dependencies.yml

#
# NB: Update NOTICE.txt and add/remove LICENSE.*.txt when adding/removing a dependency.
#

boms:
  - com.fasterxml.jackson:jackson-bom:2.11.2
  - io.dropwizard.metrics:metrics-bom:4.1.12.1
  - io.grpc:grpc-bom:1.31.1
  - io.micrometer:micrometer-bom:1.5.4
  # NOTE: When changing this, re-evaluate netty-tcnative-boringssl-static below
  - io.netty:netty-bom:4.1.51.Final
  - io.zipkin.brave:brave-bom:5.12.4
  - org.eclipse.jetty:jetty-bom:9.4.31.v20200723
  - org.junit:junit-bom:5.6.2

cglib:
  cglib: { version: '3.3.0' }

# Akka is used only for testing in it:grpcweb module.
ch.megard:
  akka-http-cors_2.13: { version: '1.0.0' }

ch.qos.logback:
  logback-classic:
    version: '1.2.3'
    javadocs:
    - https://www.javadoc.io/doc/ch.qos.logback/logback-classic/1.2.3/

com.auth0:
  java-jwt:
    version: '3.10.3'
    javadocs:
    - https://www.javadoc.io/doc/com.auth0/java-jwt/3.10.3/

com.fasterxml.jackson.core:
  jackson-annotations:
    javadocs:
    - https://fasterxml.github.io/jackson-annotations/javadoc/2.11/
  jackson-core:
    javadocs:
    - https://fasterxml.github.io/jackson-core/javadoc/2.11/
  jackson-databind:
    javadocs:
    - https://fasterxml.github.io/jackson-databind/javadoc/2.11/

com.github.ben-manes.caffeine:
  caffeine:
    version: '2.8.5'
    exclusions:
    - com.google.errorprone:error_prone_annotations
    javadocs:
    - https://www.javadoc.io/doc/com.github.ben-manes.caffeine/caffeine/2.8.5/
    relocations:
    - from: com.github.benmanes.caffeine
      to: com.linecorp.armeria.internal.shaded.caffeine

com.github.jengelman.gradle.plugins:
  shadow: { version: '6.0.0' }

com.github.node-gradle:
  gradle-node-plugin: { version: '2.2.4' }

com.google.api:
  gax-grpc: { version: '1.58.2' }

com.google.code.findbugs:
  jsr305: { version: '3.0.2' }

com.google.dagger:
  dagger: { version: &DAGGER_VERSION '2.28.3' }
  dagger-compiler: { version: *DAGGER_VERSION }
  dagger-producers: { version: *DAGGER_VERSION }

com.google.errorprone:
  error_prone_core: { version: &ERRORPRONE_VERSION '2.4.0' }
  error_prone_annotations: { version: *ERRORPRONE_VERSION }

com.google.guava:
  guava:
    version: &GUAVA_VERSION '29.0-jre'
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.j2objc:j2objc-annotations
    - org.codehaus.mojo:animal-sniffer-annotations
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava
    - from: com.google.thirdparty.publicsuffix
      to: com.linecorp.armeria.internal.shaded.publicsuffix
  guava-testlib:
    version: *GUAVA_VERSION
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.j2objc:j2objc-annotations
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava
  # A transitive dependency of Guava which needs relocation as well.
  failureaccess:
    version: '1.0.1'
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava

# We do not depend on j2objc-annotations. We just need this to stop Javadoc from
# complaining about 'unknown enum constant Level.FULL'.
com.google.j2objc:
  j2objc-annotations: { version: '1.3' }

# Ensure that we use the same Protobuf version as what gRPC depends on.
# See: https://github.com/grpc/grpc-java/blob/master/build.gradle
#      (Switch to the right tag and look for 'protobufVersion' and 'protocVersion'.)
com.google.protobuf:
  protobuf-java: { version: &PROTOBUF_VERSION '3.12.0' }
  protobuf-java-util:
    version: *PROTOBUF_VERSION
    exclusions:
    - com.google.errorprone:error_prone_annotations
  protobuf-gradle-plugin: { version: '0.8.13' }
  protoc: { version: *PROTOBUF_VERSION }

# Akka is used only for testing in it:grpcweb module.
com.lightbend.akka.grpc:
  akka-grpc-runtime_2.13: { version: '1.0.1' }

# Eureka is used only for testing in eureka module.
com.netflix.eureka:
  eureka-client: { version: &EUREKA_VERSION '1.9.25' }
  eureka-test-utils: {version: *EUREKA_VERSION }

com.puppycrawl.tools:
  checkstyle: { version: '8.35' }

com.salesforce.servicelibs:
  reactor-grpc: { version: &REACTVIVE_GRPC_VERSION '1.0.1' }
  reactor-grpc-stub: { version: *REACTVIVE_GRPC_VERSION }

com.spotify:
  completable-futures:
    version: '0.3.3'
    relocations:
    - from: com.spotify.futures
      to: com.linecorp.armeria.internal.shaded.futures
  futures-extra: { version: 4.2.2 }

com.squareup.retrofit2:
  retrofit:
    version: &RETROFIT2_VERSION '2.9.0'
    javadocs:
    - https://square.github.io/retrofit/2.x/retrofit/
  converter-jackson: { version: *RETROFIT2_VERSION }

com.thesamet.scalapb:
  scalapb-runtime_2.13: { version: &SCALAPB_VERSION '0.10.8' }
  scalapb-runtime-grpc_2.13: { version: *SCALAPB_VERSION }
  scalapb-json4s_2.13: { version: '0.10.1' }

# Akka is used only for testing in it:grpcweb module.
com.typesafe.akka:
  akka-actor-typed_2.13: { version: &TYPESAFE_AKKA_VERSION '2.6.8' }
  akka-discovery_2.13: { version: *TYPESAFE_AKKA_VERSION }
  akka-stream_2.13: { version: *TYPESAFE_AKKA_VERSION }

# Finagle is used only for testing in zookeeper module.
com.twitter:
  finagle-serversets_2.13:
    version: '20.8.0'

gradle.plugin.net.davidecavestro:
  gradle-jxr-plugin: { version: '0.2.1' }

io.dropwizard:
  dropwizard-core:
    version: &DROPWIZARD_VERSION '2.0.12'
    javadocs:
    - https://www.javadoc.io/doc/io.dropwizard/dropwizard-core/2.0.12/
  dropwizard-jackson: { version: *DROPWIZARD_VERSION }
  dropwizard-lifecycle: { version: *DROPWIZARD_VERSION }
  dropwizard-jersey: { version: *DROPWIZARD_VERSION }
  dropwizard-jetty: { version: *DROPWIZARD_VERSION }
  dropwizard-testing: { version: *DROPWIZARD_VERSION }
  dropwizard-util: { version: *DROPWIZARD_VERSION }
  dropwizard-validation: { version: *DROPWIZARD_VERSION }

io.dropwizard.metrics:
  metrics-core:
    javadocs:
    - https://metrics.dropwizard.io/4.1.0/apidocs/

# Ensure to update the Protobuf version in this file when updating gRPC.
io.grpc:
  grpc-core:
    javadocs:
    - https://grpc.io/grpc-java/javadoc/
    - https://developers.google.com/protocol-buffers/docs/reference/java/
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - org.codehaus.mojo:animal-sniffer-annotations
  grpc-interop-testing:
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.guava:guava-jdk5
    - com.google.j2objc:j2objc-annotations
    - io.grpc:grpc-alts
    - io.grpc:grpc-xds
    - io.netty:netty-codec-http
    - io.netty:netty-codec-http2
    - io.netty:netty-codec-socks
    - io.netty:netty-handler-proxy
    - io.netty:netty-transport
    - io.netty:netty-tcnative-boringssl-static
  grpc-kotlin-stub: { version: &GRPC_KOTLIN_VERSION '0.1.5' }
  protoc-gen-grpc-kotlin: { version: *GRPC_KOTLIN_VERSION }

io.micrometer:
  micrometer-core:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-core/1.4.0/
  micrometer-registry-prometheus:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-registry-prometheus/1.4.0/
  micrometer-spring-legacy:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-spring-legacy/1.3.9/
    exclusions:
    - org.springframework:spring-web
    - org.springframework:spring-webmvc

# This is only used for examples/grpc-scala
io.monix:
  monix-reactive_2.13: { version: '3.2.2+43-36c1ada8' }

io.netty:
  netty-common:
    javadocs:
    - https://netty.io/4.1/api/
  # TODO: get netty-bom to claim this version!
  netty-tcnative-boringssl-static: { version: '2.0.31.Final' }

io.projectreactor:
  reactor-core:
    version: &REACTOR_VERSION '3.3.9.RELEASE'
    javadocs:
    - https://projectreactor.io/docs/core/release/api/
  reactor-test: { version: *REACTOR_VERSION }

io.projectreactor.kotlin:
  reactor-kotlin-extensions: { version: '1.0.2.RELEASE' }

io.prometheus:
  simpleclient_common:
    version: '0.9.0'
    javadocs:
    - https://prometheus.github.io/client_java/

io.reactivex.rxjava2:
  rxjava:
    version: '2.2.19'
    javadocs:
    - http://reactivex.io/RxJava/2.x/javadoc/

io.reactivex.rxjava3:
  rxjava:
    version: '3.0.6'
    javadocs:
      - http://reactivex.io/RxJava/3.x/javadoc/

io.zipkin.brave:
  brave:
    # ':site:javadoc' fails when we use a newer version of Javadoc.
    javadocs:
    - https://www.javadoc.io/doc/io.zipkin.brave/brave/5.6.3/
    - https://www.javadoc.io/doc/io.zipkin.brave/brave-instrumentation-http/5.6.3/

it.unimi.dsi:
  fastutil:
    version: '8.4.1'
    relocations:
    - from: it.unimi.dsi.fastutil
      to: com.linecorp.armeria.internal.shaded.fastutil

jakarta.annotation:
  jakarta.annotation-api: { version: '1.3.5' }

javax.inject:
  javax.inject: { version: '1' }

javax.validation:
  validation-api: { version: '2.0.1.Final' }

# This is used only for testing in Eureka.
# Ensure that we use the same javax.ws.rs version as what eureka-client depends on.
# See: https://github.com/Netflix/eureka/blob/master/eureka-client/build.gradle
javax.ws.rs:
  jsr311-api: { version: 1.1.1 }

junit:
  junit:
    version: '4.13'
    javadocs:
    - https://junit.org/junit4/javadoc/4.13/

org.junit.jupiter:
  junit-jupiter-api:
    javadocs:
    # ':site:javadoc' fails when we use a newer version of Javadoc.
    - https://junit.org/junit5/docs/5.5.2/api/

# We do not depend on log4j. We just need this to stop dependency-management-plugin from
# complaining about its bad POM.
# See: https://github.com/spring-gradle-plugins/dependency-management-plugin/issues/59
log4j:
  log4j: { version: '1.2.17' }

me.champeau.gradle:
  jmh-gradle-plugin: { version: '0.5.0' }

net.javacrumbs.future-converter:
  future-converter-rxjava2-java8: { version: 1.2.0 }

net.javacrumbs.json-unit:
  json-unit: { version: &JSON_UNIT_VERSION '2.18.1' }
  json-unit-fluent: { version: *JSON_UNIT_VERSION }

net.sf.proguard:
  proguard-gradle: { version: '6.2.2' }

net.shibboleth.utilities:
  java-support: { version: '7.5.1' }

# Ensure that we use the same ZooKeeper version as what Curator depends on.
# See: https://github.com/apache/curator/blob/master/pom.xml
org.apache.curator:
  curator-recipes:
    version: &CURATOR_VERSION '4.3.0'
    javadocs:
    - https://www.javadoc.io/doc/org.apache.curator/curator-framework/4.3.0/
    - https://www.javadoc.io/doc/org.apache.curator/curator-recipes/4.3.0/
    exclusions:
    - org.apache.zookeeper:zookeeper
  curator-x-discovery:
    version: *CURATOR_VERSION
    javadocs:
    - https://www.javadoc.io/doc/org.apache.curator/curator-x-discovery/4.3.0/

org.apache.hbase:
  hbase-shaded-client:
    version: '1.2.6'
    exclusions:
    - com.github.stephenc.findbugs:findbugs-annotations
    - commons-logging:commons-logging
    - log4j:log4j
    - org.slf4j:slf4j-log4j12

org.apache.httpcomponents:
  httpclient:
    version: '4.5.12'
    exclusions:
    - commons-logging:commons-logging

org.apache.kafka:
  kafka-clients:
    version: '2.6.0'
    javadocs:
    - https://kafka.apache.org/26/javadoc/

org.apache.thrift:
  libthrift:
    version: '0.13.0'
    javadocs:
    - https://www.javadoc.io/doc/org.apache.thrift/libthrift/0.13.0/
    exclusions:
    - javax.annotation:javax.annotation-api
    - org.apache.httpcomponents:httpcore
    - org.apache.httpcomponents:httpclient

org.apache.tomcat.embed:
  tomcat-embed-core:
    version: &TOMCAT_VERSION '9.0.37'
    javadocs:
    - https://tomcat.apache.org/tomcat-9.0-doc/api/
  tomcat-embed-jasper: { version: *TOMCAT_VERSION }
  tomcat-embed-el: { version: *TOMCAT_VERSION }

org.apache.zookeeper:
  zookeeper:
    version: '3.5.8'
    exclusions:
    - io.netty:netty-all
    - log4j:log4j
    - org.slf4j:slf4j-log4j12

org.assertj:
  assertj-core: { version: '3.16.1' }

org.awaitility:
  awaitility: { version: '4.0.3' }

org.bouncycastle:
  bcprov-jdk15on:
    version: '1.66'
    relocations:
    - from: org.bouncycastle
      to: com.linecorp.armeria.internal.shaded.bouncycastle

org.checkerframework:
  checker-compat-qual: { version: '2.5.5' }

org.curioswitch.curiostack:
  protobuf-jackson:
    version: '1.1.0'
    exclusions:
    - javax.annotation:javax.annotation-api
    javadocs:
    - https://developers.curioswitch.org/apidocs/java/

org.dmonix.junit:
  zookeeper-junit: { version: '1.2' }

org.eclipse.jetty:
  jetty-annotations:
    exclusions:
    - org.ow2.asm:asm
    - org.ow2.asm:asm-commons
  jetty-server:
    javadocs:
    - https://www.eclipse.org/jetty/javadoc/current/

org.eclipse.jetty.alpn:
  alpn-api: { version: '1.1.3.v20160715' }

org.hamcrest:
  hamcrest: { version: &HAMCREST_VERSION '2.2' }
  hamcrest-library: { version: *HAMCREST_VERSION }

org.hibernate.validator:
  hibernate-validator: { version: '6.1.5.Final' }

org.jctools:
  jctools-core:
    version: '3.1.0'
    relocations:
    - from: org.jctools
      to: com.linecorp.armeria.internal.shaded.jctools

# If you want to change `org.jetbrains.kotlin:kotlin-allopen` version,
# you also need to change `org.jetbrains.kotlin.jvm` version in `build.gradle`.
org.jetbrains.kotlin:
  kotlin-allopen: { version: &KOTLIN_VERSION '1.3.72' }

org.jetbrains.kotlinx:
  kotlinx-coroutines-core: { version: &KOTLIN_COROUTINE_VERSION '1.3.8' }
  kotlinx-coroutines-jdk8: { version: *KOTLIN_COROUTINE_VERSION }
  kotlinx-coroutines-rx2: { version: *KOTLIN_COROUTINE_VERSION }

org.jlleitschuh.gradle:
  ktlint-gradle: { version: '9.3.0' }

org.jooq:
  joor: { version: '0.9.13' }

org.jsoup:
  jsoup: { version: '1.13.1' }

org.mockito:
  mockito-core: { version: &MOCKITO_VERSION '3.5.2' }
  mockito-junit-jupiter: { version: *MOCKITO_VERSION }

org.mortbay.jetty.alpn:
  jetty-alpn-agent: { version: '2.0.10' }

org.openjdk.jmh:
  jmh-core: { version: &JMH_VERSION '1.25' }
  jmh-generator-annprocess: { version: *JMH_VERSION }

org.opensaml:
  opensaml-core: { version: &OPENSAML_VERSION '3.4.5' }
  opensaml-saml-api: { version: *OPENSAML_VERSION }
  opensaml-saml-impl: { version: *OPENSAML_VERSION }
  opensaml-messaging-api: { version: *OPENSAML_VERSION }
  opensaml-messaging-impl: { version: *OPENSAML_VERSION }
  opensaml-soap-api: { version: *OPENSAML_VERSION }
  opensaml-soap-impl: { version: *OPENSAML_VERSION }

org.reactivestreams:
  reactive-streams: { version: &REACTIVE_STREAMS_VERSION '1.0.3' }
  reactive-streams-tck:
    version: *REACTIVE_STREAMS_VERSION
    exclusions:
    - org.yaml:snakeyaml

org.reflections:
  reflections:
    # Upgrade once https://github.com/ronmamo/reflections/issues/279 is fixed.
    version: '0.9.11'
    exclusions:
      - com.google.errorprone:error_prone_annotations
      - com.google.j2objc:j2objc-annotations
      - org.codehaus.mojo:animal-sniffer-annotations
    relocations:
    - from: org.reflections
      to: com.linecorp.armeria.internal.shaded.reflections

org.scala:
  scala-library: { version: '2.13.2' }

org.slf4j:
  jcl-over-slf4j: { version: &SLF4J_VERSION '1.7.30' }
  jul-to-slf4j: { version: *SLF4J_VERSION }
  log4j-over-slf4j: { version: *SLF4J_VERSION }
  slf4j-api:
    version: *SLF4J_VERSION
    javadocs:
    - https://www.javadoc.io/doc/org.slf4j/slf4j-api/1.7.30/
  slf4j-simple: { version: *SLF4J_VERSION }

org.springframework:
  spring-web: { version: '5.2.8.RELEASE' }

org.springframework.boot:
  spring-boot-starter:
    version: &SPRING_BOOT_VERSION '2.3.3.RELEASE'
    javadocs:
    - https://docs.spring.io/spring/docs/current/javadoc-api/
  spring-boot-actuator-autoconfigure: { version: *SPRING_BOOT_VERSION }
  spring-boot-autoconfigure: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-actuator: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-test: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-web: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-webflux:
    version: *SPRING_BOOT_VERSION
    exclusions:
    - org.springframework.boot:spring-boot-starter-reactor-netty
  spring-boot-configuration-processor: { version: *SPRING_BOOT_VERSION }
  spring-boot-gradle-plugin: { version: *SPRING_BOOT_VERSION }

org.testng:
  testng: { version: '7.1.0' }

pl.project13.scala:
  sbt-jmh-extras: { version: '0.3.7' }

# Needed to work around the problem with Gradle not supporting POM relocation correctly.
xml-apis:
  xml-apis: { version: '1.4.01' }

com.github.vladimir-bukhtoyarov:
  bucket4j-core:
    version: '4.10.0'
    javadocs:
    - https://javadoc.io/doc/com.github.vladimir-bukhtoyarov/bucket4j-core/4.10.0/