You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by ma...@apache.org on 2026/10/05 14:36:36 UTC
(grails-core) 01/01: Update dependencies for 7.0.18
This is an automated email from the ASF dual-hosted git repository.
matrei pushed a commit to branch deps/7.0.18-dependency-updates
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 8718097b4f4f452ee2fbad03e69ff4735afb0864
Author: Mattias Reichel <ma...@gmail.com>
AuthorDate: Mon Oct 5 16:18:47 2026 +0200
Update dependencies for 7.0.18
Patch-level updates only:
- jackson 2.21.7, httpcore5 5.4.4
- micronaut-serde-jackson 2.11.2 (test apps), checkstyle 11.0.1,
apache-rat plugin 0.8.2
- develocity plugin 4.5.1, aligned in build-logic and grails-gradle,
which were still on 4.2.2
- grails-forge: ant 1.10.18, asciidoctor-gradle-jvm 4.0.5,
jackson-databind 2.18.11, logback 1.5.38, micronaut 3.10.14,
postgresql 42.7.13, shadow 8.3.11, slf4j 2.0.20, test-retry 1.6.6,
typesafe-config 1.4.9
- grails-forge generated applications: grails-web-console 7.0.1
---
build-logic/settings.gradle | 2 +-
dependencies.gradle | 8 ++++----
gradle.properties | 6 +++---
grails-forge/gradle.properties | 20 ++++++++++----------
.../grails-forge-core/src/main/resources/pom.xml | 2 +-
grails-forge/settings.gradle | 2 +-
grails-gradle/settings.gradle | 2 +-
settings.gradle | 2 +-
8 files changed, 22 insertions(+), 22 deletions(-)
diff --git a/build-logic/settings.gradle b/build-logic/settings.gradle
index 86a56b0872..e8e735d27d 100644
--- a/build-logic/settings.gradle
+++ b/build-logic/settings.gradle
@@ -25,7 +25,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.2.2'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'com.autonomousapps.build-health' version '3.19.2'
}
diff --git a/dependencies.gradle b/dependencies.gradle
index 5fca6fdde7..5c737d673f 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -96,11 +96,11 @@ ext {
// the classic i/o model when a response carries an unsupported Content-Encoding. 5.6.4 still targets
// httpcore5 5.4.3, so it needs no companion httpcore5 change.
'httpclient5.version' : '5.6.4',
- // Security: overrides spring-boot-dependencies (5.3.6). 5.4.3 fixes CVE-2026-54399 (httpcore5) and CVE-2026-54428 (httpcore5-h2).
- 'httpcore5.version' : '5.4.3',
- // Security: 2.21.6 fixes CVE-2026-19032 (unrestricted URI schemes in Path deserialization) and
+ // Security: overrides spring-boot-dependencies (5.3.6). 5.4.3 and later fix CVE-2026-54399 (httpcore5) and CVE-2026-54428 (httpcore5-h2).
+ 'httpcore5.version' : '5.4.4',
+ // Security: 2.21.6 and later fix CVE-2026-19032 (unrestricted URI schemes in Path deserialization) and
// CVE-2026-68497 (unbounded number length in GregorianCalendar/Duration) flagged against 2.21.5.
- 'jackson.version' : '2.21.6',
+ 'jackson.version' : '2.21.7',
// Security: overrides spring-boot-dependencies (1.5.34). 1.5.38 is the newest release of the 1.5.x line
// and matches what Spring Boot 4.1.x manages. See the CVE-2026-19880 note in VulnerabilityScanPlugin
// for the one logback advisory this version does not clear.
diff --git a/gradle.properties b/gradle.properties
index 363b96bb4d..a3a4c1afa7 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -50,7 +50,7 @@ spyMemcachedVersion=2.12.3
yakworksHibernateGroovyProxyVersion=1.1
# Build dependency versions not managed by BOMs
-apacheRatVersion=0.8.1
+apacheRatVersion=0.8.2
gradleChecksumPluginVersion=1.4.0
# note: the cyclonedx 3 requires Gradle 9
gradleCycloneDxPluginVersion=2.4.1
@@ -64,10 +64,10 @@ ersatzVersion=4.0.1
jbossTransactionApiVersion=2.0.0.Final
# Note: we do not import the micronaut bom in our tests to avoid spring version mismatches
micronautHttpClientVersion=4.9.12
-micronautSerdeJacksonVersion=2.11.0
+micronautSerdeJacksonVersion=2.11.2
# build dependencies for code quality checks
-checkstyleVersion=11.0.0
+checkstyleVersion=11.0.1
codenarcVersion=3.6.0-groovy-4.0
sonatypeScanPluginVersion=3.1.6
diff --git a/grails-forge/gradle.properties b/grails-forge/gradle.properties
index 190b370b07..f23d3e56c8 100644
--- a/grails-forge/gradle.properties
+++ b/grails-forge/gradle.properties
@@ -25,39 +25,39 @@ projectDesc=Generates Grails applications
# for forge build process which is a micronaut 3.x.x app with picocli
grailsPublishGradleVersion=0.0.2
-antVersion=1.10.15
+antVersion=1.10.18
antlr4Version=4.8-1!!
-asciidoctorGradleJvmVersion=4.0.4
+asciidoctorGradleJvmVersion=4.0.5
cglibVersion=3.3.0
commonsCompressVersion=1.28.0
gradleSdkvendorPluginVersion=3.0.0
groovyVersion=3.0.25
-jacksonDatabindVersion=2.18.3
+jacksonDatabindVersion=2.18.11
jakartaInjectVersion=1.0.5
# match the jansi version in grails-bom
jansiVersion=1.18
javaDiffUtils=4.15
-logbackClassicVersion=1.5.17
+logbackClassicVersion=1.5.38
micronautApplicationPluginVersion=3.7.10
micronautBuildVersion=1.1.5
micronautDocsVersion=2.0.0
micronautGradlePlugins=5.4.10
-micronautVersion=3.10.4
+micronautVersion=3.10.14
nexusPublishVersion=1.3.0
nohttpGradleVersion=0.0.11
objenesisVersion=3.4
picocliVersion=4.7.5
-postgresqlVersion=42.7.5
+postgresqlVersion=42.7.13
postgresSocketFactoryVersion=1.17.1
reflectionsVersion=0.10.2
rockerVersion=2.2.1
-shadowVersion=8.3.6
-slf4jVersion=2.0.17
+shadowVersion=8.3.11
+slf4jVersion=2.0.20
snakeyamlVersion=2.4
spockVersion=2.1-groovy-3.0
spotlessVersion=6.25.0
-testRetryVersion=1.6.2
-typesafeConfigVersion=1.4.3
+testRetryVersion=1.6.6
+typesafeConfigVersion=1.4.9
# custom checkstyle configuration for forge
grails.codestyle.dir.checkstyle=config/checkstyle
diff --git a/grails-forge/grails-forge-core/src/main/resources/pom.xml b/grails-forge/grails-forge-core/src/main/resources/pom.xml
index 2ce6321e44..2a2daf5f02 100644
--- a/grails-forge/grails-forge-core/src/main/resources/pom.xml
+++ b/grails-forge/grails-forge-core/src/main/resources/pom.xml
@@ -41,7 +41,7 @@
<dependency>
<groupId>org.grails.plugins</groupId>
<artifactId>grails-web-console</artifactId>
- <version>7.0.0</version>
+ <version>7.0.1</version>
</dependency>
<dependency>
<!-- Last released Feb 24, 2021 -->
diff --git a/grails-forge/settings.gradle b/grails-forge/settings.gradle
index 603d11245a..05b69a7248 100644
--- a/grails-forge/settings.gradle
+++ b/grails-forge/settings.gradle
@@ -32,7 +32,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.5.0'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'org.apache.grails.buildsrc.repo'
id 'com.autonomousapps.build-health' version '3.19.2'
diff --git a/grails-gradle/settings.gradle b/grails-gradle/settings.gradle
index 3d76ae3c3b..1a48cbb041 100644
--- a/grails-gradle/settings.gradle
+++ b/grails-gradle/settings.gradle
@@ -29,7 +29,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.2.2'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'org.apache.grails.buildsrc.repo'
id 'com.autonomousapps.build-health' version '3.19.2'
diff --git a/settings.gradle b/settings.gradle
index 061a36e74d..5c0dfce342 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -33,7 +33,7 @@ pluginManagement {
}
plugins {
- id 'com.gradle.develocity' version '4.5.0'
+ id 'com.gradle.develocity' version '4.5.1'
id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.3'
id 'org.apache.grails.buildsrc.repo'
id 'com.autonomousapps.build-health' version '3.19.2'