Use mavenLocal for temporal-spring-ai instead of composite build

Replace the includeBuild('../sdk-java') dependency-substitution block with
a plain mavenLocal() repository and a pinned 1.35.0-SNAPSHOT coordinate for
the springai* samples. Build temporal-spring-ai locally with
`./gradlew publishToMavenLocal` in an sdk-java checkout and the samples
pick it up via mavenLocal — no composite build, no SDK-wide substitution.

A nice side-effect: the core module no longer has a newer grpc forced onto
its classpath, so the SSL sample's gRPC workarounds (explicit grpc-util
dep + updateIdentityCredentials switch) are no longer needed. Revert them.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: donald-pinckney

build.gradle

@@ -32,6 +32,11 @@ subprojects {
     }
 
     repositories {
+        // mavenLocal() is needed for the springai* samples to pick up the
+        // unreleased temporal-spring-ai SNAPSHOT built from a local sdk-java
+        // checkout (see gradle/springai.gradle). Remove once temporal-spring-ai
+        // is published to Maven Central.
+        mavenLocal()
         maven {
             url "https://oss.sonatype.org/content/repositories/snapshots/"
         }

core/build.gradle

@@ -7,11 +7,6 @@ dependencies {
     // Environment configuration
     implementation "io.temporal:temporal-envconfig:$javaSDKVersion"
 
-    // AdvancedTlsX509KeyManager used by the SSL sample. Pinned explicitly so this
-    // module resolves it regardless of the SDK's transitive grpc version (needed
-    // in particular when substituting the SDK via composite build).
-    implementation "io.grpc:grpc-util:1.75.0"
-
     // Needed for SDK related functionality
     implementation(platform("com.fasterxml.jackson:jackson-bom:2.17.2"))
     implementation "com.fasterxml.jackson.core:jackson-databind"

core/src/main/java/io/temporal/samples/ssl/Starter.java

@@ -50,9 +50,9 @@ public static void main(String[] args) throws Exception {
     if (refreshPeriod > 0) {
       AdvancedTlsX509KeyManager clientKeyManager = new AdvancedTlsX509KeyManager();
       // Reload credentials every minute
-      clientKeyManager.updateIdentityCredentials(
-          clientCertFile,
+      clientKeyManager.updateIdentityCredentialsFromFile(
           clientKeyFile,
+          clientCertFile,
           refreshPeriod,
           TimeUnit.MINUTES,
           Executors.newScheduledThreadPool(1));

gradle/springai.gradle

@@ -7,6 +7,11 @@ apply plugin: 'io.spring.dependency-management'
 ext {
     springBootVersionForSpringAi = '3.5.3'
     springAiVersion = '1.1.0'
+    // temporal-spring-ai isn't on Maven Central yet. Build it locally from
+    // sdk-java master (`./gradlew publishToMavenLocal`) and the springai*
+    // samples will pick it up via mavenLocal(). Until release, pin this to
+    // whatever version sdk-java master is publishing (1.35.0-SNAPSHOT today).
+    springAiSdkVersion = '1.35.0-SNAPSHOT'
 }
 
 java {
@@ -22,9 +27,12 @@ dependencyManagement {
 }
 
 dependencies {
-    // Temporal
-    implementation "io.temporal:temporal-spring-boot-starter:$javaSDKVersion"
-    implementation "io.temporal:temporal-spring-ai:$javaSDKVersion"
+    // Temporal — pinned to springAiSdkVersion (see comment above) because
+    // temporal-spring-ai requires an SDK newer than $javaSDKVersion.
+    implementation "io.temporal:temporal-spring-boot-starter:$springAiSdkVersion"
+    implementation "io.temporal:temporal-spring-ai:$springAiSdkVersion"
+    // temporal-spring-ai declares temporal-sdk as compileOnly, so bring it in explicitly.
+    implementation "io.temporal:temporal-sdk:$springAiSdkVersion"
 
     // Spring Boot
     implementation 'org.springframework.boot:spring-boot-starter'

settings.gradle

@@ -7,21 +7,3 @@ include 'springai-rag'
 include 'springboot'
 include 'springboot-basic'
 
-// Include local sdk-java build for temporal-spring-ai (until published to Maven Central).
-// temporal-spring-ai is not yet in a released SDK, so we substitute all SDK modules from the
-// local build when the sibling ../sdk-java checkout is available. Without the checkout, the
-// springai* modules will fail to resolve io.temporal:temporal-spring-ai — that's expected
-// until the artifact is published.
-if (file('../sdk-java').exists()) {
-    includeBuild('../sdk-java') {
-        dependencySubstitution {
-            substitute module('io.temporal:temporal-spring-ai') using project(':temporal-spring-ai')
-            substitute module('io.temporal:temporal-sdk') using project(':temporal-sdk')
-            substitute module('io.temporal:temporal-serviceclient') using project(':temporal-serviceclient')
-            substitute module('io.temporal:temporal-spring-boot-autoconfigure') using project(':temporal-spring-boot-autoconfigure')
-            substitute module('io.temporal:temporal-spring-boot-starter') using project(':temporal-spring-boot-starter')
-            substitute module('io.temporal:temporal-testing') using project(':temporal-testing')
-            substitute module('io.temporal:temporal-opentracing') using project(':temporal-opentracing')
-        }
-    }
-}