You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by ma...@apache.org on 2026/10/05 14:36:35 UTC
(grails-core) branch deps/7.0.18-dependency-updates created (now 8718097b4f)
This is an automated email from the ASF dual-hosted git repository.
matrei pushed a change to branch deps/7.0.18-dependency-updates
in repository https://gitbox.apache.org/repos/asf/grails-core.git
at 8718097b4f Update dependencies for 7.0.18
This branch includes the following new commits:
new 8718097b4f Update dependencies for 7.0.18
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(grails-core) 01/01: Update dependencies for 7.0.18
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
matrei pushed a commit to branch deps/7.0.18-dependency-updates
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 8718097b4f4f452ee2fbad03e69ff4735afb0864
Author: Mattias Reichel <ma...@gmail.com>
AuthorDate: Mon Oct 5 16:18:47 2026 +0200
Update dependencies for 7.0.18
Patch-level updates only:
- jackson 2.21.7, httpcore5 5.4.4
- micronaut-serde-jackson 2.11.2 (test apps), checkstyle 11.0.1,
apache-rat plugin 0.8.2
- develocity plugin 4.5.1, aligned in build-logic and grails-gradle,
which were still on 4.2.2
- grails-forge: ant 1.10.18, asciidoctor-gradle-jvm 4.0.5,
jackson-databind 2.18.11, logback 1.5.38, micronaut 3.10.14,
postgresql 42.7.13, shadow 8.3.11, slf4j 2.0.20, test-retry 1.6.6,
typesafe-config 1.4.9
- grails-forge generated applications: grails-web-console 7.0.1
---
build-logic/settings.gradle | 2 +-
dependencies.gradle | 8 ++++----
gradle.properties | 6 +++---
grails-forge/gradle.properties | 20 ++++++++++----------
.../grails-forge-core/src/main/resources/pom.xml | 2 +-
grails-forge/settings.gradle | 2 +-
grails-gradle/settings.gradle | 2 +-
settings.gradle | 2 +-
8 files changed, 22 insertions(+), 22 deletions(-)
diff --git a/build-logic/settings.gradle b/build-logic/settings.gradle
index 86a56b0872..e8e735d27d 100644
--- a/build-logic/settings.gradle
+++ b/build-logic/settings.gradle
@@ -25,7 +25,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.2.2'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'com.autonomousapps.build-health' version '3.19.2'
}
diff --git a/dependencies.gradle b/dependencies.gradle
index 5fca6fdde7..5c737d673f 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -96,11 +96,11 @@ ext {
// the classic i/o model when a response carries an unsupported Content-Encoding. 5.6.4 still targets
// httpcore5 5.4.3, so it needs no companion httpcore5 change.
'httpclient5.version' : '5.6.4',
- // Security: overrides spring-boot-dependencies (5.3.6). 5.4.3 fixes CVE-2026-54399 (httpcore5) and CVE-2026-54428 (httpcore5-h2).
- 'httpcore5.version' : '5.4.3',
- // Security: 2.21.6 fixes CVE-2026-19032 (unrestricted URI schemes in Path deserialization) and
+ // Security: overrides spring-boot-dependencies (5.3.6). 5.4.3 and later fix CVE-2026-54399 (httpcore5) and CVE-2026-54428 (httpcore5-h2).
+ 'httpcore5.version' : '5.4.4',
+ // Security: 2.21.6 and later fix CVE-2026-19032 (unrestricted URI schemes in Path deserialization) and
// CVE-2026-68497 (unbounded number length in GregorianCalendar/Duration) flagged against 2.21.5.
- 'jackson.version' : '2.21.6',
+ 'jackson.version' : '2.21.7',
// Security: overrides spring-boot-dependencies (1.5.34). 1.5.38 is the newest release of the 1.5.x line
// and matches what Spring Boot 4.1.x manages. See the CVE-2026-19880 note in VulnerabilityScanPlugin
// for the one logback advisory this version does not clear.
diff --git a/gradle.properties b/gradle.properties
index 363b96bb4d..a3a4c1afa7 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -50,7 +50,7 @@ spyMemcachedVersion=2.12.3
yakworksHibernateGroovyProxyVersion=1.1
# Build dependency versions not managed by BOMs
-apacheRatVersion=0.8.1
+apacheRatVersion=0.8.2
gradleChecksumPluginVersion=1.4.0
# note: the cyclonedx 3 requires Gradle 9
gradleCycloneDxPluginVersion=2.4.1
@@ -64,10 +64,10 @@ ersatzVersion=4.0.1
jbossTransactionApiVersion=2.0.0.Final
# Note: we do not import the micronaut bom in our tests to avoid spring version mismatches
micronautHttpClientVersion=4.9.12
-micronautSerdeJacksonVersion=2.11.0
+micronautSerdeJacksonVersion=2.11.2
# build dependencies for code quality checks
-checkstyleVersion=11.0.0
+checkstyleVersion=11.0.1
codenarcVersion=3.6.0-groovy-4.0
sonatypeScanPluginVersion=3.1.6
diff --git a/grails-forge/gradle.properties b/grails-forge/gradle.properties
index 190b370b07..f23d3e56c8 100644
--- a/grails-forge/gradle.properties
+++ b/grails-forge/gradle.properties
@@ -25,39 +25,39 @@ projectDesc=Generates Grails applications
# for forge build process which is a micronaut 3.x.x app with picocli
grailsPublishGradleVersion=0.0.2
-antVersion=1.10.15
+antVersion=1.10.18
antlr4Version=4.8-1!!
-asciidoctorGradleJvmVersion=4.0.4
+asciidoctorGradleJvmVersion=4.0.5
cglibVersion=3.3.0
commonsCompressVersion=1.28.0
gradleSdkvendorPluginVersion=3.0.0
groovyVersion=3.0.25
-jacksonDatabindVersion=2.18.3
+jacksonDatabindVersion=2.18.11
jakartaInjectVersion=1.0.5
# match the jansi version in grails-bom
jansiVersion=1.18
javaDiffUtils=4.15
-logbackClassicVersion=1.5.17
+logbackClassicVersion=1.5.38
micronautApplicationPluginVersion=3.7.10
micronautBuildVersion=1.1.5
micronautDocsVersion=2.0.0
micronautGradlePlugins=5.4.10
-micronautVersion=3.10.4
+micronautVersion=3.10.14
nexusPublishVersion=1.3.0
nohttpGradleVersion=0.0.11
objenesisVersion=3.4
picocliVersion=4.7.5
-postgresqlVersion=42.7.5
+postgresqlVersion=42.7.13
postgresSocketFactoryVersion=1.17.1
reflectionsVersion=0.10.2
rockerVersion=2.2.1
-shadowVersion=8.3.6
-slf4jVersion=2.0.17
+shadowVersion=8.3.11
+slf4jVersion=2.0.20
snakeyamlVersion=2.4
spockVersion=2.1-groovy-3.0
spotlessVersion=6.25.0
-testRetryVersion=1.6.2
-typesafeConfigVersion=1.4.3
+testRetryVersion=1.6.6
+typesafeConfigVersion=1.4.9
# custom checkstyle configuration for forge
grails.codestyle.dir.checkstyle=config/checkstyle
diff --git a/grails-forge/grails-forge-core/src/main/resources/pom.xml b/grails-forge/grails-forge-core/src/main/resources/pom.xml
index 2ce6321e44..2a2daf5f02 100644
--- a/grails-forge/grails-forge-core/src/main/resources/pom.xml
+++ b/grails-forge/grails-forge-core/src/main/resources/pom.xml
@@ -41,7 +41,7 @@
<dependency>
<groupId>org.grails.plugins</groupId>
<artifactId>grails-web-console</artifactId>
- <version>7.0.0</version>
+ <version>7.0.1</version>
</dependency>
<dependency>
<!-- Last released Feb 24, 2021 -->
diff --git a/grails-forge/settings.gradle b/grails-forge/settings.gradle
index 603d11245a..05b69a7248 100644
--- a/grails-forge/settings.gradle
+++ b/grails-forge/settings.gradle
@@ -32,7 +32,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.5.0'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'org.apache.grails.buildsrc.repo'
id 'com.autonomousapps.build-health' version '3.19.2'
diff --git a/grails-gradle/settings.gradle b/grails-gradle/settings.gradle
index 3d76ae3c3b..1a48cbb041 100644
--- a/grails-gradle/settings.gradle
+++ b/grails-gradle/settings.gradle
@@ -29,7 +29,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.2.2'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'org.apache.grails.buildsrc.repo'
id 'com.autonomousapps.build-health' version '3.19.2'
diff --git a/settings.gradle b/settings.gradle
index 061a36e74d..5c0dfce342 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -33,7 +33,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.5.0'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'org.apache.grails.buildsrc.repo'
id 'com.autonomousapps.build-health' version '3.19.2'