build(deps): bump org.mozilla:rhino from 1.8.1 to 1.9.1

[dependabot]

Bumps org.mozilla:rhino from 1.8.1 to 1.9.1.

Release notes

Sourced from org.mozilla:rhino's releases.

Rhino 1.9.1

February 15, 2026

This release fixes a few small regressions introduced in Rhino 1.9.0.

• Ensure that the "global" object is present, necessary for core-js to run
• Prevent compiled methods from introducing illegal characters in their names
• Support reserved words like "class" as names of XML attributes
• Fix a performance regression in the RegExp engine.

Thanks to all who contributed!

Full Changelog: mozilla/rhino@Rhino1_9_0_Release...Rhino1_9_1_Release

Rhino 1.9.0

This release represents about a year of work on Rhino by a growing team of contributors.

Some of the improvements include:

• Compatibility improvements in areas like destructuring and spread syntax.
• Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode
• Better support for generics and other things when Java integration is used.

Some other improvements:

JavaScript Language Updates:

• ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.
• RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.
• Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.

Core Engine Enhancements:

• Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.
• Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.

Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.

As such, the next version going forward will be 2.0.0-SNAPSHOT.

... (truncated)

Changelog

Sourced from org.mozilla:rhino's changelog.

Rhino 1.9.0

December 22, 2025

This release represents about a year of work on Rhino by a growing team of contributors.

Some of the improvements include:

• Compatibility improvements in areas like destructuring and spread syntax.
• Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode
• Better support for generics and other things when Java integration is used.

Some other improvements:

JavaScript Language Updates:

• ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.
• RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.
• Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.

Core Engine Enhancements:

• Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.
• Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.

Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.

As such, the next version going forward will be 2.0.0-SNAPSHOT.

Thanks to everyone who contributed!

Commits

• See full diff in compare view

[jamesdbloom]

This PR is based on an outdated master branch that contains a broken dependency submission workflow. The workflow has been fixed in commit 95bc4ad.

@dependabot rebase

[jamesdbloom]

@dependabot recreate

[dependabot]

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.