fix security vilation CVE-2015-3253
[sdc.git] / pom.xml
1 <!--
2 ============LICENSE_START=======================================================
3 SDC
4 ================================================================================
5 Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
6 ================================================================================
7 Licensed under the Apache License, Version 2.0 (the "License");
8 you may not use this file except in compliance with the License.
9 You may obtain a copy of the License at
10         *
11      http://www.apache.org/licenses/LICENSE-2.0
12         *
13 Unless required by applicable law or agreed to in writing, software
14 distributed under the License is distributed on an "AS IS" BASIS,
15 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 See the License for the specific language governing permissions and
17 limitations under the License.
18 ============LICENSE_END=========================================================
19 Modifications copyright (c) 2018 Nokia
20 ================================================================================
21 -->
22 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
23          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
24     <modelVersion>4.0.0</modelVersion>
25
26     <groupId>org.openecomp.sdc</groupId>
27     <artifactId>sdc-main</artifactId>
28     <version>1.3.0-SNAPSHOT</version>
29     <packaging>pom</packaging>
30     <name>sdc</name>
31     <properties>
32         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
33
34         <!-- 3rd parties versions -->
35         <lang3.version>3.3.2</lang3.version>
36         <guava.version>18.0</guava.version>
37         <titan.version>1.0.0</titan.version>
38         <sdc.titan.version>1.2.0</sdc.titan.version>
39         <spring.version>4.3.17.RELEASE</spring.version>
40         <spring.security.version>3.2.3.RELEASE</spring.security.version>
41         <spring.ldap.version>2.0.1.RELEASE</spring.ldap.version>
42         <jersey-bom.version>2.27</jersey-bom.version>
43         <servlet-api.version>3.1.0</servlet-api.version>
44         <wire-mock.version>2.18.0</wire-mock.version>
45         <ecomp.version>1.1.0</ecomp.version>
46         <cassandra.unit.version>3.5.0.1</cassandra.unit.version>
47
48         <!-- Elastic Search mapper (reference the elastic search version actually). -->
49         <elastic-search.version>2.4.0</elastic-search.version>
50         <catalog-artifacts.version>1.0.0-SNAPSHOT</catalog-artifacts.version>
51         <catalog-builders.version>1.0.0-SNAPSHOT</catalog-builders.version>
52         <jetty.version>9.3.20.v20170531</jetty.version>
53
54         <!-- JSON and YAML Parsing -->
55         <jackson.version>2.8.10</jackson.version>
56         <jackson-annotations.version>2.8.0</jackson-annotations.version>
57
58         <!-- Yaml for properties -->
59         <snakeyaml.version>1.14</snakeyaml.version>
60         <functionaljava.version>4.7</functionaljava.version>
61         <httpclient.version>4.5.3</httpclient.version>
62         <httpcore.version>4.4.1</httpcore.version>
63         <json-simple.version>1.1</json-simple.version>
64
65         <!-- Logging start -->
66         <!-- logback -->
67         <logback.version>1.2.3</logback.version>
68         <slf4j-api.version>1.7.25</slf4j-api.version>
69         <commons-codec>1.10</commons-codec>
70         <commons-logging>1.2</commons-logging>
71         <janino.version>3.0.6</janino.version>
72
73         <!-- aspects -->
74         <jcabi.version>0.20.1</jcabi.version>
75         <aspectjrt.version>1.8.4</aspectjrt.version>
76         <aspectj.version>1.7.4</aspectj.version>
77         <jcabi.maven.plugin.version>0.13.2</jcabi.maven.plugin.version>
78
79         <!-- Logging end -->
80         <!-- System Metrics -->
81         <sigar.version>1.6.4</sigar.version>
82
83         <regex.version>3.0.3</regex.version>
84
85         <!--GSON-->
86         <gson.version>2.3.1</gson.version>
87
88         <!--listen to file changes-->
89         <commons-jci-core.version>1.1</commons-jci-core.version>
90
91         <!--TESTING-->
92         <mockito.version>2.18.3</mockito.version>
93         <jmockit.version>1.33</jmockit.version>
94         <junit.version>4.12</junit.version>
95         <assertj.version>3.10.0</assertj.version>
96         <testng.version>6.9.10</testng.version>
97         <extentreports.version>3.0.3</extentreports.version>
98         <cucumber.version>2.4.0</cucumber.version>
99         <bean-matchers.version>0.11</bean-matchers.version>
100
101         <!-- parser-->
102         <sdc-tosca-parser.version>1.3.5</sdc-tosca-parser.version>
103
104         <!-- sonar -->
105         <sonar.language>java</sonar.language>
106         <sonar.sourceEncoding>${project.build.sourceEncoding}</sonar.sourceEncoding>
107         <sonar.projectBaseDir>${project.basedir}</sonar.projectBaseDir>
108         <sonar.branch>${project.version}</sonar.branch>
109
110         <!--cassandra -->
111         <cassandra.driver.version>3.0.0</cassandra.driver.version>
112         <!-- maven central (Nexus) -->
113         <nexus.id.release>nexus</nexus.id.release>
114         <nexus.id.snapshot>nexus</nexus.id.snapshot>
115
116         <!--nexus-->
117         <npm.registry>https://registry.npmjs.org/</npm.registry>
118         <!-- https://nexus.onap.org/content/repositories/npm/ -->
119         <nexus.proxy>https://nexus.onap.org</nexus.proxy>
120         <sitePath>/content/sites/site/org/openecomp/sdc/${project.version}</sitePath>
121         <staging.profile.id>176c31dfe190a</staging.profile.id>
122         <!--maven-->
123         <maven.build.timestamp.format>yyyyMMdd'T'HHmmss'Z'</maven.build.timestamp.format>
124         <!--docker tags-->
125         <docker.tag>${project.version}-${maven.build.timestamp}</docker.tag>
126
127
128     </properties>
129
130
131     <dependencyManagement>
132         <dependencies>
133             <dependency>
134                 <groupId>org.glassfish.jersey.ext</groupId>
135                 <artifactId>jersey-bean-validation</artifactId>
136                 <version>${jersey-bom.version}</version>
137             </dependency>
138
139             <dependency>
140                 <groupId>org.glassfish.hk2.external</groupId>
141                 <artifactId>asm-all-repackaged</artifactId>
142                 <version>2.4.0</version>
143             </dependency>
144
145             <dependency>
146                 <groupId>org.assertj</groupId>
147                 <artifactId>assertj-core</artifactId>
148                 <version>${assertj.version}</version>
149             </dependency>
150
151             <dependency>
152                 <groupId>org.mockito</groupId>
153                 <artifactId>mockito-core</artifactId>
154                 <version>${mockito.version}</version>
155             </dependency>
156             
157                         <dependency>
158                         <groupId>org.jmockit</groupId>
159                                 <artifactId>jmockit</artifactId>
160                                 <version>${jmockit.version}</version>
161                         </dependency>
162                         
163
164             <dependency>
165                 <groupId>com.github.tomakehurst</groupId>
166                 <artifactId>wiremock-standalone</artifactId>
167                 <version>${wire-mock.version}</version>
168             </dependency>
169
170             <dependency>
171                 <groupId>io.cucumber</groupId>
172                 <artifactId>cucumber-java</artifactId>
173                 <version>${cucumber.version}</version>
174             </dependency>
175
176             <dependency>
177                 <groupId>io.cucumber</groupId>
178                 <artifactId>cucumber-junit</artifactId>
179                 <version>${cucumber.version}</version>
180             </dependency>
181
182             <dependency>
183                 <groupId>org.apache.commons</groupId>
184                 <artifactId>commons-lang3</artifactId>
185                 <version>${lang3.version}</version>
186             </dependency>
187             <dependency>
188                 <groupId>org.codehaus.groovy</groupId>
189                 <artifactId>groovy</artifactId>
190                 <version>2.4.13</version>
191             </dependency>
192         </dependencies>
193     </dependencyManagement>
194
195     <reporting>
196         <plugins>
197             <plugin>
198                 <groupId>org.apache.maven.plugins</groupId>
199                 <artifactId>maven-javadoc-plugin</artifactId>
200                 <version>3.0.1</version>
201                 <configuration>
202                     <failOnError>false</failOnError>
203                     <doclet>org.umlgraph.doclet.UmlGraphDoc</doclet>
204                     <docletArtifact>
205                         <groupId>org.umlgraph</groupId>
206                         <artifactId>umlgraph</artifactId>
207                         <version>5.6</version>
208                     </docletArtifact>
209                     <useStandardDocletOptions>true</useStandardDocletOptions>
210                 </configuration>
211             </plugin>
212         </plugins>
213     </reporting>
214
215     <build>
216         <pluginManagement>
217             <plugins>
218                 <plugin>
219                     <groupId>org.jacoco</groupId>
220                     <artifactId>jacoco-maven-plugin</artifactId>
221                     <version>0.8.1</version>
222                 </plugin>
223                 <plugin>
224                     <groupId>org.apache.maven.plugins</groupId>
225                     <artifactId>maven-assembly-plugin</artifactId>
226                     <version>3.1.0</version>
227                 </plugin>
228
229                 <plugin>
230                     <groupId>org.codehaus.mojo</groupId>
231                     <artifactId>exec-maven-plugin</artifactId>
232                     <version>1.6.0</version>
233                 </plugin>
234                 <plugin>
235                     <groupId>org.sonarsource.scanner.maven</groupId>
236                     <artifactId>sonar-maven-plugin</artifactId>
237                     <version>3.4.1.1168</version>
238                 </plugin>
239                 <plugin>
240                     <groupId>org.apache.maven.plugins</groupId>
241                     <artifactId>maven-clean-plugin</artifactId>
242                     <version>3.1.0</version>
243                 </plugin>
244                 <plugin>
245                     <groupId>ru.yaal.maven</groupId>
246                     <artifactId>write-text-files-maven-plugin</artifactId>
247                     <version>1.1</version>
248                 </plugin>
249                 <plugin>
250                     <groupId>org.codehaus.gmaven</groupId>
251                     <artifactId>gmaven-plugin</artifactId>
252                     <version>1.5</version>
253                 </plugin>
254                 <plugin>
255                     <groupId>org.codehaus.mojo</groupId>
256                     <artifactId>build-helper-maven-plugin</artifactId>
257                     <version>3.0.0</version>
258                 </plugin>
259                 <plugin>
260                     <groupId>org.apache.maven.plugins</groupId>
261                     <artifactId>maven-deploy-plugin</artifactId>
262                     <version>2.8.2</version>
263                 </plugin>
264                 <plugin>
265                     <groupId>org.apache.maven.plugins</groupId>
266                     <artifactId>maven-shade-plugin</artifactId>
267                     <version>3.1.1</version>
268                 </plugin>
269                 <plugin>
270                     <groupId>org.apache.maven.plugins</groupId>
271                     <artifactId>maven-resources-plugin</artifactId>
272                     <version>3.1.0</version>
273                 </plugin>
274                 <plugin>
275                     <groupId>io.fabric8</groupId>
276                     <artifactId>docker-maven-plugin</artifactId>
277                     <version>0.26.0</version>
278                 </plugin>
279                 <plugin>
280                     <groupId>org.apache.maven.plugins</groupId>
281                     <artifactId>maven-war-plugin</artifactId>
282                     <version>3.2.2</version>
283                 </plugin>
284                 <plugin>
285                     <groupId>com.github.eirslett</groupId>
286                     <artifactId>frontend-maven-plugin</artifactId>
287                     <version>1.6</version>
288                 </plugin>
289                 <plugin>
290                     <groupId>org.apache.maven.plugins</groupId>
291                     <artifactId>maven-surefire-plugin</artifactId>
292                     <version>2.22.0</version>
293                 </plugin>
294                 <plugin>
295                     <groupId>org.apache.maven.plugins</groupId>
296                     <artifactId>maven-compiler-plugin</artifactId>
297                     <version>3.8.0</version>
298                 </plugin>
299                 <plugin>
300                     <groupId>org.sonatype.plugins</groupId>
301                     <artifactId>nexus-staging-maven-plugin</artifactId>
302                     <version>1.6.8</version>
303                 </plugin>
304                 <plugin>
305                     <groupId>com.github.sylvainlaurent.maven</groupId>
306                     <artifactId>yaml-json-validator-maven-plugin</artifactId>
307                     <version>1.0.1</version>
308                 </plugin>
309             </plugins>
310         </pluginManagement>
311
312         <plugins>
313
314             <!-- Staging Plugin -->
315             <plugin>
316                 <groupId>org.sonatype.plugins</groupId>
317                 <artifactId>nexus-staging-maven-plugin</artifactId>
318                 <extensions>true</extensions>
319                 <configuration>
320                     <nexusUrl>${nexus.proxy}</nexusUrl>
321                     <stagingProfileId>${staging.profile.id}</stagingProfileId>
322                     <serverId>ecomp-staging</serverId>
323                 </configuration>
324             </plugin>
325
326             <!-- plugin for parsing the project version -->
327             <plugin>
328                 <groupId>org.codehaus.mojo</groupId>
329                 <artifactId>build-helper-maven-plugin</artifactId>
330                 <executions>
331                     <execution>
332                         <id>parse-version</id>
333                         <phase>pre-clean</phase>
334                         <goals>
335                             <goal>parse-version</goal>
336                         </goals>
337                     </execution>
338                 </executions>
339             </plugin>
340
341             <!-- Java Code Coverage -->
342             <plugin>
343                 <groupId>org.jacoco</groupId>
344                 <artifactId>jacoco-maven-plugin</artifactId>
345                 <executions>
346                     <execution>
347                         <id>default-prepare-agent</id>
348                         <goals>
349                             <goal>prepare-agent</goal>
350                         </goals>
351                     </execution>
352                     <execution>
353                         <id>default-report</id>
354                         <goals>
355                             <goal>report</goal>
356                         </goals>
357                     </execution>
358                 </executions>
359             </plugin>
360
361             <plugin>
362                 <groupId>org.apache.maven.plugins</groupId>
363                 <artifactId>maven-site-plugin</artifactId>
364                 <version>3.7.1</version>
365                 <dependencies>
366                     <dependency>
367                         <groupId>org.apache.maven.wagon</groupId>
368                         <artifactId>wagon-webdav-jackrabbit</artifactId>
369                         <version>3.0.0</version>
370                     </dependency>
371                 </dependencies>
372             </plugin>
373
374             <!-- Set the deployment repositories properties. -->
375             <plugin>
376                 <groupId>org.codehaus.gmaven</groupId>
377                 <artifactId>gmaven-plugin</artifactId>
378                 <executions>
379                     <execution>
380                         <inherited>false</inherited>
381                         <phase>integration-test</phase>
382                         <goals>
383                             <goal>execute</goal>
384                         </goals>
385                         <configuration>
386                             <source>
387                                 pom.properties['deploy.url'] =
388                                 pom.version.contains('-SNAPSHOT') ?
389                                 project.distributionManagement.snapshotRepository.url :
390                                 project.distributionManagement.repository.url;
391                                 pom.properties['repo.id'] = pom.version.contains('-SNAPSHOT') ?
392                                 project.distributionManagement.snapshotRepository.id :
393                                 project.distributionManagement.repository.id;
394                             </source>
395                         </configuration>
396                     </execution>
397                 </executions>
398             </plugin>
399             <plugin>
400                 <groupId>org.apache.maven.plugins</groupId>
401                 <artifactId>maven-compiler-plugin</artifactId>
402                 <configuration>
403                     <source>1.8</source>
404                     <target>1.8</target>
405                 </configuration>
406             </plugin>
407             <plugin>
408                 <groupId>org.apache.maven.plugins</groupId>
409                 <artifactId>maven-surefire-plugin</artifactId>
410                 <configuration>
411                     <printSummary>false</printSummary>
412                 </configuration>
413             </plugin>
414         </plugins>
415     </build>
416
417     <profiles>
418         <profile>
419             <id>all</id>
420             <activation>
421                 <activeByDefault>true</activeByDefault>
422             </activation>
423             <modules>
424                 <module>onboarding</module>
425                 <module>security-utils</module>
426                 <module>common-app-api</module>
427                 <module>common-be</module>
428                 <module>catalog-dao</module>
429                 <module>catalog-model</module>
430                 <module>catalog-be</module>
431                 <module>asdctool</module>
432                 <module>catalog-ui</module>
433                 <module>catalog-fe</module>
434                 <module>test-apis-ci</module>
435                 <module>ui-ci</module>
436                 <module>sdc-os-chef</module>
437                 <module>utils/webseal-simulator</module>
438             </modules>
439
440         </profile>
441
442         <profile>
443             <id>catalog</id>
444             <activation>
445                 <activeByDefault>false</activeByDefault>
446             </activation>
447             <modules>
448                 <module>security-utils</module>
449                 <module>common-app-api</module>
450                 <module>common-be</module>
451                 <module>catalog-dao</module>
452                 <module>catalog-model</module>
453                 <module>catalog-be</module>
454                 <module>asdctool</module>
455                 <module>catalog-ui</module>
456                 <module>catalog-fe</module>
457                 <module>test-apis-ci</module>
458                 <module>ui-ci</module>
459             </modules>
460
461             <properties>
462                 <ecomp.version>1.2.7</ecomp.version>
463                 <sdc-tosca-parser.version>1.1.32</sdc-tosca-parser.version>
464             </properties>
465         </profile>
466
467         <profile>
468             <id>onboarding</id>
469             <activation>
470                 <activeByDefault>false</activeByDefault>
471             </activation>
472             <modules>
473                 <module>onboarding</module>
474             </modules>
475         </profile>
476
477     </profiles>
478
479     <repositories>
480         <!-- LF repositories -->
481         <repository>
482             <id>ecomp-releases</id>
483             <name>Release Repository</name>
484             <url>${nexus.proxy}/content/repositories/releases/</url>
485         </repository>
486         <repository>
487             <id>ecomp-snapshots</id>
488             <name>Snapshots Repository</name>
489             <url>${nexus.proxy}/content/repositories/snapshots/</url>
490         </repository>
491         <repository>
492             <id>ecomp-public</id>
493             <name>Public Repository</name>
494             <url>${nexus.proxy}/content/repositories/public/</url>
495         </repository>
496         <!-- LF repositories END-->
497     </repositories>
498
499     <distributionManagement>
500         <repository>
501             <id>ecomp-releases</id>
502             <name>Release Repository</name>
503             <url>${nexus.proxy}/content/repositories/releases/</url>
504         </repository>
505         <snapshotRepository>
506             <id>ecomp-snapshots</id>
507             <name>Snapshot Repository</name>
508             <url>${nexus.proxy}/content/repositories/snapshots/</url>
509         </snapshotRepository>
510         <site>
511             <id>ecomp-site</id>
512             <url>dav:${nexus.proxy}${sitePath}</url>
513         </site>
514     </distributionManagement>
515 </project>