flasn4nt
/
grpc-java
mirror of https://github.com/grpc/grpc-java.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
grpc-java/gradle/libs.versions.toml

104 lines
6.5 KiB
TOML
Raw Normal View History

Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
[versions]
Upgrade Netty to 4.1.110 and tcnative to 2.0.65 (#11444) Upgrade Netty to 4.1.110 and tcnative to 2.0.65.
2024-08-06 23:08:08 +08:00
netty = '4.1.110.Final'
Upgrade netty-tcnative to 2.0.61.Final This updates the version of boringssl and removes the dependency on APR. netty-tcnative 2.0.56.Final uses APR 1.7.0, so is in scope for CVE-2021-35940, CVE-2022-28331, and CVE-2022-24963. netty-tcnative is not actually vulnerable. The binary does not include apr_socket_sendv(), apr_encode_*(), apr_pencode_*(), apr_decode_*(), apr_pdecode_*(). The binary does include apr_time_exp_*() but it is unused code. Unfortunately --gc-sections wasn't used during compilation. apr_time_now() is used, but that just calls gettimeofday() and is not vulnerable. There's no panic here, but this updates netty-tcnative just a few weeks before we would have ordinarily done so. Bumping the version makes life easier for everyone.
2023-06-09 23:05:15 +08:00
# Keep the following references of tcnative version in sync whenever it's updated:
# SECURITY.md
Upgrade Netty to 4.1.110 and tcnative to 2.0.65 (#11444) Upgrade Netty to 4.1.110 and tcnative to 2.0.65.
2024-08-06 23:08:08 +08:00
nettytcnative = '2.0.65.Final'
Upgrade dependencies (#10178) Required bumping android compile/targetSdkVersion to 33
2023-05-17 23:32:49 +08:00
opencensus = "0.31.1"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
# Not upgrading to 4.x as it is not yet ABI compatible.
# https://github.com/protocolbuffers/protobuf/issues/17247
protobuf = "3.25.3"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
[libraries]
android-annotations = "com.google.android:annotations:4.1.1.4"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
androidx-annotation = "androidx.annotation:annotation:1.8.0"
androidx-core = "androidx.core:core:1.13.1"
androidx-lifecycle-common = "androidx.lifecycle:lifecycle-common:2.8.3"
androidx-lifecycle-service = "androidx.lifecycle:lifecycle-service:2.8.3"
androidx-test-core = "androidx.test:core:1.6.1"
androidx-test-ext-junit = "androidx.test.ext:junit:1.2.1"
androidx-test-rules = "androidx.test:rules:1.6.1"
animalsniffer = "org.codehaus.mojo:animal-sniffer:1.24"
animalsniffer-annotations = "org.codehaus.mojo:animal-sniffer-annotations:1.24"
assertj-core = "org.assertj:assertj-core:3.26.0"
auto-value = "com.google.auto.value:auto-value:1.11.0"
auto-value-annotations = "com.google.auto.value:auto-value-annotations:1.11.0"
Upgrade Checkstyle to 10.17.0 The code changes are to place all overloaded methods next to each other.
2024-07-09 06:00:55 +08:00
checkstyle = "com.puppycrawl.tools:checkstyle:10.17.0"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
commons-math3 = "org.apache.commons:commons-math3:3.6.1"
Bump versions for assorted dependencies If I didn't upgrade X there is probably a reason, but worst-case the reason was "I was lazy." I did the easy stuff, so if upgrading caused problems of any real sort I skipped it and moved on. The main other reason is there's some stuff we're more conservative about upgrading, but you can't distinguish one from the other in this commit.
2022-07-01 06:25:43 +08:00
conscrypt = "org.conscrypt:conscrypt-openjdk-uber:2.5.2"
cronet: Update Cronet to latest release + Move to Stable Cronet APIs.
2024-04-03 21:15:31 +08:00
cronet-api = "org.chromium.net:cronet-api:119.6045.31"
cronet-embedded = "org.chromium.net:cronet-embedded:119.6045.31"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
errorprone-annotations = "com.google.errorprone:error_prone_annotations:2.28.0"
Upgrade ErrorProne Core to 2.28.0
2024-07-13 05:59:20 +08:00
errorprone-core = "com.google.errorprone:error_prone_core:2.28.0"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
google-api-protos = "com.google.api.grpc:proto-google-common-protos:2.41.0"
google-auth-credentials = "com.google.auth:google-auth-library-credentials:1.23.0"
google-auth-oauth2Http = "com.google.auth:google-auth-library-oauth2-http:1.23.0"
Upgrade dependencies post v1.57.x branch cut (#10359) ### Dependency updates #### Update successfully to the latest - [x] `androidx.core:core 1.10.0 -> 1.10.1` - [x] `com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0` - [x] `com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5` - [x] `com.google.truth:truth 1.0.1 -> 1.1.5` - [x] `com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1` - [x] `org.robolectric:robolectric 4.9.2 -> 4.10.3` - [x] Auto-value - [x] `com.google.auto.value:auto-value 1.10.1 -> 1.10.2` - [x] `com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2` - [x] Protobuf - [x] `com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protoc 3.22.3 -> 3.23.4` - [x] Errorprone - [x] `com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0` - [x] `com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0` - ~`libs.checkstylejava8 = com.puppycrawl.tools:checkstyle 9.3 -> 10.12.1`~ -- pinned to last version supporting java8, update not needed #### Updated to non-latest - [x] `com.squareup.okio:okio 1.17.5 ->` ~`3.4.0`~ `2.10.0` -- updating to 3.x failed due to them [introducing gradle multiplatform artifacts](https://github.com/square/okio/blob/master/CHANGELOG.md#version-320). Error in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632853307.). - [x] `org.checkerframework:checker-qual 3.33.0 ->` ~`3.36.0`~ -- removed, no longer needed - [x] Mockito - updated to `4.11.0`. Versions 5.x break some tests. Errors in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632834435). - `org.mockito:mockito-android 3.12.4 ->` ~`5.4.0`~ `4.11.0` - `org.mockito:mockito-core 3.12.4 ->` ~`5.4.0`~ `4.11.0` #### Not updated - Cronet -- upgrade failed, created a blocker ticket https://github.com/grpc/grpc-java/issues/10396 - ~`org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61`~ - ~`org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61`~ - Google auth -- upgrade blocked by https://github.com/grpc/grpc-java/pull/9118 - ~`com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0`~ - ~`com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0`~ - Guava -- not upgraded: 32.1.0 [broke gradle modules](https://github.com/google/guava/releases/tag/v32.1.0) - ~`libs.guava = com.google.guava:guava 32.0.1-android -> 32.1.1-jre`~ - ~`libs.guava.jre = com.google.guava:guava 32.0.1-jre -> 32.1.1-jre`~ - ~`libs.guava.testlib = com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre`~ ### checkForUpdates results ``` > Task :checkForUpdates androidx.core:core 1.10.0 -> 1.10.1 com.google.auto.value:auto-value 1.10.1 -> 1.10.2 com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2 org.checkerframework:checker-qual 3.33.0 -> 3.36.0 com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1 org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61 org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61 com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.10.0 -> 2.20.0 com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0 com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0 com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0 com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5 com.google.guava:guava 32.0.1-android -> 32.1.1-jre com.google.guava:guava 32.0.1-jre -> 32.1.1-jre com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre org.mockito:mockito-android 3.12.4 -> 5.4.0 org.mockito:mockito-core 3.12.4 -> 5.4.0 com.squareup.okio:okio 1.17.5 -> 3.4.0 com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4 com.google.protobuf:protoc 3.22.3 -> 3.23.4 org.robolectric:robolectric 4.9.2 -> 4.10.3 com.google.truth:truth 1.0.1 -> 1.1.5 ```
2023-07-22 01:15:05 +08:00
# Release notes: https://cloud.google.com/logging/docs/release-notes
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
google-cloud-logging = "com.google.cloud:google-cloud-logging:3.19.0"
gson = "com.google.code.gson:gson:2.11.0"
guava = "com.google.guava:guava:33.2.1-android"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
guava-betaChecker = "com.google.guava:guava-beta-checker:1.0"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
guava-testlib = "com.google.guava:guava-testlib:33.2.1-android"
Upgrade dependencies post v1.57.x branch cut (#10359) ### Dependency updates #### Update successfully to the latest - [x] `androidx.core:core 1.10.0 -> 1.10.1` - [x] `com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0` - [x] `com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5` - [x] `com.google.truth:truth 1.0.1 -> 1.1.5` - [x] `com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1` - [x] `org.robolectric:robolectric 4.9.2 -> 4.10.3` - [x] Auto-value - [x] `com.google.auto.value:auto-value 1.10.1 -> 1.10.2` - [x] `com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2` - [x] Protobuf - [x] `com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protoc 3.22.3 -> 3.23.4` - [x] Errorprone - [x] `com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0` - [x] `com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0` - ~`libs.checkstylejava8 = com.puppycrawl.tools:checkstyle 9.3 -> 10.12.1`~ -- pinned to last version supporting java8, update not needed #### Updated to non-latest - [x] `com.squareup.okio:okio 1.17.5 ->` ~`3.4.0`~ `2.10.0` -- updating to 3.x failed due to them [introducing gradle multiplatform artifacts](https://github.com/square/okio/blob/master/CHANGELOG.md#version-320). Error in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632853307.). - [x] `org.checkerframework:checker-qual 3.33.0 ->` ~`3.36.0`~ -- removed, no longer needed - [x] Mockito - updated to `4.11.0`. Versions 5.x break some tests. Errors in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632834435). - `org.mockito:mockito-android 3.12.4 ->` ~`5.4.0`~ `4.11.0` - `org.mockito:mockito-core 3.12.4 ->` ~`5.4.0`~ `4.11.0` #### Not updated - Cronet -- upgrade failed, created a blocker ticket https://github.com/grpc/grpc-java/issues/10396 - ~`org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61`~ - ~`org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61`~ - Google auth -- upgrade blocked by https://github.com/grpc/grpc-java/pull/9118 - ~`com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0`~ - ~`com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0`~ - Guava -- not upgraded: 32.1.0 [broke gradle modules](https://github.com/google/guava/releases/tag/v32.1.0) - ~`libs.guava = com.google.guava:guava 32.0.1-android -> 32.1.1-jre`~ - ~`libs.guava.jre = com.google.guava:guava 32.0.1-jre -> 32.1.1-jre`~ - ~`libs.guava.testlib = com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre`~ ### checkForUpdates results ``` > Task :checkForUpdates androidx.core:core 1.10.0 -> 1.10.1 com.google.auto.value:auto-value 1.10.1 -> 1.10.2 com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2 org.checkerframework:checker-qual 3.33.0 -> 3.36.0 com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1 org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61 org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61 com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.10.0 -> 2.20.0 com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0 com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0 com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0 com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5 com.google.guava:guava 32.0.1-android -> 32.1.1-jre com.google.guava:guava 32.0.1-jre -> 32.1.1-jre com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre org.mockito:mockito-android 3.12.4 -> 5.4.0 org.mockito:mockito-core 3.12.4 -> 5.4.0 com.squareup.okio:okio 1.17.5 -> 3.4.0 com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4 com.google.protobuf:protoc 3.22.3 -> 3.23.4 org.robolectric:robolectric 4.9.2 -> 4.10.3 com.google.truth:truth 1.0.1 -> 1.1.5 ```
2023-07-22 01:15:05 +08:00
# JRE version is needed for projects where its a transitive dependency, f.e. gcp-observability.
# May be different from the -android version.
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
guava-jre = "com.google.guava:guava:33.2.1-jre"
hdrhistogram = "org.hdrhistogram:HdrHistogram:2.2.2"
servlet: Move deps to version catalog This allows the checkForUpdates task to notice the dependencies and suggest updates. I plan to upgrade some of the servers after this change in hopes it reduces test flakiness.
2024-02-28 08:57:08 +08:00
jakarta-servlet-api = "jakarta.servlet:jakarta.servlet-api:5.0.0"
javax-annotation = "org.apache.tomcat:annotations-api:6.0.53"
javax-servlet-api = "javax.servlet:javax.servlet-api:4.0.1"
servlet: Update Servlet container test versions (#11212) Verifies that latest versions of Tomcat/Undertow/Jetty pass integration tests - I manually verified that all ignored tests still fail. Two tests failed in Jetty, it appears that the integration test anticipates that the server implementation is willing to send larger trailers than the client SETTINGS frame allows for. Since the server refuses to send too large of headers/trailers, the client does not receive the too-large payloads, and doesn't fail with the expected message. This change was introduced in Jetty 10.0.15/11.0.11. Those tests are ignored.
2024-05-24 00:49:34 +08:00
jetty-client = "org.eclipse.jetty:jetty-client:10.0.20"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
jetty-http2-server = "org.eclipse.jetty.http2:http2-server:11.0.22"
servlet: Update Servlet container test versions (#11212) Verifies that latest versions of Tomcat/Undertow/Jetty pass integration tests - I manually verified that all ignored tests still fail. Two tests failed in Jetty, it appears that the integration test anticipates that the server implementation is willing to send larger trailers than the client SETTINGS frame allows for. Since the server refuses to send too large of headers/trailers, the client does not receive the too-large payloads, and doesn't fail with the expected message. This change was introduced in Jetty 10.0.15/11.0.11. Those tests are ignored.
2024-05-24 00:49:34 +08:00
jetty-http2-server10 = "org.eclipse.jetty.http2:http2-server:10.0.20"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
jetty-servlet = "org.eclipse.jetty:jetty-servlet:11.0.22"
servlet: Update Servlet container test versions (#11212) Verifies that latest versions of Tomcat/Undertow/Jetty pass integration tests - I manually verified that all ignored tests still fail. Two tests failed in Jetty, it appears that the integration test anticipates that the server implementation is willing to send larger trailers than the client SETTINGS frame allows for. Since the server refuses to send too large of headers/trailers, the client does not receive the too-large payloads, and doesn't fail with the expected message. This change was introduced in Jetty 10.0.15/11.0.11. Those tests are ignored.
2024-05-24 00:49:34 +08:00
jetty-servlet10 = "org.eclipse.jetty:jetty-servlet:10.0.20"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
jsr305 = "com.google.code.findbugs:jsr305:3.0.2"
Upgrade JUnit to 4.13.2 ExpectedException is deprecated, so I fixed the new warnings. However, we are still using ExpectedException many places and had previously supressed the warning. See https://github.com/grpc/grpc-java/issues/7467 . I did not fix those existing instances that had suppressed the warning, since it is unrelated to the upgrade and we have been free to fix them at any time since we dropped Java 7.
2023-01-21 01:33:11 +08:00
junit = "junit:junit:4.13.2"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
# 2.17+ require Java 11+ (not mentioned in release notes)
lincheck = "org.jetbrains.kotlinx:lincheck:2.16"
Upgrade dependencies post v1.57.x branch cut (#10359) ### Dependency updates #### Update successfully to the latest - [x] `androidx.core:core 1.10.0 -> 1.10.1` - [x] `com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0` - [x] `com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5` - [x] `com.google.truth:truth 1.0.1 -> 1.1.5` - [x] `com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1` - [x] `org.robolectric:robolectric 4.9.2 -> 4.10.3` - [x] Auto-value - [x] `com.google.auto.value:auto-value 1.10.1 -> 1.10.2` - [x] `com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2` - [x] Protobuf - [x] `com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protoc 3.22.3 -> 3.23.4` - [x] Errorprone - [x] `com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0` - [x] `com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0` - ~`libs.checkstylejava8 = com.puppycrawl.tools:checkstyle 9.3 -> 10.12.1`~ -- pinned to last version supporting java8, update not needed #### Updated to non-latest - [x] `com.squareup.okio:okio 1.17.5 ->` ~`3.4.0`~ `2.10.0` -- updating to 3.x failed due to them [introducing gradle multiplatform artifacts](https://github.com/square/okio/blob/master/CHANGELOG.md#version-320). Error in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632853307.). - [x] `org.checkerframework:checker-qual 3.33.0 ->` ~`3.36.0`~ -- removed, no longer needed - [x] Mockito - updated to `4.11.0`. Versions 5.x break some tests. Errors in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632834435). - `org.mockito:mockito-android 3.12.4 ->` ~`5.4.0`~ `4.11.0` - `org.mockito:mockito-core 3.12.4 ->` ~`5.4.0`~ `4.11.0` #### Not updated - Cronet -- upgrade failed, created a blocker ticket https://github.com/grpc/grpc-java/issues/10396 - ~`org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61`~ - ~`org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61`~ - Google auth -- upgrade blocked by https://github.com/grpc/grpc-java/pull/9118 - ~`com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0`~ - ~`com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0`~ - Guava -- not upgraded: 32.1.0 [broke gradle modules](https://github.com/google/guava/releases/tag/v32.1.0) - ~`libs.guava = com.google.guava:guava 32.0.1-android -> 32.1.1-jre`~ - ~`libs.guava.jre = com.google.guava:guava 32.0.1-jre -> 32.1.1-jre`~ - ~`libs.guava.testlib = com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre`~ ### checkForUpdates results ``` > Task :checkForUpdates androidx.core:core 1.10.0 -> 1.10.1 com.google.auto.value:auto-value 1.10.1 -> 1.10.2 com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2 org.checkerframework:checker-qual 3.33.0 -> 3.36.0 com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1 org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61 org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61 com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.10.0 -> 2.20.0 com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0 com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0 com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0 com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5 com.google.guava:guava 32.0.1-android -> 32.1.1-jre com.google.guava:guava 32.0.1-jre -> 32.1.1-jre com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre org.mockito:mockito-android 3.12.4 -> 5.4.0 org.mockito:mockito-core 3.12.4 -> 5.4.0 com.squareup.okio:okio 1.17.5 -> 3.4.0 com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4 com.google.protobuf:protoc 3.22.3 -> 3.23.4 org.robolectric:robolectric 4.9.2 -> 4.10.3 com.google.truth:truth 1.0.1 -> 1.1.5 ```
2023-07-22 01:15:05 +08:00
# Update notes / 2023-07-19 sergiitk:
# Couldn't update to 5.4.0, updated to the last in 4.x line. Version 5.x breaks some tests.
# Error log: https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632834435
gradle: Downgrade mockito to 4.4.0 Starting from version 4.5.0 Mockito uses the Java stream APIs, which are not available on Android API levels < 24. This has been causing the Android integration tests for API levels 21, 22 and 23 to fail.
2023-10-10 02:48:44 +08:00
# Update notes / 2023-10-09 temawi:
# 4.11.0 Has been breaking the android integration tests as mockito now uses streams
# (not available in API levels < 24). https://github.com/grpc/grpc-java/issues/10457
mockito-android = "org.mockito:mockito-android:4.4.0"
mockito-core = "org.mockito:mockito-core:4.4.0"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
netty-codec-http2 = { module = "io.netty:netty-codec-http2", version.ref = "netty" }
netty-handler-proxy = { module = "io.netty:netty-handler-proxy", version.ref = "netty" }
all: Update netty to 4.1.77.Final and netty_tcnative to 2.0.53.Final (#9027) all: Update netty to 4.1.77.Final and netty_tcnative to 2.0.53.Final Also switches to a non-release version of rules_jvm_external to allow Bazel build to work with artifact classifiers.
2022-06-25 01:47:27 +08:00
netty-tcnative = { module = "io.netty:netty-tcnative-boringssl-static", version.ref = "nettytcnative" }
netty-tcnative-classes = { module = "io.netty:netty-tcnative-classes", version.ref = "nettytcnative" }
Bump versions for assorted dependencies If I didn't upgrade X there is probably a reason, but worst-case the reason was "I was lazy." I did the easy stuff, so if upgrading caused problems of any real sort I skipped it and moved on. The main other reason is there's some stuff we're more conservative about upgrading, but you can't distinguish one from the other in this commit.
2022-07-01 06:25:43 +08:00
netty-transport-epoll = { module = "io.netty:netty-transport-native-epoll", version.ref = "netty" }
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
netty-unix-common = { module = "io.netty:netty-transport-native-unix-common", version.ref = "netty" }
Bump versions for assorted dependencies If I didn't upgrade X there is probably a reason, but worst-case the reason was "I was lazy." I did the easy stuff, so if upgrading caused problems of any real sort I skipped it and moved on. The main other reason is there's some stuff we're more conservative about upgrading, but you can't distinguish one from the other in this commit.
2022-07-01 06:25:43 +08:00
okhttp = "com.squareup.okhttp:okhttp:2.7.5"
Upgrade dependencies All the changes outside libs.versions.toml and examples were because of ErrorProne. It didn't actually find anything to fix; signal vs noise has gotten pretty bad with the newer checks. Status was changed for ErrorProne's SuperCallToObjectMethod. With the old code it didn't notice the trivial implementation. The fail-for-test code wasn't used, so it was easiest to just remove it. Some of the libs had their versions inlined; now that we have :checkForUpdates it isn't much of a risk for versions to diverge when there's only a few artifacts sharing a version. If we need 4+ artifacts to have the same version, then it makes sense to still use a shared version. Dependencies not upgraded: google-auth-libray, mockito, netty, cronet
2023-12-13 04:40:20 +08:00
# okio 3.5+ uses Kotlin 1.9+ which requires Android Gradle Plugin 9+
okio = "com.squareup.okio:okio:3.4.0"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
opencensus-api = { module = "io.opencensus:opencensus-api", version.ref = "opencensus" }
opencensus-contrib-grpc-metrics = { module = "io.opencensus:opencensus-contrib-grpc-metrics", version.ref = "opencensus" }
Bump versions for assorted dependencies If I didn't upgrade X there is probably a reason, but worst-case the reason was "I was lazy." I did the easy stuff, so if upgrading caused problems of any real sort I skipped it and moved on. The main other reason is there's some stuff we're more conservative about upgrading, but you can't distinguish one from the other in this commit.
2022-07-01 06:25:43 +08:00
opencensus-exporter-stats-stackdriver = { module = "io.opencensus:opencensus-exporter-stats-stackdriver", version.ref = "opencensus" }
opencensus-exporter-trace-stackdriver = { module = "io.opencensus:opencensus-exporter-trace-stackdriver", version.ref = "opencensus" }
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
opencensus-impl = { module = "io.opencensus:opencensus-impl", version.ref = "opencensus" }
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
opentelemetry-api = "io.opentelemetry:opentelemetry-api:1.40.0"
opentelemetry-exporter-prometheus = "io.opentelemetry:opentelemetry-exporter-prometheus:1.40.0-alpha"
Upgrade OpenTelemetry to 1.39.0 (#11300)
2024-06-22 05:35:24 +08:00
opentelemetry-gcp-resources = "io.opentelemetry.contrib:opentelemetry-gcp-resources:1.36.0-alpha"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
opentelemetry-sdk-extension-autoconfigure = "io.opentelemetry:opentelemetry-sdk-extension-autoconfigure:1.40.0"
opentelemetry-sdk-testing = "io.opentelemetry:opentelemetry-sdk-testing:1.40.0"
perfmark-api = "io.perfmark:perfmark-api:0.27.0"
Use Gradle's version catalog This moves our depedencies into a plain file that can be read and updated by tooling. While the current tooling is not particularly better than just using gradle-versions-plugin, it should put us on better footing. gradle-versions-plugin is actually pretty nice, but will be incompatible with Gradle 8, so we need to wait a bit to see what the future holds. Left libraries as an alias for libs to reduce the commit size and make it easier to revert if we don't end up liking this approach. We're using Gradle 7.3.3 where it was an incubating fetaure. But in Gradle 7.4 is became stable.
2022-06-14 03:09:30 +08:00
protobuf-java = { module = "com.google.protobuf:protobuf-java", version.ref = "protobuf" }
protobuf-java-util = { module = "com.google.protobuf:protobuf-java-util", version.ref = "protobuf" }
protobuf-javalite = { module = "com.google.protobuf:protobuf-javalite", version.ref = "protobuf" }
protobuf-protoc = { module = "com.google.protobuf:protoc", version.ref = "protobuf" }
Upgrade dependencies (#10178) Required bumping android compile/targetSdkVersion to 33
2023-05-17 23:32:49 +08:00
re2j = "com.google.re2j:re2j:1.7"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
robolectric = "org.robolectric:robolectric:4.13"
Swap Animalsniffer to Java 8 and Android 19 Also added missing signatures. Swapping to version catalog will make this process easier in the future.
2022-08-11 03:41:57 +08:00
signature-android = "net.sf.androidscents.signature:android-api-level-19:4.4.2_r4"
signature-java = "org.codehaus.mojo.signature:java18:1.0"
Upgrade dependencies The GSON upgrade slightly changed an error string, so the test was updated to be less of a change detector. Some OpenTelemetry dependencies are alpha versions, so needed an adjustment in build.gradle to accept the versions. Similarly, Undertow includes Final in its version numbers which needs to be accepted.
2024-07-12 06:09:00 +08:00
tomcat-embed-core = "org.apache.tomcat.embed:tomcat-embed-core:10.1.25"
servlet: Update Servlet container test versions (#11212) Verifies that latest versions of Tomcat/Undertow/Jetty pass integration tests - I manually verified that all ignored tests still fail. Two tests failed in Jetty, it appears that the integration test anticipates that the server implementation is willing to send larger trailers than the client SETTINGS frame allows for. Since the server refuses to send too large of headers/trailers, the client does not receive the too-large payloads, and doesn't fail with the expected message. This change was introduced in Jetty 10.0.15/11.0.11. Those tests are ignored.
2024-05-24 00:49:34 +08:00
tomcat-embed-core9 = "org.apache.tomcat.embed:tomcat-embed-core:9.0.89"
Upgrade Truth to 1.4.4
2024-07-17 04:26:34 +08:00
truth = "com.google.truth:truth:1.4.4"
Name old undertow servlet lib with version number This makes it clearer it isn't intended to be upgraded. We do this already for the other servlet containers (e.g., jetty-servlet10).
2024-07-09 06:42:05 +08:00
undertow-servlet22 = "io.undertow:undertow-servlet:2.2.32.Final"
undertow-servlet = "io.undertow:undertow-servlet:2.3.14.Final"
Upgrade dependencies post v1.57.x branch cut (#10359) ### Dependency updates #### Update successfully to the latest - [x] `androidx.core:core 1.10.0 -> 1.10.1` - [x] `com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0` - [x] `com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5` - [x] `com.google.truth:truth 1.0.1 -> 1.1.5` - [x] `com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1` - [x] `org.robolectric:robolectric 4.9.2 -> 4.10.3` - [x] Auto-value - [x] `com.google.auto.value:auto-value 1.10.1 -> 1.10.2` - [x] `com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2` - [x] Protobuf - [x] `com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4` - [x] `com.google.protobuf:protoc 3.22.3 -> 3.23.4` - [x] Errorprone - [x] `com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0` - [x] `com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0` - ~`libs.checkstylejava8 = com.puppycrawl.tools:checkstyle 9.3 -> 10.12.1`~ -- pinned to last version supporting java8, update not needed #### Updated to non-latest - [x] `com.squareup.okio:okio 1.17.5 ->` ~`3.4.0`~ `2.10.0` -- updating to 3.x failed due to them [introducing gradle multiplatform artifacts](https://github.com/square/okio/blob/master/CHANGELOG.md#version-320). Error in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632853307.). - [x] `org.checkerframework:checker-qual 3.33.0 ->` ~`3.36.0`~ -- removed, no longer needed - [x] Mockito - updated to `4.11.0`. Versions 5.x break some tests. Errors in [the comment below](https://github.com/grpc/grpc-java/pull/10359#issuecomment-1632834435). - `org.mockito:mockito-android 3.12.4 ->` ~`5.4.0`~ `4.11.0` - `org.mockito:mockito-core 3.12.4 ->` ~`5.4.0`~ `4.11.0` #### Not updated - Cronet -- upgrade failed, created a blocker ticket https://github.com/grpc/grpc-java/issues/10396 - ~`org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61`~ - ~`org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61`~ - Google auth -- upgrade blocked by https://github.com/grpc/grpc-java/pull/9118 - ~`com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0`~ - ~`com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0`~ - Guava -- not upgraded: 32.1.0 [broke gradle modules](https://github.com/google/guava/releases/tag/v32.1.0) - ~`libs.guava = com.google.guava:guava 32.0.1-android -> 32.1.1-jre`~ - ~`libs.guava.jre = com.google.guava:guava 32.0.1-jre -> 32.1.1-jre`~ - ~`libs.guava.testlib = com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre`~ ### checkForUpdates results ``` > Task :checkForUpdates androidx.core:core 1.10.0 -> 1.10.1 com.google.auto.value:auto-value 1.10.1 -> 1.10.2 com.google.auto.value:auto-value-annotations 1.10.1 -> 1.10.2 org.checkerframework:checker-qual 3.33.0 -> 3.36.0 com.puppycrawl.tools:checkstyle 8.28 -> 10.12.1 org.chromium.net:cronet-api 108.5359.79 -> 113.5672.61 org.chromium.net:cronet-embedded 108.5359.79 -> 113.5672.61 com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.18.0 -> 2.20.0 com.google.errorprone:error_prone_core 2.10.0 -> 2.20.0 com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0 com.google.auth:google-auth-library-credentials 1.4.0 -> 1.19.0 com.google.auth:google-auth-library-oauth2-http 1.4.0 -> 1.19.0 com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5 com.google.guava:guava 32.0.1-android -> 32.1.1-jre com.google.guava:guava 32.0.1-jre -> 32.1.1-jre com.google.guava:guava-testlib 32.0.1-android -> 32.1.1-jre org.mockito:mockito-android 3.12.4 -> 5.4.0 org.mockito:mockito-core 3.12.4 -> 5.4.0 com.squareup.okio:okio 1.17.5 -> 3.4.0 com.google.protobuf:protobuf-java 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-java-util 3.22.3 -> 3.23.4 com.google.protobuf:protobuf-javalite 3.22.3 -> 3.23.4 com.google.protobuf:protoc 3.22.3 -> 3.23.4 org.robolectric:robolectric 4.9.2 -> 4.10.3 com.google.truth:truth 1.0.1 -> 1.1.5 ```
2023-07-22 01:15:05 +08:00
# Do not update: Pinned to the last version supporting Java 8.
# See https://checkstyle.sourceforge.io/releasenotes.html#Release_10.1
checkstylejava8 = "com.puppycrawl.tools:checkstyle:9.3"
# See https://github.com/google/error-prone/releases/tag/v2.11.0
errorprone-corejava8 = "com.google.errorprone:error_prone_core:2.10.0"