-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: gradle catalog dependencies #147
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||
---|---|---|---|---|---|---|
@@ -0,0 +1,44 @@ | ||||||
[versions] | ||||||
hypertrace-serviceFramework = "0.1.43" | ||||||
hypertrace-grpcUtils = "0.9.0" | ||||||
hypertrace-documentStore = "0.7.18" | ||||||
|
||||||
protoc = "3.21.2" | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. this is an older version with vulnerabilities. we've been using 3.21.7 (although looks like 3.21.8 is out now) |
||||||
grpc = "1.48.0" | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
mockito = "4.8.1" | ||||||
jackson = "2.13.4.2" | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. nit: this isn't a full jackson version - jackson hotfixes are inconsistent across modules (i.e. most jackson modules don't have a 2.13.4.2, only a 2.13.4). So it works since we only use databind, but probably just want to inline this version there to avoid a mistake in the future (or rename it specifically jacksonDatabind would be fine too) |
||||||
|
||||||
[libraries] | ||||||
hypertrace-serviceFramework-grpcFramework = { module = "org.hypertrace.core.serviceframework:platform-grpc-service-framework", version.ref = "hypertrace-serviceFramework" } | ||||||
hypertrace-serviceFramework-integrationTestFramework = { module = "org.hypertrace.core.serviceframework:integrationtest-service-framework", version.ref = "hypertrace-serviceFramework" } | ||||||
hypertrace-grpc-client-utils = { module = "org.hypertrace.core.grpcutils:grpc-client-utils", version.ref = "hypertrace-grpcUtils"} | ||||||
hypertrace-grpc-client-rx-utils = { module = "org.hypertrace.core.grpcutils:grpc-client-rx-utils", version.ref = "hypertrace-grpcUtils"} | ||||||
hypertrace-grpc-context-utils = { module = "org.hypertrace.core.grpcutils:grpc-context-utils", version.ref = "hypertrace-grpcUtils"} | ||||||
hypertrace-document-store = { module = "org.hypertrace.core.documentstore:document-store", version.ref = "hypertrace-documentStore" } | ||||||
|
||||||
grpc-netty = { module = "io.grpc:grpc-netty", version.ref = "grpc" } | ||||||
grpc-stub = { module = "io.grpc:grpc-stub", version.ref = "grpc" } | ||||||
grpc-protobuf = { module = "io.grpc:grpc-protobuf", version.ref = "grpc" } | ||||||
grpc-api = { module = "io.grpc:grpc-api", version.ref = "grpc" } | ||||||
grpc-core = { module = "io.grpc:grpc-core", version.ref = "grpc" } | ||||||
|
||||||
protobuf-java-util = { module = "com.google.protobuf:protobuf-java-util", version.ref = "protoc" } | ||||||
|
||||||
jackson-databind = { module = "com.fasterxml.jackson.core:jackson-databind", version.ref = "jackson" } | ||||||
rxjava = { module = "io.reactivex.rxjava3:rxjava", version = "3.1.3" } | ||||||
javax-annotation = { module = "javax.annotation:javax.annotation-api", version = "1.3.2" } | ||||||
google-guava = { module = "com.google.guava:guava", version = "31.1-jre" } | ||||||
findbugs-jsr = { module = "com.google.code.findbugs:jsr305", version = "3.0.2" } | ||||||
uuid-creator = { module = "com.github.f4b6a3:uuid-creator", version = "5.1.0" } | ||||||
typesafe-config = { module = "com.typesafe:config", version = "1.4.2" } | ||||||
lombok = { module = "org.projectlombok:lombok", version = "1.18.22" } | ||||||
slf4j-api = { module = "org.slf4j:slf4j-api", version = "1.7.32" } | ||||||
apache-log4j-slf4jImpl = { module = "org.apache.logging.log4j:log4j-slf4j-impl", version = "2.17.1" } | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. could you do a quick check on version numbers. I think a few of these are outdated - log4j, rxjava and lombok at least |
||||||
|
||||||
junit-jupiter = { module = "org.junit.jupiter:junit-jupiter", version = "5.8.2" } | ||||||
mockito-core = { module = "org.mockito:mockito-core", version.ref = "mockito" } | ||||||
mockito-junit = { module = "org.mockito:mockito-junit-jupiter", version.ref = "mockito" } | ||||||
|
||||||
[bundles] | ||||||
grpc-api = ["grpc-stub", "grpc-protobuf", "javax-annotation"] | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. grpc-bom got removed, please restore it (and if doing other repos, add it) There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. fuller explanation of my thinking behind using the grpc bom here - hypertrace/service-framework#56 (comment) |
||||||
mockito = ["mockito-core", "mockito-junit"] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
might be worth waiting for the couple pending framework prs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yeah, that was the plan