Skip to content

fix(deps): update dependency gg.jte:jte to v3.2.5 - #390

Open
renovate[bot] wants to merge 1 commit into
developmentfrom
renovate/gg.jte-jte-3.x
Open

renovate[bot] wants to merge 1 commit into
developmentfrom
renovate/gg.jte-jte-3.x

Conversation

@renovate

@renovate renovate Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
gg.jte:jte (source) 3.2.4 → 3.2.5 age confidence

Release Notes

casid/jte (gg.jte:jte)

v3.2.5

Compare Source

  • Security: OwaspHtmlTemplateOutput guards are case-insensitive (see advisory GHSA-2hfm-x4p2-r9hw)
  • Security: URL guard for <a href> cannot be bypassed by an embedded tab or newline (see advisory GHSA-mw9h-prf3-cr4h)
  • Security: Guard iframe srcdoc against xss, guard other url attributes besides a/href and also guard against data: urls (see advisory GHSA-hvg6-pc44-97gv)
  • Support parameters with annotations using = (#​552)
  • New extension to generate JSpecify @NullMarked package info for templates (#​550)
  • CLI to run code generation, as an alternative to Maven/Gradle plugins (#​560)
  • Fixed a varargs parsing bug (#​561)
  • Templates generated via the jte-models extensions no longer depend on it (#​477)
  • Fixed line number computation in various edge cases (#​570)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 4, 2026
@coderabbitai

coderabbitai Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4fff0935-232a-4909-828b-36d12d77407a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants