[perNyfelt]

Summary

• Applies the Ben Manes versions plugin (io.github.ben-manes.versions 0.67.0) at the root, so ./gradlew dependencyUpdates reports newer versions for every project. Pre-release candidates are only offered for dependencies that are already on a pre-release.

• Upgrades the build dependencies to their latest releases. Each is bumped in gradle/libs.versions.toml and, where duplicated, in buildSrc/build.gradle:

  Dependency	From	To
  Gradle wrapper	9.7.0	9.9.0 (distribution SHA-256 pinned)
  Spotless	8.9.0	8.11.0
  Checkstyle	13.10.0	14.4.0
  JUnit	6.0.1	6.1.3
  Jackson	3.1.2	3.2.4
  google-java-format	1.28.0	1.36.1 (no formatting changes)

• config/checkstyle/checkstyle.xml is re-derived from checkstyle-14.4.0's bundled google_checks.xml. The only change from upstream is the one documented deviation: AbbreviationAsWordInName is disabled.

  • This also drops an undocumented relaxation in the old file. It had a bare JavadocParagraph, while upstream sets allowNewlineParagraph=false.
  • Upstream 14.x also tightens several rules. The ones that matter here: JavadocMethod now checks protected as well as public methods (accessModifiers was public), and module-info.java is no longer excluded, so jmlx-jinja's module descriptor is now checked. The codebase already passes both.
  • Checkstyle 14's new whitespaceCharactersMustBeEscaped rule flagged four literal no-break spaces in jinja and tokenizer tests. They are now written as \u00A0; the strings are identical.

• jmlx-core's verifyPublishedDependencies no longer calls Task.project at execution time. The ffi project is captured at configuration time and its version read lazily through a provider.

• AGENTS.md documents dependencyUpdates, including what it can't see: the google-java-format version and the duplicated buildSrc pins.

Not included

google-java-format stays on 1.x. Spotless 8.11.0 refuses google-java-format older than 1.30.0 on JVM 25, so the first push failed CI at spotlessJava; the third commit bumps it to 1.36.1.

• 1.37.0 throws InvocationTargetException on every file under Spotless 8.11.0 (cause not diagnosed).
• 2.0.0 reformats 55 Java files (+788/−915, mostly a new lambda layout), which belongs in its own change.

Testing

• With fresh Gradle daemons on both JDK 25 (CI's JVM) and JDK 21, ./gradlew check --rerun-tasks --continue --warning-mode all and ./gradlew -p buildSrc check --rerun-tasks pass. My first push was tested only on a Java 21 daemon, which is why it missed the JVM-25 Spotless failure.
• The GPU suites were skipped locally (native runtime unstaged); the macOS native CI job runs them, and passes.
• No deprecation warnings remain. The one Gradle 9.9 reported, Task.project called at execution time in jmlx-core's verifyPublishedDependencies (an error in Gradle 10), is fixed in the second commit. A tampered expectation still fails that guard.
• After the upgrade, ./gradlew dependencyUpdates reports no newer versions. It doesn't cover google-java-format, which is held at 1.36.1 (see Not included).
• gradlew.bat was regenerated by gradlew wrapper, and .gitattributes keeps its CRLF line endings. It was not run on Windows, because the local Windows VM would not start.

🤖 Generated with Claude Code