codeconsole commented on PR #16408: URL: https://github.com/apache/grails-core/pull/16408#issuecomment-6126528146
Merged current 9.0.x and addressed the reviews: - 85e0ac8e46: Jackson 3 (3.2.3), Jackson 2 (2.22.3) and Logback (1.6.5) stay pinned, described against Spring Boot 4.2's 3.1.6, 2.21.6 and 1.6.3, with the jackson-core/databind and logback-classic/core entries restored. The vulnerability scan plugin is 9.0.x's; AGENTS.md and the skill keep Groovy 6.0.x and Spock 2.5-groovy-6.0 next to Spring Boot 4.2.x and Spring Framework 7.1.x. - ede220df40: drops the Tomcat 11.0.26 and SLF4J 2.0.19 pins, which repeat 4.2.0-M2's versions. `validateBomProperties` passes on all five BOMs and `validateDependencyVersions` across the build. - 0180ce9410: the CVE-2026-47842 reason covers 7.2.0-M2, which the advisory doesn't list and which carries the 7.1.1 fix (`AesCbcBytesEncryptor`/`AesGcmBytesEncryptor`). - 07566b4fec: `upgrading91x` → `upgrading90x`, "Upgrading from Grails 8 to Grails 9", with the toc entry, the What's New introduction and the Spring Boot 4.2 xref pointing at it. - fe8f6d0d9e, 9fbf63f9f0: @matrei's `ParameterizedTypeReference` import and `NameGenerator` import order. The deployment-chapter mentions of Spring Boot 4.1 are left for the Grails 9 docs refresh, as @jdaugherty suggested. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
