This is an automated email from the ASF dual-hosted git repository.

jamesfredley pushed a commit to branch deps/groovy-4.0.33-7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git

commit 4b15e03e6a1eb668933f136ad9384ce3e5ffb6e5
Author: James Fredley <[email protected]>
AuthorDate: Sun Aug 2 09:33:59 2026 -0400

    fix(deps): Bump Groovy to 4.0.33
    
    Updates the managed Groovy pin from 4.0.32 to Apache Groovy 4.0.33
    and aligns ASM to 9.10.1, matching Groovy 4.0.33's transitive ASM so
    validateDependencyVersions stays authoritative.
    
    Apache Groovy 4.0.33 (2026-07-29):
      https://groovy-lang.org/changelogs/changelog-4.0.33.html
      https://repo1.maven.org/maven2/org/apache/groovy/groovy/4.0.33/
      https://repo1.maven.org/maven2/org/apache/groovy/groovy-bom/4.0.33/
    
    Verified locally:
      ./gradlew :grails-core:compileGroovy :grails-bootstrap:compileGroovy \
                validateDependencyVersions --refresh-dependencies
      -> BUILD SUCCESSFUL
    
    Assisted-by: Sisyphus:xai/grok-4.5
---
 dependencies.gradle | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/dependencies.gradle b/dependencies.gradle
index 77a4e72054..ffda4df22a 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -23,7 +23,7 @@
 ext {
     gradleBomDependencyVersions = [
             'ant.version'                   : '1.10.15',
-            'asm.version'                   : '9.10',
+            'asm.version'                   : '9.10.1',
             'asciidoctor-gradle-jvm.version': '4.0.5',
             'asciidoctorj.version'          : '3.0.0',
             'asset-pipeline-gradle.version' : '5.0.34',
@@ -89,7 +89,7 @@ ext {
             'commons-compress.version'      : '1.28.0',
             'commons-lang3.version'         : '3.20.0',
             'geb-spock.version'             : '8.0.1',
-            'groovy.version'                : '4.0.32',
+            'groovy.version'                : '4.0.33',
             'guava.version'                 : '33.6.0-jre',
             'h2.version'                    : '2.4.240',
             // Security: overrides spring-boot-dependencies (5.3.6). 5.4.3 
fixes CVE-2026-54399 (httpcore5) and CVE-2026-54428 (httpcore5-h2).
@@ -272,7 +272,7 @@ ext {
     else if (project.name == 'grails-micronaut-bom') {
         customBomVersions = [
                 'javaparser-core.version': '3.27.0', // micronaut requires 
3.27, groovy 4 ships with 3.28 but is compatible with 3.27
-                'asm.version'            : '9.10',
+                'asm.version'            : '9.10.1',
         ]
         combinedVersions += customBomVersions
         customBomDependencies = [

Reply via email to