Fix usecase-ui-server security risk issues
[usecase-ui/server.git] / server / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3     Copyright (C) 2017 CMCC, Inc. and others. All rights reserved.
4
5     Licensed under the Apache License, Version 2.0 (the "License");
6     you may not use this file except in compliance with the License.
7     You may obtain a copy of the License at
8
9         http://www.apache.org/licenses/LICENSE-2.0
10
11     Unless required by applicable law or agreed to in writing, software
12     distributed under the License is distributed on an "AS IS" BASIS,
13     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14     See the License for the specific language governing permissions and
15     limitations under the License.
16  -->
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
18
19     <parent>
20         <groupId>org.onap.usecase-ui.server</groupId>
21         <artifactId>usecase-ui-server-parent</artifactId>
22         <version>2.0.0</version>
23     </parent>
24
25     <modelVersion>4.0.0</modelVersion>
26     <groupId>org.onap.usecase-ui.server</groupId>
27     <artifactId>usecase-ui-server</artifactId>
28     <version>2.0.0</version>
29     <packaging>jar</packaging>
30     <name>usecase-ui-server/server</name>
31     <description>project for usecase-ui server</description>
32
33     <properties>
34         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36         <java.version>1.8</java.version>
37         <hibernate.version>5.0.11.Final</hibernate.version>
38         <javax.persistence.version>1.0.2</javax.persistence.version>
39         <common.csv.version>1.4</common.csv.version>
40         <jackson.version>2.9.8</jackson.version>
41         <tomcat.version>9.0.16</tomcat.version>
42     </properties>
43
44     <dependencyManagement>
45         <dependencies>
46             <dependency>
47                 <!-- Import dependency management from Spring Boot -->
48                 <groupId>org.springframework.boot</groupId>
49                 <artifactId>spring-boot-starter-parent</artifactId>
50                 <version>1.5.6.RELEASE</version>
51                 <type>pom</type>
52                 <scope>import</scope>
53             </dependency>
54         </dependencies>
55     </dependencyManagement>
56
57     <dependencies>
58         <dependency>
59             <groupId>org.springframework.boot</groupId>
60             <artifactId>spring-boot-starter-actuator</artifactId>
61         </dependency>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-data-jpa</artifactId>
65         </dependency>
66         <dependency>
67             <groupId>org.springframework.boot</groupId>
68             <artifactId>spring-boot-starter-data-redis</artifactId>
69         </dependency>
70         <dependency>
71             <groupId>org.springframework.boot</groupId>
72             <artifactId>spring-boot-starter-data-rest</artifactId>
73         </dependency>
74         <dependency>
75             <groupId>org.elasticsearch.client</groupId>
76             <artifactId>elasticsearch-rest-high-level-client</artifactId>
77             <version>6.6.1</version>
78             <exclusions>
79                 <exclusion>
80                     <groupId>org.elasticsearch</groupId>
81                     <artifactId>elasticsearch</artifactId>
82                 </exclusion>
83             </exclusions>
84         </dependency>
85         <dependency>
86             <groupId>org.elasticsearch</groupId>
87             <artifactId>elasticsearch</artifactId>
88             <version>6.6.1</version>
89         </dependency>
90         <dependency>
91             <groupId>org.springframework.data</groupId>
92             <artifactId>spring-data-rest-hal-browser</artifactId>
93         </dependency>
94         <dependency>
95             <groupId>org.springframework.boot</groupId>
96             <artifactId>spring-boot-starter-jersey</artifactId>
97         </dependency>
98         <dependency>
99             <groupId>org.springframework.boot</groupId>
100             <artifactId>spring-boot-starter-web</artifactId>
101         </dependency>
102         <!-- postgresql  dependency-->
103         <dependency>
104             <groupId>postgresql</groupId>
105             <artifactId>postgresql</artifactId>
106             <version>9.1-901-1.jdbc4</version>
107         </dependency>
108
109         <dependency>
110             <groupId>org.projectlombok</groupId>
111             <artifactId>lombok</artifactId>
112             <optional>true</optional>
113         </dependency>
114         <dependency>
115             <groupId>org.springframework.boot</groupId>
116             <artifactId>spring-boot-starter-test</artifactId>
117             <scope>test</scope>
118             <exclusions>
119                 <exclusion>
120                     <groupId>org.mockito</groupId>
121                     <artifactId>mockito-core</artifactId>
122                 </exclusion>
123             </exclusions>
124         </dependency>
125         <dependency>
126             <groupId>org.springframework.restdocs</groupId>
127             <artifactId>spring-restdocs-mockmvc</artifactId>
128             <scope>test</scope>
129         </dependency>
130         <dependency>
131             <groupId>org.springframework.security</groupId>
132             <artifactId>spring-security-test</artifactId>
133             <scope>test</scope>
134         </dependency>
135         <dependency>
136             <groupId>org.springframework</groupId>
137             <artifactId>spring-orm</artifactId>
138         </dependency>
139         <dependency>
140             <groupId>org.springframework</groupId>
141             <artifactId>spring-context</artifactId>
142         </dependency>
143         <dependency>
144             <groupId>org.springframework</groupId>
145             <artifactId>spring-jdbc</artifactId>
146         </dependency>
147         <dependency>
148             <groupId>org.springframework</groupId>
149             <artifactId>spring-webmvc</artifactId>
150         </dependency>
151         <dependency>
152             <groupId>org.hibernate</groupId>
153             <artifactId>hibernate-core</artifactId>
154             <version>${hibernate.version}</version>
155         </dependency>
156         <dependency>
157             <groupId>javax.persistence</groupId>
158             <artifactId>persistence-api</artifactId>
159             <version>${javax.persistence.version}</version>
160         </dependency>
161
162         <!-- security vulnerabilities -->
163         <dependency>
164             <groupId>ch.qos.logback</groupId>
165             <artifactId>logback-classic</artifactId>
166             <version>1.2.3</version>
167         </dependency>
168         <dependency>
169             <groupId>org.eclipse.jetty</groupId>
170             <artifactId>jetty-http</artifactId>
171             <version>9.4.14.v20181114</version>
172         </dependency>
173         <dependency>
174             <groupId>org.springframework.data</groupId>
175             <artifactId>spring-data-rest-webmvc</artifactId>
176             <version>2.6.7.RELEASE</version>
177         </dependency>
178         <dependency>
179             <groupId>org.springframework</groupId>
180             <artifactId>spring-expression</artifactId>
181             <version>5.1.5.RELEASE</version>
182         </dependency>
183         <dependency>
184             <groupId>org.springframework.data</groupId>
185             <artifactId>spring-data-commons</artifactId>
186             <version>1.13.18.RELEASE</version>
187         </dependency>
188         <dependency>
189             <groupId>org.springframework</groupId>
190             <artifactId>spring-web</artifactId>
191             <version>4.3.22.RELEASE</version>
192         </dependency>
193         <dependency>
194             <groupId>org.springframework</groupId>
195             <artifactId>spring-core</artifactId>
196             <version>4.3.22.RELEASE</version>
197         </dependency>
198
199         <!-- commons-csv -->
200         <dependency>
201             <groupId>org.apache.commons</groupId>
202             <artifactId>commons-csv</artifactId>
203             <version>${common.csv.version}</version>
204         </dependency>
205
206         <!-- jackson-databind -->
207         <dependency>
208             <groupId>com.fasterxml.jackson.core</groupId>
209             <artifactId>jackson-databind</artifactId>
210             <version>${jackson.version}</version>
211         </dependency>
212
213         <!-- jackson-core -->
214         <dependency>
215             <groupId>com.fasterxml.jackson.core</groupId>
216             <artifactId>jackson-core</artifactId>
217             <version>${jackson.version}</version>
218         </dependency>
219
220         <!-- jackson-annotations -->
221         <dependency>
222             <groupId>com.fasterxml.jackson.core</groupId>
223             <artifactId>jackson-annotations</artifactId>
224             <version>${jackson.version}</version>
225         </dependency>
226
227         <dependency>
228             <groupId>com.squareup.retrofit2</groupId>
229             <artifactId>retrofit</artifactId>
230             <version>2.3.0</version>
231         </dependency>
232         <dependency>
233             <groupId>com.squareup.retrofit2</groupId>
234             <artifactId>converter-jackson</artifactId>
235             <version>2.3.0</version>
236         </dependency>
237
238         <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
239         <dependency>
240             <groupId>com.alibaba</groupId>
241             <artifactId>fastjson</artifactId>
242             <version>1.2.29</version>
243         </dependency>
244
245         <dependency>
246             <groupId>com.alibaba</groupId>
247             <artifactId>dubbo</artifactId>
248             <version>2.6.5</version>
249         </dependency>
250         <dependency>
251             <groupId>org.openecomp.sdc.jtosca</groupId>
252             <artifactId>jtosca</artifactId>
253             <version>1.1.1</version>
254         </dependency>
255
256         <dependency>
257             <groupId>com.google.guava</groupId>
258             <artifactId>guava</artifactId>
259             <version>23.0</version>
260         </dependency>
261
262         <dependency>
263             <groupId>org.onap.msb.java-sdk</groupId>
264             <artifactId>msb-java-sdk</artifactId>
265             <version>1.0.0</version>
266         </dependency>
267
268         <dependency>
269             <groupId>org.powermock</groupId>
270             <artifactId>powermock-api-mockito</artifactId>
271             <version>1.6.5</version>
272         </dependency>
273         <dependency>
274             <groupId>org.mockito</groupId>
275             <artifactId>mockito-all</artifactId>
276             <version>1.9.5</version>
277         </dependency>
278         <dependency>
279             <groupId>org.powermock</groupId>
280             <artifactId>powermock-module-junit4</artifactId>
281             <version>1.6.5</version>
282             <type>jar</type>
283             <scope>compile</scope>
284         </dependency>
285         <dependency>
286             <groupId>org.jmockit</groupId>
287             <artifactId>jmockit</artifactId>
288             <version>1.19</version>
289             <scope>test</scope>
290         </dependency>
291         <dependency>
292             <groupId>junit</groupId>
293             <artifactId>junit</artifactId>
294             <version>4.12</version>
295         </dependency>
296         <dependency>
297             <groupId>org.jmockit</groupId>
298             <artifactId>jmockit-coverage</artifactId>
299             <version>1.19</version>
300             <scope>test</scope>
301         </dependency>
302     </dependencies>
303
304     <build>
305         <plugins>
306             <plugin>
307                 <groupId>org.springframework.boot</groupId>
308                 <artifactId>spring-boot-maven-plugin</artifactId>
309                 <configuration>
310                     <executable>true</executable>
311                 </configuration>
312                 <executions>
313                     <execution>
314                         <goals>
315                             <goal>repackage</goal>
316                         </goals>
317                     </execution>
318                 </executions>
319             </plugin>
320             <plugin>
321                 <groupId>org.apache.maven.plugins</groupId>
322                 <artifactId>maven-compiler-plugin</artifactId>
323                 <version>3.3</version>
324                 <configuration>
325                     <source>1.8</source>
326                     <target>1.8</target>
327                 </configuration>
328             </plugin>
329             <plugin>
330                 <groupId>org.apache.maven.plugins</groupId>
331                 <artifactId>maven-antrun-plugin</artifactId>
332                 <version>1.8</version>
333             </plugin>
334             <plugin>
335                 <groupId>org.apache.maven.plugins</groupId>
336                 <artifactId>maven-surefire-plugin</artifactId>
337                 <version>2.19</version>
338                 <configuration>
339                     <testFailureIgnore>true</testFailureIgnore>
340                     <includes>
341                         <include>**/*Spec*</include>
342                         <include>**/Test*.java</include>
343                         <include>**/*Test.java</include>
344                         <include>**/*TestCase.java</include>
345                         <include>**/Test*.scala</include>
346                         <include>**/*Test.scala</include>
347                         <include>**/*TestCase.scala</include>
348                     </includes>
349                 </configuration>
350             </plugin>
351         </plugins>
352     </build>
353
354     <repositories>
355         <repository>
356             <id>spring-milestones</id>
357             <name>Spring Milestones</name>
358             <url>https://repo.spring.io/milestone</url>
359             <snapshots>
360                 <enabled>false</enabled>
361             </snapshots>
362         </repository>
363     </repositories>
364
365     <pluginRepositories>
366         <pluginRepository>
367             <id>spring-milestones</id>
368             <name>Spring Milestones</name>
369             <url>https://repo.spring.io/milestone</url>
370             <snapshots>
371                 <enabled>false</enabled>
372             </snapshots>
373         </pluginRepository>
374     </pluginRepositories>
375 </project>