Skip to content

Fix: restore Shell 4 management and pin patched JLine and Junrar - #98

Merged
igordayen merged 1 commit into
embabel:mainfrom
arnabnandy7:fix/shell4SecurityDependencies
Oct 24, 2026
Merged

igordayen merged 1 commit into
embabel:mainfrom
arnabnandy7:fix/shell4SecurityDependencies

Conversation

@arnabnandy7

Copy link
Copy Markdown
Contributor

Summary

Restores Spring Shell 4.0.3 management for both the starter and JLine integration. Keeps JLine and jline-builtins pinned to patched version 3.30.15, and overrides Tika’s Junrar dependency with 7.6.1.

Closes #97. Supports embabel/embabel-agent#1956.

Merge timing

Please coordinate publication with the agent migration so release consumers still using Shell 3 aren’t affected.

Refs embabel#97

Signed-off-by: Arnab Nandy <arnab_nandy7@yahoo.com>

@igordayen igordayen left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@arnabnandy7 Looks good to me.

@igordayen igordayen left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@arnabnandy7 - looks good to me. thanks

@igordayen
igordayen requested a review from alexheifetz October 23, 2026 15:22
@igordayen
igordayen merged commit 882c740 into embabel:main Oct 24, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Restore coordinated Shell 4 dependency management and patch JLine/Junrar exposure

2 participants