Fix usecase-ui-server security risk issues
[usecase-ui/server.git] / server / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3     Copyright (C) 2017 CMCC, Inc. and others. All rights reserved.
4
5     Licensed under the Apache License, Version 2.0 (the "License");
6     you may not use this file except in compliance with the License.
7     You may obtain a copy of the License at
8
9         http://www.apache.org/licenses/LICENSE-2.0
10
11     Unless required by applicable law or agreed to in writing, software
12     distributed under the License is distributed on an "AS IS" BASIS,
13     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14     See the License for the specific language governing permissions and
15     limitations under the License.
16  -->
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
18
19     <parent>
20         <groupId>org.onap.usecase-ui.server</groupId>
21         <artifactId>usecase-ui-server-parent</artifactId>
22         <version>2.0.0</version>
23     </parent>
24
25     <modelVersion>4.0.0</modelVersion>
26     <groupId>org.onap.usecase-ui.server</groupId>
27     <artifactId>usecase-ui-server</artifactId>
28     <version>2.0.0</version>
29     <packaging>jar</packaging>
30     <name>usecase-ui-server/server</name>
31     <description>project for usecase-ui server</description>
32
33     <properties>
34         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36         <java.version>1.8</java.version>
37         <hibernate.version>5.0.11.Final</hibernate.version>
38         <javax.persistence.version>1.0.2</javax.persistence.version>
39         <common.csv.version>1.4</common.csv.version>
40         <jackson.version>2.9.8</jackson.version>
41         <tomcat.version>9.0.16</tomcat.version>
42     </properties>
43
44     <dependencyManagement>
45         <dependencies>
46             <dependency>
47                 <!-- Import dependency management from Spring Boot -->
48                 <groupId>org.springframework.boot</groupId>
49                 <artifactId>spring-boot-starter-parent</artifactId>
50                 <version>1.5.6.RELEASE</version>
51                 <type>pom</type>
52                 <scope>import</scope>
53             </dependency>
54         </dependencies>
55     </dependencyManagement>
56
57     <dependencies>
58         <dependency>
59             <groupId>org.springframework.boot</groupId>
60             <artifactId>spring-boot-starter-actuator</artifactId>
61         </dependency>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-data-jpa</artifactId>
65         </dependency>
66         <dependency>
67             <groupId>org.springframework.boot</groupId>
68             <artifactId>spring-boot-starter-data-redis</artifactId>
69         </dependency>
70         <dependency>
71             <groupId>org.springframework.boot</groupId>
72             <artifactId>spring-boot-starter-data-rest</artifactId>
73         </dependency>
74         <dependency>
75             <groupId>org.elasticsearch.client</groupId>
76             <artifactId>elasticsearch-rest-high-level-client</artifactId>
77             <version>6.6.1</version>
78             <exclusions>
79                 <exclusion>
80                     <groupId>org.elasticsearch</groupId>
81                     <artifactId>elasticsearch</artifactId>
82                 </exclusion>
83             </exclusions>
84         </dependency>
85         <dependency>
86             <groupId>org.elasticsearch</groupId>
87             <artifactId>elasticsearch</artifactId>
88             <version>6.6.1</version>
89         </dependency>
90         <dependency>
91             <groupId>org.springframework.data</groupId>
92             <artifactId>spring-data-rest-hal-browser</artifactId>
93         </dependency>
94         <dependency>
95             <groupId>org.springframework.boot</groupId>
96             <artifactId>spring-boot-starter-jersey</artifactId>
97         </dependency>
98         <!-- postgresql  dependency-->
99         <dependency>
100             <groupId>postgresql</groupId>
101             <artifactId>postgresql</artifactId>
102             <version>9.1-901-1.jdbc4</version>
103         </dependency>
104
105         <dependency>
106             <groupId>org.projectlombok</groupId>
107             <artifactId>lombok</artifactId>
108             <optional>true</optional>
109         </dependency>
110         <dependency>
111             <groupId>org.springframework.boot</groupId>
112             <artifactId>spring-boot-starter-test</artifactId>
113             <scope>test</scope>
114             <exclusions>
115                 <exclusion>
116                     <groupId>org.mockito</groupId>
117                     <artifactId>mockito-core</artifactId>
118                 </exclusion>
119             </exclusions>
120         </dependency>
121         <dependency>
122             <groupId>org.springframework.restdocs</groupId>
123             <artifactId>spring-restdocs-mockmvc</artifactId>
124             <scope>test</scope>
125         </dependency>
126         <dependency>
127             <groupId>org.springframework.security</groupId>
128             <artifactId>spring-security-test</artifactId>
129             <scope>test</scope>
130         </dependency>
131         <dependency>
132             <groupId>org.springframework</groupId>
133             <artifactId>spring-orm</artifactId>
134         </dependency>
135         <dependency>
136             <groupId>org.springframework</groupId>
137             <artifactId>spring-context</artifactId>
138         </dependency>
139         <dependency>
140             <groupId>org.springframework</groupId>
141             <artifactId>spring-jdbc</artifactId>
142         </dependency>
143         <dependency>
144             <groupId>org.hibernate</groupId>
145             <artifactId>hibernate-core</artifactId>
146             <version>${hibernate.version}</version>
147         </dependency>
148         <dependency>
149             <groupId>javax.persistence</groupId>
150             <artifactId>persistence-api</artifactId>
151             <version>${javax.persistence.version}</version>
152         </dependency>
153
154         <!-- security vulnerabilities -->
155         <dependency>
156             <groupId>org.springframework.boot</groupId>
157             <artifactId>spring-boot-starter-web</artifactId>
158             <exclusions>
159                 <exclusion>
160                     <groupId>org.springframework.boot</groupId>
161                     <artifactId>spring-boot-starter-tomcat</artifactId>
162                 </exclusion>
163             </exclusions>
164         </dependency>
165         <dependency>
166             <groupId>ch.qos.logback</groupId>
167             <artifactId>logback-classic</artifactId>
168             <version>1.2.3</version>
169         </dependency>
170         <dependency>
171             <groupId>org.eclipse.jetty</groupId>
172             <artifactId>jetty-http</artifactId>
173             <version>9.4.14.v20181114</version>
174         </dependency>
175         <dependency>
176             <groupId>org.eclipse.jetty</groupId>
177             <artifactId>jetty-server</artifactId>
178             <version>9.4.17.v20190418</version>
179         </dependency>
180         <dependency>
181             <groupId>org.springframework</groupId>
182             <artifactId>spring-expression</artifactId>
183             <version>5.1.5.RELEASE</version>
184         </dependency>
185         <dependency>
186             <groupId>org.springframework.data</groupId>
187             <artifactId>spring-data-commons</artifactId>
188             <version>1.13.18.RELEASE</version>
189         </dependency>
190         <dependency>
191             <groupId>org.springframework</groupId>
192             <artifactId>spring-core</artifactId>
193             <version>4.3.22.RELEASE</version>
194         </dependency>
195         <dependency>
196             <groupId>org.springframework.data</groupId>
197             <artifactId>spring-data-rest-webmvc</artifactId>
198             <version>2.6.9.RELEASE</version>
199         </dependency>
200         <dependency>
201             <groupId>org.springframework</groupId>
202             <artifactId>spring-web</artifactId>
203             <version>4.3.22.RELEASE</version>
204         </dependency>
205         <dependency>
206             <groupId>org.springframework.data</groupId>
207             <artifactId>spring-data-jpa</artifactId>
208             <version>1.11.20.RELEASE</version>
209         </dependency>
210         <dependency>
211             <groupId>org.springframework</groupId>
212             <artifactId>spring-webmvc</artifactId>
213             <version>4.3.18.RELEASE</version>
214         </dependency>
215         <dependency>
216             <groupId>org.hibernate</groupId>
217             <artifactId>hibernate-validator</artifactId>
218             <version>5.3.6.Final</version>
219         </dependency>
220         <dependency>
221             <groupId>org.eclipse.jetty</groupId>
222             <artifactId>jetty-util</artifactId>
223             <version>9.4.17.v20190418</version>
224         </dependency>
225         <dependency>
226             <groupId>com.google.guava</groupId>
227             <artifactId>guava</artifactId>
228             <version>25.0-jre</version>
229         </dependency>
230         <dependency>
231             <groupId>com.squareup.okhttp3</groupId>
232             <artifactId>okhttp</artifactId>
233             <version>3.12.1</version>
234         </dependency>
235
236         <!-- commons-csv -->
237         <dependency>
238             <groupId>org.apache.commons</groupId>
239             <artifactId>commons-csv</artifactId>
240             <version>${common.csv.version}</version>
241         </dependency>
242
243         <!-- jackson-databind -->
244         <dependency>
245             <groupId>com.fasterxml.jackson.core</groupId>
246             <artifactId>jackson-databind</artifactId>
247             <version>${jackson.version}</version>
248         </dependency>
249
250         <!-- jackson-core -->
251         <dependency>
252             <groupId>com.fasterxml.jackson.core</groupId>
253             <artifactId>jackson-core</artifactId>
254             <version>${jackson.version}</version>
255         </dependency>
256
257         <!-- jackson-annotations -->
258         <dependency>
259             <groupId>com.fasterxml.jackson.core</groupId>
260             <artifactId>jackson-annotations</artifactId>
261             <version>${jackson.version}</version>
262         </dependency>
263
264         <dependency>
265             <groupId>com.squareup.retrofit2</groupId>
266             <artifactId>retrofit</artifactId>
267             <version>2.3.0</version>
268         </dependency>
269         <dependency>
270             <groupId>com.squareup.retrofit2</groupId>
271             <artifactId>converter-jackson</artifactId>
272             <version>2.3.0</version>
273         </dependency>
274
275         <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
276         <dependency>
277             <groupId>com.alibaba</groupId>
278             <artifactId>fastjson</artifactId>
279             <version>1.2.29</version>
280         </dependency>
281
282         <dependency>
283             <groupId>com.alibaba</groupId>
284             <artifactId>dubbo</artifactId>
285             <version>2.6.5</version>
286         </dependency>
287         <dependency>
288             <groupId>org.openecomp.sdc.jtosca</groupId>
289             <artifactId>jtosca</artifactId>
290             <version>1.1.1</version>
291         </dependency>
292
293         <dependency>
294             <groupId>com.google.guava</groupId>
295             <artifactId>guava</artifactId>
296             <version>23.0</version>
297         </dependency>
298
299         <dependency>
300             <groupId>org.onap.msb.java-sdk</groupId>
301             <artifactId>msb-java-sdk</artifactId>
302             <version>1.0.0</version>
303         </dependency>
304
305         <dependency>
306             <groupId>org.powermock</groupId>
307             <artifactId>powermock-api-mockito</artifactId>
308             <version>1.6.5</version>
309         </dependency>
310         <dependency>
311             <groupId>org.mockito</groupId>
312             <artifactId>mockito-all</artifactId>
313             <version>1.9.5</version>
314         </dependency>
315         <dependency>
316             <groupId>org.powermock</groupId>
317             <artifactId>powermock-module-junit4</artifactId>
318             <version>1.6.5</version>
319             <type>jar</type>
320             <scope>compile</scope>
321         </dependency>
322         <dependency>
323             <groupId>org.jmockit</groupId>
324             <artifactId>jmockit</artifactId>
325             <version>1.19</version>
326             <scope>test</scope>
327         </dependency>
328         <dependency>
329             <groupId>junit</groupId>
330             <artifactId>junit</artifactId>
331             <version>4.12</version>
332         </dependency>
333         <dependency>
334             <groupId>org.jmockit</groupId>
335             <artifactId>jmockit-coverage</artifactId>
336             <version>1.19</version>
337             <scope>test</scope>
338         </dependency>
339     </dependencies>
340
341     <build>
342         <plugins>
343             <plugin>
344                 <groupId>org.springframework.boot</groupId>
345                 <artifactId>spring-boot-maven-plugin</artifactId>
346                 <configuration>
347                     <executable>true</executable>
348                 </configuration>
349                 <executions>
350                     <execution>
351                         <goals>
352                             <goal>repackage</goal>
353                         </goals>
354                     </execution>
355                 </executions>
356             </plugin>
357             <plugin>
358                 <groupId>org.apache.maven.plugins</groupId>
359                 <artifactId>maven-compiler-plugin</artifactId>
360                 <version>3.3</version>
361                 <configuration>
362                     <source>1.8</source>
363                     <target>1.8</target>
364                 </configuration>
365             </plugin>
366             <plugin>
367                 <groupId>org.apache.maven.plugins</groupId>
368                 <artifactId>maven-antrun-plugin</artifactId>
369                 <version>1.8</version>
370             </plugin>
371             <plugin>
372                 <groupId>org.apache.maven.plugins</groupId>
373                 <artifactId>maven-surefire-plugin</artifactId>
374                 <version>2.19</version>
375                 <configuration>
376                     <testFailureIgnore>true</testFailureIgnore>
377                     <includes>
378                         <include>**/*Spec*</include>
379                         <include>**/Test*.java</include>
380                         <include>**/*Test.java</include>
381                         <include>**/*TestCase.java</include>
382                         <include>**/Test*.scala</include>
383                         <include>**/*Test.scala</include>
384                         <include>**/*TestCase.scala</include>
385                     </includes>
386                 </configuration>
387             </plugin>
388         </plugins>
389     </build>
390
391     <repositories>
392         <repository>
393             <id>spring-milestones</id>
394             <name>Spring Milestones</name>
395             <url>https://repo.spring.io/milestone</url>
396             <snapshots>
397                 <enabled>false</enabled>
398             </snapshots>
399         </repository>
400     </repositories>
401
402     <pluginRepositories>
403         <pluginRepository>
404             <id>spring-milestones</id>
405             <name>Spring Milestones</name>
406             <url>https://repo.spring.io/milestone</url>
407             <snapshots>
408                 <enabled>false</enabled>
409             </snapshots>
410         </pluginRepository>
411     </pluginRepositories>
412 </project>