ci: Test upper bound dependenices file in Github CI

Author: lqiu96

.github/scripts/test_dependency_compatibility.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+
+# Check if a filename was provided as an argument
+if [ -z "$1" ]; then
+  echo "Usage: $0 <dependency_file>"
+  exit 1
+fi
+
+DEPENDENCY_FILE="$1"
+MAVEN_COMMAND="mvn verify -Penable-integration-tests -Dclirr.skip -Dcheckstyle.skip -Dfmt.skip "
+
+# Read the file line by line
+while IFS= read -r line; do
+  # Ignore comments and blank lines
+  if [[ "${line}" =~ ^[[:space:]]*# ]] || [[ -z "${line}" ]]; then
+    continue
+  fi
+
+  # Extract the dependency name and version
+  # We use 'cut' to split the line by '=' and trim whitespace
+  # The sed command is used to remove potential trailing whitespace from the version number
+  dependency=$(echo "${line}" | cut -d'=' -f1 | tr -d '[:space:]')
+  version=$(echo "${line}" | cut -d'=' -f2 | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')
+
+  # Append the formatted property to the Maven command
+  MAVEN_COMMAND+=" -D${dependency.version}=${version}"
+done < "${DEPENDENCY_FILE}"
+
+# Run the generated maven command
+$MAVEN_COMMAND

.github/workflows/dependency_compatibility_test.yaml

@@ -0,0 +1,22 @@
+name: Dependency Compatibility Test
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 1 * * *' # Nightly at 1am
+
+jobs:
+  dependency-compatibility-test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+          cache: maven
+      - name: Perform Dependency Compatibility Testing
+        run: ./.github/scripts/test_dependency_compatibility.sh dependencies.txt

dependencies.txt

@@ -0,0 +1,40 @@
+# 1P Parent-Pom
+javax.annotation-api=1.3.2
+grpc=1.74.0
+google.auth=1.37.1
+google.http-client=1.47.1
+gson=2.13.1
+guava=33.4.8-jre
+protobuf=4.31.1
+opentelemetry=1.52.0
+errorprone=4.15.1
+j2objc-annotations=3.0.0
+threetenbp=1.7.1
+slf4j=2.0.17
+
+# 1P Shared-Deps
+grpc-gcp=1.6.1
+google.oauth-client=1.39.0
+google.api-client=2.8.0
+
+# 3P Shared-Deps
+threeten-extra=1.8.0
+opencensus=0.31.0
+findbugs=3.0.2
+# Ignore this for now as maven is trying resolve this to be jackson v2.19.2.2
+# jackson=2.19.2
+errorprone=2.41.0
+codec=1.19.0
+httpcomponents.httpcore=4.4.16
+httpcomponents.httpclient=4.5.14
+apache-httpclient-5=5.5
+apache-httpcore-5=5.3.4
+perfmark-api=0.27.0
+j2objc-annotations=3.0.0
+google.cloud.opentelemetry=0.36.0
+opentelemetry-semconv=1.34.0
+flogger=0.9
+arrow=18.3.0
+dev.cel=0.10.1
+com.google.crypto.tink=1.18.0
+io.opentelemetry.contrib.opentelemetry-gcp-resources=1.48.0-alpha