matrei opened a new pull request, #16519: URL: https://github.com/apache/grails-core/pull/16519
Patch-level dependency updates ahead of the 7.0.18 release. Unlike #16358, this also covers the files that PR did not look at: the grails-forge build (its own `gradle.properties` and the `pom.xml` that pins versions for generated applications) and the Develocity plugin in the `settings.gradle` files. jackson and httpcore5 were released around the time #16358 was opened. micronaut-serde-jackson, checkstyle and the RAT plugin were already available then and are catch-ups. ### `dependencies.gradle` (BOM managed) | Dependency | From | To | |---|---|---| | jackson | 2.21.6 | 2.21.7 | | httpcore5 / httpcore5-h2 | 5.4.3 | 5.4.4 | ### `gradle.properties` (not BOM managed) | Dependency | From | To | |---|---|---| | micronaut-serde-jackson (test apps) | 2.11.0 | 2.11.2 | | checkstyle | 11.0.0 | 11.0.1 | | apache-rat gradle plugin | 0.8.1 | 0.8.2 | ### `settings.gradle` | Dependency | From | To | |---|---|---| | com.gradle.develocity | 4.5.0 (root, grails-forge) / 4.2.2 (build-logic, grails-gradle) | 4.5.1 everywhere | ### `grails-forge/gradle.properties` | Dependency | From | To | |---|---|---| | ant | 1.10.15 | 1.10.18 | | asciidoctor-gradle-jvm | 4.0.4 | 4.0.5 | | jackson-databind (buildSrc) | 2.18.3 | 2.18.11 | | logback-classic | 1.5.17 | 1.5.38 | | micronaut (bom) | 3.10.4 | 3.10.14 | | postgresql | 42.7.5 | 42.7.13 | | shadow | 8.3.6 | 8.3.11 | | slf4j | 2.0.17 | 2.0.20 | | test-retry | 1.6.2 | 1.6.6 | | typesafe config | 1.4.3 | 1.4.9 | ### Generated applications (`grails-forge-core/src/main/resources/pom.xml`) | Dependency | From | To | |---|---|---| | grails-web-console | 7.0.0 | 7.0.1 | ### Deliberately not updated - picocli in grails-forge stays on 4.7.5. 4.7.7's `picocli-shell-jline3` moves the CLI from jline 3.23.0 to 3.29.0, which is more than a patch change for the shell, and the CycloneDX license mapping for that jline version fails the SBOM check. - gradle-jrebel-plugin stays on 1.2.1 for generated applications. Newer versions are not compatible with Gradle 8 (see 17b3faaf2e). - spring-boot-starter-sitemesh stays on 3.2.2 until cleared by the sitemesh author (see the note next to the version). apacheds stays on 1.5.4 (1.5.7 breaks the LDAP test app). javaparser stays on 3.28.0 (tied to what Groovy 4 ships). - The generated-application `micronaut-platform` (4.10.1) was not bumped to 4.10.20. Note that it is on the 4.10 line, while the root build keeps `micronautPlatformVersion` on 4.9.4 because of Netty 4.2 / Spring Boot 3.5 compatibility. That mismatch may be worth a separate look. - As in #16358, newer minor/major lines (log4j 2.26, logback 1.6, junit 5.14, selenium 4.50, mongodb 5.13, h2 2.5, guava 33.7, ...) are left alone for a patch release. 7.1.x has the same dependency files as 7.0.x and picks these up through the merge-up. The 7.2.x-only graphql-java update goes in a separate PR. ### Verification - `./gradlew validateDependencyVersions build -PskipTests` passes - `./gradlew codeStyle rat` passes - `cd grails-forge && ./gradlew build` passes (329 tests, including `cyclonedxBom` for grails-forge-cli and grails-cli). It needs `-Dorg.gradle.jvmargs=-Xmx12G` locally: the default 5G heap runs out when the root build is included. - `:grails-core:test`, `:grails-views-gson:test`, `:grails-rest-transforms:test`, `:grails-test-suite-web:test`, `:grails-testing-support-http-client:test`, `:grails-test-examples-micronaut:check` and `:grails-test-examples-views-functional-tests:check` pass (1,083 tests) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
