Update dependency org.jruby:jruby-core to v9.3.9.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.jruby:jruby-core	9.3.8.0 -> 9.3.9.0

---

Release Notes

jruby/jruby

v9.3.9.0

Compare Source

The JRuby community is pleased to announce the release of JRuby 9.3.9.0

• Homepage: https://www.jruby.org/
• Download: https://www.jruby.org/download

JRuby 9.3.x is compatible with Ruby 2.6.x and stays in sync with C Ruby. As always there is a mix of miscellaneous fixes so be sure to read the issue list below.

Thanks to our contributors this cycle for helping to improve stability and compatibility of JRuby 9.3: @​chadlwilson, @​coheigea

Standard Library

• rdoc has been updated to 6.3.3 to fix all known CVEs. (#​7396, #​7404)
• rexml has been updated to 3.2.5 to fix all known CVEs. (#​7395, #​7405)
• jruby-openssl has been updated to 0.14.0 to fix weak HMAC key hashing in bouncycastle, which itself is updated to 1.71. (#​7335, #​7385, #​7399)
• psych has been updated to 3.3.4 to fix CVE-2022-38752 in the SnakeYAML library, which itself is updated to 1.33. (#​7386, #​7388, #​7400)
• rubygems has been updated to 3.2.33 and bundler updated to 2.2.33 to address CVE-2021-43809. (#​7397, #​7401)

Github Issues resolved for 9.3.9.0

• #​5588 - OpenSSL::PKey::RSA.new without password results in terminal input failure
• #​7335 - Upgrade jruby-openssl to 0.14.0
• #​7367 - StringIO ignores external encoding on Windows
• #​7380 - [Tiny issue] swing2.rb example at https://github.com/jruby/jruby/blob/master/samples/swing2.rb has a warning, "swing.rb:4: warning: import is deprecated; use java_import"
• #​7385 - Updating jruby-openssl to 0.14.0
• #​7386 - Update SnakeYaml to 1.32+ due to CVE-2022-38752
• #​7388 - Update to Psych 3.3.4
• #​7395 - Update embedded rexml in jruby-complete
• #​7396 - Update rdoc in jruby-complete
• #​7397 - Update bundler in jruby-complete
• #​7399 - Update bouncycastle in jruby-complete
• #​7400 - Update snakeyaml in jruby-complete
• #​7401 - [deps] update Bundler/Rubygems to latest patch
• #​7404 - Update rdoc to 6.3.3 to fix known CVEs
• #​7405 - Update rexml to 3.2.5 to fix known CVEs
• #​7406 - Time.at with fractional seconds and :in doubles timezone offset
• #​7407 - Better match CRuby zone negotiation
• #​7416 - Regexp new none option

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.