Fix dependency vulnerabilities
[sdc/sdc-workflow-designer.git] / sdc-workflow-designer-be / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <project xmlns="http://maven.apache.org/POM/4.0.0"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
5
6     <modelVersion>4.0.0</modelVersion>
7
8     <artifactId>sdc-workflow-designer-be</artifactId>
9
10     <parent>
11         <groupId>org.onap.sdc.sdc-workflow-designer</groupId>
12         <artifactId>sdc-workflow-designer-parent</artifactId>
13         <version>1.9.0-SNAPSHOT</version>
14     </parent>
15
16     <properties>
17         <spring.boot.version>2.3.11.RELEASE</spring.boot.version>
18         <org.springframework.version>5.2.15.RELEASE</org.springframework.version>
19         <mapstruct.version>1.3.1.Final</mapstruct.version>
20         <lombok.version>1.18.0</lombok.version>
21         <springfox.version>3.0.0</springfox.version>
22         <jaxb.api.version>2.3.0</jaxb.api.version>
23         <org.glassfish.version>3.0.3</org.glassfish.version>
24     </properties>
25
26     <dependencyManagement>
27         <dependencies>
28             <dependency>
29                 <groupId>org.springframework.boot</groupId>
30                 <artifactId>spring-boot-dependencies</artifactId>
31                 <version>${spring.boot.version}</version>
32                 <type>pom</type>
33                 <scope>import</scope>
34             </dependency>
35         </dependencies>
36     </dependencyManagement>
37
38     <dependencies>
39         <dependency>
40             <groupId>org.glassfish</groupId>
41             <artifactId>jakarta.el</artifactId>
42             <version>${org.glassfish.version}</version>
43         </dependency>
44         <dependency>
45             <groupId>org.springframework</groupId>
46             <artifactId>spring-web</artifactId>
47             <version>${org.springframework.version}</version>
48         </dependency>
49         <dependency>
50             <groupId>org.springframework.boot</groupId>
51             <artifactId>spring-boot-starter-web</artifactId>
52             <exclusions>
53                 <exclusion>
54                     <groupId>org.springframework.boot</groupId>
55                     <artifactId>spring-boot-starter-tomcat</artifactId>
56                 </exclusion>
57                 <exclusion>
58                     <groupId>org.springframework</groupId>
59                     <artifactId>spring-web</artifactId>
60                 </exclusion>
61             </exclusions>
62         </dependency>
63         <dependency>
64             <groupId>org.springframework.boot</groupId>
65             <artifactId>spring-boot-starter-jetty</artifactId>
66             <exclusions>
67                 <exclusion>
68                     <groupId>org.glassfish</groupId>
69                     <artifactId>jakarta.el</artifactId>
70                 </exclusion>
71             </exclusions>
72         </dependency>
73         <dependency>
74             <groupId>org.springframework.boot</groupId>
75             <artifactId>spring-boot-starter-validation</artifactId>
76             <exclusions>
77                 <exclusion>
78                     <groupId>org.glassfish</groupId>
79                     <artifactId>jakarta.el</artifactId>
80                 </exclusion>
81             </exclusions>
82         </dependency>
83         <dependency>
84             <groupId>org.springframework.boot</groupId>
85             <artifactId>spring-boot-starter-data-cassandra</artifactId>
86             <exclusions>
87                 <exclusion>
88                     <artifactId>HdrHistogram</artifactId>
89                     <groupId>org.hdrhistogram</groupId>
90                 </exclusion>
91                 <exclusion>
92                     <artifactId>asm</artifactId>
93                     <groupId>org.ow2.asm</groupId>
94                 </exclusion>
95                 <exclusion>
96                     <artifactId>asm-analysis</artifactId>
97                     <groupId>org.ow2.asm</groupId>
98                 </exclusion>
99                 <exclusion>
100                     <artifactId>asm-commons</artifactId>
101                     <groupId>org.ow2.asm</groupId>
102                 </exclusion>
103                 <exclusion>
104                     <artifactId>asm-tree</artifactId>
105                     <groupId>org.ow2.asm</groupId>
106                 </exclusion>
107                 <exclusion>
108                     <groupId>com.github.jnr</groupId>
109                     <artifactId>jnr-posix</artifactId>
110                 </exclusion>
111             </exclusions>
112         </dependency>
113         <dependency>
114             <groupId>org.springframework.boot</groupId>
115             <artifactId>spring-boot-devtools</artifactId>
116             <scope>runtime</scope>
117         </dependency>
118         <dependency>
119             <groupId>org.springframework.boot</groupId>
120             <artifactId>spring-boot-starter-test</artifactId>
121             <scope>test</scope>
122             <exclusions>
123                 <exclusion>
124                     <artifactId>asm</artifactId>
125                     <groupId>org.ow2.asm</groupId>
126                 </exclusion>
127             </exclusions>
128         </dependency>
129         <dependency>
130             <groupId>io.springfox</groupId>
131             <artifactId>springfox-boot-starter</artifactId>
132             <version>${springfox.version}</version>
133         </dependency>
134         <dependency>
135             <groupId>org.openecomp.sdc</groupId>
136             <artifactId>openecomp-sdc-logging-api</artifactId>
137             <version>${onap.version}</version>
138         </dependency>
139         <dependency>
140             <groupId>org.openecomp.sdc</groupId>
141             <artifactId>openecomp-sdc-logging-spring</artifactId>
142             <version>${onap.version}</version>
143         </dependency>
144         <dependency>
145             <groupId>org.openecomp.sdc</groupId>
146             <artifactId>openecomp-sdc-logging-core</artifactId>
147             <version>${onap.version}</version>
148             <scope>runtime</scope>
149         </dependency>
150         <dependency>
151             <groupId>ch.qos.logback</groupId>
152             <artifactId>logback-classic</artifactId>
153             <scope>runtime</scope>
154         </dependency>
155         <dependency>
156             <groupId>org.apache.httpcomponents</groupId>
157             <artifactId>httpclient</artifactId>
158             <version>4.5.13</version>
159             <exclusions>
160                 <exclusion>
161                     <artifactId>commons-codec</artifactId>
162                     <groupId>commons-codec</groupId>
163                 </exclusion>
164             </exclusions>
165         </dependency>
166         <dependency>
167             <groupId>org.mapstruct</groupId>
168             <artifactId>mapstruct</artifactId>
169             <version>${mapstruct.version}</version>
170         </dependency>
171         <dependency>
172             <groupId>org.mapstruct</groupId>
173             <artifactId>mapstruct-processor</artifactId>
174             <version>${mapstruct.version}</version>
175             <scope>provided</scope>
176         </dependency>
177         <dependency>
178             <groupId>org.projectlombok</groupId>
179             <artifactId>lombok</artifactId>
180             <version>${lombok.version}</version>
181             <scope>provided</scope>
182         </dependency>
183         <dependency>
184             <groupId>org.springframework.boot</groupId>
185             <artifactId>spring-boot-starter-actuator</artifactId>
186             <scope>provided</scope>
187         </dependency>
188         <dependency>
189             <groupId>org.apache.commons</groupId>
190             <artifactId>commons-text</artifactId>
191             <version>1.3</version>
192         </dependency>
193         <dependency>
194             <groupId>commons-io</groupId>
195             <artifactId>commons-io</artifactId>
196             <version>2.8.0</version>
197         </dependency>
198         <dependency>
199             <groupId>commons-codec</groupId>
200             <artifactId>commons-codec</artifactId>
201             <version>1.15</version>
202         </dependency>
203         <dependency>
204             <groupId>org.onap.sdc.sdc-be-common</groupId>
205             <artifactId>session-lib</artifactId>
206             <version>1.6.0</version>
207             <exclusions>
208                 <exclusion>
209                     <artifactId>objenesis</artifactId>
210                     <groupId>org.objenesis</groupId>
211                 </exclusion>
212             </exclusions>
213         </dependency>
214         <dependency>
215             <groupId>org.onap.sdc.sdc-be-common</groupId>
216             <artifactId>versioning-lib</artifactId>
217             <version>1.6.0</version>
218             <exclusions>
219                 <exclusion>
220                     <groupId>org.springframework.boot</groupId>
221                     <artifactId>spring-boot-starter-data-cassandra</artifactId>
222                 </exclusion>
223             </exclusions>
224         </dependency>
225         <dependency>
226             <groupId>org.onap.sdc.sdc-be-common</groupId>
227             <artifactId>zusammen-lib</artifactId>
228             <version>1.6.0</version>
229             <exclusions>
230                 <exclusion>
231                     <groupId>org.springframework.boot</groupId>
232                     <artifactId>spring-boot-starter-data-cassandra</artifactId>
233                 </exclusion>
234                 <exclusion>
235                     <artifactId>jnr-posix</artifactId>
236                     <groupId>com.github.jnr</groupId>
237                 </exclusion>
238                 <exclusion>
239                     <artifactId>jnr-ffi</artifactId>
240                     <groupId>com.github.jnr</groupId>
241                 </exclusion>
242                 <exclusion>
243                     <artifactId>zusammen-sdk</artifactId>
244                     <groupId>com.amdocs.zusammen</groupId>
245                 </exclusion>
246                 <exclusion>
247                     <artifactId>zusammen-commons-configuration</artifactId>
248                     <groupId>com.amdocs.zusammen</groupId>
249                 </exclusion>
250             </exclusions>
251         </dependency>
252         <dependency>
253             <groupId>javax.xml.bind</groupId>
254             <artifactId>jaxb-api</artifactId>
255             <version>${jaxb.api.version}</version>
256         </dependency>
257     </dependencies>
258
259     <build>
260         <plugins>
261             <plugin>
262                 <groupId>org.apache.maven.plugins</groupId>
263                 <artifactId>maven-compiler-plugin</artifactId>
264                 <version>3.8.1</version>
265             </plugin>
266             <plugin>
267                 <groupId>org.springframework.boot</groupId>
268                 <artifactId>spring-boot-maven-plugin</artifactId>
269                 <version>${spring.boot.version}</version>
270                 <executions>
271                     <execution>
272                         <goals>
273                             <goal>repackage</goal>
274                         </goals>
275                     </execution>
276                 </executions>
277             </plugin>
278         </plugins>
279     </build>
280
281     <profiles>
282         <profile>
283             <id>docker</id>
284             <activation>
285                 <activeByDefault>false</activeByDefault>
286             </activation>
287             <build>
288                 <plugins>
289                     <plugin>
290                         <groupId>org.apache.maven.plugins</groupId>
291                         <artifactId>maven-resources-plugin</artifactId>
292                         <version>3.2.0</version>
293                         <executions>
294                             <execution>
295                                 <id>copy-resources-docker</id>
296                                 <phase>install</phase>
297                                 <goals>
298                                     <goal>copy-resources</goal>
299                                 </goals>
300                                 <configuration>
301                                     <outputDirectory>${basedir}/docker</outputDirectory>
302                                     <resources>
303                                         <resource>
304                                             <directory>${project.build.directory}</directory>
305                                             <include>${project.build.finalName}.jar</include>
306                                         </resource>
307                                     </resources>
308                                 </configuration>
309                             </execution>
310                         </executions>
311                     </plugin>
312                     <plugin>
313                         <groupId>io.fabric8</groupId>
314                         <artifactId>docker-maven-plugin</artifactId>
315                         <configuration>
316                             <images>
317                                 <image>
318                                     <name>onap/sdc-workflow-backend</name>
319                                     <build>
320                                         <tags>
321                                             <tag>latest</tag>
322                                             <tag>${project.docker.latesttagtimestamp.version}</tag>
323                                             <tag>${project.docker.latesttag.version}</tag>
324                                         </tags>
325                                         <dockerFileDir>${project.basedir}/docker</dockerFileDir>
326                                         <args>
327                                             <ARTIFACT>${project.build.finalName}.jar</ARTIFACT>
328                                         </args>
329                                     </build>
330                                 </image>
331                             </images>
332                         </configuration>
333                     </plugin>
334                 </plugins>
335             </build>
336         </profile>
337     </profiles>
338
339 </project>
340