jar-dependencies 0.5.7 → 0.6.0.pre2

data/lib/jars/mima.rb

@@ -0,0 +1,262 @@
+# frozen_string_literal: true
+
+require 'jars/mima/version'
+require 'jars/gemspec_artifacts'
+
+module Jars
+  # Resolver backed by the Mima Java library (MIni MAven).
+  # Replaces the previous ruby-maven based resolution pipeline.
+  #
+  # Mima wraps the Maven Resolver (Aether) API as a standalone library (no Maven process is spawned).
+  module Mima
+    class << self
+      @@jars_loaded = nil # rubocop:disable Style/ClassVars
+
+      # Loads the bundled Mima jars onto the classpath.
+      # Safe to call multiple times; only loads once.
+      def ensure_jars_loaded
+        return if @@jars_loaded
+
+        mima_dir = File.expand_path('mima', File.dirname(__FILE__))
+
+        load File.join(mima_dir, "slf4j-api-#{SLF4J_VERSION}.jar")
+        load File.join(mima_dir, "slf4j-simple-#{SLF4J_VERSION}.jar")
+        load File.join(mima_dir, "jcl-over-slf4j-#{SLF4J_VERSION}.jar")
+        load File.join(mima_dir, "context-#{MIMA_VERSION}.jar")
+        load File.join(mima_dir, "standalone-static-uber-#{MIMA_VERSION}.jar")
+
+        @@jars_loaded = true # rubocop:disable Style/ClassVars
+      end
+
+      # Builds a +ContextOverrides+ from jar-dependencies configuration
+      # (local repo, user/global settings.xml).
+      #
+      # @return [Java::eu.maveniverse.maven.mima.context.ContextOverrides]
+      def context_overrides
+        ensure_jars_loaded
+
+        builder = Java::eu.maveniverse.maven.mima.context.ContextOverrides.create
+        builder.withUserSettings(true)
+
+        # Local repository override
+        local_repo = ::Jars.local_maven_repo
+        builder.withLocalRepositoryOverride(java.nio.file.Paths.get(local_repo)) if local_repo
+
+        # User settings.xml override
+        settings = ::Jars::MavenSettings.settings
+        builder.withUserSettingsXmlOverride(java.nio.file.Paths.get(settings)) if settings
+
+        # Global settings.xml override
+        global = ::Jars::MavenSettings.global_settings
+        builder.withGlobalSettingsXmlOverride(java.nio.file.Paths.get(global)) if global
+
+        builder.build
+      end
+
+      # Creates a Mima Context. Caller is responsible for closing it.
+      #
+      # @param overrides [Java::eu.maveniverse.maven.mima.context.ContextOverrides, nil]
+      #   optional overrides; when +nil+, {#context_overrides} is used
+      # @return [Java::eu.maveniverse.maven.mima.context.Context]
+      def create_context(overrides = nil)
+        ensure_jars_loaded
+
+        overrides ||= context_overrides
+        runtime = Java::eu.maveniverse.maven.mima.context.Runtimes::INSTANCE.getRuntime
+        runtime.create(overrides)
+      end
+
+      # Resolves transitive dependencies for the given artifacts.
+      # Creates (and closes) its own Mima context.
+      #
+      # @param artifacts [Array<Jars::GemspecArtifacts::Artifact>] jar dependency declarations
+      # @param all_dependencies [Boolean] when +true+, include provided/test scoped artifacts
+      # @return [Array<ResolvedDependency>] resolved artifacts with local file paths
+      def resolve_artifacts(artifacts, all_dependencies: false)
+        context = create_context
+        begin
+          resolve_with_context(context, artifacts, all_dependencies: all_dependencies)
+        ensure
+          context.close
+        end
+      end
+
+      # Resolves transitive dependencies using an existing Mima context.
+      #
+      # @param context [Java::eu.maveniverse.maven.mima.context.Context] an open Mima context
+      # @param artifacts [Array<Jars::GemspecArtifacts::Artifact>] jar dependency declarations
+      # @param all_dependencies [Boolean] when +true+, include provided/test scoped artifacts
+      # @return [Array<ResolvedDependency>] resolved artifacts with local file paths
+      def resolve_with_context(context, artifacts, all_dependencies: false)
+        deps = artifacts_to_dependencies(artifacts, all_dependencies: all_dependencies)
+        return [] if deps.empty?
+
+        collect_request = org.eclipse.aether.collection.CollectRequest.new
+        deps.each { |d| collect_request.addDependency(d) }
+        collect_request.setRepositories(context.remoteRepositories)
+
+        dependency_request = org.eclipse.aether.resolution.DependencyRequest.new
+        dependency_request.setCollectRequest(collect_request)
+
+        result = context.repositorySystem.resolveDependencies(
+          context.repositorySystemSession, dependency_request
+        )
+
+        root = result.getRoot
+        collect_resolved(root)
+      end
+
+      private
+
+      # Converts {GemspecArtifacts::Artifact} objects to Aether +Dependency+ list,
+      # filtering by scope unless +all_dependencies+ is set.
+      #
+      # @param artifacts [Array<Jars::GemspecArtifacts::Artifact>]
+      # @param all_dependencies [Boolean]
+      # @return [Array<org.eclipse.aether.graph.Dependency>]
+      def artifacts_to_dependencies(artifacts, all_dependencies: false)
+        filtered = artifacts.select do |a|
+          all_dependencies || (a.scope != 'provided' && a.scope != 'test')
+        end
+
+        filtered.map do |a|
+          aether_artifact = build_aether_artifact(a)
+          scope = a.scope || 'compile'
+          dep = org.eclipse.aether.graph.Dependency.new(aether_artifact, scope)
+
+          if a.exclusions && !a.exclusions.empty?
+            exclusions = a.exclusions.map do |ex|
+              org.eclipse.aether.graph.Exclusion.new(ex.group_id, ex.artifact_id, '*', '*')
+            end
+            dep = dep.setExclusions(exclusions)
+          end
+
+          dep
+        end
+      end
+
+      # Converts a single {GemspecArtifacts::Artifact} to an Aether +DefaultArtifact+.
+      #
+      # @param artifact [Jars::GemspecArtifacts::Artifact]
+      # @return [org.eclipse.aether.artifact.DefaultArtifact]
+      def build_aether_artifact(artifact)
+        version = Jars::MavenVersion.new(artifact.version) || artifact.version
+        if artifact.classifier
+          org.eclipse.aether.artifact.DefaultArtifact.new(
+            artifact.group_id, artifact.artifact_id, artifact.classifier,
+            artifact.type || 'jar', version
+          )
+        else
+          org.eclipse.aether.artifact.DefaultArtifact.new(
+            artifact.group_id, artifact.artifact_id,
+            artifact.type || 'jar', version
+          )
+        end
+      end
+
+      # Walks the resolved dependency tree and collects {ResolvedDependency} objects.
+      #
+      # @param node [org.eclipse.aether.graph.DependencyNode] root of the resolved tree
+      # @param result [Array<ResolvedDependency>] accumulator
+      # @return [Array<ResolvedDependency>]
+      def collect_resolved(node, result = [])
+        node.getChildren.each do |child|
+          dep = child.getDependency
+          next unless dep
+
+          artifact = dep.getArtifact
+          next unless artifact.getFile # skip unresolved
+
+          result << ResolvedDependency.new(
+            artifact.getGroupId,
+            artifact.getArtifactId,
+            artifact.getVersion,
+            artifact.getClassifier.to_s.empty? ? nil : artifact.getClassifier,
+            artifact.getExtension,
+            dep.getScope,
+            artifact.getFile.getAbsolutePath
+          )
+
+          collect_resolved(child, result)
+        end
+        result
+      end
+    end
+
+    # Structured result from dependency resolution.
+    #
+    # @!attribute [r] group_id
+    #   @return [String] Maven group ID
+    # @!attribute [r] artifact_id
+    #   @return [String] Maven artifact ID
+    # @!attribute [r] version
+    #   @return [String] resolved version
+    # @!attribute [r] classifier
+    #   @return [String, nil] Maven classifier (e.g. +"sources"+, +"no_aop"+)
+    # @!attribute [r] type
+    #   @return [String] artifact type/extension (e.g. +"jar"+, +"pom"+)
+    # @!attribute [r] scope
+    #   @return [String] Maven scope (+"compile"+, +"runtime"+, +"test"+, +"provided"+, +"system"+)
+    # @!attribute [r] file
+    #   @return [String] absolute path to the resolved artifact in the local repository
+    ResolvedDependency = Struct.new(:group_id, :artifact_id, :version, :classifier, :type, :scope, :file) do
+      # @return [Boolean] true if scope is neither +test+ nor +provided+
+      def runtime?
+        scope != 'test' && scope != 'provided'
+      end
+
+      # @return [Boolean] true if scope is +system+
+      def system?
+        scope == 'system'
+      end
+
+      # Maven repository layout path relative to repo root.
+      #
+      # @return [String] e.g. +"org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar"+
+      def path
+        parts = group_id.split('.')
+        parts << artifact_id
+        parts << version
+        filename = +"#{artifact_id}-#{version}"
+        filename << "-#{classifier}" if classifier
+        filename << ".#{type || 'jar'}"
+        parts << filename
+        File.join(parts)
+      end
+
+      # Formats a line suitable for the +Jars.lock+ file.
+      #
+      # @return [String] e.g. +"org.slf4j:slf4j-api:1.7.36:compile:"+
+      def to_lock_entry
+        entry = +"#{group_id}:#{artifact_id}:"
+        entry << "#{classifier}:" if classifier
+        entry << "#{version}:#{scope}:"
+        entry
+      end
+
+      # Colon-separated GAV string suitable for +require_jar+ calls.
+      #
+      # @return [String] e.g. +"org.slf4j:slf4j-api:1.7.36"+
+      def gav
+        parts = [group_id, artifact_id]
+        parts << classifier if classifier
+        parts << version
+        parts.join(':')
+      end
+
+      # Relative jar path for vendoring / +require_jar+.
+      #
+      # @return [String] e.g. +"org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar"+
+      def jar_path
+        parts = group_id.split('.')
+        parts << artifact_id
+        parts << version
+        filename = +"#{artifact_id}-#{version}"
+        filename << "-#{classifier}" if classifier
+        filename << '.jar'
+        parts << filename
+        File.join(parts)
+      end
+    end
+  end
+end

data/lib/jars/post_install_hook.rb

@@ -26,7 +26,6 @@ if defined?(JRUBY_VERSION) && Gem.post_install_hooks.empty?
     if ENV['JARS_SKIP'] != 'true' && ENV_JAVA['jars.skip'] != 'true'
       require 'jars/installer'
       jars = Jars::Installer.new(gem_installer.spec)
-      jars.ruby_maven_install_options = gem_installer.options || {}
       jars.vendor_jars
     end
   end

data/lib/jars/version.rb

@@ -1,7 +1,5 @@
 # frozen_string_literal: true
 
 module Jars
-  VERSION = '0.5.7'
-  JRUBY_PLUGINS_VERSION = '3.0.2'
-  DEPENDENCY_PLUGIN_VERSION = '2.8'
+  VERSION = '0.6.0.pre2'
 end

metadata

@@ -1,21 +1,22 @@
 --- !ruby/object:Gem::Specification
 name: jar-dependencies
 version: !ruby/object:Gem::Version
-  version: 0.5.7
+  version: 0.6.0.pre2
 platform: ruby
 authors:
 - christian meier
+autorequire:
 bindir: exe
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5.10'
+  name: minitest
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -23,20 +24,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5.10'
-- !ruby/object:Gem::Dependency
-  name: ruby-maven
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.9'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.9'
 description: |
   manage jar dependencies for gems and keep track which jar was already
   loaded using maven artifact coordinates. it warns on version conflicts and
@@ -59,20 +46,21 @@ files:
 - lib/jar-dependencies.rb
 - lib/jar_dependencies.rb
 - lib/jar_install_post_install_hook.rb
-- lib/jars/attach_jars_pom.rb
 - lib/jars/classpath.rb
 - lib/jars/gemspec_artifacts.rb
-- lib/jars/gemspec_pom.rb
 - lib/jars/installer.rb
 - lib/jars/lock.rb
 - lib/jars/lock_down.rb
-- lib/jars/lock_down_pom.rb
 - lib/jars/maven_exec.rb
-- lib/jars/maven_factory.rb
 - lib/jars/maven_settings.rb
-- lib/jars/output_jars_pom.rb
+- lib/jars/mima.rb
+- lib/jars/mima/context-2.4.42.jar
+- lib/jars/mima/jcl-over-slf4j-2.0.17.jar
+- lib/jars/mima/slf4j-api-2.0.17.jar
+- lib/jars/mima/slf4j-simple-2.0.17.jar
+- lib/jars/mima/standalone-static-uber-2.4.42.jar
+- lib/jars/mima/version.rb
 - lib/jars/post_install_hook.rb
-- lib/jars/settings.xml
 - lib/jars/setup.rb
 - lib/jars/version.rb
 - lib/rubygems_plugin.rb
@@ -81,16 +69,7 @@ licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message: |2+
-
-  if you want to use the executable lock_jars then install ruby-maven gem before using lock_jars
-
-    $ gem install ruby-maven -v '~> 3.9'
-
-  or add it as a development dependency to your Gemfile
-
-     gem 'ruby-maven', '~> 3.9'
-
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -101,11 +80,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 3.3.26
+signing_key:
 specification_version: 4
 summary: manage jar dependencies for gems
 test_files: []

data/lib/jars/attach_jars_pom.rb

@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-# this file is maven DSL
-
-10_000.times do |i|
-  coord = ENV_JAVA["jars.#{i}"]
-  break unless coord
-
-  artifact = Maven::Tools::Artifact.from_coordinate(coord)
-  exclusions = []
-  10_000.times do |j|
-    exclusion = ENV_JAVA["jars.#{i}.exclusions.#{j}"]
-    break unless exclusion
-
-    exclusions << exclusion
-  end
-  scope = ENV_JAVA["jars.#{i}.scope"]
-  artifact.scope = scope if scope
-  classifier = ENV_JAVA["jars.#{i}.classifier"]
-  artifact.classifier = classifier if classifier
-
-  # declare the artifact inside the POM
-  dependency_artifact(artifact) do
-    exclusions.each do |ex|
-      exclusion ex
-    end
-  end
-end

data/lib/jars/gemspec_pom.rb

@@ -1,11 +0,0 @@
-# frozen_string_literal: true
-
-# this file is maven DSL and used by maven via jars/maven_exec.rb
-
-def eval_file(file)
-  file = File.join(__dir__, file)
-  eval(File.read(file), nil, file)  # rubocop:disable Security/Eval
-end
-
-eval_file('attach_jars_pom.rb')
-eval_file('output_jars_pom.rb')

data/lib/jars/lock_down_pom.rb

@@ -1,35 +0,0 @@
-# frozen_string_literal: true
-
-# this file is maven DSL and used by maven via jars/lock_down.rb
-
-basedir(ENV_JAVA['jars.basedir'])
-
-def eval_file(file)
-  file = File.join(__dir__, file)
-  eval(File.read(file), nil, file) # rubocop:disable Security/Eval
-end
-
-eval_file('attach_jars_pom.rb')
-
-jfile = ENV_JAVA['jars.jarfile']
-jarfile(jfile) if jfile
-
-# need to fix the version of this plugin for gem:jars_lock goal
-jruby_plugin :gem, ENV_JAVA['jruby.plugins.version']
-
-# if you use bundler we collect all root jar dependencies
-# from each gemspec file. otherwise we need to resolve
-# the gemspec artifact in the maven way
-unless ENV_JAVA['jars.bundler']
-  begin
-    gemspec
-  rescue
-    nil
-  end
-end
-
-properties('project.build.sourceEncoding' => 'utf-8')
-
-plugin :dependency, ENV_JAVA['dependency.plugin.version']
-
-eval_file('output_jars_pom.rb')

data/lib/jars/maven_factory.rb

@@ -1,132 +0,0 @@
-# frozen_string_literal: true
-
-require 'jar_dependencies'
-require 'jars/gemspec_artifacts'
-
-module Jars
-  class MavenFactory
-    module AttachJars
-      def attach_jars(spec, all_dependencies: false)
-        @index ||= 0
-        @done ||= []
-
-        deps = GemspecArtifacts.new(spec)
-        deps.artifacts.each do |a|
-          # for this gemspec we want to include all artifacts but
-          # for all others we want to exclude provided and test artifacts
-          next unless !@done.include?(a.key) && (all_dependencies || ((a.scope != 'provided') && (a.scope != 'test')))
-
-          # ruby dsl is not working reliably for classifier
-          self["jars.#{@index}"] = a.to_coord_no_classifier
-          if a.exclusions
-            jndex = 0
-            a.exclusions.each do |ex|
-              self["jars.#{@index}.exclusions.#{jndex}"] = ex.to_s
-              jndex += 1
-            end
-          end
-          self["jars.#{@index}.scope"] = a.scope if a.scope
-          self["jars.#{@index}.classifier"] = a.classifier if a.classifier
-          @index += 1
-          @done << a.key
-        end
-      end
-    end
-
-    attr_reader :debug, :verbose
-
-    def initialize(options = nil, debug = Jars.debug?, verbose = Jars.verbose?)
-      @options = (options || {}).dup
-      @options.delete(:ignore_dependencies)
-      @debug = debug
-      @verbose = verbose
-      @installed_maven = false
-    end
-
-    def maven_new(pom)
-      lazy_load_maven
-      maven = setup(Maven::Ruby::Maven.new)
-
-      maven.extend AttachJars
-      # TODO: copy pom to tmp dir in case it is not a real file
-      maven.options['-f'] = pom
-      maven
-    end
-
-    private
-
-    def setup(maven)
-      maven.verbose = @verbose
-      maven.options['-X'] = nil if @debug
-      if @verbose
-        maven.options['-e'] = nil
-      elsif !@debug
-        maven.options['--quiet'] = nil
-      end
-      maven['verbose'] = (@debug || @verbose) == true
-
-      maven.options['-s'] = Jars::MavenSettings.effective_settings if Jars.maven_settings
-
-      maven['maven.repo.local'] = java.io.File.new(Jars.local_maven_repo).absolute_path.to_s
-
-      maven
-    end
-
-    def lazy_load_maven
-      add_gem_to_load_path('ruby-maven')
-      add_gem_to_load_path('ruby-maven-libs')
-      if @installed_maven
-        puts
-        puts 'using maven for the first time results in maven'
-        puts 'downloading all its default plugin and can take time.'
-        puts 'as those plugins get cached on disk and further execution'
-        puts 'of maven is much faster then the first time.'
-        puts
-      end
-      require 'maven/ruby/maven'
-    end
-
-    def find_spec_via_rubygems(name, req)
-      require 'rubygems/dependency'
-      dep = Gem::Dependency.new(name, req)
-      dep.matching_specs(true).last
-    end
-
-    def add_gem_to_load_path(name)
-      # if the gem is already activated => good
-      return if Gem.loaded_specs[name]
-
-      # just install gem if needed and add it to the load_path
-      # and leave activated gems as they are
-      req = requirement(name)
-      unless (spec = find_spec_via_rubygems(name, req))
-        spec = install_gem(name, req)
-      end
-      raise "failed to resolve gem '#{name}' if you're using Bundler add it as a dependency" unless spec
-
-      path = File.join(spec.full_gem_path, spec.require_path)
-      $LOAD_PATH << path unless $LOAD_PATH.include?(path)
-    end
-
-    def requirement(name)
-      jars = Gem.loaded_specs['jar-dependencies']
-      dep = jars&.dependencies&.detect { |d| d.name == name }
-      dep.nil? ? Gem::Requirement.create('>0') : dep.requirement
-    end
-
-    def install_gem(name, req)
-      @installed_maven = true
-      puts "Installing gem '#{name}' . . ."
-      require 'rubygems/dependency_installer'
-      inst = Gem::DependencyInstaller.new(@options ||= {})
-      inst.install(name, req).first
-    rescue => e
-      if Jars.verbose?
-        warn e.inspect
-        warn e.backtrace.join("\n")
-      end
-      raise "there was an error installing '#{name} (#{req})' " \
-            "#{@options[:domain]}. please install it manually: #{e.inspect}"
-    end
-  end
-end

data/lib/jars/output_jars_pom.rb

@@ -1,16 +0,0 @@
-# frozen_string_literal: true
-
-# this file is maven DSL
-
-if ENV_JAVA['jars.quiet'] != 'true'
-  model.dependencies.each do |d|
-    puts "      #{d.group_id}:#{d.artifact_id}" \
-         "#{d.classifier ? ":#{d.classifier}" : ''}" \
-         ":#{d.version}:#{d.scope || 'compile'}"
-    next if d.exclusions.empty?
-
-    puts "          exclusions: #{d.exclusions.collect do |e|
-      "#{e.group_id}:#{e.artifact_id}"
-    end.join}"
-  end
-end

data/lib/jars/settings.xml

@@ -1,20 +0,0 @@
-  <proxies>
-    <proxy>
-      <active>__HTTP_ACTIVE__</active>
-      <protocol>http</protocol>
-      <host>__HTTP_SERVER__</host>
-      <port>__HTTP_PORT__</port>
-      <!--nonProxyHosts>
-        www.oracle.com|localhost|127.0.0.1
-      </nonProxyHosts-->
-    </proxy>
-    <proxy>
-      <active>__HTTPS_ACTIVE__</active>
-      <protocol>https</protocol>
-      <host>__HTTPS_SERVER__</host>
-      <port>__HTTPS_PORT__</port>
-      <!--nonProxyHosts>
-        www.oracle.com|localhost|127.0.0.1
-      </nonProxyHosts-->
-    </proxy>
-  </proxies>