GEODE-6399: Manage dependency versions via java-platform (apache#3190)

* All applicable projects should opt into dependency version management
via bom consumption, i.e.,
    compile(platform(project(':boms:geode-all-bom')))

* Those configurations that do not extend compile, such as compileOnly
or those provided by other plugins, will also require a dependency on
the platform's BOM

* The BOM itself is now configured via the buildSrc
DependencyConstraints.groovy.  This replaces
geode-dependency-management.gradle.

* Those lingering "property" versions are now accessible via
DependencyConstraints.get() rather than project properties.

* Published POMs now correctly consume the Geode BOM, rather than
reproducing the same dependencyManagement block across all POMs.

* expected_pom.xml, expected_classpath.txt, and dependency_classpath.txt
files have been accordingly updated.

* publish.gradle now sets the project property constrainVersionInBom,
indicating that the published artifact should be constrained to the same
version in the geode-all-bom as the BOM itself.  Use
    project.ext.set('constrainVersionInBom', true)
to opt into the constrain set without consuming publish.gradle, or the
inverse to opt out.

* Explicit dependency in test.gradle on geode-junit:1.3.0 has been
removed.
It is only needed in buildSrc testRuntime.

* Unused 'bundled' configuration from legacy publication style has been
removed.

Co-authored-by: Patrick Rhomberg <[email protected]>
Co-authored-by: Robert Houghton <[email protected]>

boms/geode-all-bom/build.gradle

@@ -15,19 +15,47 @@
  * limitations under the License.
  */
 
-apply plugin: "java"
-apply plugin: "maven-publish"
+plugins {
+  id 'geode-dependency-constraints'
+  id 'java'
+  id 'maven-publish'
+}
 
-jar.enabled = false
-apply from: "${project.projectDir}/../../gradle/geode-dependency-management.gradle"
 apply from: "${project.projectDir}/../../gradle/publish.gradle"
 
 
 publishing {
   publications {
     maven(MavenPublication) {
+      // publish.gradle injects 'from components.java', as well as some other pom configuration.
       pom.packaging 'pom'
       artifacts = []
+
+      pom {
+        withXml {
+          // Dependency constraints publish the scope of those constraints.
+          // We remove these from our published bom, as they should apply at all scopes. 
+          asNode().dependencyManagement.dependencies.dependency.each {
+            dep -> dep.remove(dep['scope'])
+          }
+        }
+        withXml {
+          // Published Geode artifacts are constrained to match the version of this BOM.
+          // We exclude any child of the :boms subproject
+          def thisNode = asNode()
+          project.rootProject.subprojects.each { p ->
+            if (p.findProperty('constrainVersionInBom')
+                && !project(':boms').allprojects.contains(p)) {
+              def geodeDependency =
+                  thisNode.dependencyManagement.dependencies*.appendNode('dependency')
+               geodeDependency*.appendNode('groupId')*.setValue('org.apache.geode')
+               geodeDependency*.appendNode('artifactId')*.setValue((p.findProperty('artifactName') ?: p.name))
+               geodeDependency*.appendNode('version')*.setValue(p.version.toString())
+            }
+          }
+          thisNode
+        }
+      }
     }
   }
 }