Update library dependencies to avoid sbt eviction warnings

[TobsCore]

Using the latest 0.49.0-alpha version results in the following warning using sbt.

sbt:projectname> clean
[success] Total time: 0 s, completed 31.05.2018 22:50:18
sbt:projectname> compile
[info] Updating ...
[info] Done updating.
[warn] Found version conflict(s) in library dependencies; some are suspected to be binary incompatible:
[warn] 	* com.google.auth:google-auth-library-credentials:0.9.1 is selected over 0.9.0
[warn] 	    +- com.google.auth:google-auth-library-oauth2-http:0.9.1 (depends on 0.9.1)
[warn] 	    +- com.google.api:gax-grpc:1.25.0                     (depends on 0.9.1)
[warn] 	    +- com.google.cloud:google-cloud-core-grpc:1.31.0     (depends on 0.9.1)
[warn] 	    +- io.grpc:grpc-auth:1.10.1                           (depends on 0.9.0)
[warn] 	* com.google.code.findbugs:jsr305:3.0.1 is selected over {1.3.9, 3.0.0}
[warn] 	    +- io.grpc:grpc-core:1.10.1                           (depends on 3.0.0)
[warn] 	    +- com.google.api:gax-grpc:1.25.0                     (depends on 3.0.0)
[warn] 	    +- com.google.api:gax:1.25.0                          (depends on 1.3.9)
[warn] 	    +- com.google.http-client:google-http-client:1.23.0   (depends on 1.3.9)
[warn] 	    +- com.google.api:api-common:1.5.0                    (depends on 1.3.9)
[warn] 	    +- com.google.cloud:google-cloud-core:1.31.0          (depends on 1.3.9)
[warn] 	* com.google.guava:guava:20.0 is selected over 19.0
[warn] 	    +- com.google.api:gax:1.25.0                          (depends on 20.0)
[warn] 	    +- com.google.api:gax-grpc:1.25.0                     (depends on 20.0)
[warn] 	    +- com.google.cloud:google-cloud-core-grpc:1.31.0     (depends on 20.0)
[warn] 	    +- com.google.cloud:google-cloud-core:1.31.0          (depends on 20.0)
[warn] 	    +- com.google.auth:google-auth-library-oauth2-http:0.9.1 (depends on 19.0)
[warn] 	    +- io.grpc:grpc-core:1.10.1                           (depends on 19.0)
[warn] 	    +- io.opencensus:opencensus-api:0.11.0                (depends on 19.0)
[warn] 	    +- com.google.protobuf:protobuf-java-util:3.5.1       (depends on 19.0)
[warn] 	    +- io.grpc:grpc-protobuf:1.10.1                       (depends on 19.0)
[warn] 	    +- io.grpc:grpc-protobuf-lite:1.10.1                  (depends on 19.0)
[warn] 	    +- com.google.api:api-common:1.5.0                    (depends on 19.0)
[warn] Run 'evicted' to see detailed eviction warnings
[info] Compiling 51 Scala sources to /Users/tobscore/pathToProject/target/scala-2.12/classes ...
[info] Done compiling.
[success] Total time: 4 s, completed 31.05.2018 22:50:25

Adding the following line to any project's build.sbt, will cause the above warnings.

libraryDependencies += "com.google.cloud" % "google-cloud-speech" % "0.49.0-alpha"

I also tested this in a bare project with no other dependencies but this one.

[yihanzhen]

@andreamlin you could probably solve this issue along with the release as well?

[andreamlin]

@TobsCore thanks for filing this issue! Would you mind using the latest 0.50.0 version? That hopefully would solve the jsr dependency issue.

[TobsCore]

@andreamlin hey, i just checked and it still showed the warning. I pushed my example project to github, so you can try it yourself/reproduce. It's just a simple Hello World project, but still. Here's the warning using the lates 0.50.0 version:

sbt:google-cloud-warnings> clean
[success] Total time: 0 s, completed 05.06.2018 17:35:56
sbt:google-cloud-warnings> evicted
[info] Updating ...
[info] Done updating.
[warn] Found version conflict(s) in library dependencies; some are suspected to be binary incompatible:
[warn] 	* com.google.auth:google-auth-library-credentials:0.9.1 is selected over 0.9.0
[warn] 	    +- com.google.auth:google-auth-library-oauth2-http:0.9.1 (depends on 0.9.1)
[warn] 	    +- com.google.cloud:google-cloud-core-grpc:1.32.0     (depends on 0.9.1)
[warn] 	    +- com.google.api:gax-grpc:1.27.0                     (depends on 0.9.1)
[warn] 	    +- io.grpc:grpc-auth:1.10.1                           (depends on 0.9.0)
[warn] 	* com.google.code.findbugs:jsr305:3.0.2 is selected over {1.3.9, 3.0.0}
[warn] 	    +- com.google.api:gax-grpc:1.27.0                     (depends on 3.0.2)
[warn] 	    +- io.grpc:grpc-core:1.10.1                           (depends on 3.0.0)
[warn] 	    +- com.google.api:api-common:1.6.0                    (depends on 1.3.9)
[warn] 	    +- com.google.cloud:google-cloud-core:1.32.0          (depends on 1.3.9)
[warn] 	    +- com.google.api:gax:1.27.0                          (depends on 1.3.9)
[warn] 	    +- com.google.http-client:google-http-client:1.23.0   (depends on 1.3.9)
[warn] 	* com.google.guava:guava:20.0 is selected over 19.0
[warn] 	    +- com.google.cloud:google-cloud-core-grpc:1.32.0     (depends on 20.0)
[warn] 	    +- com.google.cloud:google-cloud-core:1.32.0          (depends on 20.0)
[warn] 	    +- com.google.api:gax:1.27.0                          (depends on 20.0)
[warn] 	    +- com.google.api:gax-grpc:1.27.0                     (depends on 20.0)
[warn] 	    +- com.google.auth:google-auth-library-oauth2-http:0.9.1 (depends on 19.0)
[warn] 	    +- io.grpc:grpc-core:1.10.1                           (depends on 19.0)
[warn] 	    +- com.google.api:api-common:1.6.0                    (depends on 19.0)
[warn] 	    +- io.opencensus:opencensus-api:0.11.0                (depends on 19.0)
[warn] 	    +- com.google.protobuf:protobuf-java-util:3.5.1       (depends on 19.0)
[warn] 	    +- io.grpc:grpc-protobuf:1.10.1                       (depends on 19.0)
[warn] 	    +- io.grpc:grpc-protobuf-lite:1.10.1                  (depends on 19.0)

[TobsCore]

As you can see, i ran these commands from the sbt shell, but after cloning it, simply running sbt evicted in the console should display the same output.

[andreamlin]

Hi @TobsCore , are these just warnings or is this a blocker that prevents building your project? There are plans to resolve these dependency discrepancies.

[TobsCore]

@andreamlin, these are actually just warnings but this might still cause errors with certain flags set. But as there are plans to resolve this issue in the long run, this should be covered then.

[andreamlin]

@garrettjonesgoogle leaving this issue open to track the dependency management work

[akauppi]

In case this helps you, there are at least two sbt plugins to help see whether fresher dependencies are available:

• https://github.com/aiyanbo/sbt-dependency-updates
• https://github.com/rtimush/sbt-updates