Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 27, 2025

Bumps jte from 2.2.3 to 3.2.1.
Updates gg.jte:jte from 2.2.3 to 3.2.1

Release notes

Sourced from gg.jte:jte's releases.

3.2.1

This release brings lots of improvements to the jte Gradle Plugin.

  • #444 jte now uses Gradle 8.13
  • #445/#448 Fully isolated Kotlin compiler usage in Gradle Plugin, this means the Kotlin version used by Gradle no longer conflicts with the Kotlin version used to precompile kte templates.

Big thanks to @​edward3h, @​schowave and @​Nickoriuk to make this happen!

3.2.0

3.1.16

  • GHSA-vh22-6c6h-rm8q Fix jte HTML templates with script tags or script attributes that include a Javascript template string (backticks) are subject to XSS. (thanks to https://github.com/Petersoj for reporting and reviewing the bugfix) It is strongly advised to upgrade as soon as possible if you use jte to output variables in Javascript template strings.
  • #416 Fix compilation in module enabled applications (thanks to @​rickardoberg)

3.1.15

  • #401 spring-boot-starter: temporarily revert #398 (Add template change watcher for livereload), since the devtools dependency causes issues with production builds. This will get re-introduced, when we find a proper solution for it

3.1.14

  • #398 spring-boot-starter: Add template change watcher for livereload (thanks to @​tschuehly!)

3.1.13

  • #365 Suppress warnings in generated Java source files. Thanks @​rpost!
  • #381 make jte a non-optional dependency of spring-boot-starter-3
  • #385 Update property names to use kebab-case format and update Spring Boot to version 3.3.4. Thanks @​tschuehly!
  • #388 Add spring-boot-starter dependency to jte-spring-boot-starters. Thanks @​tschuehly!
  • #378 Add new property gg.jte.expose-request-attributes to jte-spring-boot-starter-3. Thanks @​blaluc!

3.1.12

  • #359 fix for comments between html attributes (thanks to @​tschuehly for finding & reporting)

3.1.11

3.1.10

  • #328 Fix ${"\\"} causes "Unexpected end of template expression", thanks to @​mhdeeb
  • #326 fix unsafe output in html tag content
  • #333 Update Gradle to 8.6 and add wrapper validation, thanks to @​leonard84
  • #339 Maven Plugin: Fix Kotlin compiler args parameter setting, thanks to @​marcospereira

3.1.9

Hotfix for #325, HTML Comments Inside Content Blocks Cause Compilation Failure in jte 3.1.7/3.1.8

Thank you @​PsychotherapistSam for reporting!

3.1.8

Caution! There is a bug with HTML comments in this release. Please upgrade to 3.1.9 instead.

... (truncated)

Commits
  • 906bd23 Bump version to 3.2.1
  • 542d89a Merge pull request #448 from Nickoriuk/jte-plugin-compile-only-scope
  • 6caab17 Exclude kotlin-compiler-embeddable transitive dependency and re-add as compil...
  • f52258d Update Kotlin to 2.1.20 in `jte-runtime-cp-test-models-gradle-kotlin-versionm...
  • 40b66d5 Create copy of jte-runtime-cp-test-models-gradle-kotlin for Kotlin version mi...
  • 87ef9e9 Merge pull request #445 from schowave/JTE-412-Woker
  • a9ae7b1 Revert "refactor: Optimize JteTaskBase and worker parameter configuration"
  • 0a2c013 Merge branch 'main' into JTE-412-Woker
  • 9811ece refactor: Optimize JteTaskBase and worker parameter configuration
  • beb1738 Removes unnecessary log output
  • Additional commits viewable in compare view

Updates gg.jte.gradle from 2.2.3 to 3.2.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps `jte` from 2.2.3 to 3.2.1.

Updates `gg.jte:jte` from 2.2.3 to 3.2.1
- [Release notes](https://github.com/casid/jte/releases)
- [Commits](casid/jte@2.2.3...3.2.1)

Updates `gg.jte.gradle` from 2.2.3 to 3.2.1

---
updated-dependencies:
- dependency-name: gg.jte:jte
  dependency-version: 3.2.1
  dependency-type: direct:production
- dependency-name: gg.jte.gradle
  dependency-version: 3.2.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant