deps(gradle): Use Jackson's Maven BOM as a version catalog

sschuberth · sschuberth · commit ebf94a67aee3 · 2025-08-30T10:48:00.000+02:00
Use a Gradle plugin [1] to generate a Gradle version catalog from a Maven BOM. This allows to ease version management for Jackson which publishes a Maven BOM, but no Gradle version catalog. [1]: https://github.com/austinarbor/version-catalog-generator Signed-off-by: Sebastian Schuberth <sebastian@doubleopen.org>
diff --git a/cli-helper/build.gradle.kts b/cli-helper/build.gradle.kts
@@ -42,9 +42,9 @@ dependencies {
     implementation(projects.utils.configUtils)
     implementation(projects.utils.ortUtils)
 
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.clikt)
     implementation(libs.commonsCompress)
-    implementation(libs.jackson.module.kotlin)
     implementation(libs.jslt)
     implementation(libs.log4j.api)
     implementation(libs.slf4j)
diff --git a/clients/fossid-webapp/build.gradle.kts b/clients/fossid-webapp/build.gradle.kts
@@ -26,7 +26,7 @@ dependencies {
     api(libs.okhttp)
     api(libs.retrofit)
 
-    implementation(libs.jackson.module.kotlin)
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.kotlinx.coroutines)
     implementation(libs.retrofit.converter.jackson)
 
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -113,12 +113,7 @@ gson = { module = "com.google.code.gson:gson", version.ref = "gson" }
 hikari = { module = "com.zaxxer:HikariCP", version.ref = "hikari" }
 hoplite-core = { module = "com.sksamuel.hoplite:hoplite-core", version.ref = "hoplite" }
 hoplite-yaml = { module = "com.sksamuel.hoplite:hoplite-yaml", version.ref = "hoplite" }
-jackson-annotations = { module = "com.fasterxml.jackson.core:jackson-annotations", version.ref = "jackson" }
-jackson-core = { module = "com.fasterxml.jackson.core:jackson-core", version.ref = "jackson" }
-jackson-databind = { module = "com.fasterxml.jackson.core:jackson-databind", version.ref = "jackson" }
-jackson-dataformat-yaml = { module = "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml", version.ref = "jackson" }
-jackson-datatype-jsr310 = { module = "com.fasterxml.jackson.datatype:jackson-datatype-jsr310", version.ref = "jackson" }
-jackson-module-kotlin = { module = "com.fasterxml.jackson.module:jackson-module-kotlin", version.ref = "jackson" }
+jackson-bom = { module = "com.fasterxml.jackson:jackson-bom", version.ref = "jackson" }
 jakartaMail = { module = "com.sun.mail:jakarta.mail", version.ref = "jakartaMail" }
 jerseyCommon = { module = "org.glassfish.jersey.core:jersey-common", version.ref = "jerseyCommon" }
 jgit = { module = "org.eclipse.jgit:org.eclipse.jgit", version.ref = "jgit" }
diff --git a/model/build.gradle.kts b/model/build.gradle.kts
@@ -31,15 +31,15 @@ dependencies {
     api(projects.utils.ortUtils)
     api(projects.utils.spdxUtils)
 
-    api(libs.jackson.databind)
-    api(libs.jackson.dataformat.yaml)
+    api(jacksonLibs.jacksonDatabind)
+    api(jacksonLibs.jacksonDataformatYaml)
     api(libs.log4j.api)
 
+    implementation(jacksonLibs.jacksonDatatypeJsr310)
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.bundles.exposed)
     implementation(libs.bundles.hoplite)
     implementation(libs.hikari)
-    implementation(libs.jackson.datatype.jsr310)
-    implementation(libs.jackson.module.kotlin)
     implementation(libs.postgres)
     implementation(libs.semver4j)
     implementation(libs.tika)
diff --git a/plugins/api/build.gradle.kts b/plugins/api/build.gradle.kts
@@ -25,5 +25,5 @@ plugins {
 dependencies {
     api(projects.utils.commonUtils)
 
-    api(libs.jackson.annotations)
+    api(jacksonLibs.jacksonAnnotations)
 }
diff --git a/plugins/commands/api/build.gradle.kts b/plugins/commands/api/build.gradle.kts
@@ -30,6 +30,6 @@ dependencies {
 
     implementation(projects.utils.ortUtils)
 
-    implementation(libs.jackson.core)
-    implementation(libs.jackson.databind)
+    implementation(jacksonLibs.jacksonCore)
+    implementation(jacksonLibs.jacksonDatabind)
 }
diff --git a/plugins/commands/compare/build.gradle.kts b/plugins/commands/compare/build.gradle.kts
@@ -30,8 +30,8 @@ dependencies {
     implementation(projects.model)
     implementation(projects.utils.commonUtils)
 
+    implementation(jacksonLibs.jacksonDataformatYaml)
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.clikt)
     implementation(libs.diffUtils)
-    implementation(libs.jackson.dataformat.yaml)
-    implementation(libs.jackson.module.kotlin)
 }
diff --git a/plugins/commands/config/build.gradle.kts b/plugins/commands/config/build.gradle.kts
@@ -30,8 +30,8 @@ dependencies {
     implementation(projects.model)
     implementation(projects.utils.commonUtils)
 
+    implementation(jacksonLibs.jacksonDatabind)
+    implementation(jacksonLibs.jacksonDataformatYaml)
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.clikt)
-    implementation(libs.jackson.databind)
-    implementation(libs.jackson.dataformat.yaml)
-    implementation(libs.jackson.module.kotlin)
 }
diff --git a/plugins/commands/migrate/build.gradle.kts b/plugins/commands/migrate/build.gradle.kts
@@ -31,6 +31,6 @@ dependencies {
     implementation(projects.plugins.packageManagers.nugetPackageManager)
     implementation(projects.utils.commonUtils)
 
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.clikt)
-    implementation(libs.jackson.module.kotlin)
 }
diff --git a/plugins/package-managers/node/build.gradle.kts b/plugins/package-managers/node/build.gradle.kts
@@ -36,7 +36,7 @@ dependencies {
         because("This is a CommandLineTool.")
     }
 
-    api(libs.jackson.databind)
+    api(jacksonLibs.jacksonDatabind)
 
     implementation(projects.downloader)
     implementation(projects.utils.ortUtils)
diff --git a/plugins/package-managers/spdx/build.gradle.kts b/plugins/package-managers/spdx/build.gradle.kts
@@ -32,8 +32,8 @@ dependencies {
     implementation(projects.utils.spdxDocument)
     implementation(projects.utils.spdxUtils)
 
-    implementation(libs.jackson.core)
-    implementation(libs.jackson.databind)
+    implementation(jacksonLibs.jacksonCore)
+    implementation(jacksonLibs.jacksonDatabind)
     implementation(libs.okhttp)
 
     ksp(projects.analyzer)
diff --git a/plugins/reporters/evaluated-model/build.gradle.kts b/plugins/reporters/evaluated-model/build.gradle.kts
@@ -27,15 +27,15 @@ dependencies {
     api(projects.reporter)
     api(projects.utils.spdxUtils)
 
-    api(libs.jackson.annotations)
-    api(libs.jackson.databind)
+    api(jacksonLibs.jacksonAnnotations)
+    api(jacksonLibs.jacksonDatabind)
 
     ksp(projects.reporter)
 
     implementation(projects.utils.ortUtils)
 
-    implementation(libs.jackson.core)
-    implementation(libs.jackson.dataformat.yaml)
+    implementation(jacksonLibs.jacksonCore)
+    implementation(jacksonLibs.jacksonDataformatYaml)
 
     funTestImplementation(testFixtures(projects.reporter))
 }
diff --git a/plugins/reporters/spdx/build.gradle.kts b/plugins/reporters/spdx/build.gradle.kts
@@ -36,7 +36,7 @@ dependencies {
     implementation(projects.utils.spdxDocument)
     implementation(projects.utils.spdxUtils)
 
-    implementation(libs.jackson.databind)
+    implementation(jacksonLibs.jacksonDatabind)
 
     funTestImplementation(testFixtures(projects.plugins.reporters.spdxReporter))
 
diff --git a/scanner/build.gradle.kts b/scanner/build.gradle.kts
@@ -33,8 +33,8 @@ dependencies {
     implementation(projects.downloader)
     implementation(projects.utils.ortUtils)
 
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.bundles.exposed)
-    implementation(libs.jackson.module.kotlin)
     implementation(libs.kotlinx.coroutines)
     implementation(libs.postgres)
     implementation(libs.sw360Client) {
diff --git a/settings.gradle.kts b/settings.gradle.kts
@@ -17,6 +17,9 @@
  * License-Filename: LICENSE
  */
 
+import dev.aga.gradle.versioncatalogs.Generator.generate
+import dev.aga.gradle.versioncatalogs.GeneratorConfig
+
 // Enable type-safe project accessors, see:
 // https://docs.gradle.org/current/userguide/declaring_dependencies.html#sec:type-safe-project-accessors
 enableFeaturePreview("TYPESAFE_PROJECT_ACCESSORS")
@@ -99,5 +102,19 @@ pluginManagement {
 
 plugins {
     // Gradle cannot access the version catalog from here, so hard-code the dependency.
+    id("dev.aga.gradle.version-catalog-generator").version("3.2.2")
     id("org.gradle.toolchains.foojay-resolver-convention").version("1.0.0")
 }
+
+dependencyResolutionManagement {
+    @Suppress("UnstableApiUsage")
+    repositories {
+        mavenCentral()
+    }
+
+    generate("jacksonLibs") {
+        fromToml("jackson-bom") {
+            aliasPrefixGenerator = GeneratorConfig.NO_PREFIX
+        }
+    }
+}
diff --git a/utils/spdx-document/build.gradle.kts b/utils/spdx-document/build.gradle.kts
@@ -23,16 +23,16 @@ plugins {
 }
 
 dependencies {
-    api(libs.jackson.annotations)
-    api(libs.jackson.databind)
+    api(jacksonLibs.jacksonAnnotations)
+    api(jacksonLibs.jacksonDatabind)
 
     implementation(projects.utils.commonUtils)
     implementation(projects.utils.spdxUtils)
 
-    implementation(libs.jackson.core)
-    implementation(libs.jackson.dataformat.yaml)
-    implementation(libs.jackson.datatype.jsr310)
-    implementation(libs.jackson.module.kotlin)
+    implementation(jacksonLibs.jacksonCore)
+    implementation(jacksonLibs.jacksonDataformatYaml)
+    implementation(jacksonLibs.jacksonDatatypeJsr310)
+    implementation(jacksonLibs.jacksonModuleKotlin)
 
     testImplementation(libs.kotest.assertions.json)
 }
diff --git a/utils/spdx/build.gradle.kts b/utils/spdx/build.gradle.kts
@@ -36,12 +36,12 @@ plugins {
 }
 
 dependencies {
-    api(libs.jackson.databind)
+    api(jacksonLibs.jacksonDatabind)
 
     implementation(projects.utils.commonUtils)
 
-    implementation(libs.jackson.dataformat.yaml)
-    implementation(libs.jackson.module.kotlin)
+    implementation(jacksonLibs.jacksonDataformatYaml)
+    implementation(jacksonLibs.jacksonModuleKotlin)
 
     testImplementation(libs.kotest.assertions.json)
     testImplementation(libs.kotest.framework.engine)
diff --git a/utils/test/build.gradle.kts b/utils/test/build.gradle.kts
@@ -35,7 +35,7 @@ dependencies {
     implementation(projects.utils.ortUtils)
 
     implementation(libs.diffUtils)
-    implementation(libs.jackson.module.kotlin)
+    implementation(jacksonLibs.jacksonModuleKotlin)
     implementation(libs.jsonSchemaValidator)
     implementation(libs.kotest.extensions.junitXml)
     implementation(libs.kotest.framework.engine)

Original file line number	Diff line number	Diff line change
`@@ -25,5 +25,5 @@ plugins {`
`25`	`25`	`dependencies {`
`26`	`26`	`api(projects.utils.commonUtils)`
`27`	`27`
`28`		`- api(libs.jackson.annotations)`
	`28`	`+ api(jacksonLibs.jacksonAnnotations)`
`29`	`29`	`}`
Original file line number	Diff line number	Diff line change
`@@ -30,6 +30,6 @@ dependencies {`
`30`	`30`
`31`	`31`	`implementation(projects.utils.ortUtils)`
`32`	`32`
`33`		`- implementation(libs.jackson.core)`
`34`		`- implementation(libs.jackson.databind)`
	`33`	`+ implementation(jacksonLibs.jacksonCore)`
	`34`	`+ implementation(jacksonLibs.jacksonDatabind)`
`35`	`35`	`}`
Original file line number	Diff line number	Diff line change
`@@ -31,6 +31,6 @@ dependencies {`
`31`	`31`	`implementation(projects.plugins.packageManagers.nugetPackageManager)`
`32`	`32`	`implementation(projects.utils.commonUtils)`
`33`	`33`
	`34`	`+ implementation(jacksonLibs.jacksonModuleKotlin)`
`34`	`35`	`implementation(libs.clikt)`
`35`		`- implementation(libs.jackson.module.kotlin)`
`36`	`36`	`}`
Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,7 @@ dependencies {`
`36`	`36`	`because("This is a CommandLineTool.")`
`37`	`37`	`}`
`38`	`38`
`39`		`- api(libs.jackson.databind)`
	`39`	`+ api(jacksonLibs.jacksonDatabind)`
`40`	`40`
`41`	`41`	`implementation(projects.downloader)`
`42`	`42`	`implementation(projects.utils.ortUtils)`