jdaugherty commented on code in PR #16737:
URL: https://github.com/apache/grails-core/pull/16737#discussion_r4354382958
##########
dependencies.gradle:
##########
@@ -74,38 +74,34 @@ ext {
'cas-client-core.version' : '4.1.1',
'bootstrap-icons.version' : '1.13.2',
'bootstrap.version' : '5.3.8',
- // Overrides the 1.18.11 Spring Boot 4.1 manages, on every
classpath, so the BOM manages the
- // version Selenium 4.49.0 pulls in transitively - see
selenium.version. Can return to Boot's
- // version when the Selenium pin is dropped.
- 'byte-buddy.version' : '1.18.13',
'checker-qual.version' : '3.55.1',
'commons-codec.version' : '1.22.1',
'geb-spock.version' : '8.0.1',
- // Pinned deliberately as a drift tripwire even though it matches
Spring Boot's
- // managed version: graphql-java-extended-scalars (below) is NOT
managed by Spring
- // Boot and must be upgraded in lockstep with graphql-java.
Keeping this pin makes
- // the dependency validator flag any Spring Boot graphql-java bump
so we re-check
- // extended-scalars compatibility. See
https://github.com/apache/grails-core/issues/15674
- 'graphql-java.version' : '25.0',
+ // Pinned as a drift tripwire even though 25.1 matches Spring Boot
4.1.2: graphql-java-
+ // extended-scalars is not managed by Spring Boot. Keeping this
pin makes a later Boot
+ // graphql-java bump force a compatibility check of
extended-scalars, not an equal-version
+ // upgrade. See https://github.com/apache/grails-core/issues/15674
+ 'graphql-java.version' : '25.1',
'graphql-java-extended-scalars.version': '24.0',
'groovy.version' : '5.1.3',
// Security: 33.7.2 addresses CVE-2026-102554 (uncontrolled
resource consumption).
'guava.version' : '33.7.2-jre',
// Groovy YAML 5.1.0 requires a minimum of Jackson 2.22.1, and
2.22.3 also overrides the
- // 2.21.5 Spring Boot 4.1 manages: it adds the
StreamReadConstraints length limit to
+ // 2.21.7 Spring Boot 4.1 manages: it adds the
StreamReadConstraints length limit to
Review Comment:
this still references 4.1
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
