Update jruby-version to v9.4.15.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
org.jruby:jruby-base	dependencies	patch	9.4.12.1 → 9.4.15.0
org.jruby:jruby-stdlib	dependencies	patch	9.4.12.1 → 9.4.15.0

---

Release Notes

jruby/jruby (org.jruby:jruby-base)

v9.4.15.0: JRuby 9.4.15.0

Compare Source

The JRuby community is pleased to announce the release of JRuby 9.4.15.0.

• Homepage: https://www.jruby.org/
• Download: https://www.jruby.org/download

JRuby 9.4.15.x targets Ruby 3.1 compatibility.

Thank you to our contributors this release, you help keep JRuby moving forward!

With this release, JRuby 9.4 moves into end-of-life ("EOL"). This means that future releases of 9.4.x will only be provided as needed by commercial JRuby users.

Get in touch with us if you require long-term support options for the JRuby 9.4.x series.

38 Issues and PRs resolved for 9.4.15.0

• #​8801 ruby/logger gem broken after version 1.6.3 using JRuby on Windows
• #​8924 const_defined? returns false for External Constants in JRuby 10.0.1.0 and 9.4.14.0
• #​8974 Use RuboCop to clean up poms (9.4)
• #​8990 Launcher defensive fixes 9.4
• #​9000 JRuby 9.4.14.0 "wrong number of arguments" when jit.threshold=0
• #​9001 Backport indy ruby2_keywords ArgumentError fix
• #​9002 Backport ArgumentError message update from 2010
• #​9012 Rexml security updateUpdate rexml gem to solve CVE-2025-58767 (9.4)
• #​9030 Official JDK 25 support for JRuby 9.4
• #​9031 Don't restrict object search to modules
• #​9032 Different arguments for each.map vs each and map alone
• #​9033 Backport jruby.sh and .jruby.release changes from 10
• #​9037 fix: clear code-range when re-using a string buffer (#​9035)
• #​9044 Difference in Float() hex parsing between JRuby and CRuby
• #​9045 Fixes basic float hex value strings for Kernel#Float
• #​9054 Migrate .java-version contents to .jruby.release (9.4)
• #​9104 [9.4] Update jruby-openssl to v0.15.5 to resolve BouncyCastle 1.79 vulnerability (sonatype-2025-001911).
• #​9105 [9.4] Update jruby-openssl to 0.15.5
• #​9128 [9.4] fix(launcher): correct parsing of java release files under Bash/msys2 etc on Windows
• #​9160 Update strscan to 3.1.7
• #​9186 9032 Fix Different arguments for each.map vs each and map alone
• #​9201 Extract float formatting into a static method (9.4)
• #​9295 Issue with calling IO.popen(env, cmd, opts) on Windows
• #​9308 Process.detach raises ArrayIndexOutOfBoundsException if called from a thread that is not the main thread
• #​9311 Push a frame for thread toplevel
• #​9347 Use JDK for File#flock on Windows
• #​9351 Fix non-native IO.popen env + kwargs handling
• #​9353 Update JNR dependencies
• #​9377 Checking out aws-sdk-ruby creates a file with binary data.
• #​9387 [9.4] deps(stdlib): bump erb from 2.2.3 to 4.0.4.1 to resolve CVE-2026-41316
• #​9391 [9.4] [deps] bump jruby-openssl to 0.16.0
• #​9415 Don't read or write anything once length is zero
• #​9443 JRuby 9.4 does not generate bytecode for newer JDK versions
• #​9444 Allow bytecode version to be open-ended
• #​9464 [fix] escape shell metachars in chdir: to prevent injection
• #​9467 [9.4] backport [ji] support java.lang.Throwable#backtrace_locations (#​9461)
• #​9477 Dist verification 9.4
• #​9480 [fix] @​JRubyMethod error with required>=1 and var-args

v9.4.14.0: JRuby 9.4.14.0 Released

Compare Source

The JRuby community is pleased to announce the release of JRuby 9.4.14.0.

• Homepage: https://www.jruby.org/
• Download: https://www.jruby.org/download

JRuby 9.4.14.x targets Ruby 3.1 compatibility.

Thank you to our contributors this release, you help keep JRuby moving forward! @​matthias-fratz-bsz, @​ikaronen-relex, @​ylecuyer

Compatibility

• Ruby version is now 3.1.7. (#​8966)

Libraries

• strscan is updated to 3.1.5. (#​8897)
• cgi is updated to 0.3.7 to resolve CVE-2025-27220 and CVE-2025-27219 (#​8954, #​8966)
• uri is updated to 0.12.4. (#​8966)
• net-smtp is updated to 0.3.1.1. (#​8966)
• rss is updated to 0.3.1. (#​8966)
• Non-gem stdlib has been updated to Ruby 3.1.7 sources. (#​8966)

Build

• jruby-maven-plugins is updated to 3.0.6 to resolve issues with garbled gem poms. (#​8898)
• The stdlib build scripts have been modified to work with latest polyglot-ruby. (#​8634, #​8963)

Usability

• bin/ruby and bin/ruby.bat are now shipped in the distribution, to make installation simpler. (#​8875)

29 Issues and PRs resolved for 9.4.14.0

• #​8422 ConcurrentLocalContextProvider leaks memory per thread
• #​8634 9.4.12.0 unable to build itself
• #​8670 Setting system property 'jruby.gem.home' works but outputs a warning
• #​8779 Marshal.dump(binding) behavior differs from CRuby
• #​8823 Failure in StringScanner#scan_integer when running the HexaPDF test suite
• #​8859 bundle gem does not fully run
• #​8866 JRuby 9.4.13.0 introduces LoadError: no such file to load -- Win32API via stdlib/net/http on Windows
• #​8875 Pregenerate bin/ruby and bin/ruby.bat
• #​8883 Normalize arch to universal-java-version
• #​8884 Require the correct case for this library
• #​8885 Coerce the chdir for popen
• #​8897 Update strscan to fix number scanning at nonzero offset
• #​8898 Update maven plugins to latest
• #​8902 Sporadic failure in TestArray#test_insert under indy
• #​8904 Always check array insert pos
• #​8909 Make Binding unmarshalable
• #​8918 Don't set callInfo when target does not use kwargs
• #​8919 Update vendored cgi gem
• #​8933 Output buffer size calculation for unpack('m') and unpack('u') can overflow for long inputs
• #​8936 Fix integer overflow in buffer length calculation for unpack('m') and unpack('u')
• #​8954 Secuity: Bump cgi to 0.4.2. CVE-2025-27220 CVE-2025-27219
• #​8961 Fix index -1 error while searching for feature path
• #​8963 Upgrade polyglot and remove openssl lib hack
• #​8966 Update stdlib to 3.1.7
• #​8968 Pass multi-elt array key for to_h using yieldArray
• #​8969 Fix memory leak in Concurrent/ThreadSafeLocalContextProvider
• #​8970 Move jruby.gem.home and jruby.gem.path to Options
• #​8973 Pathname::glob behavior changed with 9.4.13.0 and later
• #​8980 Additional fixes for scheme-based globbing (9.4)

v9.4.13.0: JRuby 9.4.13.0

Compare Source

The JRuby community is pleased to announce the release of JRuby 9.4.13.0.

• Homepage: https://www.jruby.org/
• Download: https://www.jruby.org/download

JRuby 9.4.13.x targets Ruby 3.1 compatibility.

Thank you to our contributors this release, you help keep JRuby moving forward!

Stability

• Fixed a slow memory leak in subclass management. (#​8842, #​8844)
• Fixed a potential deadlock during multi-threaded boot and concurrent JIT compilation. (#​8845, #​8849)

Usability

• Backported JRuby .sh launcher features from JRuby 10, including AppCDS flags for improved startup time. (#​8565, #​8625, #​8626, #​8652, #​8653, #​8656, #​8754)

56 Issues and PRs resolved for 9.4.13.0

• #​8351 Zlib::GzipReader missing each_char iterator
• #​8426 Dir[] vs "../../"
• #​8506 Test new version of resolv
• #​8526 obj.first caused Java::JavaUtil::NoSuchElementException on an empty Java21 ArrayList
• #​8542 Fix Dir.glob ../ and cases
• #​8565 JRuby native launcher seems to get confused when both --dev and -Xcompile.mode=JIT are applied
• #​8574 Improvements to support json library
• #​8577 ArgumentError: unknown keyword for required keyword argument
• #​8599 Fixes #​8577. kwargs checking: Use bits instead of index
• #​8608 add zlib each_char
• #​8611 Setting an instance var on a Java object no longer warns
• #​8613 Warn when creating a new ivar table on JavaProxy wrapper
• #​8623 Installing sassc broke on jruby-head on Windows
• #​8625 Add --cache flag to regenerate AppCDS
• #​8626 Fix default arguments for generating AppCDS flag
• #​8635 Fix tr! and reverse! on ByteList view with non-zero begin index
• #​8643 Fixes to get stringio tests and specs green
• #​8645 Update stringio to 3.1.5
• #​8648 Handle errors whe looking for Java executable
• #​8652 Use set -u to avoid accessing uninitialized variables
• #​8653 Align 9.4 launcher with 10
• #​8654 fix glob dir on windows
• #​8655 Make some private helpers for glob
• #​8656 Additional fixes for jruby.sh
• #​8661 Update Unicode to 15.0
• #​8663 copy-rename-maven-plugin version
• #​8667 Update jcodings to 1.0.62 and joni to 2.2.4
• #​8671 fix a regression in KDDI transcoding
• #​8681 Update MRI core tests and tag failures
• #​8686 rbByteEncode fails to no-op when encodings are the same
• #​8687 Handle encoding checks as in strTranscode
• #​8688 Tracing :call with TracePoint (and --debug flag) makes kwargs unusable
• #​8691 Implement AutoCloseable on JRubyEngine
• #​8692 Save original callers callInfo in tracepoint
• #​8696 New restriction warnings on Java 24
• #​8715 Fix missing 2 arg for IO#readline
• #​8728 Incorrect warning: given block not used
• #​8731 [ji] avoid false duplicate method warning
• #​8733 Remove this warning to match standard set.rb
• #​8754 Backport jruby.sh from JRuby 10
• #​8755 Update uri to version 0.12.3 in JRuby 9.4
• #​8789 Dir.glob and Dir[] on existing file URL raises error
• #​8795 Possible typo in lib/ruby/stdlib/jruby/compiler.rb:61
• #​8805 Possible NPE in RubyModule:searchWithCacheMiss() found by SAST
• #​8806 Possible NPE in StringSupport:rbStrEnumerateLines() found by SAST
• #​8820 Fix recent potential NPE reports
• #​8821 Always cache undef along these paths
• #​8825 Update net-imap from 0.2.3 to 0.2.5
• #​8827 Update to net-imap 0.2.5 for security fixes
• #​8830 Splat with multi-line expression improperly expands
• #​8834 Missing splatNode creation
• #​8842 Metaspace leak in 9.4
• #​8844 Use a normal ClassValue for all such cases
• #​8845 Fix locking of stable class values for JI proxies
• #​8849 Clean up some locking around hierarchy modification
• #​8857 Migrate to the new Maven Central publishing system

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.