pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <parent>
    <groupId>org.jenkins-ci.plugins</groupId>
    <artifactId>plugin</artifactId>
    <version>6.2236.v12dd4c483242</version>
    <relativePath />
  </parent>

  <groupId>io.jenkins.plugins</groupId>
  <artifactId>namespace-cloud</artifactId>
  <version>${changelist}</version>
  <packaging>hpi</packaging>

  <name>Namespace Cloud Agents</name>
  <description>Community plugin that provisions ephemeral Jenkins agents as Namespace micro-VM instances. Not affiliated with or endorsed by Namespace Labs.</description>

  <!-- Lives at starkware-libs while hosting is requested. If the Jenkins
       project accepts it, the repository moves to
       github.com/jenkinsci/namespace-cloud-plugin and the scm URLs below
       change to match; this <url> already points at that destination. -->
  <url>https://github.com/jenkinsci/${project.artifactId}-plugin</url>

  <licenses>
    <license>
      <name>MIT License</name>
      <url>https://opensource.org/licenses/MIT</url>
      <distribution>repo</distribution>
    </license>
  </licenses>

  <scm>
    <connection>scm:git:https://github.com/starkware-libs/namespace-cloud-plugin.git</connection>
    <developerConnection>scm:git:git@github.com:starkware-libs/namespace-cloud-plugin.git</developerConnection>
    <tag>${scmTag}</tag>
    <url>https://github.com/starkware-libs/namespace-cloud-plugin</url>
  </scm>

  <issueManagement>
    <system>GitHub Issues</system>
    <url>https://github.com/starkware-libs/namespace-cloud-plugin/issues</url>
  </issueManagement>

  <properties>
    <!-- Continuous delivery: the real version is substituted by the
         incrementals build at release time. See
         https://www.jenkins.io/doc/developer/publishing/releasing-cd/ -->
    <changelist>999999-SNAPSHOT</changelist>
    <!-- Required by the Jenkins hosting checker: these gates catch accidental
         library bundling, redundant dependency overrides, and use of APIs that
         core already provides or has deprecated. -->
    <hpi.strictBundledArtifacts>true</hpi.strictBundledArtifacts>
    <!-- The Namespace API is gRPC, and core provides neither gRPC nor protobuf,
         so both are bundled along with their transitive dependencies. They are
         masked in maven-hpi-plugin configuration so they cannot resolve against
         another plugin's copy. Declared explicitly so that anything NEW showing
         up here fails the build rather than being bundled by accident. -->
    <hpi.bundledArtifacts>grpc-api,grpc-context,grpc-core,grpc-netty-shaded,grpc-protobuf,grpc-protobuf-lite,grpc-stub,grpc-util,perfmark-api,proto-google-common-protos,protobuf-java</hpi.bundledArtifacts>
    <banObsoleteDependencyOverrides.skip>false</banObsoleteDependencyOverrides.skip>
    <ban-junit4-imports.skip>false</ban-junit4-imports.skip>
    <ban-deprecated-stapler.skip>false</ban-deprecated-stapler.skip>
    <ban-commons-lang-2.skip>false</ban-commons-lang-2.skip>
    <!-- 2.555.x drops support for agents running Java 17, so the stock agent
         images this plugin suggests are JDK 21 only. Lowering this baseline
         again would mean reinstating a jdk17 image that cannot connect. -->
    <jenkins.baseline>2.555</jenkins.baseline>
    <jenkins.version>${jenkins.baseline}.3</jenkins.version>
    <grpc.version>1.84.0</grpc.version>
    <!-- Buf does not publish prebuilt Java SDKs for buf.build/namespace/cloud
         (the Maven registry 422s), so the stubs are generated at build time
         from the protos vendored under src/main/proto. See that dir's
         VENDORED.txt for the upstream commit. -->
    <protobuf.version>4.32.1</protobuf.version>
    <spotless.check.skip>false</spotless.check.skip>
    <!-- Overwritten by maven-release-plugin; needs a default for ordinary builds. -->
    <scmTag>HEAD</scmTag>
  </properties>

  <dependencyManagement>
    <dependencies>
      <dependency>
        <groupId>io.grpc</groupId>
        <artifactId>grpc-bom</artifactId>
        <version>${grpc.version}</version>
        <type>pom</type>
        <scope>import</scope>
      </dependency>
      <dependency>
        <groupId>io.jenkins.tools.bom</groupId>
        <artifactId>bom-${jenkins.baseline}.x</artifactId>
        <version>7093.v37de7b_4a_8a_4f</version>
        <type>pom</type>
        <scope>import</scope>
      </dependency>
      <dependency>
        <groupId>com.google.errorprone</groupId>
        <artifactId>error_prone_annotations</artifactId>
        <version>2.50.0</version>
      </dependency>
      <!-- grpc 1.84 pulls guava:33.6.0-android while the Jenkins BOM manages
           33.4.8-jre; pin one so requireUpperBoundDeps converges. -->
      <dependency>
        <groupId>com.google.guava</groupId>
        <artifactId>guava</artifactId>
        <version>33.6.0-jre</version>
      </dependency>
    </dependencies>
  </dependencyManagement>

  <dependencies>
    <dependency>
      <groupId>com.google.protobuf</groupId>
      <artifactId>protobuf-java</artifactId>
      <version>${protobuf.version}</version>
    </dependency>

    <!-- Namespace API runtime. Stubs are generated from src/main/proto.
         netty-shaded avoids clashing with Jenkins remoting's Netty. -->
    <dependency>
      <groupId>io.grpc</groupId>
      <artifactId>grpc-netty-shaded</artifactId>
      <exclusions>
        <!-- Supplied by the gson-api plugin; see the dependency below. -->
        <exclusion>
          <groupId>com.google.code.gson</groupId>
          <artifactId>gson</artifactId>
        </exclusion>
      </exclusions>
    </dependency>
    <dependency>
      <groupId>io.grpc</groupId>
      <artifactId>grpc-protobuf</artifactId>
    </dependency>
    <dependency>
      <groupId>io.grpc</groupId>
      <artifactId>grpc-stub</artifactId>
    </dependency>
    <dependency>
      <groupId>io.jenkins.plugins</groupId>
      <artifactId>caffeine-api</artifactId>
    </dependency>

    <!-- gson reaches the plugin through this api plugin at runtime instead of
         being packaged into it. -->
    <dependency>
      <groupId>io.jenkins.plugins</groupId>
      <artifactId>gson-api</artifactId>
    </dependency>
    <!-- Jenkins plugin dependencies -->
    <!-- Apache MINA, used to compute the public half of the configured SSH
         private key so the two cannot drift apart. -->
    <dependency>
      <groupId>io.jenkins.plugins.mina-sshd-api</groupId>
      <artifactId>mina-sshd-api-common</artifactId>
    </dependency>
    <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>credentials</artifactId>
    </dependency>
    <!-- OnceRetentionStrategy: terminates a single-executor agent as soon as
         its build finishes, instead of waiting out the idle timeout. -->
    <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>durable-task</artifactId>
    </dependency>
    <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>plain-credentials</artifactId>
    </dependency>
    <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>ssh-credentials</artifactId>
    </dependency>
    <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>ssh-slaves</artifactId>
    </dependency>
    <dependency>
      <groupId>com.google.android</groupId>
      <artifactId>annotations</artifactId>
      <version>4.1.1.4</version>
      <scope>provided</scope>
    </dependency>

    <!-- Annotation-only artifacts that gRPC and Guava declare. They have CLASS
         retention, so they are needed to compile against those libraries and
         never loaded at runtime; provided keeps them out of the plugin. -->
    <dependency>
      <groupId>com.google.errorprone</groupId>
      <artifactId>error_prone_annotations</artifactId>
      <scope>provided</scope>
    </dependency>

    <!-- Shipped by Jenkins core. Kept on the compile path because gRPC's own
         signatures use it (ListenableFuture on the generated stubs), but not
         bundled: a second copy inside the plugin would shadow core's. -->
    <dependency>
      <groupId>com.google.guava</groupId>
      <artifactId>guava</artifactId>
      <scope>provided</scope>
    </dependency>
    <!-- Required on the compile path by protoc-generated gRPC stubs. -->
    <dependency>
      <groupId>jakarta.annotation</groupId>
      <artifactId>jakarta.annotation-api</artifactId>
      <version>3.0.0</version>
      <scope>provided</scope>
    </dependency>
    <dependency>
      <groupId>org.codehaus.mojo</groupId>
      <artifactId>animal-sniffer-annotations</artifactId>
      <version>1.27</version>
      <scope>provided</scope>
    </dependency>

    <!-- Tests -->
    <dependency>
      <groupId>io.grpc</groupId>
      <artifactId>grpc-inprocess</artifactId>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>io.grpc</groupId>
      <artifactId>grpc-testing</artifactId>
      <scope>test</scope>
    </dependency>
  </dependencies>

  <repositories>
    <repository>
      <id>repo.jenkins-ci.org</id>
      <url>https://repo.jenkins-ci.org/public/</url>
    </repository>
  </repositories>
  <pluginRepositories>
    <pluginRepository>
      <id>repo.jenkins-ci.org</id>
      <url>https://repo.jenkins-ci.org/public/</url>
    </pluginRepository>
  </pluginRepositories>

  <build>
    <plugins>
      <plugin>
        <groupId>org.xolstice.maven.plugins</groupId>
        <artifactId>protobuf-maven-plugin</artifactId>
        <version>0.6.1</version>
        <configuration>
          <!-- Namespace's protos import themselves as "proto/namespace/...",
               so the import root is the dir containing "proto", not "proto". -->
          <protoSourceRoot>${project.basedir}/src/main/proto</protoSourceRoot>
          <protocArtifact>com.google.protobuf:protoc:${protobuf.version}:exe:${os.detected.classifier}</protocArtifact>
          <pluginId>grpc-java</pluginId>
          <pluginArtifact>io.grpc:protoc-gen-grpc-java:${grpc.version}:exe:${os.detected.classifier}</pluginArtifact>
        </configuration>
        <executions>
          <execution>
            <goals>
              <goal>compile</goal>
              <goal>compile-custom</goal>
            </goals>
          </execution>
        </executions>
      </plugin>
      <plugin>
        <groupId>org.jenkins-ci.tools</groupId>
        <artifactId>maven-hpi-plugin</artifactId>
        <configuration>
          <!-- gRPC/protobuf are bundled; mask them so they never resolve
               against another plugin's copy. -->
          <maskClasses>io.grpc. com.google.protobuf.</maskClasses>
        </configuration>
      </plugin>
    </plugins>
    <extensions>
      <!-- Resolves ${os.detected.classifier} for the protoc binaries. -->
      <extension>
        <groupId>kr.motd.maven</groupId>
        <artifactId>os-maven-plugin</artifactId>
        <version>1.7.1</version>
      </extension>
    </extensions>
  </build>
</project>