The GitHub Actions job "CI" on grails-core.git/grails8-groovy5-sb4 has failed. Run started by GitHub user jamesfredley (triggered by jamesfredley).
Head commit for run: 8c5d1d182d2c6fbf91de28c96f6792494da6f55a / James Fredley <[email protected]> fix(sbom): align jline license overrides with post-merge resolved versions After merging 8.0.x (PR #15367 JLine 3 / Jansi 2 upgrade) into the Groovy 5 branch, two issues caused cyclonedxBom failures across 12 modules: 1. The main org.jline:jline artifact resolves to 3.30.6 (declared by jline.version in dependencies.gradle), not the stale 3.23.0 entry that the PR branch carried over from a prior merge. Updated the license override key from @3.23.0 to @3.30.6. 2. The other org.jline:* artifacts (jansi, jline-reader, jline-terminal, jline-builtins, jline-console, jline-style, jline-native, and the jline-terminal-{jansi,jna,jni} drivers) are pulled in transitively via Groovy 5's groovy-groovysh and resolve to 3.30.9. They are kept at @3.30.9 (not 3.30.6) since cyclonedx records the actual resolved coordinate, and Gradle does not reconcile across distinct artifact names. Comments on each entry now document this asymmetry so future jline bumps know which lines move with jline.version and which move with the groovy-groovysh transitive resolution. Verified by running `./gradlew assemble -PskipTests` end-to-end on JDK 21 (1292 tasks, 0 failures) on Windows. Assisted-by: sisyphus:claude-opus-4-7 Report URL: https://github.com/apache/grails-core/actions/runs/24889357596 With regards, GitHub Actions via GitBox
