matrei opened a new pull request, #16361: URL: https://github.com/apache/grails-core/pull/16361
## Problem Several versions pinned in `dependencies.gradle` and `gradle.properties` have newer patch/minor releases available. ## Fix **`dependencies.gradle` (BOM-managed)** | Dependency | From | To | |---|---|---| | `ant` | 1.10.17 | 1.10.18 | | `nimbus-jose-jwt` | 10.9.1 | 10.10 | | `pac4j` | 6.4.3 | 6.5.8 | | `plexus-utils` | 4.0.3 | 4.1.0 | | `plexus-xml` | 3.0.2 | 3.1.0 (stays on the Maven 3-compatible line) | | `mongodb` | 5.10.0 | 5.12.0 | | `undertow` | 2.4.2.Final | 2.4.3.Final | | `undertow-servlet`, `undertow-websockets` | 2.0.1.Final | 2.0.2.Final | | `hibernate` (Hibernate 7 BOM) | 7.4.7.Final | 7.4.10.Final | | `jandex` | 3.2.3 | 3.6.0 | **`gradle.properties`** | Property | From | To | |---|---|---| | `apacheMavenVersion` | 3.9.9 | 3.9.16 | | `apacheMavenResolverVersion` | 1.9.22 | 1.9.27 | | `commonsValidatorVersion` | 1.9.0 | 1.10.1 | | `geantyrefVersion` | 1.3.15 | 1.3.16 | | `greenmailVersion` | 2.1.2 | 2.1.14 | | `javassistVersion` | 3.30.2-GA | 3.33.0-GA | | `jnrPosixVersion` | 3.1.20 | 3.2.4 | | `picocliVersion` | 4.7.6 | 4.7.7 | | `checkstyleVersion` | 13.7.0 | 13.11.0 | | `jacocoVersion` | 0.8.14 | 0.8.15 | | `pmdVersion` | 7.25.0 | 7.27.0 | ## Deliberately not bumped - `liquibase-test-harness` 1.0.12 pulls in JUnit 6.1.0, newer than the 6.0.3 Spring Boot 4.1.1 manages, so it stays at 1.0.11. - `commons-validator` 1.11.0 pulls in commons-logging 1.4.0, newer than Spring Boot's 1.3.6, so this stops at 1.10.1. - `jline` stays at 3.30.16, the version Groovy 5.1.2 ships. - `jackson3` stays on Spring Boot's 3.1.x line (3.1.6 is the latest there). - `graphql-java` stays at 25.0 as the drift tripwire matching Spring Boot; `graphql-java-extended-scalars` has nothing newer than 24.0. - Major-version jumps (checker-qual 4.x, Liquibase 5.x, flapdoodle 5.0, geantyref 2.x, EL 6.x, Checkstyle 14, apache-rat 0.18) are left for separate changes. ## Verification - `./gradlew validateDependencyVersions --continue` passes for all modules. - `./gradlew build -PskipTests --continue` passes. - `./gradlew aggregateViolations --continue` reports no Checkstyle, CodeNarc, PMD or SpotBugs violations. - The test suites were not run locally; relying on CI for those. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
