HeroDevs
Visit NES for Apache Grails Home Page

Apache Grails BOM 7.1.x Release Notes

2 versions

Comprehensive release notes and changelog for Apache Grails BOM 7.1.x, including security patches, bug fixes, and feature updates across all supported versions.

Aug 14, 2026
Latest: 7.1.2
1 Patched Vulnerability
VEX Statements

August 2026

7.1.2

Released Aug 14, 2026

Dependency Upgrades

  • Apache Ant 1.10.17
  • Apache Commons Codec 1.21.0
  • Apache Grails 7.1.5
  • Apache Groovy 4.0.33
  • Apache Tomcat 10.1.57
  • AsciidoctorJ 3.0.1
  • Asset Pipeline 5.0.35
  • Byte Buddy 1.18.11
  • Jackson 2.21.5
  • JavaParser 3.28.2
  • JUnit 5.13.4
  • OpenTelemetry 1.62.0
  • SiteMesh Spring Boot Starter 3.2.3
  • Spring Boot 3.5 (NES) 3.5.16-spring-boot-3.5.18
  • Spring Data Cassandra 4.5 (NES) 4.5.13-spring-data-cassandra-4.5.14
  • Spring Data Commons 3.5 (NES) 3.5.13-spring-data-commons-3.5.14
  • Spring Data Couchbase 5.5 (NES) 5.5.13-spring-data-couchbase-5.5.14
  • Spring Data Elasticsearch 5.5 (NES) 5.5.13-spring-data-elasticsearch-5.5.14
  • Spring Data JPA 3.5 (NES) 3.5.13-spring-data-jpa-3.5.14
  • Spring Data KeyValue 3.5 (NES) 3.5.13-spring-data-keyvalue-3.5.14
  • Spring Data LDAP 3.5 (NES) 3.5.13-spring-data-ldap-3.5.14
  • Spring Data MongoDB 4.5 (NES) 4.5.13-spring-data-mongodb-4.5.14
  • Spring Data Neo4J 7.5 (NES) 7.5.13-spring-data-neo4j-7.5.14
  • Spring Data Redis 3.5 (NES) 3.5.13-spring-data-redis-3.5.14
  • Spring Data Relational 3.5 (NES) 3.5.13-spring-data-relational-3.5.14
  • Spring Data REST 4.5 (NES) 4.5.13-spring-data-rest-4.5.14
  • Spring Framework 6.2 (NES) 6.2.19-spring-framework-6.2.20
  • Spring Security 6.5 (NES) 6.5.11-spring-security-6.5.12
  • Spring Session 3.5 (NES) 3.5.7-spring-session-3.5.8

July 2026

7.1.1

Released Jul 15, 2026
CVE-2026-0603

First NES release for Apache Grails BOM 7.1.x.

Notes

  • Delivered as a Bill of Materials — com.herodevs.nes:grails-nes-bom:7.1.1 — that pins Hibernate ORM 5.6 (jakarta variants, fixing CVE-2026-0603 among others) and the full NES Spring Boot 3.5 stack (Boot 3.5.16-spring-boot-3.5.17, Framework 6.2.19-spring-framework-6.2.20, Security 6.5.11-spring-security-6.5.12, Data train 2025.0.13, Session 3.5.7-spring-session-3.5.8).
  • Ships a companion Gradle plugin — plugin id com.herodevs.nes.grails7-bom, published as the plugin marker com.herodevs.nes.grails7-bom:com.herodevs.nes.grails7-bom.gradle.plugin:7.1.1 and its implementation com.herodevs.nes:grails7-bom-plugin:7.1.1 — required for Gradle builds, where the Apache Grails plugins' Spring dependency-management rules would otherwise re-pin Hibernate and Spring to their OSS versions.
  • Grails core and its plugins stay on their canonical Apache OSS versions (org.apache.grails:*:7.1.1) because no known CVEs exist in them so far.

See the "Managed Versions" page for the full list of NES-pinned artifacts and OSS components shipped by this release, and the "Grails 7.1.x Guide" for setup.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.