Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
spring-security/gradle/dependency-management.gradle

164 lines
6.8 KiB
Groovy
Raw Normal View History

Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
if (!project.hasProperty("reactorVersion")) {
Use Version Ranges Fixes gh-7788
2019-12-18 15:31:52 -05:00
ext.reactorVersion = "Dysprosium-SR+"
Add SNAPSHOTs tests to CI Fixes: gh-5129
2018-03-16 15:19:04 -04:00
}
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
if (!project.hasProperty("springVersion")) {
Restrict Spring Framework version to 5.2.x
2020-08-11 07:25:30 -04:00
ext.springVersion = "5.2.+"
Add SNAPSHOTs tests to CI Fixes: gh-5129
2018-03-16 15:19:04 -04:00
}
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
if (!project.hasProperty("springDataVersion")) {
Set springDataVersion to Neumann-SR+ Closes gh-9007
2020-09-09 12:11:35 -04:00
ext.springDataVersion = "Neumann-SR+"
Add SNAPSHOTs tests to CI Fixes: gh-5129
2018-03-16 15:19:04 -04:00
}
Idiomatic Kotlin DSL for configuring HTTP security Issue: gh-5558
2020-01-07 12:08:43 -05:00
if (!project.hasProperty("kotlinVersion")) {
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
ext.kotlinVersion = "1.4.+"
Idiomatic Kotlin DSL for configuring HTTP security Issue: gh-5558
2020-01-07 12:08:43 -05:00
}
Set RSocket version to Snapshot in snapshot build
2020-07-14 12:37:43 -04:00
if (!project.hasProperty("rsocketVersion")) {
Set rsocketVersion to 1.0.+ Closes gh-9006
2020-09-09 12:03:42 -04:00
ext.rsocketVersion = "1.0.+"
Set RSocket version to Snapshot in snapshot build
2020-07-14 12:37:43 -04:00
}
Allow disabling dependency locking Fixes: gh-7799
2020-01-08 15:11:00 -05:00
if (!project.hasProperty("locksDisabled")) {
dependencyLocking {
lockAllConfigurations()
}
}
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
ext.openSamlVersion = "3.4.+"
Downgrade nimbus-jose-jwt to 8.+ Closes gh-9399
2021-02-03 15:03:29 -05:00
ext.nimbusJoseJwtVersion = '8.+'
Add SNAPSHOTs tests to CI Fixes: gh-5129
2018-03-16 15:19:04 -04:00
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
dependencies {
management platform("org.springframework:spring-framework-bom:$springVersion")
management platform("io.projectreactor:reactor-bom:$reactorVersion")
management platform("org.springframework.data:spring-data-releasetrain:$springDataVersion")
Idiomatic Kotlin DSL for configuring HTTP security Issue: gh-5558
2020-01-07 12:08:43 -05:00
management platform("org.jetbrains.kotlin:kotlin-bom:$kotlinVersion")
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
constraints {
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "ch.qos.logback:logback-classic:1.2.+"
management "com.fasterxml.jackson.core:jackson-databind:2.11.+"
management 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.11.+'
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
management "com.google.appengine:appengine-api-1.0-sdk:$gaeVersion"
management "com.google.appengine:appengine-api-labs:$gaeVersion"
management "com.google.appengine:appengine-api-stubs:$gaeVersion"
management "com.google.appengine:appengine-testing:$gaeVersion"
management "com.google.appengine:appengine:$gaeVersion"
management "com.google.inject:guice:3.0"
Downgrade to Nimbus JOSE JWT 8.+
2021-02-12 05:56:35 -05:00
management "com.nimbusds:nimbus-jose-jwt:$nimbusJoseJwtVersion"
management "com.nimbusds:oauth2-oidc-sdk:8.+"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "com.squareup.okhttp3:mockwebserver:3.14.+"
management "com.squareup.okhttp3:okhttp:3.14.+"
management "com.sun.xml.bind:jaxb-core:2.3.+"
management "com.sun.xml.bind:jaxb-impl:2.3.+"
management "com.unboundid:unboundid-ldapsdk:4.0.+"
Fix commons-codec Build Error Issue gh-8836
2020-07-15 21:05:41 -04:00
management "commons-codec:commons-codec:1.14"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "commons-collections:commons-collections:3.2.+"
management "commons-httpclient:commons-httpclient:3.1.+"
Fix commons-codec Build Error Issue gh-8836
2020-07-15 21:05:41 -04:00
management "commons-logging:commons-logging:1.2"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "io.projectreactor.tools:blockhound:1.0.+"
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
management "io.rsocket:rsocket-core:${rsocketVersion}"
management "io.rsocket:rsocket-transport-netty:${rsocketVersion}"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "javax.annotation:jsr250-api:1.0"
management "javax.servlet.jsp.jstl:javax.servlet.jsp.jstl-api:1.2.+"
management "javax.servlet.jsp:javax.servlet.jsp-api:2.3.+"
management "javax.servlet:javax.servlet-api:4.0.+"
management "javax.validation:validation-api:2.0.+"
management "javax.xml.bind:jaxb-api:2.3.+"
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
management "junit:junit:4.12"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "ldapsdk:ldapsdk:4.1"
management "net.sf.ehcache:ehcache:2.10.+"
Manage specific version of htmlunit dependencies This allows Spring Boot to resolve consistent versions Fixes: gh-7888
2020-02-03 14:18:02 -05:00
management "net.sourceforge.htmlunit:htmlunit:2.37.0"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "net.sourceforge.nekohtml:nekohtml:1.9.+"
management "nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect:2.5.+"
management "opensymphony:sitemesh:2.4.+"
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
management "org.apache.directory.server:apacheds-core-entry:1.5.5"
management "org.apache.directory.server:apacheds-core:1.5.5"
management "org.apache.directory.server:apacheds-protocol-ldap:1.5.5"
management "org.apache.directory.server:apacheds-protocol-shared:1.5.5"
management "org.apache.directory.server:apacheds-server-jndi:1.5.5"
management "org.apache.directory.shared:shared-ldap:0.9.15"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "org.apache.httpcomponents:httpclient:4.5.+"
management "org.apache.taglibs:taglibs-standard-jstlel:1.2.+"
Use Gradle platform and constraints This was largely generated from the following script wget https://github.com/spring-gradle-plugins/spring-build-conventions/blob/bd9f8eb541529a91d02debe4f4d07056f8b2b8d7/src/main/groovy/io/spring/gradle/convention/DependencySetPlugin.groovy ./dsp.gradle cat gradle/dependency-management.gradle | grep 'management "' | cut -d ':' -f 2 | xargs -I{} sh -c "rg {} -l -g '*.gradle' -g '\!dependency-management.gradle' > /dev/null || echo {}" | xargs -I{} sed -iE '/.*{}.*/d' gradle/dependency-management.gradle rm ./dps.gradle Fixes gh-7787
2019-12-13 15:52:42 -05:00
management "org.aspectj:aspectjrt:$aspectjVersion"
management "org.aspectj:aspectjtools:$aspectjVersion"
management "org.aspectj:aspectjweaver:$aspectjVersion"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "org.assertj:assertj-core:3.17.+"
management "org.bouncycastle:bcpkix-jdk15on:1.66"
management "org.bouncycastle:bcprov-jdk15on:1.66"
management "org.eclipse.jetty:jetty-server:9.4.+"
management "org.eclipse.jetty:jetty-servlet:9.4.+"
management "org.eclipse.persistence:javax.persistence:2.2.+"
management "org.hibernate:hibernate-entitymanager:5.4.+"
management "org.hibernate:hibernate-validator:6.1.+"
management "org.hsqldb:hsqldb:2.5.+"
management "org.jasig.cas.client:cas-client-core:3.6.+"
Update cas-server-webapp to 4.0.7 Did not update to the latest as there is some work involved in aligning the casserver sample's XML configuration with the latest cas-server-webapp. Fixes gh-7874
2020-01-30 13:24:16 -05:00
management "org.jasig.cas:cas-server-webapp:4.0.7@war"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "org.mockito:mockito-core:3.5.+"
management "org.openid4java:openid4java-nodeps:0.9.+"
Use Version Ranges Fixes gh-7788
2019-12-18 15:31:52 -05:00
management "org.opensaml:opensaml-core:$openSamlVersion"
management "org.opensaml:opensaml-saml-api:$openSamlVersion"
management "org.opensaml:opensaml-saml-impl:$openSamlVersion"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "org.powermock:powermock-api-mockito2:2.0.+"
management "org.powermock:powermock-api-support:2.0.+"
management "org.powermock:powermock-core:2.0.+"
management "org.powermock:powermock-module-junit4-common:2.0.+"
management "org.powermock:powermock-module-junit4:2.0.+"
management "org.powermock:powermock-reflect:2.0.+"
Use Version Ranges Fixes gh-7788
2019-12-18 15:31:52 -05:00
management "org.python:jython:2.5.+"
Manage specific version of htmlunit dependencies This allows Spring Boot to resolve consistent versions Fixes: gh-7888
2020-02-03 14:18:02 -05:00
management "org.seleniumhq.selenium:htmlunit-driver:2.37.0"
Constrain Dependencies for Maintenance Branch
2020-10-07 17:27:21 -04:00
management "org.seleniumhq.selenium:selenium-java:3.141.+"
management "org.seleniumhq.selenium:selenium-support:3.141.+"
management "org.skyscreamer:jsonassert:1.5.+"
management "org.slf4j:jcl-over-slf4j:1.7.+"
management "org.slf4j:log4j-over-slf4j:1.7.+"
management "org.slf4j:slf4j-api:1.7.+"
management "org.springframework.ldap:spring-ldap-core:2.3.+"
management "org.synchronoss.cloud:nio-multipart-parser:1.1.+"
management "org.thymeleaf:thymeleaf-spring5:3.0.+"
Use Version Ranges Fixes gh-7788
2019-12-18 15:31:52 -05:00
}
}
configurations {
all {
resolutionStrategy {
componentSelection {
all { ComponentSelection selection ->
def candidate = selection.getCandidate()
def version = candidate.getVersion().toLowerCase()
if (version.contains("alpha") || version.contains("beta")) {
selection.reject("Rejecting $selection with version $version as alpha/beta")
}
if (candidate.getModule().equals("jsr250-api") && version.equals("1.0-20050927.133100")) {
selection.reject("Rejecting $selection with version $version as invalid version")
}
}
}
}
Update Dependencies to Prepare Release
2017-07-20 23:27:27 -04:00
}
}
Use reactor-netty-http for snapshot build Closes gh-8909
2020-08-05 11:46:14 -04:00
/*
NOTE:
The latest `reactor-netty` dependency was split into `reactor-netty-core` and `reactor-netty-http`,
which resulted in the snapshot build to fail. The below configuration fixes it.
Reference:
- https://github.com/spring-projects/spring-security/issues/8909
- https://github.com/reactor/reactor-netty/issues/739#issuecomment-667047117
*/
if (reactorVersion.startsWith('20')) {
if (reactorVersion.endsWith('SNAPSHOT') || reactorVersion.endsWith('+')) {
ext.reactorLatestVersion = "latest.integration"
} else {
ext.reactorLatestVersion = "latest.release"
}
configurations {
all {
resolutionStrategy {
eachDependency { DependencyResolveDetails details ->
if (details.requested.name == 'reactor-netty') {
details.useTarget("${details.requested.group}:reactor-netty-http:${reactorLatestVersion}")
details.because("reactor-netty is now split into reactor-netty-core and reactor-netty-http")
}
}
}
}
}
}