Align requireUpperBoundDepsMatch to Maven requireUpperBoundDeps

Maven requireUpperBoundDeps checks that the version for each dependency resolved during a build, is equal to or higher than all transitive dependency declarations. It is not required for a resolved dependency to exactly match all transitive dependency declarations.

As a proof-of-concept, this implementation uses Gradle's VersionNumber utility, which is deprecated and scheduled to be removed in Gradle 9. An alternative (or custom) version comparison utility should be used.

Author: bestbeforetoday

build.gradle

@@ -498,9 +498,9 @@ def requireUpperBoundDepsMatch(Configuration conf, Project project) {
             version = ((ModuleComponentSelector) result.requested).version
         }
         String goldenVersion = golden[artifact]
-        if (goldenVersion != version && "[$goldenVersion]" != version) {
+        if (VersionNumber.parse(version) > VersionNumber.parse(goldenVersion)) {
             throw new RuntimeException(
-                "Maven version skew: $artifact ($version != $goldenVersion) "
+                "Maven version skew: $artifact ($version > $goldenVersion) "
                 + "Bad version dependency path: " + depAndParents.parents
                 + " Run './gradlew $project.path:dependencies --configuration $conf.name' "
                 + "to diagnose")