Exclude legacy JLine 2 pulled transitively by spring-boot-cli

Removing the JLine 2 pin exposed an even older jline:jline:2.11 that
Spring Boot CLI drags in transitively, which the SBOM license gate
rejects (BSD-4-Clause) and broke CI in :grails-shell-cli:cyclonedxDirectBom
and the Forge :grails-cli SBOM. No source uses the old jline.* API, so
exclude jline:jline from every spring-boot-cli declaration; only the
JLine 3 (org.jline) stack remains on the classpath.

Verified :grails-shell-cli:cyclonedxDirectBom and Forge :grails-cli:cyclonedxDirectBom
generate clean SBOMs, and :grails-shell-cli:test / :grails-console:test pass.

Assisted-by: claude-code:claude-4.8-opus

Author: jamesfredley

grails-data-neo4j/boot-plugin/build.gradle

@@ -20,6 +20,7 @@
 dependencies {
     compileOnly "org.springframework.boot:spring-boot-cli:$springBootVersion", {
         exclude group:'org.codehaus.groovy', module:'groovy'
+        exclude group:'jline', module:'jline'
     }
 
     api "org.springframework.boot:spring-boot-autoconfigure:$springBootVersion"
@@ -37,5 +38,6 @@ dependencies {
     }
     testImplementation "org.springframework.boot:spring-boot-cli:$springBootVersion", {
         exclude group:'org.codehaus.groovy', module:'groovy'
+        exclude group:'jline', module:'jline'
     }
 }

grails-forge/grails-cli-shadow/build.gradle

@@ -34,7 +34,9 @@ dependencies {
 
     // shell-cli dependencies
     implementation 'org.apache.grails:grails-shell-cli'
-    implementation 'org.springframework.boot:spring-boot-cli'
+    implementation('org.springframework.boot:spring-boot-cli') {
+        exclude group: 'jline', module: 'jline'
+    }
     implementation 'org.apache.groovy:groovy'
     implementation 'org.apache.groovy:groovy-ant'
     implementation 'org.apache.groovy:groovy-templates'

grails-forge/grails-cli/build.gradle

@@ -54,7 +54,9 @@ dependencies {
 
     // shell-cli dependencies
     implementation 'org.apache.grails:grails-shell-cli'
-    implementation 'org.springframework.boot:spring-boot-cli'
+    implementation('org.springframework.boot:spring-boot-cli') {
+        exclude group: 'jline', module: 'jline'
+    }
     implementation 'org.apache.groovy:groovy'
     implementation 'org.apache.groovy:groovy-ant'
     implementation 'org.apache.groovy:groovy-templates'
@@ -246,4 +248,4 @@ sdkman {
             'WINDOWS_64': "https://github.com/apache/grails-core/releases/download/v${project.version}/apache-grails-${project.version}-bin.zip",
             'LINUX_64'  : "https://github.com/apache/grails-core/releases/download/v${project.version}/apache-grails-${project.version}-bin.zip"
     ] as Map<? extends String, ? extends String>
-}
+}

grails-shell-cli/build.gradle

@@ -64,7 +64,9 @@ dependencies {
     compileOnly 'org.springframework.boot:spring-boot'
     compileOnly 'org.springframework.boot:spring-boot-loader-tools'
     compileOnly 'org.springframework:spring-web'
-    api 'org.springframework.boot:spring-boot-cli'
+    api('org.springframework.boot:spring-boot-cli') {
+        exclude group: 'jline', module: 'jline'
+    }
     // Must be 'implementation' (not 'compileOnly') so the servlet API is included in the shadow JAR.
     // grails-web-common registers HttpServletRequestExtension as a Groovy extension module, which is
     // auto-discovered when GroovyScriptCommandFactory compiles custom scripts in src/main/scripts/.