gradle.properties

#moduleSet=all
#ideaIncludeAllModules=true
# This controls Gradle's file system watching, which improves efficiency of incremental builds
# https://docs.gradle.org/current/userguide/file_system_watching.html
org.gradle.vfs.watch=true
# This controls Gradle's build cache, which improves efficiency.
# https://docs.gradle.org/current/userguide/build_cache.html
org.gradle.caching=true
# comment out or use --no-parallel to turn off parallel execution
org.gradle.parallel=true
# comment out and Gradle will attempt to determine the optimal number of executor threads to use
# (this could be memory-intensive)
org.gradle.workers.max=3
# Default to using 2GB of memory for the JVM.
org.gradle.jvmargs=-Xmx2048m -XX:+UseParallelGC -Dfile.encoding=UTF-8
# Uncomment to restrict the number of concurrent npm build tasks. Useful for systems with limited resources.
#npmRunLimit=2

# Set the action to be performed when a version conflict between a dependency included from the build and one that already exists
# is detected. Default behavior on detecting a conflict is to fail. Possible values are delete, fail, warn.
# The value 'delete' will cause the conflicting version(s) in the build directory to be removed.
versionConflictAction=delete

# Comment the following line when deploying a pre-build distribution with embedded tomcat
useLocalBuild

# Uncomment the following line when using SSL for your embedded tomcat server
#useSsl

# the URL for the artifact repository where our build plugins are housed
# as well as the build artifacts. (Be careful not to include a trailing slash 
# in the context URL or you will get a 500 error from artifactory.)
artifactory_contextUrl=https://labkey.jfrog.io/artifactory

# The source and target versions of Java for compilation tasks
# @JavaRuntimeVersion
sourceCompatibility=25
targetCompatibility=25

# indicates if we should use previously published artifacts or build from source
# This setting applies to all projects unless overridden on command line or in a
# project's own gradle.properties file.
buildFromSource=true

# The default version for LabKey artifacts that are built or that we depend on.
# override in an individual module's gradle.properties file as necessary 
labkeyVersion=26.9-SNAPSHOT
labkeyClientApiVersion=8.0.0

# Uncomment the following line to download proteomics binaries
#includeProteomicsBinaries
linuxProteomicsBinariesVersion=2.0
osxProteomicsBinariesVersion=1.0
windowsProteomicsBinariesVersion=1.0

# The current version numbers for the gradle plugins.
artifactoryPluginVersion=5.2.5
gradleNodePluginVersion=7.1.0
gradlePluginsVersion=10.0.1
owaspDependencyCheckPluginVersion=13.0.0

# Versions of node and npm to use during the build. If set, these versions
# will be downloaded and used. If not set, the existing local installations will be used
# The version of npm corresponds to the given version of node
npmVersion=11.18.0
nodeVersion=26.6.0
nodeRepo=https://nodejs.org/dist
# Directory in a project's build directory where the node binary will be placed
nodeWorkDirectory=.node
# Directory in a project's build directory where the npm binary will be placed
npmWorkDirectory=.node

# uncomment the line below to include version number info in build artifacts
# Generally you don't need or want to do this when developing.
#includeVcs

# Version numbers for external libraries that we depend on
# These are the libraries that are used by our "base" modules
# (api, bootstrap, schemas, remoteapi). Other modules that
# have extensive other external dependencies should have a local
# gradle.properties file to declare these version numbers. Naming
# convention is <library name>Version camel-cased, i.e. "jacksonVersion".

# The implementation of Jakarta Activation API that we use. Keep in sync with jakartaActivationApiVersion (below).
angusActivationVersion=2.0.3
angusMailVersion=2.0.5

annotationsVersion=15.0

antVersion=1.10.17

antlrST4Version=4.3.4
antlr4RuntimeVersion=4.13.2

#Unifying version used by DISCVR and Premium
apacheDirectoryVersion=2.1.8
#Transitive dependency of Apache directory
apacheMinaVersion=2.2.9

# Usually matches the version specified as a Spring Boot dependency (see springBootVersion below)
apacheTomcatVersion=11.0.24

# (mothership) -> json-path -> json-smart -> accessor-smart
# (core) -> graalvm
# tika
asmVersion=9.10.1

awsSdkVersion=2.41.22

# Microsoft library for sending OAuth2-authenticated notification emails via the Microsoft Graph API
azureIdentityVersion=1.18.4

# Apache Batik -- Batik version needs to be compatible with Apache FOP, but we need to pull in batik-codec separately
batikVersion=1.19

# sync with Tika version (or later)
bouncycastlePgpVersion=1.85
bouncycastleVersion=1.85

cglibNodepVersion=2.2.3

checkerQualVersion=3.53.0

commonmarkVersion=0.29.0

# the beanutils version is not the default version brought from commons-validator and/or commons-digester
# in the :server:api module but is required for some of our code to compile
commonsBeanutilsVersion=1.11.0
commonsCodecVersion=1.22.1
commonsCollections4Version=4.5.0
commonsCollectionsVersion=3.2.2
commonsCompressVersion=1.28.0
commonsDbcpVersion=1.4
commonsDigesterVersion=1.8.1
commonsDiscoveryVersion=0.2
commonsIoVersion=2.22.0
commonsLang3Version=3.20.0
commonsLangVersion=2.6
commonsLoggingVersion=1.4.0
commonsMath3Version=3.6.1
commonsPoolVersion=1.6
commonsTextVersion=1.15.0
commonsValidatorVersion=1.11.0
commonsVfs2Version=2.10.0

datadogVersion=1.65.0

dom4jVersion=2.2.0

ehcacheCoreVersion=2.6.8
eigenbasePropertiesVersion=1.1.6
eigenbaseResgenVersion=1.3.7
eigenbaseXomVersion=1.3.7

flyingsaucerVersion=R8

# Apache FOP -- linked to Apache Batik version above
fopVersion=2.11

# Force latest for consistency
googleApiVersion=2.47.0
googleAuthVersion=1.40.0
googleAutoValueAnnotationsVersion=1.10.4
googleErrorProneAnnotationsVersion=2.50.0
googleHttpClientVersion=2.2.0
googleOauthClientVersion=1.39.0
googleProtocolBufVersion=3.25.9

graphSupportVersion=1.5.2
grpcVersion=1.83.1

# Cloud and SequenceAnalysis bring gson in as a transitive dependency.
# We resolve to the later version here to keep things consistent
# Note: Current jclouds seems to require 2.8.9; attempting to upgrade to 2.9.0 cratered the S3 test suite with many
# "java.lang.NoSuchMethodError: 'void com.google.gson.internal.ConstructorConstructor.<init>(java.util.Map)'" errors
gsonVersion=2.8.9

guavaVersion=33.6.0-jre

# force hadoop-hdfs-client for CVE-2021-37404, CVE-2022-25168, CVE-2022-26612, CVE-2021-25642, CVE-2021-33036, CVE-2023-26031,
hadoopHdfsClientVersion=3.4.1

hamcrestVersion=2.2

# Note: if changing this, we might need to match with the picard version in the SequenceAnalysis module build.gradle
htsjdkVersion=4.3.0

httpclient5Version=5.6.4
httpcore5Version=5.4.3

# Not used directly, but these are widely used transitive dependencies
httpclientVersion=4.5.14
httpcoreVersion=4.4.16

intellijKotlinVersion=2.3.10

# Update the three Jackson dependency versions below in tandem, unless one gets a patch release out-of-sync with the others
jacksonVersion=2.21.5
jacksonDatabindVersion=2.21.5
jacksonJaxrsBaseVersion=2.21.5

# Note the inconsistent version numbering for "annotations"... it no longer matches the above
jacksonAnnotationsVersion=2.21

# Spring Boot brings in a transitive dependency on Jackson 3.x. It has changed package names and can coexist with Jackson 2.x.
jackson3Version=3.1.5

# The Jakarta Activation API version that Angus Activation implements. Keep in sync with angusActivationVersion (above).
jakartaActivationApiVersion=2.1.4

# Version required by professional's spring-ai dependencies; graphMailTransport's Microsoft Graph SDK pulls 2.1.1
# transitively, but only references Nonnull/Nullable/PostConstruct/etc., all present unchanged in 3.0.0.
jakartaAnnotationApiVersion=3.0.0

jamaVersion=1.0.3

javassistVersion=3.20.0-GA

javaxAnnotationVersion=1.3.2

# cloud, pipeline, query, and tests (sardine) use the old JAXB API and runtime versions
jaxbApiOldVersion=2.3.1
jaxbOldVersion=2.3.3

# All other direct and indirect uses of JAXB use the current, jakarta-packaged versions
jaxbApiVersion=4.0.5
jaxbVersion=4.0.9

jaxrpcVersion=1.1

# jfreechart brings this in as a transitive dependency; targetedms declares this as a direct dependency
jcommonVersion=1.0.23

jfreechartVersion=1.0.19

jmockVersion=2.6.0

# Transitive dependency via azure-identity and docker; force for consistency
jnaVersion=5.18.1

jodaTimeVersion=2.14.3

# brought in transitively by Cloud, FileTransfer, SequenceAnalysis, etc. Need to resolve consistently
jsr305Version=3.0.2

orgJsonVersion=20260719

jsoupVersion=1.23.1

junitVersion=4.13.2

jxlVersion=2.6.3

kaptchaVersion=2.3

log4j2Version=2.26.1

lombokVersion=1.18.46

luceneVersion=10.5.0

# Microsoft library for sending OAuth2-authenticated notification emails via the Microsoft Graph API
microsoftGraphVersion=6.67.0

mssqlJdbcVersion=13.4.0.jre11

# Netty - transitive dependency via azure-core-http-netty; force for CVE fixes
nettyVersion=4.2.17.Final
# Reactor - transitive dependency via azure-core; force for version consistency across modules
reactorCoreVersion=3.8.1

objenesisVersion=1.0

opencsvVersion=2.3

openTracingVersion=0.33.0

# sync with version Tika ships
pdfboxVersion=3.0.8

# sync with version Tika ships
poiVersion=5.5.1

pollingWatchVersion=0.2.0

postgresqlDriverVersion=42.7.13

quartzVersion=2.5.2

reflectionsVersion=0.10.2

rforgeVersion=0.6-8.1

# sync with Tika version
romeVersion=2.1.0

# Tomcat 10 implements 6.x
servletApiVersion=6.1.0

# this version is forced for compatibility with pipeline and tika
slf4jLog4j12Version=2.0.18
# this version is forced for compatibility with api, LDK, and workflow
slf4jLog4jApiVersion=2.0.18

# This is a dependency for HTSJDK. Force version for CVE-2023-43642
snappyJavaVersion=1.1.10.8

# Also, update apacheTomcatVersion above to match Spring Boot's Tomcat dependency version
springBootVersion=4.1.0
# This usually matches the Spring Framework version dictated by springBootVersion
springVersion=7.0.8
springAiVersion=2.0.0

sqliteJdbcVersion=3.53.2.1

# SAML brings stax2-api in as a transitive dependency. We force the latest version.
stax2ApiVersion=4.2.2

thumbnailatorVersion=0.4.21

# used for tika-core in API and tika-parsers in search
tikaVersion=3.3.2

# sync with Tika
tukaaniXZVersion=1.12

validationApiVersion=1.1.0.Final

# SAML brings woodstox-core in as a transitive dependency. We force the latest version.
woodstoxCoreVersion=7.2.2

# sync with Tika
xercesImplVersion=2.12.2

# version 2.0.2 was relocated to xml-apis:xml-apis:1.0.b2, so we use 1.0.b2 here since later versions of Gradle don't support
# using the relocated version
xmlApisVersion=1.0.b2

# sync with Tika/POI
xmlbeansVersion=5.2.0