The GitHub Actions job "CI - Groovy Joint Validation Build" on grails-core.git/dependabot/gradle/grails-forge/7.0.x/org.webjars-jquery-ui-1.14.2 has failed. Run started by GitHub user borinquenkid (triggered by borinquenkid).
Head commit for run: f5e11d59bbd9c0cc9f5a7c7a3a52ac3f659739fd / Walter Duque de Estrada <[email protected]> Fix SBOM license resolution and asset paths for the jquery-ui 1.14.2 bump jquery-ui 1.10.3 -> 1.14.2 is a ~10 year jump with two breaking changes this Dependabot PR didn't account for: - Both org.webjars:jquery-ui and org.webjars:jquery-ui-themes report NOASSERTION in their 1.14.2 POM license metadata (confirmed against Maven Central), which fails the cyclonedxBom task. jQuery UI is MIT licensed, so both are added to SbomPlugin's LICENSE_MAPPING like the existing JLine/BouncyCastle overrides. - The 1.14.2 webjar restructured its layout: jquery-ui.min.js moved out of ui/minified/, and the jquery-ui-themes 'smoothness' theme was replaced by a single 'base' theme. The asset-pipeline require directives in spring-security-ui(.js|-register.js) and (jquery-ui|spring-security-ui).css hardcoded the old 1.10.3 paths, which would have 404'd at runtime. Verified locally: cyclonedxBom now passes with the license overrides applied, and assetCompile produces a bundle that actually contains jQuery UI 1.14.2 JS and the base theme CSS. Co-Authored-By: Claude Sonnet 5 <[email protected]> Report URL: https://github.com/apache/grails-core/actions/runs/30148516741 With regards, GitHub Actions via GitBox
