The GitHub Actions job "CI" on grails-core.git/deps/gradle-9.8.1 has failed. Run started by GitHub user jdaugherty (triggered by jdaugherty).
Head commit for run: 8237828397b732eb72d4200e6e58aea8c702da58 / James Daugherty <[email protected]> Build with Gradle 9.8.1 Moves the build from Gradle 9.8.0 to 9.8.1, the patch release that fixes three high-severity advisories published on 2026-10-07: - GHSA-mvvg-497x-hmj8: unauthenticated worker-to-daemon channel deserializes untrusted Java objects - GHSA-xwqc-3h47-hg64: deserialization of untrusted Java objects before authentication in the client-daemon communication - GHSA-j5m7-59rp-24f5: failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts The wrappers were regenerated with `gradle -p gradle-bootstrap` on 9.8.1, which refreshes the root, grails-gradle, grails-forge and end-to-end wrappers. build-logic, the grails-profiles skeletons and the grails-shell-cli gradle-sample fixture, which bootstrap does not reach, were refreshed from the same output so the wrapper jar is byte-identical everywhere and matches Gradle's published gradle-9.8.1-wrapper.jar.sha256. `gradlew` and `gradlew.bat` are unchanged. `end-to-end/legacy-g7-command-plugin` follows Grails 7 and moves from 8.14.5 to 8.14.6, the matching 7.0.x fix; bootstrap's legacyG7Wrapper regenerated its wrapper from the fixture's own `.sdkmanrc`. `.sdkmanrc`, `gradleToolingApiVersion`, Forge's gradleWrapperProperties template, the gradle-developer and grails-8-upgrade skills and the end-to-end README move to the new versions as well. The Wrapper task rewrites the properties files from scratch, so the "keep this synced" comments were restored. Release notes: https://docs.gradle.org/9.8.1/release-notes.html Report URL: https://github.com/apache/grails-core/actions/runs/38255578210 With regards, GitHub Actions via GitBox
