Fix usecase-ui-server security risk issues
[usecase-ui/server.git] / server / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3     Copyright (C) 2017 CMCC, Inc. and others. All rights reserved.
4
5     Licensed under the Apache License, Version 2.0 (the "License");
6     you may not use this file except in compliance with the License.
7     You may obtain a copy of the License at
8
9         http://www.apache.org/licenses/LICENSE-2.0
10
11     Unless required by applicable law or agreed to in writing, software
12     distributed under the License is distributed on an "AS IS" BASIS,
13     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14     See the License for the specific language governing permissions and
15     limitations under the License.
16  -->
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
18
19     <parent>
20         <groupId>org.onap.usecase-ui.server</groupId>
21         <artifactId>usecase-ui-server-parent</artifactId>
22         <version>2.0.0</version>
23     </parent>
24
25     <modelVersion>4.0.0</modelVersion>
26     <groupId>org.onap.usecase-ui.server</groupId>
27     <artifactId>usecase-ui-server</artifactId>
28     <version>2.0.0</version>
29     <packaging>jar</packaging>
30     <name>usecase-ui-server/server</name>
31     <description>project for usecase-ui server</description>
32
33     <properties>
34         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36         <java.version>1.8</java.version>
37         <hibernate.version>5.0.11.Final</hibernate.version>
38         <javax.persistence.version>1.0.2</javax.persistence.version>
39         <common.csv.version>1.4</common.csv.version>
40         <jackson.version>2.9.8</jackson.version>
41         <tomcat.version>9.0.16</tomcat.version>
42     </properties>
43
44     <dependencyManagement>
45         <dependencies>
46             <dependency>
47                 <!-- Import dependency management from Spring Boot -->
48                 <groupId>org.springframework.boot</groupId>
49                 <artifactId>spring-boot-starter-parent</artifactId>
50                 <version>1.5.6.RELEASE</version>
51                 <type>pom</type>
52                 <scope>import</scope>
53             </dependency>
54         </dependencies>
55     </dependencyManagement>
56
57     <dependencies>
58         <dependency>
59             <groupId>org.springframework.boot</groupId>
60             <artifactId>spring-boot-starter-actuator</artifactId>
61         </dependency>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-data-jpa</artifactId>
65             <exclusions>
66                 <exclusion>
67                     <groupId>org.apache.tomcat</groupId>
68                     <artifactId>tomcat-jdbc</artifactId>
69                 </exclusion>
70             </exclusions>
71         </dependency>
72         <dependency>
73             <groupId>org.springframework.boot</groupId>
74             <artifactId>spring-boot-starter-data-redis</artifactId>
75         </dependency>
76         <dependency>
77             <groupId>org.springframework.boot</groupId>
78             <artifactId>spring-boot-starter-data-rest</artifactId>
79         </dependency>
80         <dependency>
81             <groupId>org.elasticsearch.client</groupId>
82             <artifactId>elasticsearch-rest-high-level-client</artifactId>
83             <version>6.6.1</version>
84             <exclusions>
85                 <exclusion>
86                     <groupId>org.elasticsearch</groupId>
87                     <artifactId>elasticsearch</artifactId>
88                 </exclusion>
89             </exclusions>
90         </dependency>
91         <dependency>
92             <groupId>org.elasticsearch</groupId>
93             <artifactId>elasticsearch</artifactId>
94             <version>6.6.1</version>
95         </dependency>
96         <dependency>
97             <groupId>org.springframework.data</groupId>
98             <artifactId>spring-data-rest-hal-browser</artifactId>
99         </dependency>
100         <dependency>
101             <groupId>org.springframework.boot</groupId>
102             <artifactId>spring-boot-starter-jersey</artifactId>
103         </dependency>
104         <!-- postgresql  dependency-->
105         <dependency>
106             <groupId>postgresql</groupId>
107             <artifactId>postgresql</artifactId>
108             <version>9.1-901-1.jdbc4</version>
109         </dependency>
110
111         <dependency>
112             <groupId>org.projectlombok</groupId>
113             <artifactId>lombok</artifactId>
114             <optional>true</optional>
115         </dependency>
116         <dependency>
117             <groupId>org.springframework.boot</groupId>
118             <artifactId>spring-boot-starter-test</artifactId>
119             <scope>test</scope>
120             <exclusions>
121                 <exclusion>
122                     <groupId>org.mockito</groupId>
123                     <artifactId>mockito-core</artifactId>
124                 </exclusion>
125             </exclusions>
126         </dependency>
127         <dependency>
128             <groupId>org.springframework.restdocs</groupId>
129             <artifactId>spring-restdocs-mockmvc</artifactId>
130             <scope>test</scope>
131         </dependency>
132         <dependency>
133             <groupId>org.springframework.security</groupId>
134             <artifactId>spring-security-test</artifactId>
135             <scope>test</scope>
136         </dependency>
137         <dependency>
138             <groupId>org.springframework</groupId>
139             <artifactId>spring-orm</artifactId>
140         </dependency>
141         <dependency>
142             <groupId>org.springframework</groupId>
143             <artifactId>spring-context</artifactId>
144         </dependency>
145         <dependency>
146             <groupId>org.springframework</groupId>
147             <artifactId>spring-jdbc</artifactId>
148         </dependency>
149         <dependency>
150             <groupId>org.hibernate</groupId>
151             <artifactId>hibernate-core</artifactId>
152             <version>${hibernate.version}</version>
153         </dependency>
154         <dependency>
155             <groupId>javax.persistence</groupId>
156             <artifactId>persistence-api</artifactId>
157             <version>${javax.persistence.version}</version>
158         </dependency>
159
160         <!-- security vulnerabilities -->
161         <dependency>
162             <groupId>org.springframework.boot</groupId>
163             <artifactId>spring-boot-starter-web</artifactId>
164             <exclusions>
165                 <exclusion>
166                     <groupId>org.springframework.boot</groupId>
167                     <artifactId>spring-boot-starter-tomcat</artifactId>
168                 </exclusion>
169                 <exclusion>
170                     <groupId>org.apache.tomcat.embed</groupId>
171                     <artifactId>tomcat-embed-core</artifactId>
172                 </exclusion>
173             </exclusions>
174         </dependency>
175         <dependency>
176             <groupId>org.apache.tomcat.embed</groupId>
177             <artifactId>tomcat-embed-websocket</artifactId>
178             <version>8.5.34</version>
179         </dependency>
180         <dependency>
181             <groupId>ch.qos.logback</groupId>
182             <artifactId>logback-classic</artifactId>
183             <version>1.2.3</version>
184         </dependency>
185         <dependency>
186             <groupId>org.eclipse.jetty</groupId>
187             <artifactId>jetty-http</artifactId>
188             <version>9.4.14.v20181114</version>
189         </dependency>
190         <dependency>
191             <groupId>org.eclipse.jetty</groupId>
192             <artifactId>jetty-server</artifactId>
193             <version>9.4.17.v20190418</version>
194         </dependency>
195         <dependency>
196             <groupId>org.springframework</groupId>
197             <artifactId>spring-expression</artifactId>
198             <version>5.1.5.RELEASE</version>
199         </dependency>
200         <dependency>
201             <groupId>org.springframework.data</groupId>
202             <artifactId>spring-data-commons</artifactId>
203             <version>1.13.18.RELEASE</version>
204         </dependency>
205         <dependency>
206             <groupId>org.springframework</groupId>
207             <artifactId>spring-core</artifactId>
208             <version>4.3.22.RELEASE</version>
209         </dependency>
210         <dependency>
211             <groupId>org.springframework.data</groupId>
212             <artifactId>spring-data-rest-webmvc</artifactId>
213             <version>2.6.9.RELEASE</version>
214         </dependency>
215         <dependency>
216             <groupId>org.springframework</groupId>
217             <artifactId>spring-web</artifactId>
218             <version>4.3.22.RELEASE</version>
219         </dependency>
220         <dependency>
221             <groupId>org.springframework.data</groupId>
222             <artifactId>spring-data-jpa</artifactId>
223             <version>1.11.20.RELEASE</version>
224         </dependency>
225         <dependency>
226             <groupId>org.springframework</groupId>
227             <artifactId>spring-webmvc</artifactId>
228             <version>4.3.18.RELEASE</version>
229         </dependency>
230         <dependency>
231             <groupId>org.hibernate</groupId>
232             <artifactId>hibernate-validator</artifactId>
233             <version>5.3.6.Final</version>
234         </dependency>
235         <dependency>
236             <groupId>org.eclipse.jetty</groupId>
237             <artifactId>jetty-util</artifactId>
238             <version>9.4.17.v20190418</version>
239         </dependency>
240         <dependency>
241             <groupId>com.google.guava</groupId>
242             <artifactId>guava</artifactId>
243             <version>25.0-jre</version>
244         </dependency>
245         <dependency>
246             <groupId>com.squareup.okhttp3</groupId>
247             <artifactId>okhttp</artifactId>
248             <version>3.12.1</version>
249         </dependency>
250
251         <!-- commons-csv -->
252         <dependency>
253             <groupId>org.apache.commons</groupId>
254             <artifactId>commons-csv</artifactId>
255             <version>${common.csv.version}</version>
256         </dependency>
257
258         <!-- jackson-databind -->
259         <dependency>
260             <groupId>com.fasterxml.jackson.core</groupId>
261             <artifactId>jackson-databind</artifactId>
262             <version>${jackson.version}</version>
263         </dependency>
264
265         <!-- jackson-core -->
266         <dependency>
267             <groupId>com.fasterxml.jackson.core</groupId>
268             <artifactId>jackson-core</artifactId>
269             <version>${jackson.version}</version>
270         </dependency>
271
272         <!-- jackson-annotations -->
273         <dependency>
274             <groupId>com.fasterxml.jackson.core</groupId>
275             <artifactId>jackson-annotations</artifactId>
276             <version>${jackson.version}</version>
277         </dependency>
278
279         <dependency>
280             <groupId>com.squareup.retrofit2</groupId>
281             <artifactId>retrofit</artifactId>
282             <version>2.3.0</version>
283         </dependency>
284         <dependency>
285             <groupId>com.squareup.retrofit2</groupId>
286             <artifactId>converter-jackson</artifactId>
287             <version>2.3.0</version>
288         </dependency>
289
290         <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
291         <dependency>
292             <groupId>com.alibaba</groupId>
293             <artifactId>fastjson</artifactId>
294             <version>1.2.29</version>
295         </dependency>
296
297         <dependency>
298             <groupId>com.alibaba</groupId>
299             <artifactId>dubbo</artifactId>
300             <version>2.6.5</version>
301         </dependency>
302         <dependency>
303             <groupId>org.openecomp.sdc.jtosca</groupId>
304             <artifactId>jtosca</artifactId>
305             <version>1.1.1</version>
306         </dependency>
307
308         <dependency>
309             <groupId>com.google.guava</groupId>
310             <artifactId>guava</artifactId>
311             <version>23.0</version>
312         </dependency>
313
314         <dependency>
315             <groupId>org.onap.msb.java-sdk</groupId>
316             <artifactId>msb-java-sdk</artifactId>
317             <version>1.0.0</version>
318         </dependency>
319
320         <dependency>
321             <groupId>org.powermock</groupId>
322             <artifactId>powermock-api-mockito</artifactId>
323             <version>1.6.5</version>
324         </dependency>
325         <dependency>
326             <groupId>org.mockito</groupId>
327             <artifactId>mockito-all</artifactId>
328             <version>1.9.5</version>
329         </dependency>
330         <dependency>
331             <groupId>org.powermock</groupId>
332             <artifactId>powermock-module-junit4</artifactId>
333             <version>1.6.5</version>
334             <type>jar</type>
335             <scope>compile</scope>
336         </dependency>
337         <dependency>
338             <groupId>org.jmockit</groupId>
339             <artifactId>jmockit</artifactId>
340             <version>1.19</version>
341             <scope>test</scope>
342         </dependency>
343         <dependency>
344             <groupId>junit</groupId>
345             <artifactId>junit</artifactId>
346             <version>4.12</version>
347         </dependency>
348         <dependency>
349             <groupId>org.jmockit</groupId>
350             <artifactId>jmockit-coverage</artifactId>
351             <version>1.19</version>
352             <scope>test</scope>
353         </dependency>
354     </dependencies>
355
356     <build>
357         <plugins>
358             <plugin>
359                 <groupId>org.springframework.boot</groupId>
360                 <artifactId>spring-boot-maven-plugin</artifactId>
361                 <configuration>
362                     <executable>true</executable>
363                 </configuration>
364                 <executions>
365                     <execution>
366                         <goals>
367                             <goal>repackage</goal>
368                         </goals>
369                     </execution>
370                 </executions>
371             </plugin>
372             <plugin>
373                 <groupId>org.apache.maven.plugins</groupId>
374                 <artifactId>maven-compiler-plugin</artifactId>
375                 <version>3.3</version>
376                 <configuration>
377                     <source>1.8</source>
378                     <target>1.8</target>
379                 </configuration>
380             </plugin>
381             <plugin>
382                 <groupId>org.apache.maven.plugins</groupId>
383                 <artifactId>maven-antrun-plugin</artifactId>
384                 <version>1.8</version>
385             </plugin>
386             <plugin>
387                 <groupId>org.apache.maven.plugins</groupId>
388                 <artifactId>maven-surefire-plugin</artifactId>
389                 <version>2.19</version>
390                 <configuration>
391                     <testFailureIgnore>true</testFailureIgnore>
392                     <includes>
393                         <include>**/*Spec*</include>
394                         <include>**/Test*.java</include>
395                         <include>**/*Test.java</include>
396                         <include>**/*TestCase.java</include>
397                         <include>**/Test*.scala</include>
398                         <include>**/*Test.scala</include>
399                         <include>**/*TestCase.scala</include>
400                     </includes>
401                 </configuration>
402             </plugin>
403         </plugins>
404     </build>
405
406     <repositories>
407         <repository>
408             <id>spring-milestones</id>
409             <name>Spring Milestones</name>
410             <url>https://repo.spring.io/milestone</url>
411             <snapshots>
412                 <enabled>false</enabled>
413             </snapshots>
414         </repository>
415     </repositories>
416
417     <pluginRepositories>
418         <pluginRepository>
419             <id>spring-milestones</id>
420             <name>Spring Milestones</name>
421             <url>https://repo.spring.io/milestone</url>
422             <snapshots>
423                 <enabled>false</enabled>
424             </snapshots>
425         </pluginRepository>
426     </pluginRepositories>
427 </project>