Team: Here is an analysis for the current PRs but lets pick those that make sense.
My vote is high surface bugs and flakyness in tests. Thanks Walter High priority 18 PRs Fix or land these first — bugs, security, CI stability #16043 <https://github.com/apache/grails-core/pull/16043>Update Log4j to 2.25.5 and document unfixed Jansi CVE 7.0.x CI unstable @jamesfredley CVE remediation — security fixes should land before any release cut. #16041 <https://github.com/apache/grails-core/pull/16041>Fix bootWar NPE from stray CLI WebApplicationInitializer (#15377) 7.0.x CI clean @jamesfredley Real regression fix, CI green, ready to review and merge. #16034 <https://github.com/apache/grails-core/pull/16034>Fix flaky WhereQueryClosureCaptureSpec: key AstPropertyResolveUtils cache by ClassNode identity 8.0.x CI clean @borinquenkid CI stability — flaky tests block confident merging of everything else in the window. #16033 <https://github.com/apache/grails-core/pull/16033>Fix flaky grails-views-gson tests caused by shared static test state 8.0.x CI unstable @borinquenkid CI stability fix; same reasoning as the other flaky-test PRs in this batch. #16032 <https://github.com/apache/grails-core/pull/16032>Fix flaky RunningApplicationProcessSpec by widening the stop() timeout budget 8.0.x CI unstable @borinquenkid CI stability fix — reduces false-red signal noise right when the team needs signal to be trustworthy. #16031 <https://github.com/apache/grails-core/pull/16031>Fix flaky PerTestRecordingSpec by waiting for recording files to stabilize 8.0.x CI unstable @borinquenkid CI stability fix, part of the same flaky-test cleanup batch. #16028 <https://github.com/apache/grails-core/pull/16028>Fix join-table foreign keys to use resolved entity table names (#15736) 8.0.x CI unstable changes requested @gsartori Real GORM mapping bug; needs the requested changes addressed, then merge — worth prioritizing review. #16026 <https://github.com/apache/grails-core/pull/16026>fix(grails-data-hibernate7): stop conflating decimal and bit precision for numeric columns 8.0.x CI unstable approved @borinquenkid Approved Hibernate7 correctness fix — low risk, ready to merge. #16020 <https://github.com/apache/grails-core/pull/16020>fix(grails-data-hibernate7): make type: 'text' produce an unbounded column 8.0.x CI clean @borinquenkid Clean CI, real column-mapping bug fix for Hibernate7. #16011 <https://github.com/apache/grails-core/pull/16011>Restore backwards compatibility for Grails 7 command plugins on Grails 8 8.0.x CI clean changes requested @jamesfredley Upgrade-path compatibility is release-critical for anyone moving 7→8; resolve review feedback and land it. #15979 <https://github.com/apache/grails-core/pull/15979>Honor EnvironmentAware application classes before early plugin registration 8.0.x CI clean @codeconsole Clean, real startup-ordering bug fix. #15950 <https://github.com/apache/grails-core/pull/15950>Clear omitted bindData fields when nullMissing is enabled 8.0.x CI unstable @jamesfredley Real data-binding correctness bug affecting a documented option. #15947 <https://github.com/apache/grails-core/pull/15947>Add opt-in deny-by-default data binding and always honor bindable:false 8.0.x CI clean @jamesfredley Closes a data-binding safety gap (bindable:false wasn't always honored); clean CI. #15804 <https://github.com/apache/grails-core/pull/15804>Reject invalid databinding indexes 8.0.x CI unstable @jamesfredley Databinding-safety fix in the same family as #15947 — worth landing together. #15803 <https://github.com/apache/grails-core/pull/15803>Harden synchronizer token consumption 8.0.x CI clean @jamesfredley CSRF token hardening, clean CI, no changes requested. #15801 <https://github.com/apache/grails-core/pull/15801>Harden unsafe controller render defaults 8.0.x CI clean @jamesfredley Security-relevant default hardening, clean CI, no changes requested. #15778 <https://github.com/apache/grails-core/pull/15778>fix(mongodb): widen MongoMappingContext.initialize visibility to public 8.0.x CI clean @borinquenkid Small, low-risk, clean-CI bug fix — easy to land. #15652 <https://github.com/apache/grails-core/pull/15652>Stop leaking build-only dependencies into the application Grails BOM (DRAFT - possible solution) 8.0.x CI unstable @jamesfredley BOM correctness ships to every downstream app — worth prioritizing even though marked draft; confirm it's ready to un-draft.
