Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 23, 2025

Bumps com.zaxxer:nuprocess from 2.0.6 to 3.0.0.

Changelog

Sourced from com.zaxxer:nuprocess's changelog.

Changes in 3.0.0

  • Drop support for Java 7. Artifact is now Java 8+ only.
  • Fix race condition for fast exiting processes (#158).
  • Alter thread name from "ProcessQueue" to "NuProcessQueue".

Changes in 2.0.6

  • Fix environment variable injection vulnerability. This is a follow-up from CVE-2022-39243 and does not have its own CVE assigned

Changes in 2.0.5

Changes in 2.0.4

  • Add Automatic-Module-Name to MANIFEST.MF to better support Java 9+ modules (#142)

Changes in 2.0.3

  • Add handling for EINTR during epoll_wait and ESRCH from kill to prevent zombie processes (#125, #131)
  • Remove static EpollEvent queue to avoid blocking under heavy load, which can lead to leaking zombie processes if a blocked thread is interrupted (#138)

Changes in 2.0.2

  • Ensure pipes are closed after failing to start a process on Linux, to prevent leaking descriptors (#120)
  • Reduce pipe buffer size on Windows to increase process throughput to stdout and stderr (#118)
  • Update JNA dependency to v5.8.0 to pick up support for the Apple M1 (#123)

Changes in 2.0.1

  • Fix race condition between the onStdinReady() and userWantsWrite() methods that causes the state to become incorrect, resulting in failure to continue processing wanted stdin writes (#113)

Changes in 2.0.0

  • Update JNA dependency to v5.5.0
  • Add ability to run processes synchronously (#104)
  • Handle detecting Java versions when non-numbers are present (#105)

Changes in 1.2.6

  • Fix linkage issues with Azul JVMs. Special thanks to Bryan Turner for this pull request and extensive testing across a wide variety of JVMs. (#107)

Changes in 1.2.5

  • Handle SystemRoot case-insensitively (Windows) (#103).
  • Compatibility changes for JNA 5.2.0 (#99).

... (truncated)

Commits
  • 46e142b [maven-release-plugin] prepare release nuprocess-3.0.0
  • 3e71cf7 Prepare for 3.0.0 release.
  • d5236c8 Merge pull request #158 from bturner/bturner-fix-start-exit-race-for-fast-pro...
  • 805c861 Merge pull request #153 from avrecko/more-specific-poller-thread-name
  • 6bd2360 Added "Nu" to processor thread names.
  • cfff29f Merge pull request #147 from BruceMcRooster/patch-1
  • 7a0f88c Prevent onStart/onExit race for fast-exiting processes.
  • 3b5dd6b Remove Buck reference from README.
  • ebc4e45 Fix <tag/> in <scm/> block.
  • ec56163 Revert merging pull request #149.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.zaxxer:nuprocess](https://github.com/brettwooldridge/NuProcess) from 2.0.6 to 3.0.0.
- [Changelog](https://github.com/brettwooldridge/NuProcess/blob/master/CHANGES.md)
- [Commits](brettwooldridge/NuProcess@nuprocess-2.0.6...nuprocess-3.0.0)

---
updated-dependencies:
- dependency-name: com.zaxxer:nuprocess
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 23, 2025
@metacosm metacosm merged commit 876cf96 into main Oct 23, 2025
4 checks passed
@metacosm metacosm deleted the dependabot/maven/com.zaxxer-nuprocess-3.0.0 branch October 23, 2025 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant