[codeconsole]

Bumps grailsVersion from 8.0.0-M4 to 8.0.0-M6, plus the dependency changes that milestone forces.

Grails 8.0.0-M6

gradle.properties: grailsVersion=8.0.0-M6.

The app also drops its runtimeOnly("org.fusesource.jansi:jansi") declaration. It was declared without a version, relying on grails-bom to manage it, but the BOM stopped managing jansi in M5 and Spring Boot 4 does not manage it either, so the unversioned coordinate no longer resolves:

Could not find org.fusesource.jansi:jansi:
  Required by:
      project ':app'

Nothing in the app references jansi or configures ANSI output, so it is removed rather than pinned to an arbitrary version.

CodeMirror and build tooling

• @codemirror/commands 6.10.2 → 6.11.0, in both gradle.properties and package.json so the webjar and npm package stay in step
• @codemirror/state 6.7.1 → 6.7.4 and @codemirror/view 6.43.6 → 6.43.11, refreshed within their existing ranges
• through2 5.0.5 → 5.0.11
• npm audit fix for three high-severity advisories in the build/test toolchain (brace-expansion, js-yaml, undici); npm audit now reports 0

All of the above are devDependencies or build-time only — nothing ships to consumers.

@codemirror/legacy-modes stays at 6.5.1. npm has 6.5.4, but no webjar has been published past 6.5.1 (org.webjars.npm:codemirror__legacy-modes last updated 2025-07-28), and the editor loads it from webjars, so 6.5.1 is the effective ceiling.

Not included

Gradle stays at 9.6.1. The wrapper was tried at 9.7.1 and reverted — it breaks every Groovy compile:

'groovyOptions.configurationScriptFile' is final and cannot be changed any further
  at GrailsGradlePlugin.groovy:272

Gradle 9.7 finalizes that property before the Grails Gradle plugin sets it. That needs an upstream fix in org.apache.grails:grails-gradle-plugins.

Java stays at 21.

Verification

• ./gradlew clean build green; 41 Groovy specs and 33 JS specs pass
• App boots on M6 (Spring Boot 4.1.1, Tomcat 11.0.24)
• Console verified end to end in a browser: CodeMirror 6.11.0 loads via the import map, script execution and output render, GORM persist/query against H2 works, bare-name domain auto-import resolves, no JS console errors
• listFiles endpoint returns as expected