dependencies.yml

#
# NB: Update NOTICE.txt and add/remove LICENSE.*.txt when adding/removing a dependency.
#

boms:
  - com.fasterxml.jackson:jackson-bom:2.12.3
  - io.dropwizard.metrics:metrics-bom:4.2.2
  # Ensure that we use the same Protobuf version as what gRPC depends on.
  # See: https://github.com/grpc/grpc-java/blob/master/build.gradle
  #      (Switch to the right tag and look for 'protobufVersion' and 'protocVersion'.)
  - io.grpc:grpc-bom:1.38.1
  - io.micrometer:micrometer-bom:1.7.1
  # NOTE: When changing this, re-evaluate netty-tcnative-boringssl-static below
  - io.netty:netty-bom:4.1.65.Final
  - io.zipkin.brave:brave-bom:5.13.3
  - org.eclipse.jetty:jetty-bom:9.4.42.v20210604
  - org.junit:junit-bom:5.7.2

cglib:
  cglib: { version: '3.3.0' }

# Akka is used only for testing in it:grpcweb module.
ch.megard:
  akka-http-cors_2.13: { version: '1.0.0' }

ch.qos.logback:
  logback-classic:
    version: '1.2.3'
    javadocs:
    - https://www.javadoc.io/doc/ch.qos.logback/logback-classic/1.2.3/

com.auth0:
  java-jwt:
    version: '3.16.0'
    javadocs:
    - https://www.javadoc.io/doc/com.auth0/java-jwt/3.16.0/

com.fasterxml.jackson.core:
  jackson-annotations:
    javadocs:
    - https://fasterxml.github.io/jackson-annotations/javadoc/2.12/
  jackson-core:
    javadocs:
    - https://fasterxml.github.io/jackson-core/javadoc/2.12/
  jackson-databind:
    javadocs:
    - https://fasterxml.github.io/jackson-databind/javadoc/2.12/

# Don't upgrade Caffeine to 3.x that requires Java 11.
com.github.ben-manes.caffeine:
  caffeine:
    version: '2.9.1'
    exclusions:
    - com.google.errorprone:error_prone_annotations
    javadocs:
    - https://www.javadoc.io/doc/com.github.ben-manes.caffeine/caffeine/2.9.1/
    relocations:
    - from: com.github.benmanes.caffeine
      to: com.linecorp.armeria.internal.shaded.caffeine

com.github.jengelman.gradle.plugins:
  shadow: { version: '6.1.0' }

com.github.node-gradle:
  gradle-node-plugin: { version: '3.1.0' }

com.google.api:
  gax-grpc: { version: '1.65.1' }

com.google.code.findbugs:
  jsr305: { version: '3.0.2' }

# This is only used for examples/context-propagation/dagger
com.google.dagger:
  dagger: { version: &DAGGER_VERSION '2.37' }
  dagger-compiler: { version: *DAGGER_VERSION }
  dagger-producers: { version: *DAGGER_VERSION }

com.google.errorprone:
  error_prone_core: { version: &ERRORPRONE_VERSION '2.7.1' }
  error_prone_annotations: { version: *ERRORPRONE_VERSION }

com.google.guava:
  guava:
    version: &GUAVA_VERSION '30.1.1-jre'
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.j2objc:j2objc-annotations
    - org.codehaus.mojo:animal-sniffer-annotations
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava
    - from: com.google.thirdparty.publicsuffix
      to: com.linecorp.armeria.internal.shaded.publicsuffix
  guava-testlib:
    version: *GUAVA_VERSION
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.j2objc:j2objc-annotations
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava
  # A transitive dependency of Guava which needs relocation as well.
  failureaccess:
    version: '1.0.1'
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava

# We do not depend on j2objc-annotations. We just need this to stop Javadoc from
# complaining about 'unknown enum constant Level.FULL'.
com.google.j2objc:
  j2objc-annotations: { version: '1.3' }

# Ensure that we use the same Protobuf version as what gRPC depends on.
# See: https://github.com/grpc/grpc-java/blob/master/build.gradle
#      (Switch to the right tag and look for 'protobufVersion' and 'protocVersion'.)
com.google.protobuf:
  protobuf-java: { version: &PROTOBUF_VERSION '3.12.0' }
  protobuf-java-util:
    version: *PROTOBUF_VERSION
    exclusions:
    - com.google.errorprone:error_prone_annotations
  protobuf-gradle-plugin: { version: '0.8.13' }
  protoc: { version: *PROTOBUF_VERSION }

com.graphql-java:
  graphql-java: { version: '16.2' }

# Akka is used only for testing in it:grpcweb module.
com.lightbend.akka.grpc:
  akka-grpc-runtime_2.13: { version: '1.0.3' }

# Eureka is used only for testing in eureka module.
com.netflix.eureka:
  eureka-client: { version: &EUREKA_VERSION '1.10.15' }
  eureka-test-utils: {version: *EUREKA_VERSION }

# DGS is used only for testing in it:dgs moulde.
com.netflix.graphql.dgs:
  graphql-dgs-client: { version: '4.3.1' }

com.pszymczyk.consul:
  embedded-consul: { version: '2.2.1' }

com.puppycrawl.tools:
  checkstyle: { version: '8.43' }

com.salesforce.servicelibs:
  reactor-grpc: { version: &REACTVIVE_GRPC_VERSION '1.0.1' }
  reactor-grpc-stub: { version: *REACTVIVE_GRPC_VERSION }

com.spotify:
  completable-futures:
    version: '0.3.4'
    relocations:
    - from: com.spotify.futures
      to: com.linecorp.armeria.internal.shaded.futures
  futures-extra: { version: 4.3.0 }

com.squareup.retrofit2:
  retrofit:
    version: &RETROFIT2_VERSION '2.9.0'
    javadocs:
    - https://square.github.io/retrofit/2.x/retrofit/
  converter-jackson: { version: *RETROFIT2_VERSION }

com.thesamet.scalapb:
  scalapb-runtime_2.12: { version: &SCALAPB_VERSION '0.11.4' }
  scalapb-runtime_2.13: { version: *SCALAPB_VERSION }
  scalapb-runtime-grpc_2.12: { version: *SCALAPB_VERSION }
  scalapb-runtime-grpc_2.13: { version: *SCALAPB_VERSION }
  scalapb-json4s_2.12: { version: &SCALAPB_JSON4S_VERSION '0.11.1' }
  scalapb-json4s_2.13: { version: *SCALAPB_JSON4S_VERSION }

# Akka is used only for testing in it:grpcweb module.
com.typesafe.akka:
  akka-actor-typed_2.13: { version: &TYPESAFE_AKKA_VERSION '2.6.15' }
  akka-discovery_2.13: { version: *TYPESAFE_AKKA_VERSION }
  akka-stream_2.13: { version: *TYPESAFE_AKKA_VERSION }

# Finagle is used only for testing in zookeeper module.
com.twitter:
  finagle-serversets_2.13:
    version: '21.6.0'

cz.alenkacz:
  gradle-scalafmt: { version: '1.16.2' }

gradle.plugin.net.davidecavestro:
  gradle-jxr-plugin: { version: '0.2.1' }

io.dropwizard:
  dropwizard-core:
    version: &DROPWIZARD_VERSION '2.0.23'
    javadocs:
    - https://www.javadoc.io/doc/io.dropwizard/dropwizard-core/2.0.23/
  dropwizard-jackson: { version: *DROPWIZARD_VERSION }
  dropwizard-lifecycle: { version: *DROPWIZARD_VERSION }
  dropwizard-jersey: { version: *DROPWIZARD_VERSION }
  dropwizard-jetty: { version: *DROPWIZARD_VERSION }
  dropwizard-testing: { version: *DROPWIZARD_VERSION }
  dropwizard-util: { version: *DROPWIZARD_VERSION }
  dropwizard-validation: { version: *DROPWIZARD_VERSION }

io.dropwizard.metrics:
  metrics-core:
    javadocs:
    - https://metrics.dropwizard.io/4.1.0/apidocs/

io.grpc:
  grpc-core:
    javadocs:
    - https://grpc.io/grpc-java/javadoc/
    - https://developers.google.com/protocol-buffers/docs/reference/java/
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - org.codehaus.mojo:animal-sniffer-annotations
  grpc-interop-testing:
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.guava:guava-jdk5
    - com.google.j2objc:j2objc-annotations
    - io.grpc:grpc-alts
    - io.grpc:grpc-xds
    - io.netty:netty-codec-http
    - io.netty:netty-codec-http2
    - io.netty:netty-codec-socks
    - io.netty:netty-handler-proxy
    - io.netty:netty-transport
    - io.netty:netty-tcnative-boringssl-static
  grpc-kotlin-stub: { version: &GRPC_KOTLIN_VERSION '1.1.0' }
  protoc-gen-grpc-kotlin: { version: *GRPC_KOTLIN_VERSION }

io.micrometer:
  micrometer-core:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-core/1.5.6/
  micrometer-registry-prometheus:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-registry-prometheus/1.5.6/
  micrometer-spring-legacy:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-spring-legacy/1.3.9/
    exclusions:
    - org.springframework:spring-web
    - org.springframework:spring-webmvc

# This is only used for ScalaPB test
io.monix:
  monix-reactive_2.12: { version: &MONIX_VERSION '3.4.0' }
  monix-reactive_2.13: { version: *MONIX_VERSION }

io.netty:
  netty-common:
    javadocs:
    - https://netty.io/4.1/api/
  # TODO: get netty-bom to claim this version!
  netty-tcnative-boringssl-static: { version: '2.0.39.Final' }

io.netty.incubator:
  netty-incubator-transport-native-io_uring: { version: '0.0.5.Final' }

io.projectreactor:
  reactor-core:
    version: &REACTOR_VERSION '3.4.7'
    javadocs:
    - https://projectreactor.io/docs/core/release/api/
  reactor-test: { version: *REACTOR_VERSION }

io.projectreactor.kotlin:
  reactor-kotlin-extensions: { version: '1.1.3' }

io.prometheus:
  simpleclient_common:
    version: '0.11.0'
    javadocs:
    - https://prometheus.github.io/client_java/

io.reactivex.rxjava2:
  rxjava:
    version: '2.2.21'
    javadocs:
    - http://reactivex.io/RxJava/2.x/javadoc/

io.reactivex.rxjava3:
  rxjava:
    version: '3.0.13'
    javadocs:
      - http://reactivex.io/RxJava/3.x/javadoc/

io.zipkin.brave:
  brave:
    # ':site:javadoc' fails when we use a newer version of Javadoc.
    javadocs:
    - https://www.javadoc.io/doc/io.zipkin.brave/brave/5.6.3/
    - https://www.javadoc.io/doc/io.zipkin.brave/brave-instrumentation-http/5.6.3/

it.unimi.dsi:
  fastutil-core:
    version: &FAST_UTIL_VERSION '8.5.4'
    relocations:
      - from: it.unimi.dsi.fastutil
        to: com.linecorp.armeria.internal.shaded.fastutil
  fastutil-extra:
    version: *FAST_UTIL_VERSION
    relocations:
      - from: it.unimi.dsi.fastutil
        to: com.linecorp.armeria.internal.shaded.fastutil

javax.annotation:
  javax.annotation-api: { version: '1.3.2' }

javax.inject:
  javax.inject: { version: '1' }

javax.validation:
  validation-api: { version: '2.0.1.Final' }

# This is used only for testing in Eureka.
# Ensure that we use the same javax.ws.rs version as what eureka-client depends on.
# See: https://github.com/Netflix/eureka/blob/master/eureka-client/build.gradle
javax.ws.rs:
  jsr311-api: { version: 1.1.1 }

junit:
  junit:
    version: '4.13.2'
    javadocs:
    - https://junit.org/junit4/javadoc/4.13/

org.junit.jupiter:
  junit-jupiter-api:
    javadocs:
    # ':site:javadoc' fails when we use a newer version of Javadoc.
    - https://junit.org/junit5/docs/5.5.2/api/

me.champeau.jmh:
  jmh-gradle-plugin: { version: '0.6.5' }

net.javacrumbs.json-unit:
  json-unit: { version: &JSON_UNIT_VERSION '2.27.0' }
  json-unit-fluent: { version: *JSON_UNIT_VERSION }

com.guardsquare:
  proguard-gradle: { version: '7.1.0' }

net.shibboleth.utilities:
  java-support: { version: '7.5.2' }

# Ensure that we use the same ZooKeeper version as what Curator depends on.
# See: https://github.com/apache/curator/blob/master/pom.xml
#      (Switch to the right tag to find out the right version.)
org.apache.curator:
  curator-recipes:
    version: &CURATOR_VERSION '5.1.0'
    javadocs:
    - https://www.javadoc.io/doc/org.apache.curator/curator-framework/5.1.0/
    - https://www.javadoc.io/doc/org.apache.curator/curator-recipes/5.1.0/
    exclusions:
    - org.apache.zookeeper:zookeeper
  curator-x-discovery:
    version: *CURATOR_VERSION
    javadocs:
    - https://www.javadoc.io/doc/org.apache.curator/curator-x-discovery/5.1.0/

# This is only used for it/server test
org.apache.hbase:
  hbase-shaded-client:
    version: '1.2.6'
    exclusions:
    - com.github.stephenc.findbugs:findbugs-annotations
    - commons-logging:commons-logging
    - log4j:log4j
    - org.slf4j:slf4j-log4j12

org.apache.httpcomponents:
  httpclient:
    version: '4.5.13'
    exclusions:
    - commons-logging:commons-logging

org.apache.kafka:
  kafka-clients:
    version: '2.8.0'
    javadocs:
    - https://kafka.apache.org/28/javadoc/

org.apache.thrift:
  libthrift:
    version: '0.14.2'
    javadocs:
    - https://www.javadoc.io/doc/org.apache.thrift/libthrift/0.14.2/
    exclusions:
    - javax.annotation:javax.annotation-api
    - org.apache.httpcomponents:httpcore
    - org.apache.httpcomponents:httpclient

org.apache.tomcat.embed:
  tomcat-embed-core:
    version: &TOMCAT_VERSION '9.0.46'
    javadocs:
    - https://tomcat.apache.org/tomcat-9.0-doc/api/
  tomcat-embed-jasper: { version: *TOMCAT_VERSION }
  tomcat-embed-el: { version: *TOMCAT_VERSION }

# Ensure that we use the same ZooKeeper version as what Curator depends on.
# See: https://github.com/apache/curator/blob/master/pom.xml
#      (Switch to the right tag to find out the right version.)
org.apache.zookeeper:
  zookeeper:
    version: '3.6.2'
    exclusions:
    - io.netty:netty-all
    - log4j:log4j
    - org.slf4j:slf4j-log4j12

org.assertj:
  assertj-core: { version: '3.17.1' }

org.awaitility:
  awaitility: { version: '4.1.0' }

org.bouncycastle:
  bcprov-jdk15on:
    version: '1.69'
    relocations:
    - from: org.bouncycastle
      to: com.linecorp.armeria.internal.shaded.bouncycastle

org.checkerframework:
  checker-compat-qual: { version: '2.5.5' }

org.curioswitch.curiostack:
  protobuf-jackson:
    version: '1.2.0'
    exclusions:
    - javax.annotation:javax.annotation-api
    javadocs:
    - https://developers.curioswitch.org/apidocs/java/

org.dmonix.junit:
  zookeeper-junit: { version: '1.2' }

org.eclipse.jetty:
  jetty-annotations:
    exclusions:
    - org.ow2.asm:asm
    - org.ow2.asm:asm-commons
  jetty-server:
    javadocs:
    - https://javadoc.io/doc/org.eclipse.jetty/jetty-server/9.4.42.v20210604/

org.eclipse.jetty.alpn:
  alpn-api: { version: '1.1.3.v20160715' }

# Groovy is only used for testing consul
# The version is aligned with the Groovy version of Gradle to avoid additional downloads
org.codehaus.groovy:
  groovy-xml: { version: '3.0.5' }

org.hamcrest:
  hamcrest: { version: &HAMCREST_VERSION '2.2' }
  hamcrest-library: { version: *HAMCREST_VERSION }

org.hibernate.validator:
  hibernate-validator: { version: '6.2.0.Final' }

org.jctools:
  jctools-core:
    version: '3.3.0'
    relocations:
    - from: org.jctools
      to: com.linecorp.armeria.internal.shaded.jctools

# If you want to change `org.jetbrains.kotlin:kotlin-allopen` version,
# you also need to change `org.jetbrains.kotlin.jvm` version in `build.gradle`.
org.jetbrains.kotlin:
  kotlin-allopen: { version: '1.5.10' }

org.jetbrains.kotlinx:
  kotlinx-coroutines-core: { version: &KOTLIN_COROUTINE_VERSION '1.5.0' }
  kotlinx-coroutines-jdk8: { version: *KOTLIN_COROUTINE_VERSION }
  kotlinx-coroutines-rx2: { version: *KOTLIN_COROUTINE_VERSION }

org.jlleitschuh.gradle:
  ktlint-gradle: { version: '10.1.0' }

org.jooq:
  joor: { version: '0.9.14' }

org.jsoup:
  jsoup: { version: '1.13.1' }

org.mockito:
  mockito-core: { version: &MOCKITO_VERSION '3.11.2' }
  mockito-junit-jupiter: { version: *MOCKITO_VERSION }

org.mortbay.jetty.alpn:
  jetty-alpn-agent: { version: '2.0.10' }

org.openjdk.jmh:
  jmh-core: { version: &JMH_VERSION '1.32' }
  jmh-generator-annprocess: { version: *JMH_VERSION }

# Don't upgrade OpenSAML to 4.x that requires Java 11.
org.opensaml:
  opensaml-core: { version: &OPENSAML_VERSION '3.4.6' }
  opensaml-saml-api: { version: *OPENSAML_VERSION }
  opensaml-saml-impl: { version: *OPENSAML_VERSION }
  opensaml-messaging-api: { version: *OPENSAML_VERSION }
  opensaml-messaging-impl: { version: *OPENSAML_VERSION }
  opensaml-soap-api: { version: *OPENSAML_VERSION }
  opensaml-soap-impl: { version: *OPENSAML_VERSION }

org.reactivestreams:
  reactive-streams: { version: &REACTIVE_STREAMS_VERSION '1.0.3' }
  reactive-streams-tck:
    version: *REACTIVE_STREAMS_VERSION
    exclusions:
    - org.yaml:snakeyaml

org.reflections:
  reflections:
    # Upgrade once https://github.com/ronmamo/reflections/issues/279 is fixed.
    version: '0.9.11'
    exclusions:
      - com.google.errorprone:error_prone_annotations
      - com.google.j2objc:j2objc-annotations
      - org.codehaus.mojo:animal-sniffer-annotations
    relocations:
    - from: org.reflections
      to: com.linecorp.armeria.internal.shaded.reflections

org.scala-lang:
  scala-library: { version: '2.13.6' }

org.scala-lang.modules:
  scala-collection-compat_2.12: { version: '2.4.4' }
  scala-java8-compat_2.12: { version: &SCALA_JAVA8_COMPAT_VERSION '1.0.0' }
  scala-java8-compat_2.13: { version: *SCALA_JAVA8_COMPAT_VERSION }

org.scalameta:
  munit_2.12: { version: &MUNIT_VERSION '0.7.26' }
  munit_2.13: { version: *MUNIT_VERSION }

org.slf4j:
  jcl-over-slf4j: { version: &SLF4J_VERSION '1.7.31' }
  jul-to-slf4j: { version: *SLF4J_VERSION }
  log4j-over-slf4j: { version: *SLF4J_VERSION }
  slf4j-api:
    version: *SLF4J_VERSION
    javadocs:
    - https://www.javadoc.io/doc/org.slf4j/slf4j-api/1.7.31/
  slf4j-simple: { version: *SLF4J_VERSION }

org.springframework:
  spring-web: { version: '5.3.8' }

org.springframework.boot:
  spring-boot-starter:
    version: &SPRING_BOOT_VERSION '2.5.2'
    javadocs:
    - https://docs.spring.io/spring/docs/current/javadoc-api/
  spring-boot-actuator-autoconfigure: { version: *SPRING_BOOT_VERSION }
  spring-boot-autoconfigure: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-actuator: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-security: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-test: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-web: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-webflux:
    version: *SPRING_BOOT_VERSION
    exclusions:
    - org.springframework.boot:spring-boot-starter-reactor-netty
  spring-boot-configuration-processor: { version: *SPRING_BOOT_VERSION }
  spring-boot-gradle-plugin: { version: *SPRING_BOOT_VERSION }

org.testng:
  testng: { version: '7.4.0' }

org.xerial.snappy:
  snappy-java: { version: '1.1.8.4' }

pl.project13.scala:
  sbt-jmh-extras: { version: '0.3.7' }

# Needed to work around the problem with Gradle not supporting POM relocation correctly.
xml-apis:
  xml-apis: { version: '1.4.01' }

com.github.vladimir-bukhtoyarov:
  bucket4j-core:
    version: '6.2.0'
    javadocs:
    - https://javadoc.io/doc/com.github.vladimir-bukhtoyarov/bucket4j-core/6.2.0/

org.jboss.resteasy:
  resteasy-core-spi:
    version: &RESTEASY_VERSION '4.6.1.Final'
    javadocs:
    - https://docs.jboss.org/resteasy/docs/4.6.0.Final/javadocs/
  resteasy-core: { version: *RESTEASY_VERSION }
  resteasy-client: { version: *RESTEASY_VERSION }
  resteasy-jackson2-provider: { version: *RESTEASY_VERSION }

# "provided" dependency required by RESTEasy 'resteasy-core-spi'
org.jboss.logging:
  jboss-logging:
    version: '3.4.2.Final'
    javadocs:
    - https://javadoc.io/doc/org.jboss.logging/jboss-logging/3.4.2.Final/
  jboss-logging-annotations:
    version: '2.2.1.Final'
    javadocs:
    - https://javadoc.io/doc/org.jboss.logging/jboss-logging-annotations/2.2.1.Final/