Use ben-manes versions plugin to identify outdated dependencies

Based on the report, updated several 3rd party dependencies.

Author: lesserwhirls

build-logic-ncj/build.gradle.kts

@@ -1,17 +1,19 @@
 /*
- * Copyright (c) 2025 University Corporation for Atmospheric Research/Unidata
+ * Copyright (c) 2025-2026 University Corporation for Atmospheric Research/Unidata
  * See LICENSE for license information.
  */
 
 plugins {
   `kotlin-dsl`
   alias(ncjLibs.plugins.protobuf)
   alias(ncjLibs.plugins.spotless)
+  alias(ncjLibs.plugins.versions)
 }
 
 dependencies {
   implementation(plugin(ncjLibs.plugins.protobuf))
   implementation(plugin(ncjLibs.plugins.spotless))
+  implementation(plugin(ncjLibs.plugins.versions))
 }
 
 spotless {

build-logic-ncj/src/main/kotlin/ncj-versions-conventions.gradle.kts

@@ -0,0 +1,21 @@
+/*
+ * Copyright (c) 2026 University Corporation for Atmospheric Research/Unidata
+ * See LICENSE for license information.
+ */
+
+import com.github.benmanes.gradle.versions.updates.DependencyUpdatesTask
+
+plugins { id("com.github.ben-manes.versions") }
+
+// https://github.com/ben-manes/gradle-versions-plugin
+fun isNonStable(version: String): Boolean {
+  val stableKeyword = listOf("RELEASE", "FINAL", "GA").any { version.uppercase().contains(it) }
+  val regex = "^[0-9,.v-]+(-r)?$".toRegex()
+  val isStable = stableKeyword || regex.matches(version)
+  return isStable.not()
+}
+
+// don't suggest release candidates if currently on a stable version
+tasks.withType<DependencyUpdatesTask> {
+  rejectVersionIf { isNonStable(candidate.version) && !isNonStable(currentVersion) }
+}

build.gradle.kts

@@ -6,6 +6,7 @@
 plugins {
   id("ncj-java-base-conventions")
   alias(ncjLibs.plugins.spotless)
+  id("ncj-versions-conventions")
 }
 
 description = "The Unidata netCDF-Java library (aka CDM)."

gradle/ncj.libs.versions.toml

@@ -4,46 +4,46 @@ netcdf-java = "5.10.0-SNAPSHOT"
 unidata-doc-theme = "0.1.1"
 
 # 3rd party dependencies
-awssdk = "2.31.76"
-awssdkv1 = "1.12.649"
+awssdk = "2.43.0"
+awssdkv1 = "1.12.797"
 commons-math3 = "3.6.1"
 bounce = "0.18"
-grpc = "1.73.0"
-guava = "33.4.8-jre"
-httpcomponents = "4.5.13"
-jackson = "2.21.1"
-jcommander = "1.78"
+grpc = "1.80.0"
+guava = "33.6.0-jre"
+httpcomponents = "4.5.14"
+jackson = "2.21.3"
+jcommander = "1.82"
 jdom2 = "2.0.6.1"
-jfree-jcommon = "1.0.23"
+jfree-jcommon = "1.0.24"
 jfree-jfreechart = "1.0.19"
 jgoodies-forms = "1.6.0"
 jj2000 = "5.4"
-joda-time = "2.12.7"
+joda-time = "2.14.2"
 jsr305 = "3.0.2"
-jna = "5.17.0"
-lgooddatepicker = "10.3.1"
+jna = "5.18.1"
+lgooddatepicker = "11.2.1"
 mcidas = "20231121"
-protobuf = "4.31.1"
-re2j = "1.3"
+protobuf = "4.34.1"
+re2j = "1.8"
 sensorweb-waterml = "2.7.0"
 slf4j = "2.0.17"
 tomcat-annotations = "6.0.53"
-visad = "2.0-20130124"
+visad = "2.0-20191209"
 xmlbeans = "3.1.0"
 
 #testing only
-commons-compress = "1.12"
-commons-io = "2.5"
-jsoup = "1.11.2"
-junit4 = "4.13.1"
-junit5 = "5.14.0"
+commons-compress = "1.28.0"
+commons-io = "2.22.0"
+jsoup = "1.22.2"
+junit4 = "4.13.2"
+junit5 = "5.14.4"
 junitparams = "1.0.5"
 mockito-core = "2.28.2"
 testcontainers = "1.21.4"
-truth = "1.0"
+truth = "1.4.5"
 
 # runtime only
-logback-classic = "1.3.15"
+logback-classic = "1.5.32"
 
 [libraries]
 
@@ -117,3 +117,4 @@ javacc = { id = "org.javacc.javacc", version = "4.0.3" }
 protobuf = { id = "com.google.protobuf", version = "0.10.0" }
 shadow = { id = "com.gradleup.shadow", version = "9.4.1" }
 spotless = { id = "com.diffplug.spotless", version = "8.4.0" }
+versions = { id = "com.github.ben-manes.versions", version = "0.54.0" }