[DCAE/vesmapper] Remediation for Log4Shell vulnerability
[dcaegen2/services/mapper.git] / UniversalVesAdapter / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3 * ============LICENSE_START=======================================================
4 * ONAP : DCAEGEN2
5 * ================================================================================
6 * Copyright 2018-2019 TechMahindra
7 * Copyright (C) 2020 Huawei Technologies Co., Ltd.
8 * Copyright (c) 2021 AT&T Intellectual Property. All rights reserved.
9 * ================================================================================
10 * Licensed under the Apache License, Version 2.0 (the "License");
11 * you may not use this file except in compliance with the License.
12 * You may obtain a copy of the License at
13 *
14 *     http://www.apache.org/licenses/LICENSE-2.0
15 *
16 * Unless required by applicable law or agreed to in writing, software
17 * distributed under the License is distributed on an "AS IS" BASIS,
18 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19 * See the License for the specific language governing permissions and
20 * limitations under the License.
21 * ============LICENSE_END=========================================================
22  -->
23
24 <project xmlns="http://maven.apache.org/POM/4.0.0"
25         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
26         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
27         <modelVersion>4.0.0</modelVersion>
28
29         <groupId>org.onap.dcaegen2.services.mapper.vesadapter</groupId>
30         <artifactId>UniversalVesAdapter</artifactId>
31         <version>1.3.1-SNAPSHOT</version>
32
33
34         <parent>
35                 <groupId>org.onap.dcaegen2.services.mapper</groupId>
36                 <artifactId>mapper</artifactId>
37                 <version>1.3.1-SNAPSHOT</version>
38         </parent>
39
40         <properties>
41
42                 <!-- PROJECT SETTINGS -->
43                 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
44                 <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
45                 <java.version>11</java.version>
46                 <docker.image.name>onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor</docker.image.name>
47
48                 <!-- PLUGIN SETTINGS -->
49                 <dependency.locations.enabled>false</dependency.locations.enabled>
50
51                 <!-- NEXUS RELATED SETTINGS -->
52                 <nexusproxy>https://nexus.onap.org</nexusproxy>
53                 <snapshots.path>content/repositories/snapshots/</snapshots.path>
54                 <releases.path>content/repositories/releases/</releases.path>
55                 <site.path>
56                         content/sites/site/org/onap/dcaegen2/services/mapper/${project.artifactId}/${project.version}
57                 </site.path>
58                 <maven.build.timestamp.format>yyyyMMdd'T'HHmmss</maven.build.timestamp.format>
59
60                 <!-- DCAE SDK version -->
61                 <sdk.version>1.8.7</sdk.version>
62
63         </properties>
64         <dependencies>
65                 <!-- Junit, Mockito, PowerMock -->
66                 <dependency>
67                         <groupId>junit</groupId>
68                         <artifactId>junit</artifactId>
69                         <version>4.12</version>
70                         <scope>test</scope>
71                 </dependency>
72                 <dependency>
73                         <groupId>org.mockito</groupId>
74                         <artifactId>mockito-core</artifactId>
75                         <version>2.0.5-beta</version>
76                         <scope>test</scope>
77                 </dependency>
78
79                 <dependency>
80                         <groupId>org.powermock</groupId>
81                         <artifactId>powermock-api-mockito</artifactId>
82                         <version>1.6.2</version>
83                         <scope>test</scope>
84                 </dependency>
85                 <dependency>
86                         <groupId>org.powermock</groupId>
87                         <artifactId>powermock-module-junit4</artifactId>
88                         <version>1.6.2</version>
89                         <scope>test</scope>
90                 </dependency>
91                 <dependency>
92                         <groupId>org.javassist</groupId>
93                         <artifactId>javassist</artifactId>
94                         <version>3.27.0-GA</version>
95                 </dependency>
96                 <dependency>
97                         <groupId>com.googlecode.json-simple</groupId>
98                         <artifactId>json-simple</artifactId>
99                         <version>1.1.1</version>
100                 </dependency>
101                 <dependency>
102                         <groupId>com.google.guava</groupId>
103                         <artifactId>guava</artifactId>
104                 </dependency>
105                 <dependency>
106                         <groupId>commons-configuration</groupId>
107                         <artifactId>commons-configuration</artifactId>
108                         <version>1.10</version>
109                 </dependency>
110                 <dependency>
111                         <groupId>com.google.code.gson</groupId>
112                         <artifactId>gson</artifactId>
113                         <version>2.8.5</version>
114                 </dependency>
115                 <dependency>
116                         <groupId>com.google.inject</groupId>
117                         <artifactId>guice</artifactId>
118                         <version>4.2.0</version>
119                 </dependency>
120                 <dependency>
121                         <groupId>org.apache.commons</groupId>
122                         <artifactId>commons-lang3</artifactId>
123                         <version>3.5</version>
124                 </dependency>
125                 <dependency>
126                         <groupId>com.google.inject.extensions</groupId>
127                         <artifactId>guice-assistedinject</artifactId>
128                         <version>4.2.0</version>
129                 </dependency>
130                 <dependency>
131                         <groupId>org.milyn</groupId>
132                         <artifactId>milyn-smooks-all</artifactId>
133                         <version>1.7.0</version>
134                         <exclusions>
135                                 <exclusion>
136                                         <groupId>javax.servlet</groupId>
137                                         <artifactId>servlet-api</artifactId>
138                                 </exclusion>
139                                 <exclusion>
140                                         <groupId>ognl</groupId>
141                                         <artifactId>ognl</artifactId>
142                                 </exclusion>
143                                 <exclusion>
144                                         <groupId>javax.jms</groupId>
145                                         <artifactId>jms</artifactId>
146                                 </exclusion>
147                         </exclusions>
148                 </dependency>
149                 <dependency>
150                         <groupId>ognl</groupId>
151                         <artifactId>ognl</artifactId>
152                         <version>3.1.12</version>
153                 </dependency>
154                 <dependency>
155                         <groupId>org.onap.dmaap.messagerouter.dmaapclient</groupId>
156                         <artifactId>dmaapClient</artifactId>
157                         <version>1.1.3</version>
158                         <exclusions>
159                                 <exclusion>
160                                         <groupId>javax.jms</groupId>
161                                         <artifactId>jms</artifactId>
162                                 </exclusion>
163                         </exclusions>
164                 </dependency>
165                 <!-- Database dependency -->
166                 <dependency>
167                         <groupId>org.postgresql</groupId>
168                         <artifactId>postgresql</artifactId>
169                         <version>42.2.18</version>
170                 </dependency>
171                 <dependency>
172                         <groupId>org.springframework</groupId>
173                         <artifactId>spring-jdbc</artifactId>
174                         <version>5.1.3.RELEASE</version>
175                 </dependency>
176                 <dependency>
177                         <groupId>org.springframework.boot</groupId>
178                         <artifactId>spring-boot-starter-web</artifactId>
179                         <version>2.1.1.RELEASE</version>
180                 </dependency>
181                 <dependency>
182                         <groupId>org.springframework.boot</groupId>
183                         <artifactId>spring-boot-starter-test</artifactId>
184                         <version>2.1.1.RELEASE</version>
185                         <scope>test</scope>
186                 </dependency>
187                 <dependency>
188                         <groupId>org.springframework.data</groupId>
189                         <artifactId>spring-data-commons</artifactId>
190                         <version>2.1.3.RELEASE</version>
191                 </dependency>
192                 <!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-api -->
193                 <dependency>
194                         <groupId>org.slf4j</groupId>
195                         <artifactId>slf4j-api</artifactId>
196                         <version>1.7.25</version>
197                 </dependency>
198                 <dependency>
199                         <groupId>org.apache.logging.log4j</groupId>
200                         <artifactId>log4j-core</artifactId>
201                         <version>2.16.0</version>
202                 </dependency>
203                 <dependency>
204                         <groupId>org.apache.logging.log4j</groupId>
205                         <artifactId>log4j-api</artifactId>
206                         <version>2.16.0</version>
207                 </dependency>
208                 <dependency>
209                         <groupId>org.codehaus.groovy</groupId>
210                         <artifactId>groovy-all</artifactId>
211                         <version>2.4.21</version>
212                 </dependency>
213                 <dependency>
214                         <groupId>com.jayway.jsonpath</groupId>
215                         <artifactId>json-path</artifactId>
216                         <version>2.4.0</version>
217                         <scope>test</scope>
218                 </dependency>
219                 <dependency>
220                         <groupId>com.fasterxml.jackson.core</groupId>
221                         <artifactId>jackson-core</artifactId>
222                         <version>2.11.2</version>
223                 </dependency>
224                 <dependency>
225                         <groupId>com.fasterxml.jackson.core</groupId>
226                         <artifactId>jackson-databind</artifactId>
227                         <version>2.11.2</version>
228                 </dependency>
229                 <dependency>
230                         <groupId>hsqldb</groupId>
231                         <artifactId>hsqldb</artifactId>
232                         <version>1.8.0.10</version>
233                         <scope>test</scope>
234                 </dependency>
235                 <!-- https://mvnrepository.com/artifact/xalan/xalan -->
236                 <dependency>
237                         <groupId>xalan</groupId>
238                         <artifactId>xalan</artifactId>
239                         <version>2.7.2</version>
240                 </dependency>
241                 <!-- https://mvnrepository.com/artifact/xerces/xercesImpl -->
242                 <dependency>
243                         <groupId>xerces</groupId>
244                         <artifactId>xercesImpl</artifactId>
245                         <version>2.12.1</version>
246                 </dependency>
247                 <!-- https://mvnrepository.com/artifact/com.thoughtworks.xstream/xstream -->
248                 <dependency>
249                         <groupId>com.thoughtworks.xstream</groupId>
250                         <artifactId>xstream</artifactId>
251                         <version>1.4.16</version>
252                 </dependency>
253                 <!-- https://mvnrepository.com/artifact/xml-apis/xml-apis -->
254                 <dependency>
255                         <groupId>xml-apis</groupId>
256                         <artifactId>xml-apis</artifactId>
257                         <version>1.4.01</version>
258                 </dependency>
259                 <!-- http client -->
260                 <dependency>
261                         <groupId>org.apache.httpcomponents</groupId>
262                         <artifactId>httpclient</artifactId>
263                         <version>${httpclient.version}</version>
264                         <scope>compile</scope>
265                 </dependency>
266                 <dependency>
267                         <groupId>org.apache.httpcomponents</groupId>
268                         <artifactId>httpmime</artifactId>
269                         <version>${httpclient.version}</version>
270                         <scope>compile</scope>
271                 </dependency>
272                 <dependency>
273                         <groupId>org.springframework.boot</groupId>
274                         <artifactId>spring-boot-configuration-processor</artifactId>
275                         <optional>true</optional>
276                         <version>2.1.1.RELEASE</version>
277                 </dependency>
278
279                 <!-- DCAE sdk dependency -->
280
281                 <dependency>
282                         <groupId>org.onap.dcaegen2.services.sdk.rest.services</groupId>
283                         <artifactId>cbs-client</artifactId>
284                         <version>${sdk.version}</version>
285                 </dependency>
286                 <!-- https://mvnrepository.com/artifact/io.projectreactor.netty/reactor-netty -->
287                 <dependency>
288                         <groupId>io.projectreactor.netty</groupId>
289                         <artifactId>reactor-netty</artifactId>
290                         <version>0.9.12.RELEASE</version>
291                 </dependency>
292         </dependencies>
293
294         <build>
295                 <pluginManagement>
296                         <plugins>
297                                 <plugin>
298                                         <artifactId>maven-assembly-plugin</artifactId>
299                                         <version>3.1.0</version>
300                                 </plugin>
301                                 <plugin>
302                                         <groupId>com.spotify</groupId>
303                                         <artifactId>docker-maven-plugin</artifactId>
304                                         <version>1.0.0</version>
305                                 </plugin>
306                         </plugins>
307                 </pluginManagement>
308                 <plugins>
309                         <plugin>
310                                 <artifactId>maven-assembly-plugin</artifactId>
311                                 <configuration>
312                                         <descriptors>
313                                                 <descriptor>src/assembly/dep.xml</descriptor>
314                                         </descriptors>
315                                         <attach>false</attach>
316                                         <appendAssemblyId>false</appendAssemblyId>
317                                         <updateOnly>true</updateOnly>
318                                 </configuration>
319                                 <executions>
320                                         <execution>
321                                                 <id>make-assembly</id>
322                                                 <phase>package</phase>
323                                                 <goals>
324                                                         <goal>single</goal>
325                                                 </goals>
326                                         </execution>
327                                 </executions>
328                         </plugin>
329                         <plugin>
330                                 <groupId>com.spotify</groupId>
331                                 <artifactId>docker-maven-plugin</artifactId>
332                                 <version>1.2.0</version>
333                                 <configuration>
334                                         <skipDockerBuild>false</skipDockerBuild>
335                                         <serverId>${onap.nexus.dockerregistry.daily}</serverId>
336                                         <imageName>${onap.nexus.dockerregistry.daily}/${docker.image.name}</imageName>
337                                         <imageTags>
338                                                 <imageTag>${project.version}-${maven.build.timestamp}Z</imageTag>
339                                                 <imageTag>${project.version}</imageTag>
340                                                 <imageTag>latest</imageTag>
341                                         </imageTags>
342                                         <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
343                                         <resources>
344                                                 <resource>
345                                                         <targetPath>.</targetPath>
346                                                         <directory>${project.build.directory}/${project.artifactId}-${project.version}</directory>
347                                                 </resource>
348                                         </resources>
349                                 </configuration>
350                                 <!--<executions> <execution> <id>build-image</id> <phase>package</phase> 
351                                         <goals> <goal>build</goal> </goals> </execution> <execution> <id>tag-and-push-image-latest</id> 
352                                         <phase>deploy</phase> <goals> <goal>tag</goal> </goals> <configuration> <image>${docker.image.name}:latest</image> 
353                                         <newName>${onap.nexus.dockerregistry.daily}/${docker.image.name}:latest</newName> 
354                                         <pushImage>true</pushImage> </configuration> </execution> <execution> <id>tag-and-push-image-with-version</id> 
355                                         <phase>deploy</phase> <goals> <goal>tag</goal> </goals> <configuration> <image>${docker.image.name}:latest</image> 
356                                         <newName>${onap.nexus.dockerregistry.daily}/${docker.image.name}:${project.version} 
357                                         </newName> <pushImage>true</pushImage> </configuration> </execution> <execution> 
358                                         <id>tag-and-push-image-with-version-and-date</id> <phase>deploy</phase> <goals> 
359                                         <goal>tag</goal> </goals> <configuration> <image>${docker.image.name}:latest</image> 
360                                         <newName> ${onap.nexus.dockerregistry.daily}/${docker.image.name}:${project.version}-${maven.build.timestamp}Z 
361                                         </newName> <pushImage>true</pushImage> </configuration> </execution> </executions> -->
362                         </plugin>
363                         <plugin>
364                                 <groupId>org.springframework.boot</groupId>
365                                 <artifactId>spring-boot-maven-plugin</artifactId>
366                                 <version>2.1.1.RELEASE</version>
367                                 <executions>
368                                         <execution>
369                                                 <goals>
370                                                         <goal>repackage</goal>
371                                                 </goals>
372                                                 <configuration>
373                                                         <mainClass>org.onap.universalvesadapter.Application</mainClass>
374                                                 </configuration>
375                                         </execution>
376                                 </executions>
377                         </plugin>
378                         <plugin>
379                                 <groupId>org.codehaus.mojo</groupId>
380                                 <artifactId>build-helper-maven-plugin</artifactId>
381                                 <version>1.9.1</version>
382                                 <executions>
383                                         <execution>
384                                                 <id>add-source</id>
385                                                 <phase>generate-sources</phase>
386                                                 <goals>
387                                                         <goal>add-source</goal>
388                                                 </goals>
389                                                 <configuration>
390                                                         <sources>
391                                                                 <source>src/gen/java</source>
392                                                         </sources>
393                                                 </configuration>
394                                         </execution>
395                                         <!-- <execution> <id>regex-property</id> <goals> <goal>regex-property</goal> 
396                                                 </goals> <configuration> <name>docker.version</name> <value>${project.version}</value> 
397                                                 <regex>(^[0-9]+.[0-9]+.[0-9]+$)</regex> <replacement>$1-STAGING</replacement> 
398                                                 <failIfNoMatch>false</failIfNoMatch> </configuration> </execution> -->
399                                 </executions>
400                         </plugin>
401                 </plugins>
402                 <!-- <finalName>UniversalVesAdapter</finalName> -->
403         </build>
404
405         <profiles>
406                 <profile>
407                         <id>with-system-proxy</id>
408                         <build>
409                                 <plugins>
410                                         <plugin>
411                                                 <groupId>com.spotify</groupId>
412                                                 <artifactId>docker-maven-plugin</artifactId>
413                                                 <configuration>
414                                                         <buildArgs>
415                                                                 <http_proxy>${env.http_proxy}</http_proxy>
416                                                         </buildArgs>
417                                                 </configuration>
418                                         </plugin>
419                                 </plugins>
420                         </build>
421                 </profile>
422         </profiles>
423
424
425         <repositories>
426                 <repository>
427                         <id>spring-releases</id>
428                         <url>https://repo.spring.io/libs-release</url>
429                 </repository>
430         </repositories>
431         <pluginRepositories>
432                 <pluginRepository>
433                         <id>spring-releases</id>
434                         <url>https://repo.spring.io/libs-release</url>
435                 </pluginRepository>
436         </pluginRepositories>
437 </project>