The GitHub Actions job "CI - Groovy Joint Validation Build" on grails-core.git/deps/gradle-8.14.6 has succeeded. Run started by GitHub user jdaugherty (triggered by jdaugherty).
Head commit for run: c965fc4baaa00ab818e074943793f222feda2d48 / James Daugherty <[email protected]> Build with Gradle 8.14.6 Moves the build from Gradle 8.14.5 to 8.14.6, the patch release that fixes three high-severity advisories published on 2026-10-07: - GHSA-mvvg-497x-hmj8: unauthenticated worker-to-daemon channel deserializes untrusted Java objects - GHSA-xwqc-3h47-hg64: deserialization of untrusted Java objects before authentication in the client-daemon communication - GHSA-j5m7-59rp-24f5: failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts The wrappers were regenerated with `gradle -p gradle-bootstrap` on 8.14.6, which refreshes the root, grails-gradle and grails-forge wrappers. build-logic and the grails-profiles skeletons, which bootstrap does not reach, were refreshed from the same output so the wrapper jar is byte-identical everywhere and matches Gradle's published gradle-8.14.6-wrapper.jar.sha256. `gradlew` and `gradlew.bat` are unchanged apart from bootstrap marking grails-forge's `gradlew.bat` executable like the others. `.sdkmanrc`, `gradleToolingApiVersion` and Forge's gradleWrapperProperties template move to 8.14.6 as well. The Wrapper task rewrites the properties files from scratch, so the "keep this synced" comments were restored. Release notes: https://docs.gradle.org/8.14.6/release-notes.html Report URL: https://github.com/apache/grails-core/actions/runs/38255255673 With regards, GitHub Actions via GitBox
