vnfmarket-be/vnf-sdk-marketplace/pom.xml

   1 <?xml version="1.0"?>
   2 <!-- Copyright 2017 Huawei Technologies Co., Ltd. Licensed under the Apache
   3     License, Version 2.0 (the "License"); you may not use this file except in
   4     compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
   5     Unless required by applicable law or agreed to in writing, software distributed
   6     under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
   7     OR CONDITIONS OF ANY KIND, either express or implied. See the License for
   8     the specific language governing permissions and limitations under the License. -->
   9 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  10     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  11     <parent>
  12         <groupId>org.onap.vnfsdk.refrepo</groupId>
  13         <artifactId>vnf-sdk-marketplace-core-parent</artifactId>
  14         <version>1.6.4-SNAPSHOT</version>
  15     </parent>
  16
  17     <modelVersion>4.0.0</modelVersion>
  18     <artifactId>vnf-sdk-marketplace</artifactId>
  19     <name>vnf-sdk-marketplace/vnf-sdk-marketplace</name>
  20     <packaging>war</packaging>
  21
  22     <properties>
  23         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
  24         <cxf.version>3.2.5</cxf.version>
  25         <!-- slf4j.version>1.6.1</slf4j.version> -->
  26         <maven.test.skip>false</maven.test.skip>
  27         <maven.test.failure.ignore>false</maven.test.failure.ignore>
  28         <swagger-ui.version>3.12.0</swagger-ui.version>
  29         <jmockit.version>1.43</jmockit.version>
  30     </properties>
  31
  32
  33
  34     <dependencies>
  35     <!--  oclip -->
  36           <dependency>
  37             <groupId>org.onap.cli</groupId>
  38             <artifactId>oclip-grpc-client</artifactId>
  39             <version>6.0.0</version>
  40           </dependency>
  41         <dependency>
  42             <groupId>org.apache.cxf</groupId>
  43             <artifactId>cxf-rt-frontend-jaxrs</artifactId>
  44             <version>${cxf.version}</version>
  45             <exclusions>
  46                 <exclusion>
  47                     <groupId>com.fasterxml.woodstox</groupId>
  48                     <artifactId>woodstox-core</artifactId>
  49                 </exclusion>
  50             </exclusions>
  51         </dependency>
  52         <!-- added invulnerable version of woodstox-core -->
  53         <dependency>
  54             <groupId>com.fasterxml.woodstox</groupId>
  55             <artifactId>woodstox-core</artifactId>
  56             <version>5.3.0</version>
  57         </dependency>
  58         <dependency>
  59             <groupId>org.apache.cxf</groupId>
  60             <artifactId>cxf-rt-rs-client</artifactId>
  61             <version>${cxf.version}</version>
  62         </dependency>
  63         <dependency>
  64             <groupId>org.apache.cxf</groupId>
  65             <artifactId>cxf-rt-transports-http-hc</artifactId>
  66             <version>${cxf.version}</version>
  67         </dependency>
  68         <dependency>
  69             <groupId>org.apache.logging.log4j</groupId>
  70             <artifactId>log4j-slf4j-impl</artifactId>
  71             <version>2.13.3</version>
  72             <exclusions>
  73                 <exclusion>
  74                     <groupId>org.slf4j</groupId>
  75                     <artifactId>slf4j-ext</artifactId>
  76                 </exclusion>
  77             </exclusions>
  78         </dependency>
  79
  80         <dependency>
  81             <groupId>org.eclipse.persistence</groupId>
  82             <artifactId>javax.persistence</artifactId>
  83             <version>2.1.0</version>
  84         </dependency>
  85
  86         <dependency>
  87           <groupId>com.fasterxml.jackson.core</groupId>
  88           <artifactId>jackson-databind</artifactId>
  89             <version>2.10.0</version>
  90         </dependency>
  91         <!--excluded com.fasterxml.jackson.core:jackson-databind:jar:2.9.5
  92             CVE-2018-11307-->
  93         <dependency>
  94             <groupId>io.swagger</groupId>
  95             <artifactId>swagger-jersey2-jaxrs</artifactId>
  96             <version>1.5.19</version>
  97             <exclusions>
  98                 <exclusion>
  99                     <groupId>com.fasterxml.jackson.core</groupId>
 100                     <artifactId>jackson-databind</artifactId>
 101                 </exclusion>
 102                 <exclusion>
 103                     <groupId>com.fasterxml.jackson.dataformat</groupId>
 104                     <artifactId>jackson-dataformat-yaml</artifactId>
 105                 </exclusion>
 106             </exclusions>
 107         </dependency>
 108         <dependency>
 109             <groupId>com.fasterxml.jackson.dataformat</groupId>
 110             <artifactId>jackson-dataformat-yaml</artifactId>
 111             <version>2.9.5</version>
 112             <exclusions>
 113                 <exclusion>
 114                     <groupId>org.yaml</groupId>
 115                     <artifactId>snakeyaml</artifactId>
 116                 </exclusion>
 117             </exclusions>
 118         </dependency>
 119         <dependency>
 120             <groupId>org.yaml</groupId>
 121             <artifactId>snakeyaml</artifactId>
 122             <version>1.26</version>
 123         </dependency>
 124         <dependency>
 125             <groupId>cn.hutool</groupId>
 126             <artifactId>hutool-all</artifactId>
 127             <version>5.3.10</version>
 128         </dependency>
 129         <!-- jersey -->
 130 <!-- excluded jetty-util and added invulnerable version -->
 131         <dependency>
 132             <groupId>org.glassfish.jersey.containers</groupId>
 133             <artifactId>jersey-container-jetty-servlet</artifactId>
 134             <version>2.24.1</version>
 135                 <exclusions>
 136                 <exclusion>
 137                    <groupId>org.eclipse.jetty</groupId>
 138                    <artifactId>jetty-util</artifactId>
 139                </exclusion>
 140             </exclusions>
 141         </dependency>
 142 <!-- commons-codec excluded due to Security Issues:- Sonatype-2012-0050
 143         and added invulnerable commons-codec-1.13  -->
 144         <dependency>
 145             <groupId>org.apache.httpcomponents</groupId>
 146             <artifactId>httpmime</artifactId>
 147             <version>4.5.3</version>
 148            <exclusions>
 149                 <exclusion>
 150                     <groupId>commons-codec</groupId>
 151                     <artifactId>commons-codec</artifactId>
 152                 </exclusion>
 153            </exclusions>
 154         </dependency>
 155         <dependency>
 156             <groupId>commons-codec</groupId>
 157             <artifactId>commons-codec</artifactId>
 158             <version>1.14</version>
 159         </dependency>
 160         <!-- jetty -->
 161 <!-- Updated jetty-util,jetty-http,jetty-servlet and jetty-server
 162 due to Security Issues:- CVE-2019-10241,CVE-2019-10247,CVE-2019-10246
 163 -->
 164         <dependency>
 165             <groupId>org.eclipse.jetty</groupId>
 166             <artifactId>jetty-http</artifactId>
 167             <version>9.4.20.v20190813</version>
 168         </dependency>
 169         <dependency>
 170             <groupId>org.eclipse.jetty</groupId>
 171             <artifactId>jetty-servlet</artifactId>
 172             <version>9.4.20.v20190813</version>
 173         </dependency>
 174         <dependency>
 175             <groupId>org.eclipse.jetty</groupId>
 176             <artifactId>jetty-server</artifactId>
 177             <version>9.4.20.v20190813</version>
 178         </dependency>
 179         <dependency>
 180             <groupId>org.eclipse.jetty</groupId>
 181             <artifactId>jetty-util</artifactId>
 182             <version>9.4.20.v20190813</version>
 183         </dependency>
 184         <!-- consumer -->
 185         <dependency>
 186             <groupId>com.eclipsesource.jaxrs</groupId>
 187             <artifactId>consumer</artifactId>
 188             <exclusions>
 189                 <exclusion>
 190                     <groupId>com.eclipsesource.jaxrs</groupId>
 191                     <artifactId>jersey-all</artifactId>
 192                 </exclusion>
 193             </exclusions>
 194             <version>5.0</version>
 195         </dependency>
 196         <!-- gson -->
 197         <dependency>
 198             <groupId>com.google.code.gson</groupId>
 199             <artifactId>gson</artifactId>
 200             <version>2.8.2</version>
 201         </dependency>
 202         <dependency>
 203             <groupId>org.postgresql</groupId>
 204             <artifactId>postgresql</artifactId>
 205             <version>42.2.13</version>
 206         </dependency>
 207         <dependency>
 208             <groupId>org.mybatis</groupId>
 209             <artifactId>mybatis</artifactId>
 210             <version>3.2.7</version>
 211         </dependency>
 212         <dependency>
 213             <groupId>javax.activation</groupId>
 214             <artifactId>javax.activation-api</artifactId>
 215             <version>${javax.activation-api.version}</version>
 216         </dependency>
 217         <dependency>
 218             <groupId>javax.xml.bind</groupId>
 219             <artifactId>jaxb-api</artifactId>
 220             <version>${jaxb-api.version}</version>
 221         </dependency>
 222         <!-- UT -->
 223         <dependency>
 224             <groupId>junit</groupId>
 225             <artifactId>junit</artifactId>
 226             <version>4.12</version>
 227             <scope>test</scope>
 228         </dependency>
 229         <dependency>
 230             <groupId>org.powermock</groupId>
 231             <artifactId>powermock-module-junit4</artifactId>
 232             <version>1.4.10</version>
 233             <scope>test</scope>
 234         </dependency>
 235         <dependency>
 236             <groupId>org.powermock</groupId>
 237             <artifactId>powermock-api-mockito</artifactId>
 238             <version>1.4.10</version>
 239             <scope>test</scope>
 240         </dependency>
 241         <dependency>
 242             <groupId>org.jmockit</groupId>
 243             <artifactId>jmockit</artifactId>
 244             <version>${jmockit.version}</version>
 245             <scope>test</scope>
 246         </dependency>
 247         <dependency>
 248             <groupId>org.jmockit</groupId>
 249             <artifactId>jmockit-coverage</artifactId>
 250             <version>1.19</version>
 251             <scope>test</scope>
 252         </dependency>
 253         <dependency>
 254             <groupId>org.apache.ant</groupId>
 255             <artifactId>ant</artifactId>
 256             <version>1.8.2</version>
 257             <scope>test</scope>
 258         </dependency>
 259         <dependency>
 260             <groupId>commons-io</groupId>
 261             <artifactId>commons-io</artifactId>
 262             <version>2.7</version>
 263         </dependency>
 264         <dependency>
 265             <groupId>com.google.guava</groupId>
 266             <artifactId>guava</artifactId>
 267             <version>25.0-jre</version>
 268         </dependency>
 269
 270     </dependencies>
 271     <profiles>
 272         <profile>
 273             <id>all-tests</id>
 274             <properties>
 275                 <build.profile.id>all-tests</build.profile.id>
 276                 <skip.unit.tests>false</skip.unit.tests>
 277             </properties>
 278         </profile>
 279         <profile>
 280             <id>docker</id>
 281             <properties>
 282                 <maven.test.skip>true</maven.test.skip>
 283             </properties>
 284         </profile>
 285     </profiles>
 286     <build>
 287         <finalName>ROOT</finalName>
 288         <plugins>
 289             <!-- Used for unit tests -->
 290             <plugin>
 291                 <groupId>org.apache.maven.plugins</groupId>
 292                 <artifactId>maven-surefire-plugin</artifactId>
 293                 <version>2.20</version>
 294                 <configuration>
 295                     <forkMode>always</forkMode>
 296                     <argLine>
 297                         -javaagent:${settings.localRepository}/org/jmockit/jmockit/${jmockit.version}/jmockit-${jmockit.version}.jar
 298                         ${surefireArgLine}
 299                     </argLine>
 300                     <skip>${maven.test.skip}</skip>
 301                     <testFailureIgnore>${maven.test.failure.ignore}</testFailureIgnore>
 302                     <!-- Excludes integration tests when unit tests are run. -->
 303                     <excludes>
 304                         <exclude>**/IT*.java</exclude>
 305                     </excludes>
 306                 </configuration>
 307             </plugin>
 308             <plugin>
 309                 <groupId>com.googlecode.maven-download-plugin</groupId>
 310                 <artifactId>download-maven-plugin</artifactId>
 311                 <version>1.2.1</version>
 312                 <executions>
 313                     <execution>
 314                         <id>swagger-ui</id>
 315                         <goals>
 316                             <goal>wget</goal>
 317                         </goals>
 318                         <configuration>
 319                             <url>https://github.com/swagger-api/swagger-ui/archive/master.tar.gz</url>
 320                             <unpack>true</unpack>
 321                             <outputDirectory>${project.build.directory}</outputDirectory>
 322                         </configuration>
 323                     </execution>
 324                 </executions>
 325             </plugin>
 326         </plugins>
 327     </build>
 328 </project>