Micronaut 5 compatibility and release prep

.github/workflows/graalvm-latest.yml

@@ -28,14 +28,16 @@ jobs:
       - name: Build Matrix
         uses: micronaut-projects/github-actions/graalvm/build-matrix@master
         id: build-matrix
+        with:
+          java-version: '21'
   build:
     needs: build_matrix
     if: github.repository != 'micronaut-projects/micronaut-project-template'
     runs-on: ubuntu-latest
     strategy:
       max-parallel: 6
       matrix:
-        java: ['21', '25']
+        java: ['21']
         native_test_task: ${{ fromJson(needs.build_matrix.outputs.matrix).native_test_task }}
     env:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
@@ -48,6 +50,7 @@ jobs:
         id: pre-build
         with:
           distribution: 'graalvm'
+          gradle-java: '21'
           java: ${{ matrix.java }}
       - name: Build Steps
         uses: micronaut-projects/github-actions/graalvm/build@master

buildSrc/build.gradle

@@ -9,5 +9,4 @@ repositories {
 
 dependencies {
     implementation libs.micronaut.gradle.plugin
-    implementation(libs.sonatype.scan)
 }

buildSrc/src/main/groovy/io.micronaut.build.internal.views-module.gradle

@@ -1,15 +1,10 @@
 plugins {
     id("io.micronaut.build.internal.views-base")
     id("io.micronaut.build.internal.module")
-    id("org.sonatype.gradle.plugins.scan")
 }
-String ossIndexUsername = System.getenv("OSS_INDEX_USERNAME") ?: project.properties["ossIndexUsername"]
-String ossIndexPassword = System.getenv("OSS_INDEX_PASSWORD") ?: project.properties["ossIndexPassword"]
-boolean sonatypePluginConfigured = ossIndexUsername != null && ossIndexPassword != null
-if (sonatypePluginConfigured) {
-    ossIndexAudit {
-        username = ossIndexUsername
-        password = ossIndexPassword
-    }
+ossIndexAudit {
+    excludeCoordinates = [
+            "io.pebbletemplates:pebble:3.2.3" // no version patched  https://ossindex.sonatype.org/vulnerability/CVE-2025-1686
+    ]
 }
 

buildSrc/src/main/groovy/io.micronaut.build.internal.views-tests.gradle

@@ -1,3 +1,10 @@
 plugins {
     id "io.micronaut.build.internal.views-base"
+    id "java-library"
+}
+repositories {
+    mavenCentral()
+}
+dependencies {
+    testRuntimeOnly("org.junit.platform:junit-platform-launcher")
 }

gradle/libs.versions.toml

@@ -1,7 +1,7 @@
 [versions]
-micronaut = "4.8.3"
+micronaut = "4.10.7"
 micronaut-platform = "4.7.6"
-micronaut-docs = '2.0.0'
+micronaut-docs = '3.0.0'
 micronaut-test = "4.7.0"
 micronaut-data = "4.11.1"
 micronaut-sql = "6.0.2"
@@ -22,10 +22,9 @@ graal = "24.1.2"
 
 pebble = "3.2.3"
 thymeleaf-extra-java8time = "3.0.4.RELEASE"
-kotlin = "1.9.25"
+kotlin = "2.2.20"
 kotlinx-coroutines = "1.9.0"
 micronaut-logging = "1.6.0"
-sonatype-scan = "3.0.0"
 micronaut-grpc = "4.8.0"
 [libraries]
 # Core
@@ -62,7 +61,6 @@ groovy-json = { module = "org.apache.groovy:groovy-json" }
 
 graal-polyglot = { module = "org.graalvm.polyglot:polyglot", version.ref = "graal" }
 graal-js = { module = "org.graalvm.polyglot:js", version.ref = "graal" }
-sonatype-scan = { module = "org.sonatype.gradle.plugins:scan-gradle-plugin", version.ref = "sonatype-scan" }
 
 [plugins]
 kotlin-jvm = { id = "org.jetbrains.kotlin.jvm", version.ref = "kotlin" }

test-suite-graal/test-suite-graal-jte/build.gradle

@@ -6,6 +6,7 @@ plugins {
 dependencies {
     implementation(projects.testSuiteGraal.testSuiteGraalCommon)
     implementation(projects.micronautViewsJte)
+    testRuntimeOnly("org.junit.platform:junit-platform-launcher")
 }
 
 jte {

test-suite-kotlin/build.gradle.kts

@@ -38,6 +38,6 @@ tasks.withType<Test> {
 
 kotlin {
     jvmToolchain {
-        languageVersion.set(JavaLanguageVersion.of(17))
+        languageVersion.set(JavaLanguageVersion.of(21))
     }
 }

views-soy/build.gradle.kts

@@ -25,5 +25,11 @@ dependencies {
     testImplementation(mn.micronaut.management)
     testImplementation(mnValidation.micronaut.validation)
     testImplementation(mn.snakeyaml)
+
+    constraints {
+        implementation("com.google.code.gson:gson:2.13.2") {
+            because("previous versions have a CVE Vulnerability")
+        }
+    }
 }
 

views-velocity/build.gradle

@@ -26,4 +26,10 @@ dependencies {
     testImplementation(mn.micronaut.management)
     testImplementation(mnValidation.micronaut.validation)
     testImplementation(mn.snakeyaml)
+
+    constraints {
+        implementation("org.apache.commons:commons-lang3:3.18.0") {
+            because("previous versions have a CVE Vulnerability")
+        }
+    }
 }