Align ASM and Kotlin stdlib versions across modules (#7474)

The classpath partition cache (~/.rewrite/classpath/.partitions) keys by
exact GAV, so each distinct resolved version of an artifact produces its
own partition file. Two sources of accidental version drift across the
multi-module build were each producing duplicate partitions:

- ASM: gizmo (in rewrite-core) pins asm-util/-tree/-analysis to 9.3
  transitively. rewrite-java requests asm/asm-util at latest.release as
  `implementation`, but that does not propagate to project consumers, so
  modules consuming :rewrite-java (rewrite-java-21/-25, rewrite-yaml/json/
  etc.) keep the 9.3 transitive while still bumping `asm` itself to 9.9.1.
  Declaring all four asm artifacts at latest.release in rewrite-core (where
  gizmo lives) lets conflict resolution bump them in lockstep everywhere.

- Kotlin stdlib: rewrite-kotlin's clikt 3.5.0, rewrite-gradle's
  mockwebserver 4.x, and rewrite-maven's maven-resolver each drag the
  deprecated kotlin-stdlib-jdk7/-jdk8/-common artifacts in at older
  versions (1.6.20 / 1.9.10 / 1.8.21) that the main kotlin-stdlib does
  not align. Applying kotlin-bom as a test platform constrains the whole
  family to a single Kotlin version per module.

Author: knutwannheden

rewrite-core/build.gradle.kts

@@ -6,6 +6,13 @@ dependencies {
     api("org.openrewrite.tools:jgit:latest.release")
     implementation("org.openrewrite.tools:java-object-diff:latest.release")
     implementation("io.quarkus.gizmo:gizmo:1.0.+")
+    // Align the four org.ow2.asm artifacts to one version everywhere; gizmo
+    // would otherwise pin -util/-tree/-analysis to 9.3 in modules that don't
+    // request them directly.
+    implementation("org.ow2.asm:asm:latest.release")
+    implementation("org.ow2.asm:asm-util:latest.release")
+    implementation("org.ow2.asm:asm-tree:latest.release")
+    implementation("org.ow2.asm:asm-analysis:latest.release")
     api("com.fasterxml.jackson.core:jackson-core")
     api("com.fasterxml.jackson.core:jackson-databind")
     api("com.fasterxml.jackson.dataformat:jackson-dataformat-smile")

rewrite-gradle/build.gradle.kts

@@ -60,6 +60,10 @@ dependencies {
     // No particular reason to hold back upgrading this beyond 3.x, but it takes some effort: https://github.com/openrewrite/rewrite/issues/5270
     compileOnly("com.gradle:develocity-gradle-plugin:3.+")
 
+    // Align kotlin-stdlib-jdk7/-jdk8/-common with kotlin-stdlib
+    // (mockwebserver 4.x would otherwise pin them to 1.9.10 transitively).
+    testImplementation(platform("org.jetbrains.kotlin:kotlin-bom:2.3.20"))
+
     testImplementation(project(":rewrite-test")) {
         // because gradle-api fatjars this implementation already
         exclude("ch.qos.logback", "logback-classic")

rewrite-kotlin/build.gradle.kts

@@ -5,6 +5,9 @@ plugins {
     kotlin("jvm") version "2.2.21"
 }
 
+// When bumping this version, also update the kotlin-bom platform version
+// in rewrite-gradle/build.gradle.kts and rewrite-maven/build.gradle.kts so
+// the kotlin-stdlib alignment stays in lockstep across modules.
 val kotlinVersion = "2.3.20"
 
 dependencies {
@@ -13,6 +16,10 @@ dependencies {
 
     implementation(project(":rewrite-java"))
 
+    // Align kotlin-stdlib-jdk7/-jdk8/-common with kotlin-stdlib (clikt 3.5.0
+    // would otherwise drag the jdk7/jdk8/common artifacts back to 1.6.20).
+    testImplementation(platform("org.jetbrains.kotlin:kotlin-bom:$kotlinVersion"))
+
     implementation(kotlin("compiler-embeddable", kotlinVersion))
     implementation(kotlin("reflect", kotlinVersion))
     implementation(kotlin("stdlib", kotlinVersion))

rewrite-maven/build.gradle.kts

@@ -35,6 +35,10 @@ dependencies {
 
     implementation("org.apache.commons:commons-text:latest.release")
 
+    // Align kotlin-stdlib-jdk7/-jdk8/-common with kotlin-stdlib
+    // (maven-resolver and friends would otherwise pull mixed 1.8.21/1.9.x stdlibs).
+    testImplementation(platform("org.jetbrains.kotlin:kotlin-bom:2.3.20"))
+
     testImplementation(project(":rewrite-test"))
 
     testImplementation("com.squareup.okhttp3:okhttp:4.+")