The GitHub Actions job "CI" on grails-core.git/grails8-groovy6-canary has failed. Run started by GitHub user jamesfredley (triggered by jamesfredley).
Head commit for run: 04b50fbf2f50a93efd5402cae3500a8f97a2e63b / James Fredley <[email protected]> fix(build): map JLine 4.1.0 transitive modules in SBOM license allowlist The Groovy 6 snapshot's groovy-groovysh now pulls the JLine 4.1.0 family transitively (grails-shell-cli, grails-console), but SbomPlugin.LICENSE_MAPPING only mapped the 4.0.12 family plus [email protected]. cyclonedx-core-java#205 misreports JLine's BSD-3-Clause as BSD-4-Clause, so :grails-shell-cli:cyclonedxDirectBom failed with "Unpermitted License found for bom dependency: ... [email protected] : BSD-4-Clause". Because `build` depends on cyclonedxDirectBom, this broke every CI job that runs build (Core Projects, Forge Projects, Functional, Hibernate5, Mongodb). It surfaced only after the views-gson Groovy 6 compile blocker was fixed and CI could finally reach the SBOM stage. Add the remaining 9 JLine 4.1.0 coordinates (builtins, console, console-ui, native, reader, shell, style, terminal, terminal-jni) -> BSD-3-Clause, mirroring the existing 4.0.12 entries. Each module LICENSE.txt at https://github.com/jline/jline3/blob/jline-parent-4.1.0/LICENSE.txt confirms BSD-3-Clause. Verified on Groovy 6.0.0-SNAPSHOT: :grails-shell-cli:cyclonedxDirectBom, :grails-console:cyclonedxDirectBom and :grails-test-core:cyclonedxDirectBom all green. Assisted-by: claude-code:claude-4.8-opus Report URL: https://github.com/apache/grails-core/actions/runs/26653709655 With regards, GitHub Actions via GitBox
