[bpamiri]

Port of upstream cybersonic#157 onto wheels, as the content of the 0.6.2.4 candidate.

Changes (pom.xml)

Artifact	Before	After
jackson-databind, jackson-core, jackson-annotations	2.15.2	2.18.11
JLine (jline-reader/-terminal/-style/-native)	3.26.3	3.30.15
org.jline:jline (transitive)	3.23.0	3.30.15
tomcat-embed-core (transitive via Lucee, pinned in dependencyManagement)	9.0.117	9.0.121
commons-lang3 (transitive via Lucee, pinned in dependencyManagement)	3.12.0	3.18.0

The OSGi log4j artifacts that Lucee bundles are unchanged, as upstream. CHANGELOG.md gets a "Dependency Updates" entry under Unreleased. Upstream's own lang changelog line is not taken, because the fork already carries that fix.

Verification

• mvn dependency:tree before and after shows the versions in the table.
• mvn test, A/B on the same machine with a sandboxed user.home and LUCLI_HOME unset:
  • wheels @ 350ded0 (v0.6.2.3): 788 run, 0 failures, 0 errors, 6 skipped;
  • this branch: 788 run, 0 failures, 0 errors, 6 skipped.
• No writes to the real ~/.lucli, ~/.lucee or ~/.wheels (outside other projects' running servers).

🤖 Generated with Claude Code

[github-actions]

Integration Tests (ubuntu-latest, Java 21)

78 tests  ±0   78 ✅ ±0   1m 28s ⏱️ -40s
14 suites ±0    0 💤 ±0 
 1 files   ±0    0 ❌ ±0 

Results for commit b7e0adb. ± Comparison against base commit 350ded0.

[github-actions]

Unit Tests (ubuntu-latest, Java 21)

 65 files  ±0   65 suites  ±0   3m 19s ⏱️ +52s
783 tests ±0  777 ✅ ±0  6 💤 ±0  0 ❌ ±0 
788 runs  ±0  782 ✅ ±0  6 💤 ±0  0 ❌ ±0 

Results for commit b7e0adb. ± Comparison against base commit 350ded0.

[bpamiri]

rev1-r3 review @ b7e0adb: APPROVE

The pom.xml matches upstream cybersonic#157. I compared the +/- lines of pom.xml in both diffs:

• the version properties (jline.version 3.30.15; new jackson.version 2.18.11, tomcat.embed.version 9.0.121, commons.lang3.version 3.18.0);
• jackson-databind → ${jackson.version};
• the new dependencyManagement block (three Jackson artifacts, five org.jline artifacts, tomcat-embed-core, commons-lang3).

All are identical, apart from the one-line XML comment above dependencyManagement, which is worded neutrally here. That makes no functional difference. There are no other pom.xml changes. The CHANGELOG line is the fork's own, as the PR says.

mvn dependency:tree on this head (b7e0adb) resolves:

• jackson-databind, jackson-core, jackson-annotations at 2.18.11;
• org.jline:jline, jline-reader, jline-terminal, jline-style and jline-native at 3.30.15;
• tomcat-embed-core at 9.0.121;
• commons-lang3 at 3.18.0.

So it matches the table, transitives included.

mvn test, which I ran on this head with an isolated HOME and user.home and LUCLI_HOME unset: 788 run, 0 failures, 0 errors, 6 skipped, BUILD SUCCESS. That equals the PR's base result for wheels @ 350ded0 (v0.6.2.3): 788/0/0/6.

Wording: the title, body and CHANGELOG entry are neutral ("dependency updates"), with the upstream reference kept.

PR CI: Build, Unit Tests and Integration Tests all pass on ubuntu, macOS and Windows; APT Install Smoke is skipped (not triggered). The branch is up to date with wheels, MERGEABLE.