Fix VES Vulnerabilities
[dcaegen2/collectors/ves.git] / pom.xml
1 <?xml version="1.0"?>
2 <!--
3     ============LICENSE_START=======================================================
4     dcaegen2-collectors-ves
5     ================================================================================
6     Copyright (c) 2017-2019,2021 AT&T Intellectual Property. All rights reserved.
7     Copyright (c) 2020-2022 Nokia. All rights reserved.
8     ================================================================================
9     Licensed under the Apache License, Version 2.0 (the "License"); you may not
10     use this file except in compliance with the License. You may obtain a copy
11     of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required
12     by applicable law or agreed to in writing, software distributed under the
13     License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS
14     OF ANY KIND, either express or implied. See the License for the specific
15     language governing permissions and limitations under the License.
16     ============LICENSE_END=========================================================
17 -->
18 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
19   xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
20   <modelVersion>4.0.0</modelVersion>
21   <parent>
22     <groupId>org.onap.oparent</groupId>
23     <artifactId>oparent</artifactId>
24     <version>3.2.0</version>
25     <relativePath/>
26   </parent>
27   <groupId>org.onap.dcaegen2.collectors.ves</groupId>
28   <artifactId>VESCollector</artifactId>
29   <version>1.11.1-SNAPSHOT</version>
30   <name>dcaegen2-collectors-ves</name>
31   <description>VESCollector</description>
32   <properties>
33     <!-- PROJECT SETTINGS -->
34     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36     <java.version>11</java.version>
37     <docker.image.name>onap/org.onap.dcaegen2.collectors.ves.vescollector</docker.image.name>
38     <!-- TEST SETTINGS -->
39     <surefire.redirectTestOutputToFile>true</surefire.redirectTestOutputToFile>
40     <!-- PLUGIN SETTINGS -->
41     <dependency.locations.enabled>false</dependency.locations.enabled>
42     <!-- NEXUS RELATED SETTINGS -->
43     <nexusproxy>https://nexus.onap.org</nexusproxy>
44     <snapshots.path>content/repositories/snapshots/</snapshots.path>
45     <releases.path>content/repositories/releases/</releases.path>
46     <site.path>content/sites/site/org/onap/dcaegen2/collectors/ves/${project.artifactId}/${project.version}</site.path>
47     <maven.build.timestamp.format>yyyyMMdd'T'HHmmss</maven.build.timestamp.format>
48     <onap.nexus.dockerregistry.daily>nexus3.onap.org:10003</onap.nexus.dockerregistry.daily>
49     <maven.compiler.target>${java.version}</maven.compiler.target>
50     <maven.compiler.source>${java.version}</maven.compiler.source>
51     <sonar.coverage.jacoco.xmlReportPaths>${project.reporting.outputDirectory}/jacoco-ut/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
52     <!-- DEPENDENCY RELATED SETTINGS -->
53     <micrometer.version>1.6.5</micrometer.version>
54     <spring.version>2.7.2</spring.version>
55     <maven-assembly-plugin.version>3.1.0</maven-assembly-plugin.version>
56     <maven-javadoc-plugin.version>3.0.1</maven-javadoc-plugin.version>
57     <maven-project-info-reports-plugin.version>2.9</maven-project-info-reports-plugin.version>
58     <maven-surefire-plugin.version>3.0.0-M1</maven-surefire-plugin.version>
59     <docker-maven-plugin.version>1.2.0</docker-maven-plugin.version>
60     <json-simple.version>1.1.1</json-simple.version>
61     <json-schema-validator.version>1.0.49</json-schema-validator.version>
62     <gson.version>2.8.9</gson.version>
63     <json.version>20220320</json.version>
64     <unirest-java.version>1.4.9</unirest-java.version>
65     <commons-collections.version>3.2.2</commons-collections.version>
66     <commons-configuration.version>1.10</commons-configuration.version>
67     <vavr.version>0.10.3</vavr.version>
68     <spring-boot-starter-log4j2.version>2.6.3</spring-boot-starter-log4j2.version>
69     <log4j.version>2.18.0</log4j.version>
70     <springfox-swagger2.version>3.0.0</springfox-swagger2.version>
71     <assertj-core.version>3.23.1</assertj-core.version>
72     <spring-boot-starter-test.version>2.2.13.RELEASE</spring-boot-starter-test.version>
73     <sdk.version>1.8.10</sdk.version>
74     <guava.version>31.1-jre</guava.version>
75     <mock-server.version>5.13.2</mock-server.version>
76     <reactor-test.version>3.4.0</reactor-test.version>
77     <testcontainers.version>1.17.3</testcontainers.version>
78     <junit-jupiter.version>1.17.3</junit-jupiter.version>
79     <netty-bom.version>4.1.73.Final</netty-bom.version>
80   </properties>
81   <build>
82     <pluginManagement>
83       <plugins>
84         <plugin>
85           <groupId>org.springframework.boot</groupId>
86           <artifactId>spring-boot-maven-plugin</artifactId>
87           <version>${spring.version}</version>
88         </plugin>
89         <plugin>
90           <artifactId>maven-assembly-plugin</artifactId>
91           <version>${maven-assembly-plugin.version}</version>
92         </plugin>
93         <plugin>
94           <artifactId>maven-javadoc-plugin</artifactId>
95           <version>${maven-javadoc-plugin.version}</version>
96         </plugin>
97         <plugin>
98           <artifactId>maven-project-info-reports-plugin</artifactId>
99           <version>${maven-project-info-reports-plugin.version}</version>
100         </plugin>
101         <plugin>
102           <groupId>org.apache.maven.plugins</groupId>
103           <artifactId>maven-surefire-plugin</artifactId>
104           <version>${maven-surefire-plugin.version}</version>
105           <configuration>
106             <environmentVariables>
107               <TESTCONTAINERS_RYUK_DISABLED>true</TESTCONTAINERS_RYUK_DISABLED>
108             </environmentVariables>
109           </configuration>
110         </plugin>
111         <plugin>
112           <groupId>com.spotify</groupId>
113           <artifactId>docker-maven-plugin</artifactId>
114           <version>${docker-maven-plugin.version}</version>
115         </plugin>
116         <plugin>
117           <groupId>org.apache.maven.plugins</groupId>
118           <artifactId>maven-enforcer-plugin</artifactId>
119           <configuration>
120             <skip>true</skip>
121           </configuration>
122         </plugin>
123       </plugins>
124     </pluginManagement>
125     <plugins>
126       <plugin>
127         <artifactId>maven-assembly-plugin</artifactId>
128         <configuration>
129           <descriptors>
130             <descriptor>src/assembly/dep.xml</descriptor>
131           </descriptors>
132           <attach>false</attach>
133           <appendAssemblyId>false</appendAssemblyId>
134           <updateOnly>true</updateOnly>
135         </configuration>
136         <executions>
137           <execution>
138             <id>make-assembly</id>
139             <phase>package</phase>
140             <goals>
141               <goal>single</goal>
142             </goals>
143           </execution>
144         </executions>
145       </plugin>
146       <plugin>
147         <groupId>org.springframework.boot</groupId>
148         <artifactId>spring-boot-maven-plugin</artifactId>
149         <executions>
150           <execution>
151             <goals>
152               <goal>repackage</goal>
153             </goals>
154           </execution>
155         </executions>
156       </plugin>
157       <plugin>
158         <artifactId>maven-javadoc-plugin</artifactId>
159         <configuration>
160           <quiet>true</quiet>
161           <verbose>false</verbose>
162           <useStandardDocletOptions>false</useStandardDocletOptions>
163         </configuration>
164         <executions>
165           <execution>
166             <id>aggregate</id>
167             <phase>site</phase>
168             <goals>
169               <goal>aggregate</goal>
170             </goals>
171           </execution>
172           <execution>
173             <id>attach-javadoc</id>
174             <goals>
175               <goal>jar</goal>
176             </goals>
177           </execution>
178         </executions>
179       </plugin>
180       <plugin>
181         <groupId>com.spotify</groupId>
182         <artifactId>docker-maven-plugin</artifactId>
183         <configuration>
184           <serverId>${onap.nexus.dockerregistry.daily}</serverId>
185           <imageName>${onap.nexus.dockerregistry.daily}/${docker.image.name}</imageName>
186           <imageTags>
187             <imageTag>${project.version}-${maven.build.timestamp}Z</imageTag>
188             <imageTag>${project.version}</imageTag>
189             <imageTag>latest</imageTag>
190           </imageTags>
191           <resources>
192             <resource>
193               <targetPath>.</targetPath>
194               <directory>${project.build.directory}/${project.artifactId}-${project.version}</directory>
195             </resource>
196           </resources>
197           <dockerDirectory>src/docker</dockerDirectory>
198         </configuration>
199       </plugin>
200     </plugins>
201   </build>
202   <profiles>
203     <profile>
204       <id>buildForPerfTests</id>
205       <activation>
206         <activeByDefault>false</activeByDefault>
207       </activation>
208       <dependencies>
209         <!-- Libraries related with performance tests-->
210         <dependency>
211           <groupId>org.springframework.boot</groupId>
212           <artifactId>spring-boot-starter-actuator</artifactId>
213           <version>${spring.version}</version>
214         </dependency>
215         <dependency>
216           <groupId>io.micrometer</groupId>
217           <artifactId>micrometer-registry-prometheus</artifactId>
218           <version>${micrometer.version}</version>
219         </dependency>
220         <dependency>
221           <groupId>io.micrometer</groupId>
222           <artifactId>micrometer-core</artifactId>
223           <version>${micrometer.version}</version>
224         </dependency>
225       </dependencies>
226     </profile>
227     <profile>
228       <id>with-system-proxy</id>
229       <build>
230         <plugins>
231           <plugin>
232             <groupId>com.spotify</groupId>
233             <artifactId>docker-maven-plugin</artifactId>
234             <configuration>
235               <buildArgs>
236                 <http_proxy>${env.http_proxy}</http_proxy>
237               </buildArgs>
238             </configuration>
239           </plugin>
240         </plugins>
241       </build>
242     </profile>
243   </profiles>
244   <reporting>
245     <plugins>
246       <plugin>
247         <artifactId>maven-project-info-reports-plugin</artifactId>
248         <reportSets>
249           <reportSet>
250             <reports>
251               <report>dependencies</report>
252               <report>license</report>
253             </reports>
254           </reportSet>
255         </reportSets>
256       </plugin>
257       <plugin>
258         <artifactId>maven-javadoc-plugin</artifactId>
259         <configuration>
260           <failOnError>false</failOnError>
261           <doclet>org.umlgraph.doclet.UmlGraphDoc</doclet>
262           <docletArtifact>
263             <groupId>org.umlgraph</groupId>
264             <artifactId>umlgraph</artifactId>
265             <version>5.6</version>
266           </docletArtifact>
267           <additionalparam>-views</additionalparam>
268           <useStandardDocletOptions>true</useStandardDocletOptions>
269         </configuration>
270       </plugin>
271     </plugins>
272   </reporting>
273   <dependencyManagement>
274     <dependencies>
275       <dependency>
276         <groupId>io.netty</groupId>
277         <artifactId>netty-bom</artifactId>
278         <version>${netty-bom.version}</version>
279         <type>pom</type>
280         <scope>import</scope>
281       </dependency>
282       <dependency>
283         <!-- Import dependency management from Spring Boot -->
284         <groupId>org.springframework.boot</groupId>
285         <artifactId>spring-boot-dependencies</artifactId>
286         <version>${spring.version}</version>
287         <type>pom</type>
288         <scope>import</scope>
289       </dependency>
290     </dependencies>
291   </dependencyManagement>
292   <dependencies>
293     <!-- JSON RELATED -->
294     <dependency>
295       <groupId>com.networknt</groupId>
296       <artifactId>json-schema-validator</artifactId>
297       <version>${json-schema-validator.version}</version>
298       <exclusions>
299         <exclusion>
300           <groupId>com.fasterxml.jackson.core</groupId>
301           <artifactId>jackson-databind</artifactId>
302         </exclusion>
303       </exclusions>
304     </dependency>
305     <dependency>
306       <groupId>com.google.code.gson</groupId>
307       <artifactId>gson</artifactId>
308     </dependency>
309     <dependency>
310       <groupId>org.json</groupId>
311       <artifactId>json</artifactId>
312       <version>${json.version}</version>
313     </dependency>
314     <dependency>
315       <groupId>com.google.guava</groupId>
316       <artifactId>guava</artifactId>
317       <version>${guava.version}</version>
318     </dependency>
319     <!-- REST API RELATED -->
320     <dependency>
321       <groupId>org.onap.dcaegen2.services.sdk.rest.services</groupId>
322       <artifactId>dmaap-client</artifactId>
323       <version>${sdk.version}</version>
324       <exclusions>
325         <exclusion>
326           <groupId>ch.qos.logback</groupId>
327           <artifactId>logback-classic</artifactId>
328         </exclusion>
329       </exclusions>
330     </dependency>
331     <dependency>
332       <groupId>io.projectreactor</groupId>
333       <artifactId>reactor-test</artifactId>
334       <scope>test</scope>
335     </dependency>
336     <dependency>
337       <groupId>org.testcontainers</groupId>
338       <artifactId>testcontainers</artifactId>
339       <version>${testcontainers.version}</version>
340     </dependency>
341     <dependency>
342       <groupId>org.testcontainers</groupId>
343       <artifactId>junit-jupiter</artifactId>
344       <version>${junit-jupiter.version}</version>
345     </dependency>
346     <dependency>
347       <groupId>com.mashape.unirest</groupId>
348       <artifactId>unirest-java</artifactId>
349       <version>${unirest-java.version}</version>
350     </dependency>
351     <!-- MISCELLANEOUS -->
352     <dependency>
353       <groupId>commons-collections</groupId>
354       <artifactId>commons-collections</artifactId>
355       <version>${commons-collections.version}</version>
356     </dependency>
357     <dependency>
358       <groupId>commons-configuration</groupId>
359       <artifactId>commons-configuration</artifactId>
360       <version>${commons-configuration.version}</version>
361     </dependency>
362     <dependency>
363       <groupId>io.vavr</groupId>
364       <artifactId>vavr</artifactId>
365       <version>${vavr.version}</version>
366     </dependency>
367     <dependency>
368       <groupId>org.springframework.boot</groupId>
369       <artifactId>spring-boot-starter-web</artifactId>
370       <exclusions>
371         <exclusion>
372           <groupId>org.springframework.boot</groupId>
373           <artifactId>spring-boot-starter-logging</artifactId>
374         </exclusion>
375       </exclusions>
376     </dependency>
377     <dependency>
378       <groupId>org.springframework.boot</groupId>
379       <artifactId>spring-boot-starter-log4j2</artifactId>
380     </dependency>
381     <dependency>
382       <groupId>org.apache.logging.log4j</groupId>
383       <artifactId>log4j-core</artifactId>
384       <version>${log4j.version}</version>
385     </dependency>
386     <dependency>
387       <groupId>org.apache.logging.log4j</groupId>
388       <artifactId>log4j-api</artifactId>
389       <version>${log4j.version}</version>
390     </dependency>
391     <dependency>
392       <groupId>io.springfox</groupId>
393       <artifactId>springfox-swagger2</artifactId>
394       <version>${springfox-swagger2.version}</version>
395     </dependency>
396     <dependency>
397       <groupId>io.springfox</groupId>
398       <artifactId>springfox-swagger-ui</artifactId>
399       <version>${springfox-swagger2.version}</version>
400       <scope>compile</scope>
401     </dependency>
402     <dependency>
403       <groupId>org.mock-server</groupId>
404       <artifactId>mockserver-junit-jupiter</artifactId>
405       <version>${mock-server.version}</version>
406       <scope>test</scope>
407     </dependency>
408     <dependency>
409       <groupId>org.assertj</groupId>
410       <artifactId>assertj-core</artifactId>
411       <version>${assertj-core.version}</version>
412       <scope>test</scope>
413     </dependency>
414     <dependency>
415       <groupId>org.springframework.boot</groupId>
416       <artifactId>spring-boot-starter-test</artifactId>
417       <scope>test</scope>
418       <exclusions>
419         <exclusion>
420           <groupId>com.vaadin.external.google</groupId>
421           <artifactId>android-json</artifactId>
422         </exclusion>
423       </exclusions>
424     </dependency>
425     <dependency>
426       <groupId>org.onap.dcaegen2.services.sdk.security.crypt</groupId>
427       <artifactId>crypt-password</artifactId>
428       <classifier>slim</classifier>
429       <version>${sdk.version}</version>
430     </dependency>
431     <dependency>
432       <groupId>org.onap.dcaegen2.services.sdk</groupId>
433       <artifactId>dcaegen2-services-sdk-services-external-schema-manager</artifactId>
434       <version>${sdk.version}</version>
435     </dependency>
436     <dependency>
437       <groupId>org.springframework.security</groupId>
438       <artifactId>spring-security-crypto</artifactId>
439     </dependency>
440     <dependency>
441       <groupId>org.onap.dcaegen2.services.sdk.standardization</groupId>
442       <artifactId>api-custom-header</artifactId>
443       <version>${sdk.version}</version>
444     </dependency>
445     <dependency>
446       <groupId>org.onap.dcaegen2.services.sdk.rest.services</groupId>
447       <artifactId>cbs-client</artifactId>
448       <version>${sdk.version}</version>
449     </dependency>
450   </dependencies>
451   <repositories>
452     <repository>
453       <id>external-repository</id>
454       <url>https://oss.sonatype.org/content/repositories</url>
455     </repository>
456   </repositories>
457   <pluginRepositories>
458     <!-- Black Duck plugin dependencies -->
459     <pluginRepository>
460       <id>JCenter</id>
461       <name>JCenter Repository</name>
462       <url>http://jcenter.bintray.com</url>
463     </pluginRepository>
464     <pluginRepository>
465       <id>Restlet</id>
466       <name>Restlet Repository</name>
467       <url>http://maven.restlet.com</url>
468     </pluginRepository>
469   </pluginRepositories>
470 </project>