The GitHub Actions job "CI - Groovy Joint Validation Build" on 
grails-core.git/deps/adopt-jline-jansi has failed.
Run started by GitHub user borinquenkid (triggered by borinquenkid).

Head commit for run:
6fe5410440f1d7bef23dcebd6d209fada92b024b / Walter Duque de Estrada 
<[email protected]>
Migrate from unmaintained fusesource Jansi to the maintained org.jline fork

org.fusesource.jansi is unmaintained and flagged by CVE-2026-8484 with no
fixed release. The JLine project maintains the fork and publishes it as
org.jline:jansi (repackaged under org.jline.jansi), which Groovy 5 already
uses for groovysh.

- Manage org.jline:jansi:3.30.9 in dependencies.gradle and bump
  jline.version to 3.30.9 to match Groovy 5.0.7's transitives
- Rename org.fusesource.jansi imports to org.jline.jansi in GrailsConsole,
  AnsiConsoleUrlMappingsRenderer, forge InteractiveShell, and their specs;
  CreateAppCommandSpec now uses the Ansi.DISABLE constant
- Switch the coordinate in all build files, the base profile, the forge
  Scaffolding feature, and the user guide so generated apps get the fork
- Align jansiVersion in grails-forge (2.4.2) and grails-data-neo4j (2.4.1)
- Update the SBOM license mapping to org.jline:[email protected] and note the
  remaining ossIndexAudit exemption now only covers fusesource jansi
  pulled transitively by previously published Grails 6/7 artifacts

Co-Authored-By: Claude Fable 5 <[email protected]>

Report URL: https://github.com/apache/grails-core/actions/runs/30730482521

With regards,
GitHub Actions via GitBox

Reply via email to