dependabot[bot] opened a new pull request, #19800: URL: https://github.com/apache/druid/pull/19800
Bumps [org.mozilla:rhino-engine](https://github.com/mozilla/rhino) from 1.8.1 to 1.9.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mozilla/rhino/releases";>org.mozilla:rhino-engine's releases</a>.</em></p> <blockquote> <h1>Rhino 1.9.1</h1> <h2>February 15, 2026</h2> <p>This release fixes a few small regressions introduced in Rhino 1.9.0.</p> <ul> <li>Ensure that the "global" object is present, necessary for core-js to run</li> <li>Prevent compiled methods from introducing illegal characters in their names</li> <li>Support reserved words like "class" as names of XML attributes</li> <li>Fix a performance regression in the RegExp engine.</li> </ul> <p>Thanks to all who contributed!</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/mozilla/rhino/compare/Rhino1_9_0_Release...Rhino1_9_1_Release";>https://github.com/mozilla/rhino/compare/Rhino1_9_0_Release...Rhino1_9_1_Release</a></p> <h2>Rhino 1.9.0</h2> <p>This release represents about a year of work on Rhino by a growing team of contributors.</p> <p>Some of the improvements include:</p> <ul> <li>Compatibility improvements in areas like destructuring and spread syntax.</li> <li>Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode</li> <li>Better support for generics and other things when Java integration is used.</li> </ul> <p>Some other improvements:</p> <p>JavaScript Language Updates:</p> <ul> <li>ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.</li> <li>RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.</li> <li>Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.</li> </ul> <p>Core Engine Enhancements:</p> <ul> <li>Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.</li> <li>Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.</li> </ul> <p>Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.</p> <p>As such, the next version going forward will be 2.0.0-SNAPSHOT.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md";>org.mozilla:rhino-engine's changelog</a>.</em></p> <blockquote> <h1>Rhino 1.9.0</h1> <h2>December 22, 2025</h2> <p>This release represents about a year of work on Rhino by a growing team of contributors.</p> <p>Some of the improvements include:</p> <ul> <li>Compatibility improvements in areas like destructuring and spread syntax.</li> <li>Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode</li> <li>Better support for generics and other things when Java integration is used.</li> </ul> <p>Some other improvements:</p> <p>JavaScript Language Updates:</p> <ul> <li>ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.</li> <li>RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.</li> <li>Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.</li> </ul> <p>Core Engine Enhancements:</p> <ul> <li>Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.</li> <li>Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.</li> </ul> <p>Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.</p> <p>As such, the next version going forward will be 2.0.0-SNAPSHOT.</p> <p>Thanks to everyone who contributed!</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/mozilla/rhino/commits";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
