testFixturesImplementation(libs.testng)
    testFixturesImplementation(libs.bsh)
}

dependencyAnalysis {
    issues {
        onAny() {
            // Bsh is not used directly, but is selected as the result of capabilities conflict resolution - the classes ARE required at runtime by TestNG
            exclude(libs.bsh)
        }
    }

    val bouncycastlePgp = "org.bouncycastle:bcpg-jdk18on"
    val bouncycastlePkix = "org.bouncycastle:bcpkix-jdk18on"
    val bouncycastleProvider = "org.bouncycastle:bcprov-jdk18on"
    val bsh = "org.apache-extras.beanshell:bsh"
    val commonsCodec = "commons-codec:commons-codec"
    val commonsCompress = "org.apache.commons:commons-compress"
    val commonsHttpclient = "org.apache.httpcomponents:httpclient"

r:/home/tcagent1/agent/lib/app-wrapper.jar:/home/tcagent1/agent/lib/ehcache-1.7.2.jar:/home/tcagent1/agent/lib/jdom.jar:/home/tcagent1/agent/lib/spring-scripting/spring-scripting-jruby.jar:/home/tcagent1/agent/lib/spring-scripting/spring-scripting-bsh.jar:/home/tcagent1/agent/lib/spring-scripting/spring-scripting-groovy.jar:/home/tcagent1/agent/lib/xstream-1.4.10-custom.jar:/home/tcagent1/agent/lib/common-runtime.jar:/home/tcagent1/agent/lib/gson.jar:/home/tcagent1/agent/lib/xmlrpc-2.0.1.jar:/ho...

        run("impl:${language.compileTaskName}")

        then:
        file("impl/classpath.txt").text == wrapClassDirs("mockito-core-1.9.5.jar, testng-6.8.7.jar, objenesis-1.0.jar, bsh-2.0b4.jar, jcommander-1.27.jar, snakeyaml-1.12.jar")
    }

    def "handles duplicate class found in jar"() {
        source api: ["class A extends B {}", "class B {}"], impl: ["class A extends C {}", "class C {}"]

        api(libs.bouncycastlePkix)      { version { strictly(bouncycastleVersion) }}
        api(libs.bouncycastleProvider)  { version { strictly(bouncycastleVersion) }}
        api(libs.bsh)                   { version { strictly("2.0b6") }}
        api(libs.commonsCodec)          { version { strictly("1.16.1") } }
        api(libs.commonsCompress)       { version { strictly("1.26.1") } }

                void execute(InputStream inputStream) {
                    assert inputStream.text == "org.gradle.internal.impldep.org.junit.JarToolProvider\norg.gradle.internal.impldep.bsh.Main"
                }
            })
        }
    }

    private void createJarFileWithClassFiles(TestFile jar, List<String> classNames) {
        TestFile contents = tmpDir.createDir("contents/$jar.name")

=== [4.4] Third-party dependency upgrades

This version includes several upgrades of third-party dependencies:

 * jackson: 2.6.6 -> 2.8.9
 * plexus-utils: 2.0.6 -> 2.1
 * xercesImpl: 2.9.1 -> 2.11.0
 * bsh: 2.0b4 -> 2.0b6
 * bouncycastle: 1.57 -> 1.58

This fix the following security issues:

 * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7525[CVE-2017-7525] (critical)
 * SONATYPE-2017-0359 (critical)

Htc0RU/IXpSe0vkCnND3axhO8ULlSw8nplkbs7ZASJI7Gw7Iv0JF8Rp/oJH2HUbi
/VCM3j2NSJAD2fmScdVcTB+WPGNdt1W0oLdjSp814i9TR2TIwB6HrbEWzznCOD2b
LWAbxCxI4tov09JFB4FLttEIHIGh7Wlc9wC9gqOYQLO3x2bzAkJk84CHQ8mKTK2k
8h+bsH/gBQ6XFxQm+4mtD85KR1qZEKiScjxjxTiU8lqaPtsi1Vg9xq9zQvixHC4r
gU373pxHHt/l+UE17dMTTBPNy53Upya5JD5GbJBWyLCGGEB7Mo0e2F+Q/EVJz2GZ
8yMyA/hAg9CXhbsgTGSN8vGaIOcNQntcJ8y5Ag0ETxg0YgEQALhmdEbatKzNuGj3

    <glob pattern="abs-linkmap"/>
    <glob pattern="abs-menulinks"/>
    <glob pattern="*.aart"/>
    <glob pattern="*.ac"/>
    <glob pattern="*.am"/>
    <glob pattern="*.apt"/>
    <glob pattern="*.bsh"/>
    <glob pattern="*.classpath"/>
    <glob pattern="*.cnd"/>
    <glob pattern="*.cwiki"/>
    <glob pattern="*.data"/>
    <glob pattern="*.dcl"/>
    <glob pattern="*.dsp"/>