google-nomulus/dependencies.gradle
2023-01-19 14:44:11 -05:00

241 lines
12 KiB
Groovy

// Copyright 2019 The Nomulus Authors. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
ext {
// Direct dependencies and compile-time transitive dependencies (i.e.,
// those flagged as undeclared-dependency by Nebula-lint).
dependencyList = [
// Pinned dependencies (those cannot use dynamic version) should be listed
// first. There are several reasons why a dependency has to be pinned.
// 1. The resolved dynamic version introduces breaking API changes that
// cause compilation errors.
// 2. The resolved version has behavior changes that break some tests.
// 3. Pinned by legacy software. E.g., the closure compiler and stylesheet
// jars must be pinned to work with the final version of gwt-user.
// 4. The resolved version is a pin-breaker, i.e., it forcefully upgrades
// a pinned dependency to a newer version.
// 5. Inconsistent group resolutions: the resolved versions of modules in
// a dependency group can not work together. For example, the three
// bouncycastle jars need to be hardcoded with the same version string
// as of April, 2022.
// 6. Dependency constraints violation: e.g., as of April 2022, Hibernate
// 6.0 has a dependency that is not Java-8-compatible.
// 7. Maven mirroring error. Gradle expects that a dependency with dynamic
// version be available on both repo.maven and repo2.maven. The
// resolved version of xpp3 is not on repo.maven. This may be due to
// the fact that xpp3 has been renamed to org.ogce.xpp3.
// Note that since Gradle 7, for version labels to be strict, we need to
// append '!!' to the end. Otherwise they may still be forced to upgrade.
// Breaking changes causing compilation error.
'com.beust:jcommander:1.60',
'com.google.apis:google-api-services-dns:v2beta1-rev99-1.25.0',
'com.google.apis:google-api-services-admin-directory:directory_v1-rev118-1.25.0',
'com.google.apis:google-api-services-drive:v2-rev393-1.25.0',
'com.thoughtworks.qdox:qdox:1.12.1',
'jline:jline:1.0',
// Breaking change causing soy template parsing error.
'com.google.template:soy:2021-02-01',
// Our .xjb files are not compatible with newer binding specs: some
// xml elements' names have changed.
'com.sun.xml.bind:jaxb-xjc:2.3.3',
// appengine-api-1.0-sdk has breaking changes.
'com.google.appengine:appengine-api-1.0-sdk:1.9.86',
// Pin-breakers for appengine-api-1.0-sdk
'com.google.appengine:appengine-testing:1.9.86',
// Pinned for gwt-user.
'com.google.javascript:closure-compiler:v20210505',
'com.google.closure-stylesheets:closure-stylesheets:1.5.0',
// 5.6.12.Final is buggy wrt immutable CompositeUserTypes.
// 6.0+ requires Java 11.
'org.hibernate:hibernate-core:[5.6.14.Final, 6.0)',
'org.hibernate:hibernate-hikaricp:[5.6.14.Final, 6.0)',
// Latest version of the following are Java11-only
'com.zaxxer:HikariCP:3.4.5',
'com.github.ben-manes.caffeine:caffeine:[2.9.3,3.0)',
// Broken by asymmetric mirroring on Maven. Note that this should be
// upgraded to org.ogce.xpp3
'xpp3:xpp3:1.1.4c',
// Dependency groups with inconsistent version resolutions start here
'io.netty:netty-buffer:4.1.59.Final',
'io.netty:netty-codec-http:4.1.59.Final',
'io.netty:netty-codec:4.1.59.Final',
'io.netty:netty-common:4.1.59.Final',
'io.netty:netty-handler:4.1.59.Final',
'io.netty:netty-transport:4.1.59.Final',
'org.apache.sshd:sshd-core:2.0.0',
'org.apache.sshd:sshd-scp:2.0.0',
'org.apache.sshd:sshd-sftp:2.0.0',
'org.bouncycastle:bcpg-jdk15on:1.67',
'org.bouncycastle:bcpkix-jdk15on:1.67',
'org.bouncycastle:bcprov-jdk15on:1.67',
'org.seleniumhq.selenium:selenium-api:3.141.59',
'org.seleniumhq.selenium:selenium-chrome-driver:3.141.59',
'org.seleniumhq.selenium:selenium-java:3.141.59',
'org.seleniumhq.selenium:selenium-remote-driver:3.141.59',
'us.fatehi:schemacrawler:16.10.1',
'us.fatehi:schemacrawler-api:16.10.1',
'us.fatehi:schemacrawler-diagram:16.10.1',
'us.fatehi:schemacrawler-tools:16.10.1',
// Dependencies with dynamic versions start from here.
'args4j:args4j:[2.0.26,)',
'com.google.api:gax:[1.66.0,)',
'com.google.api.grpc:proto-google-cloud-secretmanager-v1:[1.4.0,)',
'com.google.api.grpc:proto-google-cloud-tasks-v2:[1.33.2,)',
'com.google.api.grpc:proto-google-common-protos:[2.1.0,)',
// Excluding versions 2.0 from google-api-client because they're
// runtime incompatible with version 1.25 of admin directory API.
// TODO: see if we can upgrade to a newer version of the latter.
'com.google.api-client:google-api-client-java6:[1.31.3,2.0)!!',
'com.google.api-client:google-api-client:[1.31.3,2.0)!!',
'com.google.api-client:google-api-client-appengine:[1.31.3,2.0)',
'com.google.api-client:google-api-client-servlet:[1.31.3,2.0)',
'com.google.apis:google-api-services-appengine:[v1-rev130-1.25.0,)',
'com.google.apis:google-api-services-bigquery:[v2-rev459-1.25.0,)',
'com.google.apis:google-api-services-cloudkms:[v1-rev108-1.25.0,)',
'com.google.apis:google-api-services-dataflow:[v1b3-rev302-1.25.0,)',
'com.google.apis:google-api-services-groupssettings:[v1-rev82-1.25.0,)',
'com.google.apis:google-api-services-monitoring:[v3-rev540-1.25.0,)',
'com.google.apis:google-api-services-sheets:[v4-rev612-1.25.0,)',
'com.google.apis:google-api-services-storage:[v1-rev20210127-1.31.0,)',
'com.google.appengine:appengine-api-stubs:[1.9.86,)',
'com.google.auth:google-auth-library-credentials:[0.24.1,)',
'com.google.auth:google-auth-library-oauth2-http:[0.24.1,)',
'com.google.auto.service:auto-service-annotations:[1.0-rc7,)',
'com.google.auto.service:auto-service:[1.0-rc7,)',
'com.google.auto.value:auto-value-annotations:[1.7.4,)',
'com.google.auto.value:auto-value:[1.7.4,)',
'com.google.cloud.bigdataoss:util:2.2.6',
'com.google.cloud.sql:jdbc-socket-factory-core:[1.2.1,)',
'com.google.cloud.sql:postgres-socket-factory:[1.2.1,)',
'com.google.cloud:google-cloud-core:[1.94.3,)',
'com.google.cloud:google-cloud-core-http:[1.94.3,)',
'com.google.cloud:google-cloud-secretmanager:[1.4.0,)',
'com.google.cloud:google-cloud-storage:[1.113.12,)',
'com.google.cloud:google-cloud-nio:[0.123.4,)',
'com.google.cloud:google-cloud-tasks:[1.33.2,)',
'com.google.code.findbugs:jsr305:[3.0.2,)',
'com.google.code.gson:gson:[2.8.6,)',
'com.google.dagger:dagger-compiler:[2.33,)',
'com.google.dagger:dagger:[2.33,)',
'com.google.errorprone:error_prone_annotations:[2.7.1,)',
'com.google.flogger:flogger-system-backend:[0.7.4,)',
'com.google.flogger:flogger:[0.7.4,)',
'com.google.guava:guava-testlib:[30.1.1-jre,)',
'com.google.guava:guava:[30.1.1-jre,)',
'com.google.gwt:gwt-user:[2.9.0,)',
'com.google.http-client:google-http-client-appengine:[1.39.0,)',
'com.google.http-client:google-http-client-jackson2:[1.39.0,)',
'com.google.http-client:google-http-client:[1.39.0,)',
'com.google.inject:guice:[5.0.1,)',
'com.google.monitoring-client:contrib:[1.0.7,)',
'com.google.monitoring-client:metrics:[1.0.7,)',
'com.google.monitoring-client:stackdriver:[1.0.7,)',
'com.google.oauth-client:google-oauth-client:[1.31.4,)',
'com.google.oauth-client:google-oauth-client-appengine:[1.31.4,)',
'com.google.oauth-client:google-oauth-client-java6:[1.31.4,)',
'com.google.oauth-client:google-oauth-client-jetty:[1.31.4,)',
'com.google.oauth-client:google-oauth-client-servlet:[1.31.4,)',
'com.google.protobuf:protobuf-java:[3.13.0,)',
'com.google.protobuf:protobuf-java-util:[3.17.3,)',
'com.google.re2j:re2j:[1.6,)',
'com.google.truth.extensions:truth-java8-extension:[1.1.2,)',
'com.google.truth:truth:[1.1.2,)',
'com.googlecode.json-simple:json-simple:[1.1.1,)',
'com.ibm.icu:icu4j:[68.2,)',
'com.jcraft:jsch:[0.1.55,)',
'commons-codec:commons-codec:[1.15,)',
'com.squareup:javapoet:[1.13.0,)',
'com.sun.activation:javax.activation:[1.2.0,)',
'com.sun.xml.bind:jaxb-impl:[2.3.3,)',
'com.sun.xml.bind:jaxb-osgi:[2.3.3,)',
'dnsjava:dnsjava:[3.3.1,)',
'guru.nidi:graphviz-java-all-j2v8:[0.17.0,)',
'io.github.classgraph:classgraph:[4.8.102,)',
'io.github.java-diff-utils:java-diff-utils:[4.9,)',
'io.netty:netty-tcnative-boringssl-static:[2.0.36.Final,)',
'javax.annotation:javax.annotation-api:[1.3.2,)',
'javax.annotation:jsr250-api:[1.0,)',
'javax.inject:javax.inject:[1,)',
'javax.mail:mail:[1.4,)',
'javax.persistence:javax.persistence-api:[2.2,)',
'javax.servlet:servlet-api:[2.5,)',
'javax.xml.bind:jaxb-api:[2.3.0,)',
'joda-time:joda-time:[2.9.2,)',
'junit:junit:[4.13,)',
'org.checkerframework:checker-qual:[3.9.1,)',
'org.checkerframework:checker-compat-qual:[2.5.5,)',
'org.junit.jupiter:junit-jupiter-api:[5.6.2,)',
'org.junit.jupiter:junit-jupiter-engine:[5.6.2,)',
'org.junit.jupiter:junit-jupiter-migrationsupport:[5.6.2,)',
'org.junit.jupiter:junit-jupiter-params:[5.6.2,)',
'org.junit.platform:junit-platform-runner:[1.6.2,)',
'org.junit.platform:junit-platform-suite-api:[1.6.2,)',
'org.junit-pioneer:junit-pioneer:[0.7.0,)',
'org.apache.avro:avro:[1.8.2,)',
'org.apache.beam:beam-runners-core-construction-java:[2.37.0,)',
'org.apache.beam:beam-runners-direct-java:[2.37.0,)',
'org.apache.beam:beam-runners-google-cloud-dataflow-java:[2.37.0,)',
'org.apache.beam:beam-sdks-java-core:[2.37.0,)',
'org.apache.beam:beam-sdks-java-extensions-google-cloud-platform-core:[2.37.0,)',
'org.apache.beam:beam-sdks-java-io-google-cloud-platform:[2.37.0,)',
'org.apache.commons:commons-csv:[1.9.0,)',
'org.apache.commons:commons-lang3:[3.8.1,)',
'org.apache.commons:commons-text:[1.6,)',
'org.apache.ftpserver:ftplet-api:[1.0.6,)',
'org.apache.ftpserver:ftpserver-core:[1.0.6,)',
'org.apache.httpcomponents:httpclient:[4.5.11,)',
'org.apache.httpcomponents:httpcore:[4.4.13,)',
'org.apache.tomcat:tomcat-annotations-api:[8.0.5,)',
'com.fasterxml.jackson.core:jackson-databind:[2.11.2,)',
'org.flywaydb:flyway-core:[5.2.4,)',
'org.glassfish.jaxb:jaxb-runtime:[2.3.0,)',
'org.hamcrest:hamcrest:[2.2,)',
'org.hamcrest:hamcrest-core:[2.2,)',
'org.hamcrest:hamcrest-library:[2.2,)',
'org.joda:joda-money:[1.0.1,)',
'org.json:json:[20160810,)',
'org.jsoup:jsoup:[1.13.1,)',
'org.mockito:mockito-core:[3.7.7,)',
'org.mockito:mockito-junit-jupiter:[3.7.7,)',
'org.mortbay.jetty:jetty:[6.1.26,)',
'org.postgresql:postgresql:[42.2.18,)',
'org.eclipse.jetty:jetty-server:[9.4.49.v20220914,)',
'org.eclipse.jetty:jetty-servlet:[9.4.49.v20220914,)',
'org.slf4j:slf4j-jdk14:[1.7.28,)',
'org.testcontainers:jdbc:[1.15.2,)',
'org.testcontainers:junit-jupiter:[1.15.2,)',
'org.testcontainers:postgresql:[1.15.2,)',
'org.testcontainers:selenium:[1.15.2,)',
'org.testcontainers:testcontainers:[1.15.2,)',
'org.yaml:snakeyaml:[1.17,)',
'xerces:xmlParserAPIs:[2.6.2,)',
]
dependencyMap = dependencyList.collectEntries {
def fields = it.split(':')
def key = fields[0] + ':' + fields[1]
[key, it]
}
}