The GitHub Actions job "CI - Groovy Joint Validation Build" on 
grails-core.git/deps/cve-log4j-jansi-7.0.x has failed.
Run started by GitHub user jamesfredley (triggered by jamesfredley).

Head commit for run:
23c2c586af3dd80c7cc47b057cb9f38e51f80576 / James Fredley 
<[email protected]>
Update Log4j to 2.25.5 and document unfixed Jansi CVE

Override Spring Boot 3.5.16's Log4j 2.24.3 management through the
Grails BOM to remediate CVE-2026-49844.

Exclude the exact managed Jansi 1.18 coordinate from OSS Index because
CVE-2026-8484 affects every available release and has no upstream fix.

Assisted-by: opencode:gpt-5.6-sol codegraph

Report URL: https://github.com/apache/grails-core/actions/runs/29955200681

With regards,
GitHub Actions via GitBox

Reply via email to