dependencies.yml

#
# NB: Update NOTICE.txt and add/remove LICENSE.*.txt when adding/removing a dependency.
#

boms:
  - com.fasterxml.jackson:jackson-bom:2.13.0
  - io.dropwizard.metrics:metrics-bom:4.2.4
  # Ensure that we use the same Protobuf version as what gRPC depends on.
  # See: https://github.com/grpc/grpc-java/blob/master/build.gradle
  #      (Switch to the right tag and look for 'protobufVersion' and 'protocVersion'.)
  - io.grpc:grpc-bom:1.41.0
  - io.micrometer:micrometer-bom:1.7.4
  - io.netty:netty-bom:4.1.69.Final
  - io.zipkin.brave:brave-bom:5.13.3
  - org.eclipse.jetty:jetty-bom:9.4.43.v20210629
  - org.junit:junit-bom:5.8.1

cglib:
  cglib: { version: '3.3.0' }

# Akka is used only for testing in it:grpcweb module.
ch.megard:
  akka-http-cors_2.13: { version: '1.0.0' }

ch.qos.logback:
  logback-classic:
    version: '1.2.6'
    javadocs:
    - https://www.javadoc.io/doc/ch.qos.logback/logback-classic/1.2.6/

com.aayushatharva.brotli4j:
  brotli4j: { version: &BROTLI4J_VERSION '1.6.0' }
  native-linux-x86_64: { version: *BROTLI4J_VERSION }
  native-osx-x86_64: { version: *BROTLI4J_VERSION }
  native-windows-x86_64: { version: *BROTLI4J_VERSION }

com.auth0:
  java-jwt:
    version: '3.18.2'
    javadocs:
    - https://www.javadoc.io/doc/com.auth0/java-jwt/3.18.2/

# This is only used for examples/graphql-kotlin
com.expediagroup:
  graphql-kotlin-client: { version: &GRAPHQL_KOTLIN_VERSION '5.1.1' }
  graphql-kotlin-client-jackson: { version: *GRAPHQL_KOTLIN_VERSION }
  graphql-kotlin-client-serialization: { version: *GRAPHQL_KOTLIN_VERSION }
  graphql-kotlin-schema-generator: { version: *GRAPHQL_KOTLIN_VERSION }

com.fasterxml.jackson.core:
  jackson-annotations:
    javadocs:
    - https://fasterxml.github.io/jackson-annotations/javadoc/2.12/
  jackson-core:
    javadocs:
    - https://fasterxml.github.io/jackson-core/javadoc/2.12/
  jackson-databind:
    javadocs:
    - https://fasterxml.github.io/jackson-databind/javadoc/2.12/

# Don't upgrade Caffeine to 3.x that requires Java 11.
com.github.ben-manes.caffeine:
  caffeine:
    version: '2.9.2'
    exclusions:
    - com.google.errorprone:error_prone_annotations
    javadocs:
    - https://www.javadoc.io/doc/com.github.ben-manes.caffeine/caffeine/2.9.2/
    relocations:
    - from: com.github.benmanes.caffeine
      to: com.linecorp.armeria.internal.shaded.caffeine

com.github.jengelman.gradle.plugins:
  shadow: { version: '6.1.0' }

com.github.node-gradle:
  gradle-node-plugin: { version: '3.1.1' }

com.google.api:
  gax-grpc: { version: '1.67.0' }

com.google.code.findbugs:
  jsr305: { version: '3.0.2' }

# This is only used for examples/context-propagation/dagger
com.google.dagger:
  dagger: { version: &DAGGER_VERSION '2.37' }
  dagger-compiler: { version: *DAGGER_VERSION }
  dagger-producers: { version: *DAGGER_VERSION }

com.google.errorprone:
  error_prone_core: { version: &ERRORPRONE_VERSION '2.9.0' }
  error_prone_annotations: { version: *ERRORPRONE_VERSION }

com.google.guava:
  guava:
    version: &GUAVA_VERSION '31.0.1-jre'
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.j2objc:j2objc-annotations
    - org.codehaus.mojo:animal-sniffer-annotations
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava
    - from: com.google.thirdparty.publicsuffix
      to: com.linecorp.armeria.internal.shaded.publicsuffix
  guava-testlib:
    version: *GUAVA_VERSION
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.j2objc:j2objc-annotations
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava
  # A transitive dependency of Guava which needs relocation as well.
  failureaccess:
    version: '1.0.1'
    relocations:
    - from: com.google.common
      to: com.linecorp.armeria.internal.shaded.guava

# We do not depend on j2objc-annotations. We just need this to stop Javadoc from
# complaining about 'unknown enum constant Level.FULL'.
com.google.j2objc:
  j2objc-annotations: { version: '1.3' }

# Ensure that we use the same Protobuf version as what gRPC depends on.
# See: https://github.com/grpc/grpc-java/blob/master/build.gradle
#      (Switch to the right tag and look for 'protobufVersion' and 'protocVersion'.)
com.google.protobuf:
  protobuf-java: { version: &PROTOBUF_VERSION '3.17.2' }
  protobuf-java-util:
    version: *PROTOBUF_VERSION
    exclusions:
    - com.google.errorprone:error_prone_annotations
  protobuf-gradle-plugin: { version: '0.8.17' }
  protoc: { version: *PROTOBUF_VERSION }

com.graphql-java:
  graphql-java: { version: '17.3' }

com.guardsquare:
  proguard-gradle: { version: '7.1.1' }

# Akka is used only for testing in it:grpcweb module.
com.lightbend.akka.grpc:
  akka-grpc-runtime_2.13: { version: '1.0.3' }

# Eureka is used only for testing in eureka module.
com.netflix.eureka:
  eureka-client: { version: &EUREKA_VERSION '1.10.16' }
  eureka-test-utils: {version: *EUREKA_VERSION }

# DGS is used only for testing in it:dgs module.
com.netflix.graphql.dgs:
  graphql-dgs-client: { version: '4.9.1' }

com.pszymczyk.consul:
  embedded-consul: { version: '2.2.1' }

com.puppycrawl.tools:
  checkstyle: { version: '8.45.1' }

com.salesforce.servicelibs:
  reactor-grpc: { version: &REACTVIVE_GRPC_VERSION '1.2.3' }
  reactor-grpc-stub: { version: *REACTVIVE_GRPC_VERSION }

com.spotify:
  completable-futures:
    version: '0.3.5'
    relocations:
    - from: com.spotify.futures
      to: com.linecorp.armeria.internal.shaded.futures
  futures-extra: { version: 4.3.0 }

# OkHttp is used only for testing in it:okhttp module.
com.squareup.okhttp3:
  okhttp: { version: &OKHTTP_VERSION '4.9.2' }
  okhttp-tls: { version: *OKHTTP_VERSION }

com.squareup.retrofit2:
  retrofit:
    version: &RETROFIT2_VERSION '2.9.0'
    javadocs:
    - https://square.github.io/retrofit/2.x/retrofit/
  converter-jackson: { version: *RETROFIT2_VERSION }

com.thesamet.scalapb:
  scalapb-runtime_2.12: { version: &SCALAPB_VERSION '0.11.6' }
  scalapb-runtime_2.13: { version: *SCALAPB_VERSION }
  scalapb-runtime-grpc_2.12: { version: *SCALAPB_VERSION }
  scalapb-runtime-grpc_2.13: { version: *SCALAPB_VERSION }
  scalapb-json4s_2.12: { version: &SCALAPB_JSON4S_VERSION '0.12.0' }
  scalapb-json4s_2.13: { version: *SCALAPB_JSON4S_VERSION }

# Akka is used only for testing in it:grpcweb module.
com.typesafe.akka:
  akka-actor-typed_2.13: { version: &TYPESAFE_AKKA_VERSION '2.6.16' }
  akka-discovery_2.13: { version: *TYPESAFE_AKKA_VERSION }
  akka-stream_2.13: { version: *TYPESAFE_AKKA_VERSION }

# Finagle is used only for testing in zookeeper module.
com.twitter:
  finagle-serversets_2.13:
    version: '21.9.0'

cz.alenkacz:
  gradle-scalafmt: { version: '1.16.2' }

gradle.plugin.net.davidecavestro:
  gradle-jxr-plugin: { version: '0.2.1' }

io.dropwizard:
  dropwizard-core:
    version: &DROPWIZARD_VERSION '2.0.25'
    javadocs:
    - https://www.javadoc.io/doc/io.dropwizard/dropwizard-core/2.0.25/
  dropwizard-jackson: { version: *DROPWIZARD_VERSION }
  dropwizard-lifecycle: { version: *DROPWIZARD_VERSION }
  dropwizard-jersey: { version: *DROPWIZARD_VERSION }
  dropwizard-jetty: { version: *DROPWIZARD_VERSION }
  dropwizard-testing: { version: *DROPWIZARD_VERSION }
  dropwizard-util: { version: *DROPWIZARD_VERSION }
  dropwizard-validation: { version: *DROPWIZARD_VERSION }

io.dropwizard.metrics:
  metrics-core:
    javadocs:
    - https://metrics.dropwizard.io/4.1.0/apidocs/

io.grpc:
  grpc-core:
    javadocs:
    - https://grpc.io/grpc-java/javadoc/
    - https://developers.google.com/protocol-buffers/docs/reference/java/
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - org.codehaus.mojo:animal-sniffer-annotations
  grpc-interop-testing:
    exclusions:
    - com.google.errorprone:error_prone_annotations
    - com.google.guava:guava-jdk5
    - com.google.j2objc:j2objc-annotations
    - io.grpc:grpc-alts
    - io.grpc:grpc-xds
    - io.netty:netty-codec-http
    - io.netty:netty-codec-http2
    - io.netty:netty-codec-socks
    - io.netty:netty-handler-proxy
    - io.netty:netty-transport
    - io.netty:netty-tcnative-boringssl-static
  grpc-kotlin-stub: { version: &GRPC_KOTLIN_VERSION '1.1.0' }
  protoc-gen-grpc-kotlin: { version: *GRPC_KOTLIN_VERSION }

io.micrometer:
  micrometer-core:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-core/1.5.6/
  micrometer-registry-prometheus:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-registry-prometheus/1.5.6/
  micrometer-spring-legacy:
    javadocs:
    - https://www.javadoc.io/doc/io.micrometer/micrometer-spring-legacy/1.3.9/
    exclusions:
    - org.springframework:spring-web
    - org.springframework:spring-webmvc

# This is only used for ScalaPB test
io.monix:
  monix-reactive_2.12: { version: &MONIX_VERSION '3.4.0' }
  monix-reactive_2.13: { version: *MONIX_VERSION }

io.netty:
  netty-common:
    javadocs:
    - https://netty.io/4.1/api/

io.netty.incubator:
  netty-incubator-transport-native-io_uring: { version: '0.0.9.Final' }

io.projectreactor:
  reactor-core:
    version: &REACTOR_VERSION '3.4.11'
    javadocs:
    - https://projectreactor.io/docs/core/release/api/
  reactor-test: { version: *REACTOR_VERSION }

io.projectreactor.kotlin:
  reactor-kotlin-extensions: { version: '1.1.5' }

io.prometheus:
  simpleclient_common:
    version: '0.12.0'
    javadocs:
    - https://prometheus.github.io/client_java/

io.reactivex.rxjava2:
  rxjava:
    version: '2.2.21'
    javadocs:
    - http://reactivex.io/RxJava/2.x/javadoc/

io.reactivex.rxjava3:
  rxjava:
    version: '3.1.2'
    javadocs:
      - http://reactivex.io/RxJava/3.x/javadoc/

io.zipkin.brave:
  brave:
    # ':site:javadoc' fails when we use a newer version of Javadoc.
    javadocs:
    - https://www.javadoc.io/doc/io.zipkin.brave/brave/5.6.3/
    - https://www.javadoc.io/doc/io.zipkin.brave/brave-instrumentation-http/5.6.3/

it.unimi.dsi:
  fastutil:
    version: '8.5.6'
    relocations:
      - from: it.unimi.dsi.fastutil
        to: com.linecorp.armeria.internal.shaded.fastutil

javax.annotation:
  javax.annotation-api: { version: '1.3.2' }

javax.inject:
  javax.inject: { version: '1' }

javax.validation:
  validation-api: { version: '2.0.1.Final' }

# This is used only for testing in Eureka.
# Ensure that we use the same javax.ws.rs version as what eureka-client depends on.
# See: https://github.com/Netflix/eureka/blob/master/eureka-client/build.gradle
javax.ws.rs:
  jsr311-api: { version: 1.1.1 }

junit:
  junit:
    version: '4.13.2'
    javadocs:
    - https://junit.org/junit4/javadoc/4.13/

org.junit.jupiter:
  junit-jupiter-api:
    javadocs:
    # ':site:javadoc' fails when we use a newer version of Javadoc.
    - https://junit.org/junit5/docs/5.5.2/api/

me.champeau.jmh:
  jmh-gradle-plugin: { version: '0.6.6' }

net.javacrumbs.json-unit:
  json-unit: { version: &JSON_UNIT_VERSION '2.28.0' }
  json-unit-fluent: { version: *JSON_UNIT_VERSION }

net.shibboleth.utilities:
  java-support: { version: '7.5.2' }

# Ensure that we use the same ZooKeeper version as what Curator depends on.
# See: https://github.com/apache/curator/blob/master/pom.xml
#      (Switch to the right tag to find out the right version.)
org.apache.curator:
  curator-recipes:
    version: &CURATOR_VERSION '5.2.0'
    javadocs:
    - https://www.javadoc.io/doc/org.apache.curator/curator-framework/5.1.0/
    - https://www.javadoc.io/doc/org.apache.curator/curator-recipes/5.1.0/
    exclusions:
    - org.apache.zookeeper:zookeeper
  curator-x-discovery:
    version: *CURATOR_VERSION
    javadocs:
    - https://www.javadoc.io/doc/org.apache.curator/curator-x-discovery/5.1.0/

# This is only used for it/server test
org.apache.hbase:
  hbase-shaded-client:
    version: '1.2.6'
    exclusions:
    - com.github.stephenc.findbugs:findbugs-annotations
    - commons-logging:commons-logging
    - log4j:log4j
    - org.slf4j:slf4j-log4j12

org.apache.httpcomponents:
  httpclient:
    version: '4.5.13'
    exclusions:
    - commons-logging:commons-logging

org.apache.kafka:
  kafka-clients:
    version: '3.0.0'
    javadocs:
    - https://kafka.apache.org/30/javadoc/

org.apache.thrift:
  libthrift:
    version: '0.15.0'
    javadocs:
    - https://www.javadoc.io/doc/org.apache.thrift/libthrift/0.15.0/
    exclusions:
    - javax.annotation:javax.annotation-api
    - org.apache.httpcomponents:httpcore
    - org.apache.httpcomponents:httpclient

org.apache.tomcat.embed:
  tomcat-embed-core:
    version: &TOMCAT_VERSION '9.0.53'
    javadocs:
    - https://tomcat.apache.org/tomcat-9.0-doc/api/
  tomcat-embed-jasper: { version: *TOMCAT_VERSION }
  tomcat-embed-el: { version: *TOMCAT_VERSION }

# Ensure that we use the same ZooKeeper version as what Curator depends on.
# See: https://github.com/apache/curator/blob/master/pom.xml
#      (Switch to the right tag to find out the right version.)
org.apache.zookeeper:
  zookeeper:
    version: '3.6.3'
    exclusions:
    - io.netty:netty-all
    - log4j:log4j
    - org.slf4j:slf4j-log4j12

org.assertj:
  assertj-core: { version: '3.21.0' }

org.awaitility:
  awaitility: { version: '4.1.0' }

org.bouncycastle:
  bcpkix-jdk15on:
    version: &BOUNCYCASTLE_VERSION '1.69'
    relocations:
      - from: org.bouncycastle
        to: com.linecorp.armeria.internal.shaded.bouncycastle
  bcprov-jdk15on:
    version: *BOUNCYCASTLE_VERSION
    relocations:
    - from: org.bouncycastle
      to: com.linecorp.armeria.internal.shaded.bouncycastle
  bcutil-jdk15on:
    version: *BOUNCYCASTLE_VERSION
    relocations:
    - from: org.bouncycastle
      to: com.linecorp.armeria.internal.shaded.bouncycastle

org.checkerframework:
  checker-compat-qual: { version: '2.5.5' }

org.curioswitch.curiostack:
  protobuf-jackson:
    version: '1.2.0'
    exclusions:
    - javax.annotation:javax.annotation-api
    javadocs:
    - https://developers.curioswitch.org/apidocs/java/

org.dmonix.junit:
  zookeeper-junit: { version: '1.2' }

org.eclipse.jetty:
  jetty-annotations:
    exclusions:
    - org.ow2.asm:asm
    - org.ow2.asm:asm-commons
  jetty-server:
    javadocs:
    - https://javadoc.io/doc/org.eclipse.jetty/jetty-server/9.4.42.v20210604/

org.eclipse.jetty.alpn:
  alpn-api: { version: '1.1.3.v20160715' }

# Groovy is only used for testing consul
org.codehaus.groovy:
  groovy-xml: { version: '3.0.9' }

org.hamcrest:
  hamcrest: { version: &HAMCREST_VERSION '2.2' }
  hamcrest-library: { version: *HAMCREST_VERSION }

org.hibernate.validator:
  hibernate-validator: { version: '6.2.0.Final' }

org.jctools:
  jctools-core:
    version: '3.3.0'
    relocations:
    - from: org.jctools
      to: com.linecorp.armeria.internal.shaded.jctools

# If you want to change `org.jetbrains.kotlin:kotlin-allopen` version,
# you also need to change `org.jetbrains.kotlin.jvm` version in `build.gradle`.
org.jetbrains.kotlin:
  kotlin-allopen: { version: &KOTLIN_VERSION '1.5.31' }
  kotlin-reflect: { version: *KOTLIN_VERSION }

org.jetbrains.kotlinx:
  kotlinx-coroutines-core: { version: &KOTLIN_COROUTINE_VERSION '1.5.2' }
  kotlinx-coroutines-jdk8: { version: *KOTLIN_COROUTINE_VERSION }
  # kotlinx-coroutines-reactor is only used for testing :it:spring:boot2-kotlin
  kotlinx-coroutines-reactor: { version: *KOTLIN_COROUTINE_VERSION }
  kotlinx-coroutines-rx2: { version: *KOTLIN_COROUTINE_VERSION }

org.jlleitschuh.gradle:
  ktlint-gradle: { version: '10.2.0' }

org.jooq:
  joor: { version: '0.9.14' }

org.jsoup:
  jsoup: { version: '1.14.3' }

org.mockito:
  mockito-core: { version: &MOCKITO_VERSION '4.0.0' }
  mockito-junit-jupiter: { version: *MOCKITO_VERSION }

org.mortbay.jetty.alpn:
  jetty-alpn-agent: { version: '2.0.10' }

org.openjdk.jmh:
  jmh-core: { version: &JMH_VERSION '1.33' }
  jmh-generator-annprocess: { version: *JMH_VERSION }

# Don't upgrade OpenSAML to 4.x that requires Java 11.
org.opensaml:
  opensaml-core: { version: &OPENSAML_VERSION '3.4.6' }
  opensaml-saml-api: { version: *OPENSAML_VERSION }
  opensaml-saml-impl: { version: *OPENSAML_VERSION }
  opensaml-messaging-api: { version: *OPENSAML_VERSION }
  opensaml-messaging-impl: { version: *OPENSAML_VERSION }
  opensaml-soap-api: { version: *OPENSAML_VERSION }
  opensaml-soap-impl: { version: *OPENSAML_VERSION }

org.reactivestreams:
  reactive-streams: { version: &REACTIVE_STREAMS_VERSION '1.0.3' }
  reactive-streams-tck:
    version: *REACTIVE_STREAMS_VERSION
    exclusions:
    - org.yaml:snakeyaml

org.reflections:
  reflections:
    # Upgrade once https://github.com/ronmamo/reflections/issues/279 is fixed.
    version: '0.9.11'
    exclusions:
      - com.google.errorprone:error_prone_annotations
      - com.google.j2objc:j2objc-annotations
      - org.codehaus.mojo:animal-sniffer-annotations
    relocations:
    - from: org.reflections
      to: com.linecorp.armeria.internal.shaded.reflections

org.scala-lang:
  scala-library: { version: '2.13.6' }

org.scala-lang.modules:
  scala-collection-compat_2.12: { version: '2.5.0' }
  scala-java8-compat_2.12: { version: &SCALA_JAVA8_COMPAT_VERSION '1.0.1' }
  scala-java8-compat_2.13: { version: *SCALA_JAVA8_COMPAT_VERSION }

org.scalameta:
  munit_2.12: { version: &MUNIT_VERSION '0.7.29' }
  munit_2.13: { version: *MUNIT_VERSION }

org.sangria-graphql:
  sangria_2.12: { version: &SANGRIA_VERSION '2.1.3' }
  sangria_2.13: { version: *SANGRIA_VERSION }
  sangria-slowlog_2.12: { version: &SANGRIA_SLOWLOG_VERSION '2.0.2' }
  sangria-slowlog_2.13: { version: *SANGRIA_SLOWLOG_VERSION }

org.slf4j:
  jcl-over-slf4j: { version: &SLF4J_VERSION '1.7.32' }
  jul-to-slf4j: { version: *SLF4J_VERSION }
  log4j-over-slf4j: { version: *SLF4J_VERSION }
  slf4j-api:
    version: *SLF4J_VERSION
    javadocs:
    - https://www.javadoc.io/doc/org.slf4j/slf4j-api/1.7.31/
  slf4j-simple: { version: *SLF4J_VERSION }

org.springframework:
  spring-web: { version: '5.3.10' }

org.springframework.boot:
  spring-boot-starter:
    version: &SPRING_BOOT_VERSION '2.5.5'
    javadocs:
    - https://docs.spring.io/spring/docs/current/javadoc-api/
  spring-boot-actuator-autoconfigure: { version: *SPRING_BOOT_VERSION }
  spring-boot-autoconfigure: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-actuator: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-security: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-test: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-web: { version: *SPRING_BOOT_VERSION }
  spring-boot-starter-webflux:
    version: *SPRING_BOOT_VERSION
    exclusions:
    - org.springframework.boot:spring-boot-starter-reactor-netty
  spring-boot-configuration-processor: { version: *SPRING_BOOT_VERSION }
  spring-boot-gradle-plugin: { version: *SPRING_BOOT_VERSION }

org.testng:
  testng: { version: '7.4.0' }

org.xerial.snappy:
  snappy-java: { version: '1.1.8.4' }

pl.project13.scala:
  sbt-jmh-extras: { version: '0.3.7' }

# Needed to work around the problem with Gradle not supporting POM relocation correctly.
xml-apis:
  xml-apis: { version: '1.4.01' }

com.github.vladimir-bukhtoyarov:
  bucket4j-core:
    version: '6.3.0'
    javadocs:
    - https://javadoc.io/doc/com.github.vladimir-bukhtoyarov/bucket4j-core/6.3.0/

org.jboss.resteasy:
  resteasy-core-spi:
    version: &RESTEASY_VERSION '4.7.2.Final'
    javadocs:
    - https://docs.jboss.org/resteasy/docs/4.6.0.Final/javadocs/
  resteasy-core: { version: *RESTEASY_VERSION }
  resteasy-client: { version: *RESTEASY_VERSION }
  resteasy-jackson2-provider: { version: *RESTEASY_VERSION }

# "provided" dependency required by RESTEasy 'resteasy-core-spi'
org.jboss.logging:
  jboss-logging:
    version: '3.4.2.Final'
    javadocs:
    - https://javadoc.io/doc/org.jboss.logging/jboss-logging/3.4.2.Final/
  jboss-logging-annotations:
    version: '2.2.1.Final'
    javadocs:
    - https://javadoc.io/doc/org.jboss.logging/jboss-logging-annotations/2.2.1.Final/