Fix vulnerability issue: upgrade org.apache.tomcat.embed.tomcat-embed-core to 8.5.42
[logging-analytics.git] / reference / logging-slf4j-demo / pom.xml
1 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
2     <modelVersion>4.0.0</modelVersion>
3     <parent>
4       <groupId>org.onap.logging-analytics</groupId>
5       <artifactId>logging-reference</artifactId>
6       <version>1.5.0-SNAPSHOT</version>
7       <relativePath>..</relativePath>
8     </parent>   
9     <artifactId>logging-slf4j-demo</artifactId>
10     <name>logging-slf4j-demo</name>
11     <packaging>war</packaging>
12     <properties>
13         <!-- from 1.5.10 to not pull in spring 4.3.14/5.0.5 override of 5.0.9
14              however 4.3.17 of spring-core over 4.3.14 is not enough - need 4.3.18+
15              tomcat-embed-core 8.5.31 needs 8.5.32+ - which spring-boot 1.5.15 brings in
16              spring-expression 4.3.14 goes to 4.3.17 under 1.5.15
17              1.5.17 ups jackson-databind from 2.8.11.2 - but we will likely need 2.9+
18          -->
19         <springframework.boot.version>1.5.22.RELEASE</springframework.boot.version>
20         <spring.version>5.1.2.RELEASE</spring.version>
21         <logback.version>1.2.3</logback.version>
22     </properties>
23
24     <dependencies>
25         <dependency>
26             <groupId>${project.groupId}</groupId>
27             <artifactId>logging-slf4j</artifactId>
28             <version>1.4.0</version>
29         </dependency>
30         <dependency>
31             <groupId>org.springframework.boot</groupId>
32             <artifactId>spring-boot-starter-web</artifactId>
33             <exclusions>
34                 <exclusion>
35                     <groupId>org.springframework.boot</groupId>
36                     <artifactId>spring-boot-starter-json</artifactId>
37                 </exclusion>
38             </exclusions>
39         </dependency>
40         <dependency>
41             <groupId>com.google.code.gson</groupId>
42             <artifactId>gson</artifactId>
43                 </dependency>
44         <dependency>
45             <groupId>org.apache.commons</groupId>
46             <artifactId>commons-lang3</artifactId>
47         </dependency>
48         <dependency>
49             <groupId>org.slf4j</groupId>
50             <artifactId>slf4j-api</artifactId>
51         </dependency>
52         <dependency>
53             <groupId>ch.qos.logback</groupId>
54             <artifactId>logback-classic</artifactId>
55         </dependency>
56         <dependency>
57             <groupId>com.mashape.unirest</groupId>
58             <artifactId>unirest-java</artifactId>
59         </dependency>
60         <dependency>
61             <groupId>org.springframework</groupId>
62             <artifactId>spring-test</artifactId>
63         </dependency>
64         <dependency>
65             <groupId>org.testng</groupId>
66             <artifactId>testng</artifactId>
67             <scope>test</scope>
68         </dependency>
69         <dependency>
70             <groupId>org.hamcrest</groupId>
71             <artifactId>hamcrest-all</artifactId>
72             <scope>test</scope>
73         </dependency>
74     </dependencies>
75
76     <dependencyManagement>
77         <dependencies>
78             <dependency>
79                 <groupId>org.springframework.boot</groupId>
80                 <artifactId>spring-boot-dependencies</artifactId>
81                 <version>${springframework.boot.version}</version>
82                 <type>pom</type>
83                 <scope>import</scope>
84                 <exclusions>
85                     <exclusion>
86                         <groupId>org.apache.tomcat.embed</groupId>
87                         <artifactId>tomcat-embed-websocket</artifactId>
88                     </exclusion>
89                 </exclusions>
90             </dependency>
91             <dependency>
92                 <groupId>org.apache.commons</groupId>
93                 <artifactId>commons-lang3</artifactId>
94                 <version>3.4</version>
95             </dependency>
96             <dependency>
97                 <groupId>org.slf4j</groupId>
98                 <artifactId>slf4j-api</artifactId>
99                 <version>1.7.25</version>
100             </dependency>
101             <dependency>
102                 <groupId>ch.qos.logback</groupId>
103                 <artifactId>logback-classic</artifactId>
104                 <version>${logback.version}</version>
105             </dependency>
106             <dependency>
107                 <groupId>com.mashape.unirest</groupId>
108                 <artifactId>unirest-java</artifactId>
109                 <version>1.4.9</version>
110                 <exclusions>
111                     <exclusion>
112                         <groupId>commons-codec</groupId>
113                         <artifactId>commons-codec</artifactId>
114                     </exclusion>
115                 </exclusions>
116             </dependency>
117             <dependency>
118                 <groupId>org.testng</groupId>
119                 <artifactId>testng</artifactId>
120                 <version>6.8.5</version>
121             </dependency>
122             <dependency>
123                 <groupId>org.hamcrest</groupId>
124                 <artifactId>hamcrest-all</artifactId>
125                 <version>1.3</version>
126             </dependency>
127             <dependency>
128                 <groupId>org.springframework</groupId>
129                 <artifactId>spring-test</artifactId>
130                 <version>${spring.version}</version>
131             </dependency>
132         </dependencies>
133     </dependencyManagement>
134
135     <build>
136         <plugins>
137             <plugin>
138                 <artifactId>maven-war-plugin</artifactId>
139                 <configuration/>
140             </plugin>
141             <plugin>
142                 <groupId>org.apache.maven.plugins</groupId>
143                 <artifactId>maven-compiler-plugin</artifactId>
144                 <version>3.7.0</version>
145                 <configuration>
146                     <source>1.8</source>
147                     <target>1.8</target>
148                 </configuration>
149             </plugin>
150             <plugin>
151                 <groupId>org.springframework.boot</groupId>
152                 <artifactId>spring-boot-maven-plugin</artifactId>
153                 <version>${springframework.boot.version}</version>
154                 <executions>
155                     <execution>
156                         <goals>
157                             <goal>repackage</goal>
158                         </goals>
159                     </execution>
160                 </executions>
161             </plugin>
162         </plugins>
163     </build>
164
165 </project>