Summary

This PR resolves three Maven dependency convergence errors reported in version 1.5.3:

• jsr305: 3.0.1 vs 3.0.2
• gson: 2.8.9 vs 2.11.0
• protobuf-java: 3.25.8 vs 4.32.1

Changes

build.gradle:

• Added jsr305 and findbugs annotations exclusions to protovalidate dependency
• Added protobuf-java and gson exclusions to protobuf-java-util dependency
• Added protobuf-java exclusion to proto-google-common-protos dependency
• Added explicit jsr305:3.0.2 dependency

Testing with Maven Local

To test locally with Maven enforcer plugin:

1. Build and publish to Maven local:

./gradlew clean publishToMavenLocal

2. Create a test Maven project with the enforcer plugin:

<dependencies>
    <dependency>
        <groupId>com.authzed.api</groupId>
        <artifactId>authzed</artifactId>
        <version>0.0.0-SNAPSHOT</version>
    </dependency>
</dependencies>

<build>
    <plugins>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-enforcer-plugin</artifactId>
            <version>3.6.2</version>
            <executions>
                <execution>
                    <id>enforce</id>
                    <configuration>
                        <rules>
                            <dependencyConvergence/>
                        </rules>
                    </configuration>
                    <goals>
                        <goal>enforce</goal>
                    </goals>
                </execution>
            </executions>
        </plugin>
    </plugins>
</build>

3. Run Maven verify:

mvn clean verify

The three reported conflicts should be resolved. Note that three additional conflicts (error_prone_annotations, guava, j2objc-annotations) also appear but these existed before this PR and were not reported by users.

Related

Addresses remaining issues from #152