Grails 7: add the spring-security plugins' versions to grails-plugin-bom

[jamesfredley]

Issue description

https://repo.grails.org/ui/repos/tree/PomView/libs-snapshots-local/org/grails/grails-bom/7.0.0-SNAPSHOT/grails-bom-7.0.0-20241112.082000-137.pom

[codeconsole]

sure, spring security is already part of the Spring bom, so it would make sense to have the Grails plugin versions

[jamesfredley]

Here is the list:
org.grails.plugins:spring-security-cas:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-core:7.0.0-SNAPSHOT
org.grails.plugins:spring-security-rest:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-rest-gorm:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-rest-grailscache:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-rest-memcached:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-rest-redis:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-rest-testapp-profile:6.0.0-SNAPSHOT
org.grails.plugins:spring-security-ui:5.0.0-SNAPSHOT

org.grails.plugins:grails-redis:5.0.0-SNAPSHOT - used by spring-security-rest-redis

org.grails.plugins:spring-security-acl:5.0.0-SNAPSHOT

https://github.com/grails/grails-spring-security-core - Grails Spring Security Core Plugin
https://github.com/grails/grails-spring-security-rest - Grails plugin to implement token-based, RESTful authentication using Spring Security
https://github.com/grails/grails-spring-security-ui - The Spring Security UI plugin provides CRUD screens and other user management workflows.
https://github.com/grails/grails-spring-security-oauth2 - Spring security Oauth Grails 3 plugin
https://github.com/grails/grails-spring-security-acl
https://github.com/grails/grails-spring-security-cas
https://github.com/grails-plugins/grails-spring-security-ldap

[bkoehm]

I have no objection but I do want to point out that spring-security-cas is probably not widely used. UC Berkeley may be one of the few institutions still using this plugin (although I don't know for sure). I'm not sure how well this plugin is going to be maintained over the long term and I don't know if maintenance of the plugin factors into your decision about whether to include it in the BOM or not. I suppose the easy answer is it can later be removed from the BOM if the plugin is not keeping pace with Grails development.

I also opened grails/grails-spring-security-ldap#27 back on September 23rd for grails-spring-security-ldap but it hasn't been looked at by anyone.
We are also using this plugin, but again, I speculate that UC Berkeley is about the only ones still using this.

[jamesfredley]

We decided not to add these to grails-bom, as it would require that they are released during the grails-core release process. They may be added to a grails-plugin-bom, when one is created.