Update dependencies (#459)

* Update dependencies

Plugins:
- com.diffplug.spotless 6.25.0 -> 7.2.1
- io.spring.dependency-management 1.1.6 -> 1.1.7
- me.champeau.jmh 0.7.2 -> 0.7.3
- com.google.protobuf (gradle) 0.9.4 -> 0.9.5
- Gradle wrapper 8.10.2 -> 8.14.3

Libraries:
- log4j 2.24.1 -> 2.25.4
- junit-jupiter 5.11.3 -> 5.13.4
- junit-platform 1.13.4 (new explicit dependency)
- assertj-core 3.26.3 -> 3.27.4
- protobuf-java 3.25.5 -> 4.32.1
- netty 4.2.5.Final -> 4.2.12.Final
- netty-tcnative-boringssl-static 2.0.73.Final -> 2.0.76.Final
- bouncycastle 1.78.1 -> 1.80
- guava 33.3.1-jre -> 33.4.8-jre
- slf4j-api 2.0.9 -> 2.0.17
- ktlint version pinned to 1.1.1

Other:
- Remove jmh from explicit dependencies (managed by me.champeau.jmh plugin)
- Use ParameterizedInvocationConstants.INDEX_PLACEHOLDER (junit 5.13+)
- Remove dead commented-out debug code in GossipScoreBenchmark

* Fix detekt failing on JVM 21

detekt 1.22.0 only accepts jvmTarget up to 18, so it fails when Gradle
runs on Java 21. Explicitly setting jvmTarget = "11" on the Detekt tasks
matches the project's configured Kotlin target and unblocks the check.

detekt 1.23.x would fix this properly but requires Kotlin 1.9+, which
is a separate upgrade.

* Revert slf4j and bouncycastle upgrades for Android compatibility

AGP 7.4.2's D8 dexer cannot process the newer bytecode format used by
slf4j-api 2.0.17 and bouncycastle 1.80, causing the android-chatter
example module to fail to build. Reverting to versions compatible with
the old D8 toolchain.

Unblocked once AGP is upgraded (tracked in #458 as part of Kotlin 2.x work).

* Revert guava upgrade for Android compatibility

guava 33.4.8-jre transitively brings in error_prone_annotations 2.36.0,
which AGP 7.4.2's D8 dexer cannot process. Reverting to 33.3.1-jre
which pulls in 2.28.0, the previously working version.

Unblocked once AGP is upgraded (tracked in #458).

* Revert protobuf upgrade for Android compatibility

protobuf-java 4.32.1 generates bytecode that AGP 7.4.2's D8 dexer
cannot process (IdentifyOuterClass and similar generated classes fail
to dex). Reverting to 3.25.5 (the current develop version) restores
Android compatibility.

protobuf 4.x can be revisited once AGP is upgraded (tracked in #458).

* Change Netty version in versions.gradle

Updated Netty version from 4.2.12.Final to 4.2.10.Final.

Author: lucassaldanha

build.gradle.kts

@@ -18,9 +18,9 @@ plugins {
     id("java")
     id("maven-publish")
     id("org.jetbrains.dokka").version("1.9.20")
-    id("com.diffplug.spotless").version("6.25.0")
+    id("com.diffplug.spotless").version("7.2.1")
     id("java-test-fixtures")
-    id("io.spring.dependency-management").version("1.1.6")
+    id("io.spring.dependency-management").version("1.1.7")
 
     id("org.jetbrains.kotlin.android") version kotlinVersion apply false
     id("com.android.application") version "7.4.2" apply false
@@ -63,6 +63,8 @@ configure(
 
         testImplementation("org.junit.jupiter:junit-jupiter")
         testImplementation("org.junit.jupiter:junit-jupiter-params")
+        testImplementation("org.junit.platform:junit-platform-launcher")
+        testRuntimeOnly("org.junit.platform:junit-platform-engine")
         testImplementation("io.mockk:mockk")
         testImplementation("org.assertj:assertj-core")
         testRuntimeOnly("org.apache.logging.log4j:log4j-slf4j2-impl")
@@ -84,6 +86,9 @@ configure(
     tasks.withType<Copy> {
         duplicatesStrategy = DuplicatesStrategy.INCLUDE
     }
+    tasks.withType<io.gitlab.arturbosch.detekt.Detekt>().configureEach {
+        jvmTarget = "11"
+    }
 
 // Parallel build execution
     tasks.test {
@@ -108,8 +113,10 @@ configure(
     }
 
     configure<SpotlessExtension> {
+        // https://github.com/pinterest/ktlint/releases
+        val ktlintVersion = "1.1.1"
         kotlin {
-            ktlint().editorConfigOverride(
+            ktlint(ktlintVersion).editorConfigOverride(
                 mapOf(
                     "ktlint_standard_no-wildcard-imports" to "disabled",
                     "ktlint_standard_enum-entry-name-case" to "disabled",
@@ -140,7 +147,7 @@ configure(
                 jdkVersion.set(11)
                 reportUndocumented.set(false)
                 externalDocumentationLink {
-                    url.set(URI.create("https://netty.io/4.1/api/").toURL())
+                    url.set(URI.create("https://netty.io/4.2/api/").toURL())
                 }
             }
         }

gradle/wrapper/gradle-wrapper.jar

@@ -1,7 +1,8 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionSha256Sum=31c55713e40233a8303827ceb42ca48a47267a0ad4bab9177123121e71524c26
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.10.2-bin.zip
+distributionSha256Sum=bd71102213493060956ec229d946beee57158dbd89d0e62b91bca0fa2c5f3531
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-bin.zip
 networkTimeout=10000
+validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 plugins {
     id("com.google.protobuf").version("0.9.4")
-    id("me.champeau.jmh").version("0.7.2")
+    id("me.champeau.jmh").version("0.7.3")
 }
 
 // https://docs.gradle.org/current/userguide/java_testing.html#ex-disable-publishing-of-test-fixtures-variants
@@ -46,8 +46,6 @@ dependencies {
     testFixturesImplementation("org.junit.jupiter:junit-jupiter-api")
 
     jmhImplementation(project(":tools:schedulers"))
-    jmhImplementation("org.openjdk.jmh:jmh-core")
-    jmhAnnotationProcessor("org.openjdk.jmh:jmh-generator-annprocess")
 }
 
 protobuf {

gradlew

@@ -107,12 +107,4 @@ public void scoresDelay10000(Blackhole bh) {
       bh.consume(s);
     }
   }
-
-  /** Uncomment for debugging */
-  //    public static void main(String[] args) {
-  //        GossipScoreBenchmark benchmark = new GossipScoreBenchmark();
-  //        Blackhole blackhole = new Blackhole("Today's password is swordfish. I understand
-  // instantiating Blackholes directly is dangerous.");
-  //        benchmark.scoresDelay0(blackhole);
-  //    }
 }

gradlew.bat

@@ -8,6 +8,7 @@ import io.libp2p.pubsub.gossip.builders.GossipParamsBuilder
 import io.libp2p.pubsub.gossip.builders.GossipRouterBuilder
 import org.assertj.core.api.Assertions.assertThat
 import org.junit.jupiter.api.Test
+import org.junit.jupiter.params.ParameterizedInvocationConstants
 import org.junit.jupiter.params.ParameterizedTest
 import org.junit.jupiter.params.provider.Arguments
 import org.junit.jupiter.params.provider.MethodSource
@@ -186,7 +187,7 @@ class GossipRpcPartsQueueTest {
         fun mergeParams(): Stream<Arguments> = testCases.stream()
     }
 
-    @ParameterizedTest(name = "[${ParameterizedTest.INDEX_PLACEHOLDER}] {0}")
+    @ParameterizedTest(name = "[${ParameterizedInvocationConstants.INDEX_PLACEHOLDER}] {0}")
     @MethodSource("mergeParams")
     fun `mergeMessageParts() test various combinations`(
         gossipParams: GossipParams,

libp2p/build.gradle.kts

@@ -9,29 +9,29 @@ dependencyManagement {
         dependency "com.google.guava:guava:33.3.1-jre"
 
         dependency "org.slf4j:slf4j-api:2.0.9"
-        dependencySet(group: 'org.apache.logging.log4j', version: '2.24.1') {
+        dependencySet(group: 'org.apache.logging.log4j', version: '2.25.4') {
             entry 'log4j-core'
             entry 'log4j-slf4j2-impl'
         }
 
-        dependencySet(group: 'org.junit.jupiter', version: '5.11.3') {
+        dependencySet(group: 'org.junit.jupiter', version: '5.13.4') {
             entry 'junit-jupiter-api'
             entry 'junit-jupiter-engine'
             entry 'junit-jupiter-params'
         }
-        dependency "io.mockk:mockk:1.13.3"
-        dependency "org.assertj:assertj-core:3.26.3"
+        dependencySet(group: 'org.junit.platform', version: '1.13.4') {
+            entry 'junit-platform-launcher'
+            entry 'junit-platform-engine'
 
-        dependencySet(group: "org.openjdk.jmh", version: "1.37") {
-            entry 'jmh-core'
-            entry 'jmh-generator-annprocess'
         }
+        dependency "io.mockk:mockk:1.13.3"
+        dependency "org.assertj:assertj-core:3.27.4"
 
         dependencySet(group: "com.google.protobuf", version: "3.25.5") {
             entry 'protobuf-java'
             entry 'protoc'
         }
-        dependencySet(group: "io.netty", version: "4.2.5.Final") {
+        dependencySet(group: "io.netty", version: "4.2.10.Final") {
             entry 'netty-common'
             entry 'netty-handler'
             entry 'netty-transport'
@@ -41,7 +41,7 @@ dependencyManagement {
             entry 'netty-codec-native-quic'
             entry 'netty-transport-classes-epoll'
         }
-        dependency "io.netty:netty-tcnative-boringssl-static:2.0.73.Final"
+        dependency "io.netty:netty-tcnative-boringssl-static:2.0.76.Final"
         dependency "com.github.multiformats:java-multibase:v1.1.1"
         dependency "tech.pegasys:noise-java:22.1.0"
         dependencySet(group: "org.bouncycastle", version: "1.78.1") {
@@ -50,4 +50,4 @@ dependencyManagement {
             entry 'bctls-jdk18on'
         }
     }
-}
+}