Skip to content

Bump org.python:jython-standalone from 2.7.2 to 2.7.4 - #16

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.python-jython-standalone-2.7.4
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.python-jython-standalone-2.7.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps org.python:jython-standalone from 2.7.2 to 2.7.4.

Changelog

Sourced from org.python:jython-standalone's changelog.

Jython 2.7.4

New Features

- When building a modular application or library, the jython-slim JAR may
  be placed on the *module* path [GH-325](https://github.com/jython/jython/issues/325). It will export its usual
  packages in an automatic module org.python.jython2. Application build
  tools that create a run script will generally add the dependencies of
  Jython to the module path automatically. The developer may have to add
  (via the build script) --add-modules ALL-MODULE-PATH to the java command
  to ensure that these dependencies are resolved.
  • The jython-standalone JAR (module org.python.jython2.standalone) may also be used. Many shaded (and some unshaded) dependencies are then duplicated in its module, which can be a problem. It may be necessary to --add-modules ALL-DEFAULT to ensure JDK classes are resolved.

Jython 2.7.4 is unchanged from 2.7.4rc1

Jython 2.7.4rc1 Bugs fixed - [ GH-344 ] Updated ucnhash.dat to Unicode 15.1. - [ GH-343 ] Export xml.parsers and xml.etree in xml.all. - [ GH-342 ] Update multiple JARs to latest available. - [ GH-331 ] Catch IndexError possible when accessing sys.argv.

Jython 2.7.4b2 Feature added - [ GH-325 ] Upward compatibility to Java 9 Modularity

Jython 2.7.4b1 Bugs fixed - [ GH-316 ] Clash over META-INF in shaded JARs - [ GH-310 ] CVE-2024-25710 and CVE-2024-26308 (commons-compress) - [ GH-304 ] from java import * not working in Java 21 - [ GH-302 ] Interactive interpreter awaits input instead of raising syntax error - [ GH-298 ] Keep better accounts of contribution and CLA - [ GH-288 ] Build fails when using modules (duplicate org.w3c from JARs) - [ GH-281 ] Invoking the wrong overloaded Java constructor - [ GH-280 ] LineNumberTable deprecated for removal in 2.6 still there - [ GH-277 ] Argument coercion fails for Java interface with default methods - [ GH-272 ] GlobalRef.createReaperThreadIfAbsent produces IllegalMonitorStateException - [ GH-269 ] Upgrade Google Guava to 32.0.1 (CVE-2023-2976) - [ GH-264 ] Create a security policy (changes on GitHub only) - [ GH-254 ] Regression in socket.socket.sendall for sending Unicode - [ GH-247 ] PySystemStateTest fails on Mac - [ GH-245 ] Document download/binaries location - [ GH-238 ] Using == to compare strings in sys - [ GH-223 ] JPasswordField no longer works due to 'bullet' echo char - [ GH-221 ] Incorrect method precedence with overloading and variable arity - [ GH-204 ] IllegalArgumentException: where char method returns non-byte value

... (truncated)

Commits
  • 3f256f4 Prepare for 2.7.4 release.
  • d04ff7f Begin to identify as v2.7.4rc2
  • 3562755 Prepare for 2.7.4rc1 release.
  • 245deba Now with sensible timeouts.
  • 66600ad Impose timeout on regrtest workflows
  • f14a91e Note blocked from updating Netty by issue 349
  • 7df6cbd Update Bouncy Castle JARs to 1.78.1
  • 115376c Update ICU4J JAR to 75.1
  • 640b6fd Update commons-io and Guava JARs
  • 967798c Update JLine to 2.14.6
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 10, 2026
@adamkorynta

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [org.python:jython-standalone](https://github.com/jython/jython) from 2.7.2 to 2.7.4.
- [Changelog](https://github.com/jython/jython/blob/master/NEWS)
- [Commits](jython/jython@v2.7.2...v2.7.4)

---
updated-dependencies:
- dependency-name: org.python:jython-standalone
  dependency-version: 2.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/org.python-jython-standalone-2.7.4 branch from b216fe8 to 0a82de8 Compare September 11, 2026 16:12
@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/gradle/org.python-jython-standalone-2.7.4 branch September 11, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant