2 <!-- Copyright 2017 Huawei Technologies Co., Ltd. Licensed under the Apache
3 License, Version 2.0 (the "License"); you may not use this file except in
4 compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
5 Unless required by applicable law or agreed to in writing, software distributed
6 under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
7 OR CONDITIONS OF ANY KIND, either express or implied. See the License for
8 the specific language governing permissions and limitations under the License. -->
9 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
10 xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
12 <groupId>org.onap.vnfsdk.refrepo</groupId>
13 <artifactId>vnf-sdk-marketplace-core-parent</artifactId>
14 <version>1.6.3-SNAPSHOT</version>
17 <modelVersion>4.0.0</modelVersion>
18 <artifactId>vnf-sdk-marketplace</artifactId>
19 <name>vnf-sdk-marketplace/vnf-sdk-marketplace</name>
20 <packaging>war</packaging>
23 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
24 <cxf.version>3.2.5</cxf.version>
25 <!-- slf4j.version>1.6.1</slf4j.version> -->
26 <maven.test.skip>false</maven.test.skip>
27 <maven.test.failure.ignore>false</maven.test.failure.ignore>
28 <swagger-ui.version>3.12.0</swagger-ui.version>
29 <jmockit.version>1.43</jmockit.version>
37 <groupId>org.onap.cli</groupId>
38 <artifactId>oclip-grpc-client</artifactId>
39 <version>6.0.0</version>
42 <groupId>org.apache.cxf</groupId>
43 <artifactId>cxf-rt-frontend-jaxrs</artifactId>
44 <version>${cxf.version}</version>
47 <groupId>com.fasterxml.woodstox</groupId>
48 <artifactId>woodstox-core</artifactId>
52 <!-- added invulnerable version of woodstox-core -->
54 <groupId>com.fasterxml.woodstox</groupId>
55 <artifactId>woodstox-core</artifactId>
56 <version>5.3.0</version>
59 <groupId>org.apache.cxf</groupId>
60 <artifactId>cxf-rt-rs-client</artifactId>
61 <version>${cxf.version}</version>
64 <groupId>org.apache.cxf</groupId>
65 <artifactId>cxf-rt-transports-http-hc</artifactId>
66 <version>${cxf.version}</version>
69 <groupId>org.apache.logging.log4j</groupId>
70 <artifactId>log4j-slf4j-impl</artifactId>
71 <version>2.13.3</version>
74 <groupId>org.slf4j</groupId>
75 <artifactId>slf4j-ext</artifactId>
81 <groupId>org.eclipse.persistence</groupId>
82 <artifactId>javax.persistence</artifactId>
83 <version>2.1.0</version>
87 <groupId>com.fasterxml.jackson.core</groupId>
88 <artifactId>jackson-databind</artifactId>
89 <version>2.10.0</version>
91 <!--excluded com.fasterxml.jackson.core:jackson-databind:jar:2.9.5
94 <groupId>io.swagger</groupId>
95 <artifactId>swagger-jersey2-jaxrs</artifactId>
96 <version>1.5.19</version>
99 <groupId>com.fasterxml.jackson.core</groupId>
100 <artifactId>jackson-databind</artifactId>
103 <groupId>com.fasterxml.jackson.dataformat</groupId>
104 <artifactId>jackson-dataformat-yaml</artifactId>
109 <groupId>com.fasterxml.jackson.dataformat</groupId>
110 <artifactId>jackson-dataformat-yaml</artifactId>
111 <version>2.9.5</version>
114 <groupId>org.yaml</groupId>
115 <artifactId>snakeyaml</artifactId>
120 <groupId>org.yaml</groupId>
121 <artifactId>snakeyaml</artifactId>
122 <version>1.26</version>
125 <groupId>cn.hutool</groupId>
126 <artifactId>hutool-all</artifactId>
127 <version>5.3.10</version>
130 <!-- excluded jetty-util and added invulnerable version -->
132 <groupId>org.glassfish.jersey.containers</groupId>
133 <artifactId>jersey-container-jetty-servlet</artifactId>
134 <version>2.24.1</version>
137 <groupId>org.eclipse.jetty</groupId>
138 <artifactId>jetty-util</artifactId>
142 <!-- commons-codec excluded due to Security Issues:- Sonatype-2012-0050
143 and added invulnerable commons-codec-1.13 -->
145 <groupId>org.apache.httpcomponents</groupId>
146 <artifactId>httpmime</artifactId>
147 <version>4.5.3</version>
150 <groupId>commons-codec</groupId>
151 <artifactId>commons-codec</artifactId>
156 <groupId>commons-codec</groupId>
157 <artifactId>commons-codec</artifactId>
158 <version>1.14</version>
161 <!-- Updated jetty-util,jetty-http,jetty-servlet and jetty-server
162 due to Security Issues:- CVE-2019-10241,CVE-2019-10247,CVE-2019-10246
165 <groupId>org.eclipse.jetty</groupId>
166 <artifactId>jetty-http</artifactId>
167 <version>9.4.20.v20190813</version>
170 <groupId>org.eclipse.jetty</groupId>
171 <artifactId>jetty-servlet</artifactId>
172 <version>9.4.20.v20190813</version>
175 <groupId>org.eclipse.jetty</groupId>
176 <artifactId>jetty-server</artifactId>
177 <version>9.4.20.v20190813</version>
180 <groupId>org.eclipse.jetty</groupId>
181 <artifactId>jetty-util</artifactId>
182 <version>9.4.20.v20190813</version>
186 <groupId>com.eclipsesource.jaxrs</groupId>
187 <artifactId>consumer</artifactId>
190 <groupId>com.eclipsesource.jaxrs</groupId>
191 <artifactId>jersey-all</artifactId>
194 <version>5.0</version>
198 <groupId>com.google.code.gson</groupId>
199 <artifactId>gson</artifactId>
200 <version>2.8.2</version>
203 <groupId>org.postgresql</groupId>
204 <artifactId>postgresql</artifactId>
205 <version>42.2.13</version>
208 <groupId>org.mybatis</groupId>
209 <artifactId>mybatis</artifactId>
210 <version>3.2.7</version>
213 <groupId>javax.activation</groupId>
214 <artifactId>javax.activation-api</artifactId>
215 <version>${javax.activation-api.version}</version>
218 <groupId>javax.xml.bind</groupId>
219 <artifactId>jaxb-api</artifactId>
220 <version>${jaxb-api.version}</version>
224 <groupId>junit</groupId>
225 <artifactId>junit</artifactId>
226 <version>4.12</version>
230 <groupId>org.powermock</groupId>
231 <artifactId>powermock-module-junit4</artifactId>
232 <version>1.4.10</version>
236 <groupId>org.powermock</groupId>
237 <artifactId>powermock-api-mockito</artifactId>
238 <version>1.4.10</version>
242 <groupId>org.jmockit</groupId>
243 <artifactId>jmockit</artifactId>
244 <version>${jmockit.version}</version>
248 <groupId>org.jmockit</groupId>
249 <artifactId>jmockit-coverage</artifactId>
250 <version>1.19</version>
254 <groupId>org.apache.ant</groupId>
255 <artifactId>ant</artifactId>
256 <version>1.8.2</version>
260 <groupId>commons-io</groupId>
261 <artifactId>commons-io</artifactId>
262 <version>2.7</version>
265 <groupId>com.google.guava</groupId>
266 <artifactId>guava</artifactId>
267 <version>25.0-jre</version>
275 <build.profile.id>all-tests</build.profile.id>
276 <skip.unit.tests>false</skip.unit.tests>
282 <maven.test.skip>true</maven.test.skip>
287 <finalName>ROOT</finalName>
289 <!-- Used for unit tests -->
291 <groupId>org.apache.maven.plugins</groupId>
292 <artifactId>maven-surefire-plugin</artifactId>
293 <version>2.20</version>
295 <forkMode>always</forkMode>
297 -javaagent:${settings.localRepository}/org/jmockit/jmockit/${jmockit.version}/jmockit-${jmockit.version}.jar
300 <skip>${maven.test.skip}</skip>
301 <testFailureIgnore>${maven.test.failure.ignore}</testFailureIgnore>
302 <!-- Excludes integration tests when unit tests are run. -->
304 <exclude>**/IT*.java</exclude>
309 <groupId>com.googlecode.maven-download-plugin</groupId>
310 <artifactId>download-maven-plugin</artifactId>
311 <version>1.2.1</version>
319 <url>https://github.com/swagger-api/swagger-ui/archive/master.tar.gz</url>
320 <unpack>true</unpack>
321 <outputDirectory>${project.build.directory}</outputDirectory>