Rebuild with refreshed dependencies

[alexander-yevsyukov]

Summary

Automated cascade wave: rebuild against the refreshed dependency baseline.
Part of a cross-repository wave driven from summit (see
summit/docs/rollout/rebuild.md); this PR opened only after every dependency
version pinned here was verified present in the public registry.

Commits

• Update shared agent tooling and config (./config/pull) — floated shared
  tooling and the config-distributed build files (absent when config was
  already current).
• Update local dependency pins — io.spine.dependency.local constants
  advanced to the wave's upstream versions (may appear twice after a drift
  refresh).
• Bump version / Set version — the versioning-policy increment, or the
  wave's coordinated target.
• Update dependency reports — docs/dependencies/ regenerated by the clean
  build.
• Adapt to refreshed dependencies — only when upstream API changes required
  mechanical source fixes; review this commit with extra care.

Verification

• ./gradlew clean build dokkaGenerate green locally against the wave's
  artifacts (mavenLocal until upstream publication, the registry afterwards).
• pre-pr reviewers ran at the exact HEAD of this PR (sentinel-gated).
• Every pinned upstream version confirmed in
  europe-maven.pkg.dev/spine-event-engine metadata before gh pr create.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-02T13:00:18.876764Z	28e89a5	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Copilot]

🟢 Approval recommended

Changes are consistent dependency/version refreshes plus targeted, well-scoped resolutionStrategy adjustments, with no dangling references found for the removed AppEngine pin.

Pull request overview

Rebuilds validation against the refreshed Spine dependency baseline by bumping pinned versions and adjusting Gradle resolution rules to keep transitive dependency graphs consistent (notably for compiler/Dokka classpaths).

Changes:

• Bumped the project version (2.0.0-SNAPSHOT.463 → 2.0.0-SNAPSHOT.464) and refreshed published dependency report metadata.
• Advanced numerous pinned dependency versions in buildSrc (Spine, Protobuf, Kotlin/KotlinX, Jackson, gRPC, PMD, etc.).
• Updated Gradle dependency resolution/forcing rules to better align KotlinX (BOM + AtomicFU), Protobuf runtime, Jackson generations, and Time artifacts across configurations (including Dokka-related paths).

File summaries

File	Description
version.gradle.kts	Bumps the library publish version to 2.0.0-SNAPSHOT.464.
docs/dependencies/pom.xml	Regenerates dependency report POM with refreshed versions.
buildSrc/src/main/kotlin/module.gradle.kts	Strengthens dependency alignment/forcing (Jackson rule alignment; forces Coroutines BOM, AtomicFU, Protobuf runtime, Time Java extensions; Dokka-related rationale).
buildSrc/src/main/kotlin/io/spine/dependency/test/Kotest.kt	Updates Kotest version pin.
buildSrc/src/main/kotlin/io/spine/dependency/test/JUnit.kt	Updates JUnit/JUnit Platform version pins.
buildSrc/src/main/kotlin/io/spine/dependency/storage/PostgreSql.kt	Updates PostgreSQL JDBC driver version pin.
buildSrc/src/main/kotlin/io/spine/dependency/storage/MySql.kt	Updates MySQL JDBC driver version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/Validation.kt	Updates Validation artifacts version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/ToolBase.kt	Updates ToolBase version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/Time.kt	Updates Spine Time version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/ProtoTap.kt	Updates ProtoTap version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/Logging.kt	Updates Spine Logging version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvmCompiler.kt	Updates Core JVM compiler plugin/test versions.
buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvm.kt	Updates Core JVM library version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/Compiler.kt	Updates compiler fallback versions used by build tooling.
buildSrc/src/main/kotlin/io/spine/dependency/local/Change.kt	Updates Spine Change version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/BaseTypes.kt	Updates Spine Base Types version pin.
buildSrc/src/main/kotlin/io/spine/dependency/local/Base.kt	Updates Spine Base version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Roaster.kt	Updates Roaster version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Protobuf.kt	Updates Protobuf version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Plexus.kt	Updates Plexus Utils version and adjusts comment to match 4.x usage.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Okio.kt	Updates Okio version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Netty.kt	Updates Netty version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Kotlin.kt	Updates Kotlin runtime/embeddable version pins and clarifies embedded compiler meaning.
buildSrc/src/main/kotlin/io/spine/dependency/lib/JacksonV2.kt	Updates Jackson 2.x BOM/version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Jackson.kt	Updates Jackson 3.x version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/HttpClient.kt	Updates Google HTTP Client version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Guava.kt	Updates Guava version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Grpc.kt	Updates gRPC BOM/version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/GoogleApis.kt	Updates Google Auth Library version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/Firebase.kt	Updates Firebase Admin SDK version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/CommonsLogging.kt	Updates Commons Logging version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/CommonsCodec.kt	Updates Commons Codec version pin.
buildSrc/src/main/kotlin/io/spine/dependency/lib/AppEngine.kt	Removes AppEngine dependency pin (no longer used).
buildSrc/src/main/kotlin/io/spine/dependency/kotlinx/Serialization.kt	Updates KotlinX Serialization version pin.
buildSrc/src/main/kotlin/io/spine/dependency/kotlinx/Coroutines.kt	Updates KotlinX Coroutines BOM/version pin.
buildSrc/src/main/kotlin/io/spine/dependency/kotlinx/AtomicFu.kt	Updates AtomicFU version pin.
buildSrc/src/main/kotlin/io/spine/dependency/build/Pmd.kt	Updates PMD version pin.
buildSrc/src/main/kotlin/io/spine/dependency/build/Ksp.kt	Updates KSP version pin.
buildSrc/src/main/kotlin/io/spine/dependency/build/JSpecify.kt	Updates JSpecify version pin and copyright year.
buildSrc/src/main/kotlin/io/spine/dependency/build/ErrorProne.kt	Updates ErrorProne Gradle plugin version pin.
buildSrc/src/main/kotlin/io/spine/dependency/build/CheckerFramework.kt	Updates Checker Framework annotations version pin.
buildSrc/build.gradle.kts	Updates buildSrc tool/plugin versions (grgit, Kotlin embedded, Guava, ErrorProne plugin, shadow, junit/kotest, zip4j, etc.).
build.gradle.kts	Extends buildscript forcing to include Coroutines BOM, AtomicFU, and Caffeine to avoid pre-refresh transitive floors.

Review details

• Files reviewed: 44/46 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.63%. Comparing base (15a7be4) to head (cf505ad).

Additional details and impacted files

@@            Coverage Diff            @@
##             master     #328   +/-   ##
=========================================
  Coverage     92.63%   92.63%           
  Complexity      363      363           
=========================================
  Files            84       84           
  Lines          2090     2090           
  Branches        157      157           
=========================================
  Hits           1936     1936           
  Misses          110      110           
  Partials         44       44           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

🔵 Needs a closer look

It performs a broad dependency refresh with build-wide resolution-strategy changes that can have wide-ranging effects and warrants final human verification.

Review details

• Files reviewed: 44/46 changed files
• Comments generated: 0 new
• Review effort level: Lite