You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by ma...@apache.org on 2026/09/21 09:35:07 UTC
(grails-core) branch deps/7.0.17-dependency-updates created (now d923fb9f1f)
This is an automated email from the ASF dual-hosted git repository.
matrei pushed a change to branch deps/7.0.17-dependency-updates
in repository https://gitbox.apache.org/repos/asf/grails-core.git
at d923fb9f1f Update dependencies for 7.0.17
This branch includes the following new commits:
new d923fb9f1f Update dependencies for 7.0.17
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(grails-core) 01/01: Update dependencies for 7.0.17
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
matrei pushed a commit to branch deps/7.0.17-dependency-updates
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit d923fb9f1fd8cea0bbcaf641b760a773ceb5fe7e
Author: Mattias Reichel <ma...@gmail.com>
AuthorDate: Mon Sep 21 11:34:53 2026 +0200
Update dependencies for 7.0.17
Patch-level updates only:
- ant 1.10.18, asciidoctorj 3.0.1, asset-pipeline 5.0.35, byte-buddy 1.18.14,
junit 5.13.4 / junit-platform 1.13.4, spring-boot-starter-sitemesh 3.2.3
- maven 3.9.16 with maven-resolver 1.9.27, greenmail 2.1.14, jnr-posix 3.1.22,
picocli 4.7.7, slf4j 2.0.18 (matches Spring Boot 3.5.16),
micronaut-http-client 4.9.12
---
dependencies.gradle | 16 ++++++++--------
gradle.properties | 14 +++++++-------
2 files changed, 15 insertions(+), 15 deletions(-)
diff --git a/dependencies.gradle b/dependencies.gradle
index 82c829e520..6659db9d74 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -22,13 +22,13 @@
// These files are split to facilitate separation of build vs application dependencies. These are the application dependencies.
ext {
gradleBomDependencyVersions = [
- 'ant.version' : '1.10.15',
+ 'ant.version' : '1.10.18',
'asm.version' : '9.10.1',
'asciidoctor-gradle-jvm.version': '4.0.5',
- 'asciidoctorj.version' : '3.0.0',
- 'asset-pipeline-gradle.version' : '5.0.34',
+ 'asciidoctorj.version' : '3.0.1',
+ 'asset-pipeline-gradle.version' : '5.0.35',
'bnd.version' : '7.1.0',
- 'byte-buddy.version' : '1.18.3',
+ 'byte-buddy.version' : '1.18.14',
'commons-text.version' : '1.15.0',
'directory-watcher.version' : '0.19.1',
'gradle-spock.version' : '2.3-groovy-3.0',
@@ -81,7 +81,7 @@ ext {
]
bomDependencyVersions = [
- 'asset-pipeline-bom.version' : '5.0.34',
+ 'asset-pipeline-bom.version' : '5.0.35',
'cas-client-core.version' : '4.0.4',
'bootstrap-icons.version' : '1.13.1',
'bootstrap.version' : '5.3.8',
@@ -115,8 +115,8 @@ ext {
'hibernate-groovy-proxy.version': '1.1',
'jakarta-servlet-api.version' : '6.1.0',
'jakarta-validation-api.version': '3.1.1',
- 'junit.version' : '5.13.3',
- 'junit-platform.version' : '1.13.3',
+ 'junit.version' : '5.13.4',
+ 'junit-platform.version' : '1.13.4',
// Security: overrides spring-boot-dependencies (1.15.12). 1.16.7 is the oldest open source release that
// fixes CVE-2026-59295 (DoS in the Apache HttpAsyncClient instrumentation) and CVE-2026-59296 (metric
// name/tag injection via unsanitised newlines); the 1.15.13 patch is Enterprise Support only.
@@ -140,7 +140,7 @@ ext {
'spock.version' : '2.3-groovy-4.0',
'scribejava.version' : '8.3.3',
'sitemesh.version' : '2.6.0',
- 'starter-sitemesh.version' : '3.2.2',
+ 'starter-sitemesh.version' : '3.2.3',
]
// Note: the name of the dependency must be the prefix of the property name so properties in the pom are resolved correctly
diff --git a/gradle.properties b/gradle.properties
index 4b6246566f..5e3bfd9bea 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -24,8 +24,8 @@ githubSlug=apache/grails-core
# Project dependency versions not managed by BOMs
apacheDsVersion=1.5.4
-apacheMavenVersion=3.9.9
-apacheMavenResolverVersion=1.9.22
+apacheMavenVersion=3.9.16
+apacheMavenResolverVersion=1.9.27
commonsValidatorVersion=1.9.0
concurrentlinkedhashmapLruVersion=1.4.2
defaultElImplementationVersion=5.0.0
@@ -36,17 +36,17 @@ gparsVersion=1.2.1
# Keep gradle version synced with .sdkmanrc, all gradle-wrapper.properties files,
# and grails-forge/grails-forge-core/src/main/java/org/grails/forge/feature/build/gradle/templates/gradleWrapperProperties.rocker.raw
gradleToolingApiVersion=8.14.5
-greenmailVersion=2.1.2
+greenmailVersion=2.1.14
hibernate5Version=5.6.15.Final
javassistVersion=3.30.2-GA
-jnrPosixVersion=3.1.20
+jnrPosixVersion=3.1.22
joddWotVersion=3.3.8
joptSimpleVersion=5.0.4
jspApiVersion=4.0.0
liquibaseHibernate5Version=4.27.0
openTest4jVersion=1.3.0
-picocliVersion=4.7.6
-slf4jVersion=2.0.17
+picocliVersion=4.7.7
+slf4jVersion=2.0.18
spyMemcachedVersion=2.12.3
yakworksHibernateGroovyProxyVersion=1.1
@@ -64,7 +64,7 @@ micronautPlatformVersion=4.9.4
ersatzVersion=4.0.1
jbossTransactionApiVersion=2.0.0.Final
# Note: we do not import the micronaut bom in our tests to avoid spring version mismatches
-micronautHttpClientVersion=4.9.9
+micronautHttpClientVersion=4.9.12
micronautSerdeJacksonVersion=2.11.0
# build dependencies for code quality checks