Fix usecase-ui-server security risk issues
[usecase-ui/server.git] / server / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!--
3     Copyright (C) 2017 CMCC, Inc. and others. All rights reserved.
4
5     Licensed under the Apache License, Version 2.0 (the "License");
6     you may not use this file except in compliance with the License.
7     You may obtain a copy of the License at
8
9         http://www.apache.org/licenses/LICENSE-2.0
10
11     Unless required by applicable law or agreed to in writing, software
12     distributed under the License is distributed on an "AS IS" BASIS,
13     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14     See the License for the specific language governing permissions and
15     limitations under the License.
16  -->
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
18
19     <parent>
20         <groupId>org.onap.usecase-ui.server</groupId>
21         <artifactId>usecase-ui-server-parent</artifactId>
22         <version>2.0.0</version>
23     </parent>
24
25     <modelVersion>4.0.0</modelVersion>
26     <groupId>org.onap.usecase-ui.server</groupId>
27     <artifactId>usecase-ui-server</artifactId>
28     <version>2.0.0</version>
29     <packaging>jar</packaging>
30     <name>usecase-ui-server/server</name>
31     <description>project for usecase-ui server</description>
32
33     <properties>
34         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
35         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
36         <java.version>1.8</java.version>
37         <hibernate.version>5.0.11.Final</hibernate.version>
38         <javax.persistence.version>1.0.2</javax.persistence.version>
39         <common.csv.version>1.4</common.csv.version>
40         <jackson.version>2.9.8</jackson.version>
41         <tomcat.version>9.0.16</tomcat.version>
42     </properties>
43
44     <dependencyManagement>
45         <dependencies>
46             <dependency>
47                 <!-- Import dependency management from Spring Boot -->
48                 <groupId>org.springframework.boot</groupId>
49                 <artifactId>spring-boot-starter-parent</artifactId>
50                 <version>1.5.6.RELEASE</version>
51                 <type>pom</type>
52                 <scope>import</scope>
53             </dependency>
54         </dependencies>
55     </dependencyManagement>
56
57     <dependencies>
58         <dependency>
59             <groupId>org.springframework.boot</groupId>
60             <artifactId>spring-boot-starter-actuator</artifactId>
61         </dependency>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-data-jpa</artifactId>
65             <exclusions>
66                 <exclusion>
67                     <groupId>org.apache.tomcat</groupId>
68                     <artifactId>tomcat-jdbc</artifactId>
69                 </exclusion>
70             </exclusions>
71         </dependency>
72         <dependency>
73             <groupId>org.springframework.boot</groupId>
74             <artifactId>spring-boot-starter-data-redis</artifactId>
75         </dependency>
76         <dependency>
77             <groupId>org.springframework.boot</groupId>
78             <artifactId>spring-boot-starter-data-rest</artifactId>
79         </dependency>
80         <dependency>
81             <groupId>org.elasticsearch.client</groupId>
82             <artifactId>elasticsearch-rest-high-level-client</artifactId>
83             <version>6.6.1</version>
84             <exclusions>
85                 <exclusion>
86                     <groupId>org.elasticsearch</groupId>
87                     <artifactId>elasticsearch</artifactId>
88                 </exclusion>
89             </exclusions>
90         </dependency>
91         <dependency>
92             <groupId>org.elasticsearch</groupId>
93             <artifactId>elasticsearch</artifactId>
94             <version>6.6.1</version>
95         </dependency>
96         <dependency>
97             <groupId>org.springframework.data</groupId>
98             <artifactId>spring-data-rest-hal-browser</artifactId>
99         </dependency>
100         <dependency>
101             <groupId>org.springframework.boot</groupId>
102             <artifactId>spring-boot-starter-jersey</artifactId>
103         </dependency>
104         <!-- postgresql  dependency-->
105         <dependency>
106             <groupId>postgresql</groupId>
107             <artifactId>postgresql</artifactId>
108             <version>9.1-901-1.jdbc4</version>
109         </dependency>
110
111         <dependency>
112             <groupId>org.projectlombok</groupId>
113             <artifactId>lombok</artifactId>
114             <optional>true</optional>
115         </dependency>
116         <dependency>
117             <groupId>org.springframework.boot</groupId>
118             <artifactId>spring-boot-starter-test</artifactId>
119             <scope>test</scope>
120             <exclusions>
121                 <exclusion>
122                     <groupId>org.mockito</groupId>
123                     <artifactId>mockito-core</artifactId>
124                 </exclusion>
125             </exclusions>
126         </dependency>
127         <dependency>
128             <groupId>org.springframework.restdocs</groupId>
129             <artifactId>spring-restdocs-mockmvc</artifactId>
130             <scope>test</scope>
131         </dependency>
132         <dependency>
133             <groupId>org.springframework.security</groupId>
134             <artifactId>spring-security-test</artifactId>
135             <scope>test</scope>
136         </dependency>
137         <dependency>
138             <groupId>org.springframework</groupId>
139             <artifactId>spring-orm</artifactId>
140         </dependency>
141         <dependency>
142             <groupId>org.springframework</groupId>
143             <artifactId>spring-context</artifactId>
144         </dependency>
145         <dependency>
146             <groupId>org.springframework</groupId>
147             <artifactId>spring-jdbc</artifactId>
148         </dependency>
149         <dependency>
150             <groupId>org.hibernate</groupId>
151             <artifactId>hibernate-core</artifactId>
152             <version>${hibernate.version}</version>
153         </dependency>
154         <dependency>
155             <groupId>javax.persistence</groupId>
156             <artifactId>persistence-api</artifactId>
157             <version>${javax.persistence.version}</version>
158         </dependency>
159
160         <!-- security vulnerabilities -->
161         <dependency>
162             <groupId>ch.qos.logback</groupId>
163             <artifactId>logback-classic</artifactId>
164             <version>1.2.3</version>
165         </dependency>
166         <dependency>
167             <groupId>org.eclipse.jetty</groupId>
168             <artifactId>jetty-http</artifactId>
169             <version>9.4.14.v20181114</version>
170         </dependency>
171         <dependency>
172             <groupId>org.eclipse.jetty</groupId>
173             <artifactId>jetty-server</artifactId>
174             <version>9.4.17.v20190418</version>
175         </dependency>
176         <dependency>
177             <groupId>org.springframework</groupId>
178             <artifactId>spring-expression</artifactId>
179             <version>5.1.5.RELEASE</version>
180         </dependency>
181         <dependency>
182             <groupId>org.springframework.data</groupId>
183             <artifactId>spring-data-commons</artifactId>
184             <version>1.13.18.RELEASE</version>
185         </dependency>
186         <dependency>
187             <groupId>org.springframework</groupId>
188             <artifactId>spring-core</artifactId>
189             <version>4.3.22.RELEASE</version>
190         </dependency>
191         <dependency>
192             <groupId>org.springframework.data</groupId>
193             <artifactId>spring-data-rest-webmvc</artifactId>
194             <version>2.6.9.RELEASE</version>
195         </dependency>
196         <dependency>
197             <groupId>org.springframework</groupId>
198             <artifactId>spring-web</artifactId>
199             <version>4.3.22.RELEASE</version>
200         </dependency>
201         <dependency>
202             <groupId>org.springframework.data</groupId>
203             <artifactId>spring-data-jpa</artifactId>
204             <version>1.11.20.RELEASE</version>
205         </dependency>
206         <dependency>
207             <groupId>org.springframework</groupId>
208             <artifactId>spring-webmvc</artifactId>
209             <version>4.3.18.RELEASE</version>
210         </dependency>
211         <dependency>
212             <groupId>org.hibernate</groupId>
213             <artifactId>hibernate-validator</artifactId>
214             <version>5.3.6.Final</version>
215         </dependency>
216         <dependency>
217             <groupId>org.eclipse.jetty</groupId>
218             <artifactId>jetty-util</artifactId>
219             <version>9.4.17.v20190418</version>
220         </dependency>
221         <dependency>
222             <groupId>com.google.guava</groupId>
223             <artifactId>guava</artifactId>
224             <version>25.0-jre</version>
225         </dependency>
226         <dependency>
227             <groupId>com.squareup.okhttp3</groupId>
228             <artifactId>okhttp</artifactId>
229             <version>3.12.1</version>
230         </dependency>
231
232         <!-- commons-csv -->
233         <dependency>
234             <groupId>org.apache.commons</groupId>
235             <artifactId>commons-csv</artifactId>
236             <version>${common.csv.version}</version>
237         </dependency>
238
239         <!-- jackson-databind -->
240         <dependency>
241             <groupId>com.fasterxml.jackson.core</groupId>
242             <artifactId>jackson-databind</artifactId>
243             <version>${jackson.version}</version>
244         </dependency>
245
246         <!-- jackson-core -->
247         <dependency>
248             <groupId>com.fasterxml.jackson.core</groupId>
249             <artifactId>jackson-core</artifactId>
250             <version>${jackson.version}</version>
251         </dependency>
252
253         <!-- jackson-annotations -->
254         <dependency>
255             <groupId>com.fasterxml.jackson.core</groupId>
256             <artifactId>jackson-annotations</artifactId>
257             <version>${jackson.version}</version>
258         </dependency>
259
260         <dependency>
261             <groupId>com.squareup.retrofit2</groupId>
262             <artifactId>retrofit</artifactId>
263             <version>2.3.0</version>
264         </dependency>
265         <dependency>
266             <groupId>com.squareup.retrofit2</groupId>
267             <artifactId>converter-jackson</artifactId>
268             <version>2.3.0</version>
269         </dependency>
270
271         <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
272         <dependency>
273             <groupId>com.alibaba</groupId>
274             <artifactId>fastjson</artifactId>
275             <version>1.2.29</version>
276         </dependency>
277
278         <dependency>
279             <groupId>com.alibaba</groupId>
280             <artifactId>dubbo</artifactId>
281             <version>2.6.5</version>
282         </dependency>
283         <dependency>
284             <groupId>org.openecomp.sdc.jtosca</groupId>
285             <artifactId>jtosca</artifactId>
286             <version>1.1.1</version>
287         </dependency>
288
289         <dependency>
290             <groupId>com.google.guava</groupId>
291             <artifactId>guava</artifactId>
292             <version>23.0</version>
293         </dependency>
294
295         <dependency>
296             <groupId>org.onap.msb.java-sdk</groupId>
297             <artifactId>msb-java-sdk</artifactId>
298             <version>1.0.0</version>
299         </dependency>
300
301         <dependency>
302             <groupId>org.powermock</groupId>
303             <artifactId>powermock-api-mockito</artifactId>
304             <version>1.6.5</version>
305         </dependency>
306         <dependency>
307             <groupId>org.mockito</groupId>
308             <artifactId>mockito-all</artifactId>
309             <version>1.9.5</version>
310         </dependency>
311         <dependency>
312             <groupId>org.powermock</groupId>
313             <artifactId>powermock-module-junit4</artifactId>
314             <version>1.6.5</version>
315             <type>jar</type>
316             <scope>compile</scope>
317         </dependency>
318         <dependency>
319             <groupId>org.jmockit</groupId>
320             <artifactId>jmockit</artifactId>
321             <version>1.19</version>
322             <scope>test</scope>
323         </dependency>
324         <dependency>
325             <groupId>junit</groupId>
326             <artifactId>junit</artifactId>
327             <version>4.12</version>
328         </dependency>
329         <dependency>
330             <groupId>org.jmockit</groupId>
331             <artifactId>jmockit-coverage</artifactId>
332             <version>1.19</version>
333             <scope>test</scope>
334         </dependency>
335     </dependencies>
336
337     <build>
338         <plugins>
339             <plugin>
340                 <groupId>org.springframework.boot</groupId>
341                 <artifactId>spring-boot-maven-plugin</artifactId>
342                 <configuration>
343                     <executable>true</executable>
344                 </configuration>
345                 <executions>
346                     <execution>
347                         <goals>
348                             <goal>repackage</goal>
349                         </goals>
350                     </execution>
351                 </executions>
352             </plugin>
353             <plugin>
354                 <groupId>org.apache.maven.plugins</groupId>
355                 <artifactId>maven-compiler-plugin</artifactId>
356                 <version>3.3</version>
357                 <configuration>
358                     <source>1.8</source>
359                     <target>1.8</target>
360                 </configuration>
361             </plugin>
362             <plugin>
363                 <groupId>org.apache.maven.plugins</groupId>
364                 <artifactId>maven-antrun-plugin</artifactId>
365                 <version>1.8</version>
366             </plugin>
367             <plugin>
368                 <groupId>org.apache.maven.plugins</groupId>
369                 <artifactId>maven-surefire-plugin</artifactId>
370                 <version>2.19</version>
371                 <configuration>
372                     <testFailureIgnore>true</testFailureIgnore>
373                     <includes>
374                         <include>**/*Spec*</include>
375                         <include>**/Test*.java</include>
376                         <include>**/*Test.java</include>
377                         <include>**/*TestCase.java</include>
378                         <include>**/Test*.scala</include>
379                         <include>**/*Test.scala</include>
380                         <include>**/*TestCase.scala</include>
381                     </includes>
382                 </configuration>
383             </plugin>
384         </plugins>
385     </build>
386
387     <repositories>
388         <repository>
389             <id>spring-milestones</id>
390             <name>Spring Milestones</name>
391             <url>https://repo.spring.io/milestone</url>
392             <snapshots>
393                 <enabled>false</enabled>
394             </snapshots>
395         </repository>
396     </repositories>
397
398     <pluginRepositories>
399         <pluginRepository>
400             <id>spring-milestones</id>
401             <name>Spring Milestones</name>
402             <url>https://repo.spring.io/milestone</url>
403             <snapshots>
404                 <enabled>false</enabled>
405             </snapshots>
406         </pluginRepository>
407     </pluginRepositories>
408 </project>