Update dependency org.owasp.encoder:encoder to v1.4.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.owasp.encoder:encoder (source)	1.4.0 → 1.4.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

owasp/owasp-java-encoder (org.owasp.encoder:encoder)

v1.4.1

Signed GitHub release
(tag created 2026-09-25 in America/Los_Angeles).
Available from Maven Central. Upgrade all four Java Encoder artifacts;
versions through 1.4.0 are affected.
Central publication was verified on 2026-09-27 UTC (2026-09-26 in
America/Los_Angeles); all artifacts and signatures match the retained release.

• Fix EncodedWriter context corruption during buffer overflow
  (GHSA-57jg-769q-93vh).
• Fix insufficient-lookahead infinite loops in EncodedWriter
  (GHSA-q6jj-5396-8mq2).
• Fix CSS String API maximum-output sizing for long U+2028/U+2029 runs
  (GHSA-p9ff-j89j-9xhx).
• Preserve Java 8 runtime, public method signatures, Maven and JPMS identities;
  make adapter API dependencies transitively readable in module descriptors.
• Pin the ESAPI adapter's default to 2.7.0.0 rather than a Maven version range.

See the full release record for affected entry points,
coordinates, verification and publication status. Later 1.5 changes do not alter
these retained artifacts.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.