The GitHub Actions job "Code Style" on grails-core.git/grails8-groovy6-canary 
has succeeded.
Run started by GitHub user jamesfredley (triggered by jamesfredley).

Head commit for run:
04b50fbf2f50a93efd5402cae3500a8f97a2e63b / James Fredley 
<[email protected]>
fix(build): map JLine 4.1.0 transitive modules in SBOM license allowlist

The Groovy 6 snapshot's groovy-groovysh now pulls the JLine 4.1.0 family 
transitively
(grails-shell-cli, grails-console), but SbomPlugin.LICENSE_MAPPING only mapped 
the 4.0.12
family plus [email protected]. cyclonedx-core-java#205 misreports JLine's 
BSD-3-Clause as
BSD-4-Clause, so :grails-shell-cli:cyclonedxDirectBom failed with "Unpermitted 
License found
for bom dependency: ... [email protected] : BSD-4-Clause". Because `build` 
depends on
cyclonedxDirectBom, this broke every CI job that runs build (Core Projects, 
Forge Projects,
Functional, Hibernate5, Mongodb). It surfaced only after the views-gson Groovy 
6 compile
blocker was fixed and CI could finally reach the SBOM stage.

Add the remaining 9 JLine 4.1.0 coordinates (builtins, console, console-ui, 
native, reader,
shell, style, terminal, terminal-jni) -> BSD-3-Clause, mirroring the existing 
4.0.12 entries.
Each module LICENSE.txt at 
https://github.com/jline/jline3/blob/jline-parent-4.1.0/LICENSE.txt
confirms BSD-3-Clause.

Verified on Groovy 6.0.0-SNAPSHOT: :grails-shell-cli:cyclonedxDirectBom,
:grails-console:cyclonedxDirectBom and :grails-test-core:cyclonedxDirectBom all 
green.

Assisted-by: claude-code:claude-4.8-opus

Report URL: https://github.com/apache/grails-core/actions/runs/26653709308

With regards,
GitHub Actions via GitBox

Reply via email to