This is an automated email from the ASF dual-hosted git repository. jdaugherty pushed a commit to branch 8.0.x in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 8f99511820911e1cec99609c444f564d90d1f4af Author: James Daugherty <[email protected]> AuthorDate: Thu Jul 9 18:25:50 2026 -0400 Restore commons codec version that's non-vulnerable --- dependencies.gradle | 2 ++ 1 file changed, 2 insertions(+) diff --git a/dependencies.gradle b/dependencies.gradle index 495a684afd..7725dddfc0 100644 --- a/dependencies.gradle +++ b/dependencies.gradle @@ -74,6 +74,7 @@ ext { 'bootstrap-icons.version' : '1.13.1', 'bootstrap.version' : '5.3.8', 'checker-qual.version' : '3.55.1', + 'commons-codec.version' : '1.22.0', 'geb-spock.version' : '8.0.1', // Pinned deliberately as a drift tripwire even though it matches Spring Boot's // managed version: graphql-java-extended-scalars (below) is NOT managed by Spring @@ -132,6 +133,7 @@ ext { 'bootstrap-icons' : "org.webjars.npm:bootstrap-icons:${bomDependencyVersions['bootstrap-icons.version']}", 'cas-client-core' : "org.apereo.cas.client:cas-client-core:${bomDependencyVersions['cas-client-core.version']}", 'checker-qual' : "org.checkerframework:checker-qual:${bomDependencyVersions['checker-qual.version']}", + 'commons-codec' : "commons-codec:commons-codec:${bomDependencyVersions['commons-codec.version']}", 'geb-spock' : "org.apache.groovy.geb:geb-spock:${bomDependencyVersions['geb-spock.version']}", 'graphql-java' : "com.graphql-java:graphql-java:${bomDependencyVersions['graphql-java.version']}", 'graphql-java-extended-scalars': "com.graphql-java:graphql-java-extended-scalars:${bomDependencyVersions['graphql-java-extended-scalars.version']}",
