You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by jd...@apache.org on 2026/07/07 14:37:06 UTC
(grails-core) branch 7.0.x updated (69553fcf30 -> cd9170b8dc)
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a change to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
from 69553fcf30 cherry-pick scratch ignore back to 7.x
add 8414ab883a Vulnerability scanning for grails-core
add 19caafc78a Bump vulnerable versions & add suppressions
add 377c31b8e3 Only do vulnerability scanning on end grails app libraries & set initial exceptions
add 7c523336f8 Update asm version
add d1e8460ca0 Update ASM versions
add 484aa24af7 Update vulnerability scanning tool to 3.1.6
add ee8cec7e49 Merge branch '7.0.x' into vulnerabilityScanning
add a2e28b9ee6 Add missing version
add d46f9d2248 Update bom management instructions
add f5a9fbaaa1 Fix ASM version conflicts
add e43fbacf02 Merge remote-tracking branch 'origin/7.0.x' into vulnerabilityScanning
add e722c690f0 Merge branch '7.0.x' into vulnerabilityScanning
add c6f7212b3a feedback - update documentation & remove unneeded permission
add c54d2675de fix - parallel gradle does not behave with the sonatype ossIndex scanner
add 4df633172c Update dependencies
new cd9170b8dc Merge pull request #15631 from apache/vulnerabilityScanning
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/vulnerability-scan.yml | 84 ++++++++++++++++++
AGENTS.md | 10 +++
build-logic/plugins/build.gradle | 5 ++
.../grails/buildsrc/OssIndexAuditThrottle.groovy | 41 +++++++++
.../grails/buildsrc/VulnerabilityScanPlugin.groovy | 99 ++++++++++++++++++++++
dependencies.gradle | 36 ++++++--
gradle.properties | 1 +
grails-async/core/build.gradle | 1 +
grails-async/gpars/build.gradle | 1 +
grails-async/plugin/build.gradle | 1 +
grails-async/rxjava/build.gradle | 1 +
grails-async/rxjava2/build.gradle | 1 +
grails-async/rxjava3/build.gradle | 1 +
grails-bootstrap/build.gradle | 1 +
grails-cache/build.gradle | 1 +
grails-codecs-core/build.gradle | 1 +
grails-codecs/build.gradle | 1 +
grails-common/build.gradle | 1 +
grails-console/build.gradle | 1 +
grails-controllers/build.gradle | 1 +
grails-converters/build.gradle | 1 +
grails-core/build.gradle | 1 +
grails-data-hibernate5/boot-plugin/build.gradle | 1 +
grails-data-hibernate5/core/build.gradle | 1 +
grails-data-hibernate5/dbmigration/build.gradle | 1 +
grails-data-hibernate5/grails-plugin/build.gradle | 1 +
grails-data-mongodb/boot-plugin/build.gradle | 1 +
grails-data-mongodb/bson/build.gradle | 1 +
grails-data-mongodb/core/build.gradle | 1 +
grails-data-mongodb/ext/build.gradle | 1 +
grails-data-mongodb/grails-plugin/build.gradle | 1 +
grails-data-mongodb/gson-templates/build.gradle | 1 +
grails-data-simple/build.gradle | 1 +
grails-databinding-core/build.gradle | 1 +
grails-databinding/build.gradle | 1 +
grails-datamapping-async/build.gradle | 1 +
grails-datamapping-core-test/build.gradle | 1 +
grails-datamapping-core/build.gradle | 1 +
grails-datamapping-rx/build.gradle | 1 +
grails-datamapping-support/build.gradle | 1 +
grails-datamapping-tck/build.gradle | 1 +
grails-datamapping-validation/build.gradle | 1 +
grails-datasource/build.gradle | 1 +
grails-datastore-async/build.gradle | 1 +
grails-datastore-core/build.gradle | 1 +
grails-datastore-web/build.gradle | 1 +
grails-dependencies/assets/build.gradle | 1 +
grails-dependencies/starter-web/build.gradle | 1 +
grails-dependencies/test/build.gradle | 1 +
grails-domain-class/build.gradle | 1 +
grails-encoder/build.gradle | 1 +
grails-events/compat/build.gradle | 1 +
grails-events/core/build.gradle | 1 +
grails-events/gpars/build.gradle | 1 +
grails-events/plugin/build.gradle | 1 +
grails-events/rxjava/build.gradle | 1 +
grails-events/rxjava2/build.gradle | 1 +
grails-events/rxjava3/build.gradle | 1 +
grails-events/spring/build.gradle | 1 +
grails-events/transforms/build.gradle | 1 +
grails-fields/build.gradle | 1 +
grails-forge/gradle.properties | 2 +-
grails-geb/build.gradle | 1 +
grails-gradle/model/build.gradle | 4 +
.../org/grails/io/support/MainClassFinder.groovy | 10 +--
grails-gsp/core/build.gradle | 1 +
grails-gsp/grails-layout/build.gradle | 1 +
grails-gsp/grails-sitemesh3/build.gradle | 1 +
grails-gsp/grails-taglib/build.gradle | 1 +
grails-gsp/grails-web-gsp-taglib/build.gradle | 1 +
grails-gsp/grails-web-gsp/build.gradle | 1 +
grails-gsp/grails-web-jsp/build.gradle | 1 +
grails-gsp/grails-web-taglib/build.gradle | 1 +
grails-gsp/plugin/build.gradle | 1 +
grails-i18n/build.gradle | 1 +
grails-interceptors/build.gradle | 1 +
grails-logging/build.gradle | 1 +
grails-mimetypes/build.gradle | 1 +
grails-rest-transforms/build.gradle | 1 +
grails-scaffolding/build.gradle | 1 +
grails-services/build.gradle | 1 +
grails-shell-cli/build.gradle | 1 +
grails-spring/build.gradle | 1 +
grails-test-core/build.gradle | 1 +
grails-test-examples/app1/build.gradle | 1 +
grails-test-examples/app2/build.gradle | 1 +
grails-test-examples/app3/build.gradle | 1 +
.../async-events-pubsub-demo/build.gradle | 1 +
grails-test-examples/cache/build.gradle | 1 +
grails-test-examples/config-report/build.gradle | 1 +
grails-test-examples/database-cleanup/build.gradle | 1 +
grails-test-examples/datasources/build.gradle | 1 +
grails-test-examples/demo33/build.gradle | 1 +
grails-test-examples/exploded/build.gradle | 1 +
.../external-configuration/build.gradle | 1 +
grails-test-examples/geb-gebconfig/build.gradle | 1 +
grails-test-examples/geb/build.gradle | 1 +
grails-test-examples/gorm/build.gradle | 1 +
grails-test-examples/gsp-layout/build.gradle | 1 +
grails-test-examples/gsp-sitemesh3/build.gradle | 1 +
.../gsp-spring-boot/app/build.gradle | 9 ++
.../build.gradle | 1 +
.../hibernate5/grails-data-service/build.gradle | 1 +
.../grails-database-per-tenant/build.gradle | 1 +
.../grails-hibernate-groovy-proxy/build.gradle | 1 +
.../hibernate5/grails-hibernate/build.gradle | 1 +
.../grails-multiple-datasources/build.gradle | 1 +
.../build.gradle | 1 +
.../grails-partitioned-multi-tenancy/build.gradle | 1 +
.../grails-schema-per-tenant/build.gradle | 1 +
.../hibernate5/issue450/build.gradle | 1 +
.../hibernate5/spring-boot-hibernate/build.gradle | 1 +
.../hibernate5/standalone-hibernate/build.gradle | 1 +
grails-test-examples/hyphenated/build.gradle | 1 +
grails-test-examples/issue-11102/build.gradle | 1 +
grails-test-examples/issue-11767/build.gradle | 1 +
grails-test-examples/issue-15228/build.gradle | 1 +
.../issue-698-domain-save-npe/build.gradle | 1 +
grails-test-examples/issue-views-182/build.gradle | 1 +
grails-test-examples/mongodb/base/build.gradle | 1 +
.../mongodb/database-per-tenant/build.gradle | 1 +
.../mongodb/gson-templates/build.gradle | 1 +
.../mongodb/hibernate5/build.gradle | 1 +
.../mongodb/springboot/build.gradle | 1 +
.../mongodb/test-data-service/build.gradle | 1 +
grails-test-examples/namespaces/build.gradle | 1 +
grails-test-examples/plugins/exploded/build.gradle | 1 +
.../plugins/issue-11767/build.gradle | 1 +
.../plugins/issue11005/build.gradle | 1 +
.../plugins/loadafter/build.gradle | 1 +
.../plugins/loadfirst/build.gradle | 1 +
.../plugins/loadsecond/build.gradle | 1 +
.../scaffolding-fields/build.gradle | 1 +
grails-test-examples/scaffolding/build.gradle | 1 +
.../views-functional-tests-plugin/build.gradle | 1 +
.../views-functional-tests/build.gradle | 1 +
grails-test-suite-base/build.gradle | 1 +
grails-test-suite-persistence/build.gradle | 1 +
grails-test-suite-uber/build.gradle | 1 +
grails-test-suite-web/build.gradle | 1 +
grails-testing-support-core/build.gradle | 1 +
grails-testing-support-datamapping/build.gradle | 1 +
grails-testing-support-dbcleanup-core/build.gradle | 1 +
grails-testing-support-dbcleanup-h2/build.gradle | 1 +
.../build.gradle | 1 +
grails-testing-support-http-client/build.gradle | 1 +
grails-testing-support-mongodb/build.gradle | 1 +
grails-testing-support-views-gson/build.gradle | 1 +
grails-testing-support-web/build.gradle | 1 +
grails-url-mappings/build.gradle | 1 +
grails-validation/build.gradle | 1 +
grails-views-core/build.gradle | 1 +
grails-views-gson/build.gradle | 1 +
grails-views-markup/build.gradle | 1 +
grails-web-boot/build.gradle | 1 +
grails-web-common/build.gradle | 1 +
grails-web-core/build.gradle | 1 +
grails-web-databinding/build.gradle | 1 +
grails-web-mvc/build.gradle | 1 +
grails-web-url-mappings/build.gradle | 1 +
160 files changed, 436 insertions(+), 14 deletions(-)
create mode 100644 .github/workflows/vulnerability-scan.yml
create mode 100644 build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/OssIndexAuditThrottle.groovy
create mode 100644 build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/VulnerabilityScanPlugin.groovy
(grails-core) 01/01: Merge pull request #15631 from apache/vulnerabilityScanning
Posted by jd...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a commit to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit cd9170b8dc2e36b61a3db1c7b0a8633a847bb185
Merge: 69553fcf30 4df633172c
Author: James Daugherty <jd...@jdresources.net>
AuthorDate: Tue Jul 7 10:37:01 2026 -0400
Merge pull request #15631 from apache/vulnerabilityScanning
Vulnerability scanning
.github/workflows/vulnerability-scan.yml | 84 ++++++++++++++++++
AGENTS.md | 10 +++
build-logic/plugins/build.gradle | 5 ++
.../grails/buildsrc/OssIndexAuditThrottle.groovy | 41 +++++++++
.../grails/buildsrc/VulnerabilityScanPlugin.groovy | 99 ++++++++++++++++++++++
dependencies.gradle | 36 ++++++--
gradle.properties | 1 +
grails-async/core/build.gradle | 1 +
grails-async/gpars/build.gradle | 1 +
grails-async/plugin/build.gradle | 1 +
grails-async/rxjava/build.gradle | 1 +
grails-async/rxjava2/build.gradle | 1 +
grails-async/rxjava3/build.gradle | 1 +
grails-bootstrap/build.gradle | 1 +
grails-cache/build.gradle | 1 +
grails-codecs-core/build.gradle | 1 +
grails-codecs/build.gradle | 1 +
grails-common/build.gradle | 1 +
grails-console/build.gradle | 1 +
grails-controllers/build.gradle | 1 +
grails-converters/build.gradle | 1 +
grails-core/build.gradle | 1 +
grails-data-hibernate5/boot-plugin/build.gradle | 1 +
grails-data-hibernate5/core/build.gradle | 1 +
grails-data-hibernate5/dbmigration/build.gradle | 1 +
grails-data-hibernate5/grails-plugin/build.gradle | 1 +
grails-data-mongodb/boot-plugin/build.gradle | 1 +
grails-data-mongodb/bson/build.gradle | 1 +
grails-data-mongodb/core/build.gradle | 1 +
grails-data-mongodb/ext/build.gradle | 1 +
grails-data-mongodb/grails-plugin/build.gradle | 1 +
grails-data-mongodb/gson-templates/build.gradle | 1 +
grails-data-simple/build.gradle | 1 +
grails-databinding-core/build.gradle | 1 +
grails-databinding/build.gradle | 1 +
grails-datamapping-async/build.gradle | 1 +
grails-datamapping-core-test/build.gradle | 1 +
grails-datamapping-core/build.gradle | 1 +
grails-datamapping-rx/build.gradle | 1 +
grails-datamapping-support/build.gradle | 1 +
grails-datamapping-tck/build.gradle | 1 +
grails-datamapping-validation/build.gradle | 1 +
grails-datasource/build.gradle | 1 +
grails-datastore-async/build.gradle | 1 +
grails-datastore-core/build.gradle | 1 +
grails-datastore-web/build.gradle | 1 +
grails-dependencies/assets/build.gradle | 1 +
grails-dependencies/starter-web/build.gradle | 1 +
grails-dependencies/test/build.gradle | 1 +
grails-domain-class/build.gradle | 1 +
grails-encoder/build.gradle | 1 +
grails-events/compat/build.gradle | 1 +
grails-events/core/build.gradle | 1 +
grails-events/gpars/build.gradle | 1 +
grails-events/plugin/build.gradle | 1 +
grails-events/rxjava/build.gradle | 1 +
grails-events/rxjava2/build.gradle | 1 +
grails-events/rxjava3/build.gradle | 1 +
grails-events/spring/build.gradle | 1 +
grails-events/transforms/build.gradle | 1 +
grails-fields/build.gradle | 1 +
grails-forge/gradle.properties | 2 +-
grails-geb/build.gradle | 1 +
grails-gradle/model/build.gradle | 4 +
.../org/grails/io/support/MainClassFinder.groovy | 10 +--
grails-gsp/core/build.gradle | 1 +
grails-gsp/grails-layout/build.gradle | 1 +
grails-gsp/grails-sitemesh3/build.gradle | 1 +
grails-gsp/grails-taglib/build.gradle | 1 +
grails-gsp/grails-web-gsp-taglib/build.gradle | 1 +
grails-gsp/grails-web-gsp/build.gradle | 1 +
grails-gsp/grails-web-jsp/build.gradle | 1 +
grails-gsp/grails-web-taglib/build.gradle | 1 +
grails-gsp/plugin/build.gradle | 1 +
grails-i18n/build.gradle | 1 +
grails-interceptors/build.gradle | 1 +
grails-logging/build.gradle | 1 +
grails-mimetypes/build.gradle | 1 +
grails-rest-transforms/build.gradle | 1 +
grails-scaffolding/build.gradle | 1 +
grails-services/build.gradle | 1 +
grails-shell-cli/build.gradle | 1 +
grails-spring/build.gradle | 1 +
grails-test-core/build.gradle | 1 +
grails-test-examples/app1/build.gradle | 1 +
grails-test-examples/app2/build.gradle | 1 +
grails-test-examples/app3/build.gradle | 1 +
.../async-events-pubsub-demo/build.gradle | 1 +
grails-test-examples/cache/build.gradle | 1 +
grails-test-examples/config-report/build.gradle | 1 +
grails-test-examples/database-cleanup/build.gradle | 1 +
grails-test-examples/datasources/build.gradle | 1 +
grails-test-examples/demo33/build.gradle | 1 +
grails-test-examples/exploded/build.gradle | 1 +
.../external-configuration/build.gradle | 1 +
grails-test-examples/geb-gebconfig/build.gradle | 1 +
grails-test-examples/geb/build.gradle | 1 +
grails-test-examples/gorm/build.gradle | 1 +
grails-test-examples/gsp-layout/build.gradle | 1 +
grails-test-examples/gsp-sitemesh3/build.gradle | 1 +
.../gsp-spring-boot/app/build.gradle | 9 ++
.../build.gradle | 1 +
.../hibernate5/grails-data-service/build.gradle | 1 +
.../grails-database-per-tenant/build.gradle | 1 +
.../grails-hibernate-groovy-proxy/build.gradle | 1 +
.../hibernate5/grails-hibernate/build.gradle | 1 +
.../grails-multiple-datasources/build.gradle | 1 +
.../build.gradle | 1 +
.../grails-partitioned-multi-tenancy/build.gradle | 1 +
.../grails-schema-per-tenant/build.gradle | 1 +
.../hibernate5/issue450/build.gradle | 1 +
.../hibernate5/spring-boot-hibernate/build.gradle | 1 +
.../hibernate5/standalone-hibernate/build.gradle | 1 +
grails-test-examples/hyphenated/build.gradle | 1 +
grails-test-examples/issue-11102/build.gradle | 1 +
grails-test-examples/issue-11767/build.gradle | 1 +
grails-test-examples/issue-15228/build.gradle | 1 +
.../issue-698-domain-save-npe/build.gradle | 1 +
grails-test-examples/issue-views-182/build.gradle | 1 +
grails-test-examples/mongodb/base/build.gradle | 1 +
.../mongodb/database-per-tenant/build.gradle | 1 +
.../mongodb/gson-templates/build.gradle | 1 +
.../mongodb/hibernate5/build.gradle | 1 +
.../mongodb/springboot/build.gradle | 1 +
.../mongodb/test-data-service/build.gradle | 1 +
grails-test-examples/namespaces/build.gradle | 1 +
grails-test-examples/plugins/exploded/build.gradle | 1 +
.../plugins/issue-11767/build.gradle | 1 +
.../plugins/issue11005/build.gradle | 1 +
.../plugins/loadafter/build.gradle | 1 +
.../plugins/loadfirst/build.gradle | 1 +
.../plugins/loadsecond/build.gradle | 1 +
.../scaffolding-fields/build.gradle | 1 +
grails-test-examples/scaffolding/build.gradle | 1 +
.../views-functional-tests-plugin/build.gradle | 1 +
.../views-functional-tests/build.gradle | 1 +
grails-test-suite-base/build.gradle | 1 +
grails-test-suite-persistence/build.gradle | 1 +
grails-test-suite-uber/build.gradle | 1 +
grails-test-suite-web/build.gradle | 1 +
grails-testing-support-core/build.gradle | 1 +
grails-testing-support-datamapping/build.gradle | 1 +
grails-testing-support-dbcleanup-core/build.gradle | 1 +
grails-testing-support-dbcleanup-h2/build.gradle | 1 +
.../build.gradle | 1 +
grails-testing-support-http-client/build.gradle | 1 +
grails-testing-support-mongodb/build.gradle | 1 +
grails-testing-support-views-gson/build.gradle | 1 +
grails-testing-support-web/build.gradle | 1 +
grails-url-mappings/build.gradle | 1 +
grails-validation/build.gradle | 1 +
grails-views-core/build.gradle | 1 +
grails-views-gson/build.gradle | 1 +
grails-views-markup/build.gradle | 1 +
grails-web-boot/build.gradle | 1 +
grails-web-common/build.gradle | 1 +
grails-web-core/build.gradle | 1 +
grails-web-databinding/build.gradle | 1 +
grails-web-mvc/build.gradle | 1 +
grails-web-url-mappings/build.gradle | 1 +
160 files changed, 436 insertions(+), 14 deletions(-)