You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@grails.apache.org by GitBox <gi...@apache.org> on 2026/07/22 21:23:45 UTC

[GH] (grails-core/deps/cve-log4j-jansi-7.0.x): Workflow run "CI" failed!

The GitHub Actions job "CI" on grails-core.git/deps/cve-log4j-jansi-7.0.x has failed.
Run started by GitHub user jamesfredley (triggered by jamesfredley).

Head commit for run:
23c2c586af3dd80c7cc47b057cb9f38e51f80576 / James Fredley <ja...@users.noreply.github.com>
Update Log4j to 2.25.5 and document unfixed Jansi CVE

Override Spring Boot 3.5.16's Log4j 2.24.3 management through the
Grails BOM to remediate CVE-2026-49844.

Exclude the exact managed Jansi 1.18 coordinate from OSS Index because
CVE-2026-8484 affects every available release and has no upstream fix.

Assisted-by: opencode:gpt-5.6-sol codegraph

Report URL: https://github.com/apache/grails-core/actions/runs/29955200772

With regards,
GitHub Actions via GitBox