Fix usecase-ui-server security risk issues
[usecase-ui/server.git] / server / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3     Copyright (C) 2017 CMCC, Inc. and others. All rights reserved.
4
5     Licensed under the Apache License, Version 2.0 (the "License");
6     you may not use this file except in compliance with the License.
7     You may obtain a copy of the License at
8
9         http://www.apache.org/licenses/LICENSE-2.0
10
11     Unless required by applicable law or agreed to in writing, software
12     distributed under the License is distributed on an "AS IS" BASIS,
13     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14     See the License for the specific language governing permissions and
15     limitations under the License.
16  -->
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
18
19     <parent>
20         <groupId>org.onap.usecase-ui.server</groupId>
21         <artifactId>usecase-ui-server-parent</artifactId>
22         <version>2.0.0</version>
23     </parent>
24
25     <modelVersion>4.0.0</modelVersion>
26     <groupId>org.onap.usecase-ui.server</groupId>
27     <artifactId>usecase-ui-server</artifactId>
28     <version>2.0.0</version>
29     <packaging>jar</packaging>
30     <name>usecase-ui-server/server</name>
31     <description>project for usecase-ui server</description>
32
33     <properties>
34         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36         <java.version>1.8</java.version>
37         <hibernate.version>5.0.11.Final</hibernate.version>
38         <javax.persistence.version>1.0.2</javax.persistence.version>
39         <common.csv.version>1.4</common.csv.version>
40         <jackson.version>2.9.8</jackson.version>
41         <tomcat.version>9.0.16</tomcat.version>
42     </properties>
43
44     <dependencyManagement>
45         <dependencies>
46             <dependency>
47                 <!-- Import dependency management from Spring Boot -->
48                 <groupId>org.springframework.boot</groupId>
49                 <artifactId>spring-boot-starter-parent</artifactId>
50                 <version>1.5.6.RELEASE</version>
51                 <type>pom</type>
52                 <scope>import</scope>
53             </dependency>
54         </dependencies>
55     </dependencyManagement>
56
57     <dependencies>
58         <dependency>
59             <groupId>org.springframework.boot</groupId>
60             <artifactId>spring-boot-starter-actuator</artifactId>
61         </dependency>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-data-jpa</artifactId>
65         </dependency>
66         <dependency>
67             <groupId>org.springframework.boot</groupId>
68             <artifactId>spring-boot-starter-data-redis</artifactId>
69         </dependency>
70         <dependency>
71             <groupId>org.springframework.boot</groupId>
72             <artifactId>spring-boot-starter-data-rest</artifactId>
73         </dependency>
74         <dependency>
75             <groupId>org.elasticsearch.client</groupId>
76             <artifactId>elasticsearch-rest-high-level-client</artifactId>
77             <version>6.6.1</version>
78             <exclusions>
79                 <exclusion>
80                     <groupId>org.elasticsearch</groupId>
81                     <artifactId>elasticsearch</artifactId>
82                 </exclusion>
83             </exclusions>
84         </dependency>
85         <dependency>
86             <groupId>org.elasticsearch</groupId>
87             <artifactId>elasticsearch</artifactId>
88             <version>6.6.1</version>
89         </dependency>
90         <dependency>
91             <groupId>org.springframework.data</groupId>
92             <artifactId>spring-data-rest-hal-browser</artifactId>
93         </dependency>
94         <dependency>
95             <groupId>org.springframework.boot</groupId>
96             <artifactId>spring-boot-starter-jersey</artifactId>
97         </dependency>
98         <!-- postgresql  dependency-->
99         <dependency>
100             <groupId>postgresql</groupId>
101             <artifactId>postgresql</artifactId>
102             <version>9.1-901-1.jdbc4</version>
103         </dependency>
104
105         <dependency>
106             <groupId>org.projectlombok</groupId>
107             <artifactId>lombok</artifactId>
108             <optional>true</optional>
109         </dependency>
110         <dependency>
111             <groupId>org.springframework.boot</groupId>
112             <artifactId>spring-boot-starter-test</artifactId>
113             <scope>test</scope>
114             <exclusions>
115                 <exclusion>
116                     <groupId>org.mockito</groupId>
117                     <artifactId>mockito-core</artifactId>
118                 </exclusion>
119             </exclusions>
120         </dependency>
121         <dependency>
122             <groupId>org.springframework.restdocs</groupId>
123             <artifactId>spring-restdocs-mockmvc</artifactId>
124             <scope>test</scope>
125         </dependency>
126         <dependency>
127             <groupId>org.springframework.security</groupId>
128             <artifactId>spring-security-test</artifactId>
129             <scope>test</scope>
130         </dependency>
131         <dependency>
132             <groupId>org.springframework</groupId>
133             <artifactId>spring-orm</artifactId>
134         </dependency>
135         <dependency>
136             <groupId>org.springframework</groupId>
137             <artifactId>spring-context</artifactId>
138         </dependency>
139         <dependency>
140             <groupId>org.springframework</groupId>
141             <artifactId>spring-jdbc</artifactId>
142         </dependency>
143         <dependency>
144             <groupId>org.hibernate</groupId>
145             <artifactId>hibernate-core</artifactId>
146             <version>${hibernate.version}</version>
147         </dependency>
148         <dependency>
149             <groupId>javax.persistence</groupId>
150             <artifactId>persistence-api</artifactId>
151             <version>${javax.persistence.version}</version>
152         </dependency>
153
154         <!-- security vulnerabilities -->
155         <dependency>
156             <groupId>ch.qos.logback</groupId>
157             <artifactId>logback-classic</artifactId>
158             <version>1.2.3</version>
159         </dependency>
160         <dependency>
161             <groupId>org.eclipse.jetty</groupId>
162             <artifactId>jetty-http</artifactId>
163             <version>9.4.14.v20181114</version>
164         </dependency>
165         <dependency>
166             <groupId>org.eclipse.jetty</groupId>
167             <artifactId>jetty-server</artifactId>
168             <version>9.4.17.v20190418</version>
169         </dependency>
170         <dependency>
171             <groupId>org.springframework</groupId>
172             <artifactId>spring-expression</artifactId>
173             <version>5.1.5.RELEASE</version>
174         </dependency>
175         <dependency>
176             <groupId>org.springframework.data</groupId>
177             <artifactId>spring-data-commons</artifactId>
178             <version>1.13.18.RELEASE</version>
179         </dependency>
180         <dependency>
181             <groupId>org.springframework</groupId>
182             <artifactId>spring-core</artifactId>
183             <version>4.3.22.RELEASE</version>
184         </dependency>
185
186         <!-- commons-csv -->
187         <dependency>
188             <groupId>org.apache.commons</groupId>
189             <artifactId>commons-csv</artifactId>
190             <version>${common.csv.version}</version>
191         </dependency>
192
193         <!-- jackson-databind -->
194         <dependency>
195             <groupId>com.fasterxml.jackson.core</groupId>
196             <artifactId>jackson-databind</artifactId>
197             <version>${jackson.version}</version>
198         </dependency>
199
200         <!-- jackson-core -->
201         <dependency>
202             <groupId>com.fasterxml.jackson.core</groupId>
203             <artifactId>jackson-core</artifactId>
204             <version>${jackson.version}</version>
205         </dependency>
206
207         <!-- jackson-annotations -->
208         <dependency>
209             <groupId>com.fasterxml.jackson.core</groupId>
210             <artifactId>jackson-annotations</artifactId>
211             <version>${jackson.version}</version>
212         </dependency>
213
214         <dependency>
215             <groupId>com.squareup.retrofit2</groupId>
216             <artifactId>retrofit</artifactId>
217             <version>2.3.0</version>
218         </dependency>
219         <dependency>
220             <groupId>com.squareup.retrofit2</groupId>
221             <artifactId>converter-jackson</artifactId>
222             <version>2.3.0</version>
223         </dependency>
224
225         <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
226         <dependency>
227             <groupId>com.alibaba</groupId>
228             <artifactId>fastjson</artifactId>
229             <version>1.2.29</version>
230         </dependency>
231
232         <dependency>
233             <groupId>com.alibaba</groupId>
234             <artifactId>dubbo</artifactId>
235             <version>2.6.5</version>
236         </dependency>
237         <dependency>
238             <groupId>org.openecomp.sdc.jtosca</groupId>
239             <artifactId>jtosca</artifactId>
240             <version>1.1.1</version>
241         </dependency>
242
243         <dependency>
244             <groupId>com.google.guava</groupId>
245             <artifactId>guava</artifactId>
246             <version>23.0</version>
247         </dependency>
248
249         <dependency>
250             <groupId>org.onap.msb.java-sdk</groupId>
251             <artifactId>msb-java-sdk</artifactId>
252             <version>1.0.0</version>
253         </dependency>
254
255         <dependency>
256             <groupId>org.powermock</groupId>
257             <artifactId>powermock-api-mockito</artifactId>
258             <version>1.6.5</version>
259         </dependency>
260         <dependency>
261             <groupId>org.mockito</groupId>
262             <artifactId>mockito-all</artifactId>
263             <version>1.9.5</version>
264         </dependency>
265         <dependency>
266             <groupId>org.powermock</groupId>
267             <artifactId>powermock-module-junit4</artifactId>
268             <version>1.6.5</version>
269             <type>jar</type>
270             <scope>compile</scope>
271         </dependency>
272         <dependency>
273             <groupId>org.jmockit</groupId>
274             <artifactId>jmockit</artifactId>
275             <version>1.19</version>
276             <scope>test</scope>
277         </dependency>
278         <dependency>
279             <groupId>junit</groupId>
280             <artifactId>junit</artifactId>
281             <version>4.12</version>
282         </dependency>
283         <dependency>
284             <groupId>org.jmockit</groupId>
285             <artifactId>jmockit-coverage</artifactId>
286             <version>1.19</version>
287             <scope>test</scope>
288         </dependency>
289     </dependencies>
290
291     <build>
292         <plugins>
293             <plugin>
294                 <groupId>org.springframework.boot</groupId>
295                 <artifactId>spring-boot-maven-plugin</artifactId>
296                 <configuration>
297                     <executable>true</executable>
298                 </configuration>
299                 <executions>
300                     <execution>
301                         <goals>
302                             <goal>repackage</goal>
303                         </goals>
304                     </execution>
305                 </executions>
306             </plugin>
307             <plugin>
308                 <groupId>org.apache.maven.plugins</groupId>
309                 <artifactId>maven-compiler-plugin</artifactId>
310                 <version>3.3</version>
311                 <configuration>
312                     <source>1.8</source>
313                     <target>1.8</target>
314                 </configuration>
315             </plugin>
316             <plugin>
317                 <groupId>org.apache.maven.plugins</groupId>
318                 <artifactId>maven-antrun-plugin</artifactId>
319                 <version>1.8</version>
320             </plugin>
321             <plugin>
322                 <groupId>org.apache.maven.plugins</groupId>
323                 <artifactId>maven-surefire-plugin</artifactId>
324                 <version>2.19</version>
325                 <configuration>
326                     <testFailureIgnore>true</testFailureIgnore>
327                     <includes>
328                         <include>**/*Spec*</include>
329                         <include>**/Test*.java</include>
330                         <include>**/*Test.java</include>
331                         <include>**/*TestCase.java</include>
332                         <include>**/Test*.scala</include>
333                         <include>**/*Test.scala</include>
334                         <include>**/*TestCase.scala</include>
335                     </includes>
336                 </configuration>
337             </plugin>
338         </plugins>
339     </build>
340
341     <repositories>
342         <repository>
343             <id>spring-milestones</id>
344             <name>Spring Milestones</name>
345             <url>https://repo.spring.io/milestone</url>
346             <snapshots>
347                 <enabled>false</enabled>
348             </snapshots>
349         </repository>
350     </repositories>
351
352     <pluginRepositories>
353         <pluginRepository>
354             <id>spring-milestones</id>
355             <name>Spring Milestones</name>
356             <url>https://repo.spring.io/milestone</url>
357             <snapshots>
358                 <enabled>false</enabled>
359             </snapshots>
360         </pluginRepository>
361     </pluginRepositories>
362 </project>