build: Align SDK modules to one version through sentry-bom

Gradle resolves version conflicts per module, so a build could mix SDK modules
of different versions, for example a newer sentry-android-core with an older
sentry-android-fragment that the Gradle plugin or another library pulled in.
That fails at runtime with NoSuchMethodError or the mixed versions check.

Every published module now depends on sentry-bom as a platform. Gradle then
moves all SDK modules of a consumer to the highest version present. Maven does
not apply the dependencyManagement of a dependency's POM, so Maven builds
resolve as before. The BOM and the root build share one isBomMember() check,
so the modules that depend on the BOM are exactly the ones it constrains.

Refs #5105

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: romtsn

build.gradle.kts

@@ -126,6 +126,14 @@ subprojects {
                 assignAarTypes()
             }
 
+            // with the BOM as a platform, Gradle aligns all SDK modules of a consumer to one version
+            val configuration =
+                if (plugins.hasPlugin("org.jetbrains.kotlin.multiplatform")) "commonMainApi" else "api"
+            // parent projects such as sentry-opentelemetry have no api configuration and publish nothing
+            if (Config.BuildScript.isBomMember(this@subprojects.name) && configuration in configurations.names) {
+                dependencies.add(configuration, dependencies.platform(project(":sentry-bom")))
+            }
+
             // this is needed for sentry-unity to consume our artifacts locally as proper maven publication
             configure<PublishingExtension> {
                 repositories {

buildSrc/src/main/java/Config.kt

@@ -109,5 +109,12 @@ object Config {
         val androidXLibs = listOf(
             "androidx.core:core"
         )
+
+        // published modules that sentry-bom constrains, and that depend on it to stay aligned
+        fun isBomMember(projectName: String): Boolean =
+            !projectName.startsWith("sentry-samples") &&
+                !projectName.endsWith("-bom") &&
+                !projectName.contains("test", ignoreCase = true) &&
+                !projectName.contains("sentry-android-distribution")
     }
 }

sentry-bom/build.gradle.kts

@@ -6,13 +6,7 @@ plugins {
 dependencies {
   constraints {
     project.rootProject.subprojects
-      .filter {
-        !it.name.startsWith("sentry-samples") &&
-          it.name != project.name &&
-          !it.name.endsWith("-bom") &&
-          !it.name.contains("test", ignoreCase = true) &&
-          !it.name.contains("sentry-android-distribution")
-      }
+      .filter { Config.BuildScript.isBomMember(it.name) }
       .forEach { project ->
         evaluationDependsOn(project.path)
         project.publishing.publications