chore(deps): update dependency jbangdev/jbang to v0.141.0

[github-actions]

This PR contains the following updates:

Package	Update	Change
jbangdev/jbang	minor	0.139.3 → 0.141.0

---

Release Notes

jbangdev/jbang (jbangdev/jbang)

v0.141.0

Compare Source

A quick release to mainly fix two regressions in the Aesh move + various fixes/cleanups.

• --runtime-option with space separator works again — --runtime-option -Dfoo=bar was broken since 0.139.3, now fixed via aesh 3.16.5 (#​2607)
• Comma-delimited deps in config restored — run.deps=a,b in jbang.properties was passed as a single GAV instead of being split; fixed upstream in aesh 3.16.5 (#​2607)
• Markdown scripts with main methods now build correctly (#​2592)
• Local artifacts loaded asynchronously — faster startup when local deps are present (#​2595)
• DomTrip-based POM parsing — more robust and round-trip-safe POM handling (#​2526)
• Quarkus version upgraded to resolve JBoss Threads library warning (#​2591)
• CVE-2025-67030 resolved (#​2476)

Refactoring

• ExitException moved out of cli package — now lives in dev.jbang with factory methods (ExitException.invalidInput(...), etc.) and exit code constants. Old constants in BaseCommand remain as deprecated delegates. This clears the path for a future jbang-core library split (#​2602)

Dependency Updates

• aesh → 3.16.5
• SLF4J → 2.x
• JUnit BOM → 5.14.4
• Hamcrest → 3.0
• Gradle → 8.14.5
• Java toolchain → 21.0.11-tem
• Maven/Gradle export wrappers updated

Changelog

🐛 Fixes

• 57ebb47 fix: update aesh to 3.16.5 to fix --runtime-option space separator and comma-delimited deps from config (#​2607)
• d68dc18 fix: resolves mutation warning (#​2545)
• b92da09 fix(deps): update slf4j monorepo to v2 (#​2500)
• 14c4b29 fix: resolves CVE-2025-67030 (#​2476)
• c90c8a9 fix(deps): update dependency org.junit:junit-bom to v5.14.4 (#​2489)
• 7c80171 fix: upgrade Quarkus version to resolve JBoss Threads library warning… (#​2591)
• 1964736 fix: Use DomTrip for POM parsing (#​2526)
• 0bda4a3 fix: build markdown scripts with main methods (#​2592)
• 4d4158a fix: load local artifacts asynchronously (#​2595)

🔄️ Changes

• b3d1b30 refactor: move ExitException and exit codes out of cli package (#​2602)

🧰 Tasks

• 0e06dcc chore(deps): update Java to 21.0.11-tem (#​2604)
• c90471d chore(deps): update Maven and Gradle wrappers used by jbang export {maven,gradle} (#​2605)
• e387b36 chore(deps): update plugin org.gradle.toolchains.foojay-resolver-convention to v1 (#​2495)
• e037c41 chore(deps): update hamcrest to version 3.0 (#​2424)
• 00c7476 chore(deps): update Gradle to 8.14.5 (#​2470)
• e56cbac chore(deps): update docker/login-action digest to c94ce9f (#​2487)
• 438550c chore(deps): update github/codeql-action digest to 99df26d (#​2488)

🛠 Build

• 3049c79 build: remove unused task-tree plugin (#​2603)

---

• d56044d [minor] release

Contributors

We'd like to thank the following people for their contributions:
Arnab Nandy, GitHub, Max Rydahl Andersen, Mend Renovate, Tamas Cservenak, Werner Fouché

v0.140.1

Compare Source

JBang Enterprise Edition release

🔐 Authenticated Repositories Just Work

JBang now supports .netrc credentials and environment tokens (GITHUB_TOKEN, GITLAB_TOKEN) everywhere — both for HTTP downloads and for Maven dependency resolution.

That means fetching dependencies from GitHub Packages, GitLab registries, or any private Maven repository now can be done without needing a settings.xml; and lets you reuse git, github and gitlab cli auth mechanisms.

Example .netrc to enable auth for github maven repositories and https locations:

machine maven.pkg.github.com
    jbang-auth gh-auth
    jbang-auth-host github.com

machine raw.github.company.com
    jbang-auth gh-auth
    jbang-auth-host github.ibm.com

machine gitlab.company.com
    jbang-auth glab-auth

Please try and see if it works on your protected sites - let us know if works or not; we might be able to add support for it :)

☕ Install Any JDK From a URL or Local Archive

You can now point jbang jdk install at a URL or a local .tar.gz/.zip archive to install any JDK distribution, not just the ones JBang knows about. Got a custom build, an EA release, or a vendor-specific JDK? Just hand JBang the link.

Linking a local JDK is also smoother: jbang jdk install 21 /path/to/jdk now (again) works directly instead of requiring a non-numeric ID.

🐚 Tab Completion Gets Smarter

jbang completion now auto-detects your shell — no need to remember whether to pass bash, zsh, or fish. Just run jbang completion and it figures it out. PowerShell (pwsh) completion is now supported too. The output includes setup instructions so you know exactly what to add to your shell config.

🪟 Windows Fixes

• jbang deps search no longer hangs on Windows.
• jbang app install now correctly handles special characters and -D properties in PowerShell.

Other Improvements

• Better error messages when catalog downloads fail — no more cryptic stack traces.
• Clearer app setup messages — when JBang is already on PATH, it tells you so and suggests jbang version --update
  instead of leaving you guessing.
• Native image fixes — resolved a plugin discovery collision and improved reflection registration for Maven model classes.

What's Changed

• fix: register all Maven model classes for native image reflection by @​maxandersen in #​2551
• build: publish PR builds to jbang-pr-builds repo for easy testing by @​maxandersen in #​2562
• For JSON resources fetched over HTTP(S), explicitly set the Accept header by @​0x6675636b796f75676974687562 in #​2563
• fix: clarify app setup messages and hint about jbang version --update by @​maxandersen in #​2558
• fix: resolve jbang deps search hang on Windows #​2549 by @​arnabnandy7 in #​2568
• fix: add tests for -R and -C attached value syntax regression (#​2555) by @​maxandersen in #​2556
• feat: add .netrc support and GITLAB_TOKEN for authenticated HTTP access by @​maxandersen in #​2565
• fix: improve error messages for catalog download failures by @​maxandersen in #​2561
• feat: improve completion command with shell auto-detection, pwsh support, and usage hints by @​maxandersen in #​2552
• fix: auto-generate non-numeric id when linking JDK with numeric version by @​maxandersen in #​2567
• fix: close shell configuration file stream by @​sinhasebur in #​2547
• test: add tests for jdk list by @​quintesse in #​2538
• feat: added ability to install JDKs from a URL or archive + fix by @​quintesse in #​2578
• fix: rename native binaries to avoid plugin discovery collision by @​maxandersen in #​2579
• docs: Removed Duplicate Sentences from Document by @​DivyanshuBist in #​2582
• fix: make testBuildTwiceWithCliDeps resilient to error message format by @​maxandersen in #​2586
• fix: PowerShell quoting for special chars and -D property spacing in app install by @​maxandersen in #​2585
• feat: apply netrc/env credentials to Maven repository authentication by @​maxandersen in #​2583
• build: update aesh by @​maxandersen in #​2590

New Contributors

• @​0x6675636b796f75676974687562 made their first contribution in #​2563
• @​arnabnandy7 made their first contribution in #​2568
• @​sinhasebur made their first contribution in #​2547
• @​DivyanshuBist made their first contribution in #​2582

Full Changelog: jbangdev/jbang@v0.139.3...v0.140.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.