jamesfredley opened a new pull request, #16737: URL: https://github.com/apache/grails-core/pull/16737
Spring Boot 4.1.2 is released: https://github.com/spring-projects/spring-boot/releases/tag/v4.1.2 Replaces #16560. That PR took a subset of the then-unreleased 4.1.2 upgrades ahead of the release. This PR bumps `spring-boot.version` to 4.1.2 and keeps only the updates Boot does not manage, or that Grails must still force. ## Inherited from Spring Boot 4.1.2 Dropped pins that would now repeat or lag Boot: | Coordinate | Was | Boot 4.1.2 | |---|---|---| | slf4j | 2.0.19 | 2.0.20 | | byte-buddy | 1.18.13 | 1.18.15 | | tomcat | 11.0.26 | 11.0.27 | Logback 1.6.5 requires SLF4J 2.0.19, which 2.0.20 satisfies. Tomcat 11.0.27 includes the 11.0.26 security fixes. Byte Buddy 1.18.15 is newer than the Selenium 4.49.0 transitive that the old pin was covering. ## Brought from #16560 | Coordinate | Was | Now | Why | |---|---|---|---| | graphql-java | 25.0 | 25.1 | Matches Boot 4.1.2. The pin stays as a tripwire so a later Boot bump forces an extended-scalars compatibility check. extended-scalars stays at 24.0. | | springdoc-openapi | 3.1.0 | 3.1.1 | Not managed by Boot. | | swagger | 2.2.52 | 2.2.55 | The version springdoc 3.1.1 resolves. | | undertow-core | 2.4.3.Final | 2.4.4.Final | Boot dropped Undertow. Grails owns this line. | | undertow-servlet / websockets | 2.0.2.Final | 2.0.3.Final | Matching EE patch for core 2.4.4. | | hibernate-core (Hibernate 7 BOM) | 7.4.10.Final | 7.4.13.Final | Strictly re-declared so `enforcedPlatform` consumers are forced to Boot's version. hibernate-models stays at 1.1.2, which 7.4.13.Final declares. | #16560 had pinned byte-buddy 1.18.14, hibernate-validator 9.1.4, httpcore5 5.4.4, and postgresql 42.7.14 ahead of the release. Those are not re-pinned. Boot 4.1.2 manages 1.18.15, 9.1.5.Final, 5.4.4, and 42.7.14, and a matching pin fails `validateBomProperties`. ## Not taken Same exclusions as #16560, still correct against the released BOM: - Liquibase stays at 4.27.0. Boot 4.1.2 manages 5.0.4, but `liquibase-hibernate5` stops at 4.27.0 and Liquibase 5 is a new major. - Jackson stays at 2.22.3 / 3.2.3, ahead of Boot's 2.21.7 / 3.1.7. - MongoDB stays at 5.12.0. Boot still manages 5.8.1. - Logback stays at 1.6.5. Boot still manages 1.5.38. - Maven 3.10.0, Spock 2.5, and a Netty module-by-module pin are not taken. `validateBomProperties` passed for `:grails-base-bom`, `:grails-bom`, `:grails-hibernate5-bom`, `:grails-hibernate7-bom`, `:grails-neo4j-bom`, and `:grails-gradle-bom`. `validateDependencyVersions` passed for `:grails-core` and `:grails-data-hibernate7-core`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
