/issues/272">GH-272</a> ] GlobalRef.createReaperThreadIfAbsent produces IllegalMonitorStateException - [ <a href="https://redirect.github.com/jython/jython/issues/269">GH-269</a> ] Upgrade Google Guava to 32.0.1 (CVE-2023-2976) - [ <a href="https://redirect.github.com/jython/jython/issues/264">GH-264</a> ] Create a security policy (changes on GitHub only) - [ <a href="https://redirect.github.com/jython/jython/issues/254">GH-254</a> ] Regression in socket.socket.sendall for sending Unicode - [ <a href="https://redirect.github.com/jython/jython/issues/247">GH-247</a> ] PySystemStateTest fails on Mac - [ <a href="https://redirect.github.com/jython/jython/issues/245">GH-245</a> ] Document download/binaries location - [ <a href="https://redirect.github.com/jython/jython/issues/238">GH-238</a> ] Using == to compare strings in sys - [ <a href="https://redirect.github.com/jython/jython/issues/223">GH-223</a> ] JPasswordField no longer works due to 'bullet' echo char - [ <a href="https://redirect.github.com/jython/jython/issues/221">GH-221</a> ] Incorrect method precedence with overloading and variable arity - [ <a href="https://redirect.github.com/jython/jython/issues/204">GH-204</a> ] IllegalArgumentException: where char method returns non-byte value</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/jython/jython/commits">compare view</a></li> </ul> </details> <br /> Updates `org.python:jython` from 2.7.3 to 2.7.4 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jython/jython/blob/master/NEWS">org.python:jython's changelog</a>.</em></p> <blockquote> <h1>Jython 2.7.4</h1> <p>New Features</p> <pre><code>- When building a modular application or library, the jython-slim JAR may be placed on the *module* path [GH-325](https://github.com/jython/jython/issues/325). It will export its usual packages in an automatic module org.python.jython2. Application build tools that create a run script will generally add the dependencies of Jython to the module path automatically. The developer may have to add (via the build script) --add-modules ALL-MODULE-PATH to the java command to ensure that these dependencies are resolved. <ul> <li>The jython-standalone JAR (module org.python.jython2.standalone) may also be used. Many shaded (and some unshaded) dependencies are then duplicated in its module, which can be a problem. It may be necessary to --add-modules ALL-DEFAULT to ensure JDK classes are resolved. </code></pre></li> </ul> <p>Jython 2.7.4 is unchanged from 2.7.4rc1</p> <p>Jython 2.7.4rc1 Bugs fixed - [ <a href="https://redirect.github.com/jython/jython/issues/344">GH-344</a> ] Updated ucnhash.dat to Unicode 15.1. - [ <a href="https://redirect.github.com/jython/jython/issues/343">GH-343</a> ] Export xml.parsers and xml.etree in xml.<strong>all</strong>. - [ <a href="https://redirect.github.com/jython/jython/issues/342">GH-342</a> ] Update multiple JARs to latest available. - [ <a href="https://redirect.github.com/jython/jython/issues/331">GH-331</a> ] Catch IndexError possible when accessing sys.argv.</p> <p>Jython 2.7.4b2 Feature added - [ <a href="https://redirect.github.com/jython/jython/issues/325">GH-325</a> ] Upward compatibility to Java 9 Modularity</p> <p>Jython 2.7.4b1 Bugs fixed - [ <a href="https://redirect.github.com/jython/jython/issues/316">GH-316</a> ] Clash over META-INF in shaded JARs - [ <a href="https://redirect.github.com/jython/jython/issues/310">GH-310</a> ] CVE-2024-25710 and CVE-2024-26308 (commons-compress) - [ <a href="https://redirect.github.com/jython/jython/issues/304">GH-304</a> ] from java import * not working in Java 21 - [ <a href="https://redirect.github.com/jython/jython/issues/302">GH-302</a> ] Interactive interpreter awaits input instead of raising syntax error - [ <a href="https://redirect.github.com/jython/jython/issues/298">GH-298</a> ] Keep better accounts of contribution and CLA - [ <a href="https://redirect.github.com/jython/jython/issues/288">GH-288</a> ] Build fails when using modules (duplicate org.w3c from JARs) - [ <a href="https://redirect.github.com/jython/jython/issues/281">GH-281</a> ] Invoking the wrong overloaded Java constructor - [ <a href="https://redirect.github.com/jython/jython/issues/280">GH-280</a> ] LineNumberTable deprecated for removal in 2.6 still there - [ <a href="https://redirect.github.com/jython/jython/issues/277">GH-277</a> ] Argument coercion fails for Java interface with default methods - [ <a href="https://redirect.github.com/jython/jython/issues/272">GH-272</a> ] GlobalRef.createReaperThreadIfAbsent produces IllegalMonitorStateException - [ <a href="https://redirect.github.com/jython/jython/issues/269">GH-269</a> ] Upgrade Google Guava to 32.0.1 (CVE-2023-2976) - [ <a href="https://redirect.github.com/jython/jython/issues/264">GH-264</a> ] Create a security policy (changes on GitHub only) - [ <a href="https://redirect.github.com/jython/jython/issues/254">GH-254</a> ] Regression in socket.socket.sendall for sending Unicode - [ <a href="https://redirect.github.com/jython/jython/issues/247">GH-247</a> ] PySystemStateTest fails on Mac - [ <a href="https://redirect.github.com/jython/jython/issues/245">GH-245</a> ] Document download/binaries location - [ <a href="https://redirect.github.com/jython/jython/issues/238">GH-238</a> ] Using == to compare strings in sys - [ <a href="https://redirect.github.com/jython/jython/issues/223">GH-223</a> ] JPasswordField no longer works due to 'bullet' echo char - [ <a href="https://redirect.github.com/jython/jython/issues/221">GH-221</a> ] Incorrect method precedence with overloading and variable arity - [ <a href="https://redirect.github.com/jython/jython/issues/204">GH-204</a> ] IllegalArgumentException: where char method returns non-byte value</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/jython/jython/commits">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
