Fix usecase-ui-server security risk issues
[usecase-ui/server.git] / server / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3     Copyright (C) 2017 CMCC, Inc. and others. All rights reserved.
4
5     Licensed under the Apache License, Version 2.0 (the "License");
6     you may not use this file except in compliance with the License.
7     You may obtain a copy of the License at
8
9         http://www.apache.org/licenses/LICENSE-2.0
10
11     Unless required by applicable law or agreed to in writing, software
12     distributed under the License is distributed on an "AS IS" BASIS,
13     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14     See the License for the specific language governing permissions and
15     limitations under the License.
16  -->
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
18
19     <parent>
20         <groupId>org.onap.usecase-ui.server</groupId>
21         <artifactId>usecase-ui-server-parent</artifactId>
22         <version>2.0.0</version>
23     </parent>
24
25     <modelVersion>4.0.0</modelVersion>
26     <groupId>org.onap.usecase-ui.server</groupId>
27     <artifactId>usecase-ui-server</artifactId>
28     <version>2.0.0</version>
29     <packaging>jar</packaging>
30     <name>usecase-ui-server/server</name>
31     <description>project for usecase-ui server</description>
32
33     <properties>
34         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36         <java.version>1.8</java.version>
37         <hibernate.version>5.0.11.Final</hibernate.version>
38         <javax.persistence.version>1.0.2</javax.persistence.version>
39         <common.csv.version>1.4</common.csv.version>
40         <jackson.version>2.9.8</jackson.version>
41         <tomcat.version>9.0.16</tomcat.version>
42     </properties>
43
44     <dependencyManagement>
45         <dependencies>
46             <dependency>
47                 <!-- Import dependency management from Spring Boot -->
48                 <groupId>org.springframework.boot</groupId>
49                 <artifactId>spring-boot-starter-parent</artifactId>
50                 <version>1.5.6.RELEASE</version>
51                 <type>pom</type>
52                 <scope>import</scope>
53             </dependency>
54         </dependencies>
55     </dependencyManagement>
56
57     <dependencies>
58         <dependency>
59             <groupId>org.springframework.boot</groupId>
60             <artifactId>spring-boot-starter-actuator</artifactId>
61         </dependency>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-data-jpa</artifactId>
65         </dependency>
66         <dependency>
67             <groupId>org.springframework.boot</groupId>
68             <artifactId>spring-boot-starter-data-redis</artifactId>
69         </dependency>
70         <dependency>
71             <groupId>org.springframework.boot</groupId>
72             <artifactId>spring-boot-starter-data-rest</artifactId>
73         </dependency>
74         <dependency>
75             <groupId>org.elasticsearch.client</groupId>
76             <artifactId>elasticsearch-rest-high-level-client</artifactId>
77             <version>6.6.1</version>
78             <exclusions>
79                 <exclusion>
80                     <groupId>org.elasticsearch</groupId>
81                     <artifactId>elasticsearch</artifactId>
82                 </exclusion>
83             </exclusions>
84         </dependency>
85         <dependency>
86             <groupId>org.elasticsearch</groupId>
87             <artifactId>elasticsearch</artifactId>
88             <version>6.6.1</version>
89         </dependency>
90         <dependency>
91             <groupId>org.springframework.data</groupId>
92             <artifactId>spring-data-rest-hal-browser</artifactId>
93         </dependency>
94         <dependency>
95             <groupId>org.springframework.boot</groupId>
96             <artifactId>spring-boot-starter-jersey</artifactId>
97         </dependency>
98         <!-- postgresql  dependency-->
99         <dependency>
100             <groupId>postgresql</groupId>
101             <artifactId>postgresql</artifactId>
102             <version>9.1-901-1.jdbc4</version>
103         </dependency>
104
105         <dependency>
106             <groupId>org.projectlombok</groupId>
107             <artifactId>lombok</artifactId>
108             <optional>true</optional>
109         </dependency>
110         <dependency>
111             <groupId>org.springframework.boot</groupId>
112             <artifactId>spring-boot-starter-test</artifactId>
113             <scope>test</scope>
114             <exclusions>
115                 <exclusion>
116                     <groupId>org.mockito</groupId>
117                     <artifactId>mockito-core</artifactId>
118                 </exclusion>
119             </exclusions>
120         </dependency>
121         <dependency>
122             <groupId>org.springframework.restdocs</groupId>
123             <artifactId>spring-restdocs-mockmvc</artifactId>
124             <scope>test</scope>
125         </dependency>
126         <dependency>
127             <groupId>org.springframework.security</groupId>
128             <artifactId>spring-security-test</artifactId>
129             <scope>test</scope>
130         </dependency>
131         <dependency>
132             <groupId>org.springframework</groupId>
133             <artifactId>spring-orm</artifactId>
134         </dependency>
135         <dependency>
136             <groupId>org.springframework</groupId>
137             <artifactId>spring-context</artifactId>
138         </dependency>
139         <dependency>
140             <groupId>org.springframework</groupId>
141             <artifactId>spring-jdbc</artifactId>
142         </dependency>
143         <dependency>
144             <groupId>org.hibernate</groupId>
145             <artifactId>hibernate-core</artifactId>
146             <version>${hibernate.version}</version>
147         </dependency>
148         <dependency>
149             <groupId>javax.persistence</groupId>
150             <artifactId>persistence-api</artifactId>
151             <version>${javax.persistence.version}</version>
152         </dependency>
153
154         <!-- security vulnerabilities -->
155         <dependency>
156             <groupId>org.springframework.boot</groupId>
157             <artifactId>spring-boot-starter-web</artifactId>
158             <exclusions>
159                 <exclusion>
160                     <groupId>org.springframework.boot</groupId>
161                     <artifactId>spring-boot-starter-tomcat</artifactId>
162                 </exclusion>
163             </exclusions>
164         </dependency>
165         <dependency>
166             <groupId>org.springframework.boot</groupId>
167             <artifactId>spring-boot-starter-tomcat</artifactId>
168             <scope>provided</scope>
169         </dependency>
170         <dependency>
171             <groupId>ch.qos.logback</groupId>
172             <artifactId>logback-classic</artifactId>
173             <version>1.2.3</version>
174         </dependency>
175         <dependency>
176             <groupId>org.eclipse.jetty</groupId>
177             <artifactId>jetty-http</artifactId>
178             <version>9.4.14.v20181114</version>
179         </dependency>
180         <dependency>
181             <groupId>org.eclipse.jetty</groupId>
182             <artifactId>jetty-server</artifactId>
183             <version>9.4.17.v20190418</version>
184         </dependency>
185         <dependency>
186             <groupId>org.springframework</groupId>
187             <artifactId>spring-expression</artifactId>
188             <version>5.1.5.RELEASE</version>
189         </dependency>
190         <dependency>
191             <groupId>org.springframework.data</groupId>
192             <artifactId>spring-data-commons</artifactId>
193             <version>1.13.18.RELEASE</version>
194         </dependency>
195         <dependency>
196             <groupId>org.springframework</groupId>
197             <artifactId>spring-core</artifactId>
198             <version>4.3.22.RELEASE</version>
199         </dependency>
200         <dependency>
201             <groupId>org.springframework.data</groupId>
202             <artifactId>spring-data-rest-webmvc</artifactId>
203             <version>2.6.9.RELEASE</version>
204         </dependency>
205         <dependency>
206             <groupId>org.springframework</groupId>
207             <artifactId>spring-web</artifactId>
208             <version>4.3.22.RELEASE</version>
209         </dependency>
210         <dependency>
211             <groupId>org.springframework.data</groupId>
212             <artifactId>spring-data-jpa</artifactId>
213             <version>1.11.20.RELEASE</version>
214         </dependency>
215         <dependency>
216             <groupId>org.springframework</groupId>
217             <artifactId>spring-webmvc</artifactId>
218             <version>4.3.18.RELEASE</version>
219         </dependency>
220         <dependency>
221             <groupId>org.hibernate</groupId>
222             <artifactId>hibernate-validator</artifactId>
223             <version>5.3.6.Final</version>
224         </dependency>
225         <dependency>
226             <groupId>org.eclipse.jetty</groupId>
227             <artifactId>jetty-util</artifactId>
228             <version>9.4.17.v20190418</version>
229         </dependency>
230         <dependency>
231             <groupId>com.google.guava</groupId>
232             <artifactId>guava</artifactId>
233             <version>25.0-jre</version>
234         </dependency>
235         <dependency>
236             <groupId>com.squareup.okhttp3</groupId>
237             <artifactId>okhttp</artifactId>
238             <version>3.12.1</version>
239         </dependency>
240
241         <!-- commons-csv -->
242         <dependency>
243             <groupId>org.apache.commons</groupId>
244             <artifactId>commons-csv</artifactId>
245             <version>${common.csv.version}</version>
246         </dependency>
247
248         <!-- jackson-databind -->
249         <dependency>
250             <groupId>com.fasterxml.jackson.core</groupId>
251             <artifactId>jackson-databind</artifactId>
252             <version>${jackson.version}</version>
253         </dependency>
254
255         <!-- jackson-core -->
256         <dependency>
257             <groupId>com.fasterxml.jackson.core</groupId>
258             <artifactId>jackson-core</artifactId>
259             <version>${jackson.version}</version>
260         </dependency>
261
262         <!-- jackson-annotations -->
263         <dependency>
264             <groupId>com.fasterxml.jackson.core</groupId>
265             <artifactId>jackson-annotations</artifactId>
266             <version>${jackson.version}</version>
267         </dependency>
268
269         <dependency>
270             <groupId>com.squareup.retrofit2</groupId>
271             <artifactId>retrofit</artifactId>
272             <version>2.3.0</version>
273         </dependency>
274         <dependency>
275             <groupId>com.squareup.retrofit2</groupId>
276             <artifactId>converter-jackson</artifactId>
277             <version>2.3.0</version>
278         </dependency>
279
280         <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
281         <dependency>
282             <groupId>com.alibaba</groupId>
283             <artifactId>fastjson</artifactId>
284             <version>1.2.29</version>
285         </dependency>
286
287         <dependency>
288             <groupId>com.alibaba</groupId>
289             <artifactId>dubbo</artifactId>
290             <version>2.6.5</version>
291         </dependency>
292         <dependency>
293             <groupId>org.openecomp.sdc.jtosca</groupId>
294             <artifactId>jtosca</artifactId>
295             <version>1.1.1</version>
296         </dependency>
297
298         <dependency>
299             <groupId>com.google.guava</groupId>
300             <artifactId>guava</artifactId>
301             <version>23.0</version>
302         </dependency>
303
304         <dependency>
305             <groupId>org.onap.msb.java-sdk</groupId>
306             <artifactId>msb-java-sdk</artifactId>
307             <version>1.0.0</version>
308         </dependency>
309
310         <dependency>
311             <groupId>org.powermock</groupId>
312             <artifactId>powermock-api-mockito</artifactId>
313             <version>1.6.5</version>
314         </dependency>
315         <dependency>
316             <groupId>org.mockito</groupId>
317             <artifactId>mockito-all</artifactId>
318             <version>1.9.5</version>
319         </dependency>
320         <dependency>
321             <groupId>org.powermock</groupId>
322             <artifactId>powermock-module-junit4</artifactId>
323             <version>1.6.5</version>
324             <type>jar</type>
325             <scope>compile</scope>
326         </dependency>
327         <dependency>
328             <groupId>org.jmockit</groupId>
329             <artifactId>jmockit</artifactId>
330             <version>1.19</version>
331             <scope>test</scope>
332         </dependency>
333         <dependency>
334             <groupId>junit</groupId>
335             <artifactId>junit</artifactId>
336             <version>4.12</version>
337         </dependency>
338         <dependency>
339             <groupId>org.jmockit</groupId>
340             <artifactId>jmockit-coverage</artifactId>
341             <version>1.19</version>
342             <scope>test</scope>
343         </dependency>
344     </dependencies>
345
346     <build>
347         <plugins>
348             <plugin>
349                 <groupId>org.springframework.boot</groupId>
350                 <artifactId>spring-boot-maven-plugin</artifactId>
351                 <configuration>
352                     <executable>true</executable>
353                 </configuration>
354                 <executions>
355                     <execution>
356                         <goals>
357                             <goal>repackage</goal>
358                         </goals>
359                     </execution>
360                 </executions>
361             </plugin>
362             <plugin>
363                 <groupId>org.apache.maven.plugins</groupId>
364                 <artifactId>maven-compiler-plugin</artifactId>
365                 <version>3.3</version>
366                 <configuration>
367                     <source>1.8</source>
368                     <target>1.8</target>
369                 </configuration>
370             </plugin>
371             <plugin>
372                 <groupId>org.apache.maven.plugins</groupId>
373                 <artifactId>maven-antrun-plugin</artifactId>
374                 <version>1.8</version>
375             </plugin>
376             <plugin>
377                 <groupId>org.apache.maven.plugins</groupId>
378                 <artifactId>maven-surefire-plugin</artifactId>
379                 <version>2.19</version>
380                 <configuration>
381                     <testFailureIgnore>true</testFailureIgnore>
382                     <includes>
383                         <include>**/*Spec*</include>
384                         <include>**/Test*.java</include>
385                         <include>**/*Test.java</include>
386                         <include>**/*TestCase.java</include>
387                         <include>**/Test*.scala</include>
388                         <include>**/*Test.scala</include>
389                         <include>**/*TestCase.scala</include>
390                     </includes>
391                 </configuration>
392             </plugin>
393         </plugins>
394     </build>
395
396     <repositories>
397         <repository>
398             <id>spring-milestones</id>
399             <name>Spring Milestones</name>
400             <url>https://repo.spring.io/milestone</url>
401             <snapshots>
402                 <enabled>false</enabled>
403             </snapshots>
404         </repository>
405     </repositories>
406
407     <pluginRepositories>
408         <pluginRepository>
409             <id>spring-milestones</id>
410             <name>Spring Milestones</name>
411             <url>https://repo.spring.io/milestone</url>
412             <snapshots>
413                 <enabled>false</enabled>
414             </snapshots>
415         </pluginRepository>
416     </pluginRepositories>
417 </project>