tree 1800c0e7bf718a7e6e10fe7b754e6521d6111e43
parent 279e12103575b1c08223a8feacb1e62349a9b71f
author Terry Parker <tparker@google.com> 1771028919 -0800
committer Terry Parker <tparker@google.com> 1771613687 -0800

Update Gitiles dependencies

This area was overdue for attention, there are many bugs filed
about out-of-date Gitiles dependencies.

Google uses its internal build system to build Gitiles, and we
experience friction in updating internally, since we need to update
not just Gitiles, but all internal uses of that dependency. With
AI assistance I updated WORKSPACE library versions to match the
ones Google is using, if Google is using a newer version.

All of these updates involve stable APIs, no source file updates
were required.

Updating commons-compress added a new dependency on commons-io,
so added that (thanks to David for finding that, Diffy for the
win!)

Testing was to run `bazel test //...`, run the `tools/run.dev`
script and test localhost, and run `tools/maven/mvn.sh install`.

I compared these updated versions with the versions in the JGit
and Gerrit projects. All permutations are now there--Gitiles uses
a more recent version than the other two, JGit does, and Gerrit
does. I can run the same update on JGit and Gerrit once this
change is in.

+------------------------+-------------------+--------------------+
| Library                | Old Version       | New Version        |
+------------------------+-------------------+--------------------+
| ASM (OW2)              | 9.2               | 9.9.1              |
| Autolink               | 0.10.0            | 0.11.0             |
| Byte Buddy             | 1.14.9            | 1.18.2             |
| Commonmark             | 0.21.0            | 0.24.0             |
| Commons Codec          | 1.16.0            | 1.18.0             |
| Commons Compress       | 1.25.0            | 1.28.0             |
| Commons IO             | <none>            | 2.21.0             |
| Commons Lang3          | 3.8.1             | 3.18.0             |
| Commons Text           | 1.2               | 1.10.0             |
| Diffutils              | 1.3.0             | 4.16               |
| Error Prone Annot.     | 2.22.0            | 2.46.0             |
| Gson                   | 2.10.1            | 2.13.2             |
| Guava                  | 32.1.2-jre        | 33.5.0-jre         |
| Guava Failureaccess    | 1.0.1             | 1.0.3              |
| Hamcrest               | 2.2               | 3.0                |
| ICU4J                  | 74.2              | 78.2               |
| Jetty                  | 9.4.53.v20231009  | 9.4.57.v20241219   |
| Junit                  | 4.12              | 4.13.2             |
| Mockito                | 5.6.0             | 5.21.0             |
| Objenesis              | 2.6               | 3.0.1              |
| Protobuf               | 3.19.4            | 3.25.5             |
| SLF4J                  | 1.7.36            | 2.0.17             |
| Servlet API            | 3.1.0             | 4.0.1              |
| Truth                  | 1.1               | 1.4.4              |
| XZ                     | 1.9               | 1.11               |
+------------------------+-------------------+--------------------+

Release-Notes: Stabilize WORKSPACE dependencies and fix checksums.
Change-Id: Ic7dc1c8e96e8c1b26c80d259fb0b194ae4fc41f8