vnfmarket-be/vnf-sdk-marketplace/pom.xml

   1 <?xml version="1.0"?>
   2 <!-- Copyright 2017 Huawei Technologies Co., Ltd. Licensed under the Apache
   3     License, Version 2.0 (the "License"); you may not use this file except in
   4     compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
   5     Unless required by applicable law or agreed to in writing, software distributed
   6     under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
   7     OR CONDITIONS OF ANY KIND, either express or implied. See the License for
   8     the specific language governing permissions and limitations under the License. -->
   9 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  10     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  11     <parent>
  12         <groupId>org.onap.vnfsdk.refrepo</groupId>
  13         <artifactId>vnf-sdk-marketplace-core-parent</artifactId>
  14         <version>1.5.1-SNAPSHOT</version>
  15     </parent>
  16
  17     <modelVersion>4.0.0</modelVersion>
  18     <artifactId>vnf-sdk-marketplace</artifactId>
  19     <name>vnf-sdk-marketplace/vnf-sdk-marketplace</name>
  20     <packaging>war</packaging>
  21
  22     <properties>
  23         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
  24         <cxf.version>3.2.5</cxf.version>
  25         <!-- slf4j.version>1.6.1</slf4j.version> -->
  26         <maven.test.skip>false</maven.test.skip>
  27         <maven.test.failure.ignore>false</maven.test.failure.ignore>
  28         <swagger-ui.version>3.12.0</swagger-ui.version>
  29     </properties>
  30
  31
  32
  33     <dependencies>
  34     <!--  oclip -->
  35           <dependency>
  36             <groupId>org.onap.cli</groupId>
  37             <artifactId>oclip-grpc-client</artifactId>
  38             <version>5.0.2</version>
  39           </dependency>
  40         <dependency>
  41             <groupId>org.apache.cxf</groupId>
  42             <artifactId>cxf-rt-frontend-jaxrs</artifactId>
  43             <version>${cxf.version}</version>
  44             <exclusions>
  45                 <exclusion>
  46                     <groupId>com.fasterxml.woodstox</groupId>
  47                     <artifactId>woodstox-core</artifactId>
  48                 </exclusion>
  49             </exclusions>
  50         </dependency>
  51         <!-- added invulnerable version of woodstox-core -->
  52         <dependency>
  53             <groupId>com.fasterxml.woodstox</groupId>
  54             <artifactId>woodstox-core</artifactId>
  55             <version>5.3.0</version>
  56         </dependency>
  57         <dependency>
  58             <groupId>org.apache.cxf</groupId>
  59             <artifactId>cxf-rt-rs-client</artifactId>
  60             <version>${cxf.version}</version>
  61         </dependency>
  62         <dependency>
  63             <groupId>org.apache.cxf</groupId>
  64             <artifactId>cxf-rt-transports-http-hc</artifactId>
  65             <version>${cxf.version}</version>
  66         </dependency>
  67         <dependency>
  68             <groupId>org.apache.logging.log4j</groupId>
  69             <artifactId>log4j-slf4j-impl</artifactId>
  70             <version>2.13.0</version>
  71             <exclusions>
  72                 <exclusion>
  73                     <groupId>org.slf4j</groupId>
  74                     <artifactId>slf4j-ext</artifactId>
  75                 </exclusion>
  76             </exclusions>
  77         </dependency>
  78
  79         <dependency>
  80             <groupId>org.eclipse.persistence</groupId>
  81             <artifactId>javax.persistence</artifactId>
  82             <version>2.1.0</version>
  83         </dependency>
  84
  85         <dependency>
  86           <groupId>com.fasterxml.jackson.core</groupId>
  87           <artifactId>jackson-databind</artifactId>
  88             <version>2.10.0</version>
  89         </dependency>
  90         <!--excluded com.fasterxml.jackson.core:jackson-databind:jar:2.9.5
  91             CVE-2018-11307-->
  92         <dependency>
  93             <groupId>io.swagger</groupId>
  94             <artifactId>swagger-jersey2-jaxrs</artifactId>
  95             <version>1.5.19</version>
  96             <exclusions>
  97                 <exclusion>
  98                     <groupId>com.fasterxml.jackson.core</groupId>
  99                     <artifactId>jackson-databind</artifactId>
 100                 </exclusion>
 101             </exclusions>
 102         </dependency>
 103         <!-- jersey -->
 104 <!-- excluded jetty-util and added invulnerable version -->
 105         <dependency>
 106             <groupId>org.glassfish.jersey.containers</groupId>
 107             <artifactId>jersey-container-jetty-servlet</artifactId>
 108             <version>2.24.1</version>
 109                 <exclusions>
 110                 <exclusion>
 111                    <groupId>org.eclipse.jetty</groupId>
 112                    <artifactId>jetty-util</artifactId>
 113                </exclusion>
 114             </exclusions>
 115         </dependency>
 116 <!-- commons-codec excluded due to Security Issues:- Sonatype-2012-0050
 117         and added invulnerable commons-codec-1.13  -->
 118         <dependency>
 119             <groupId>org.apache.httpcomponents</groupId>
 120             <artifactId>httpmime</artifactId>
 121             <version>4.5.3</version>
 122            <exclusions>
 123                 <exclusion>
 124                     <groupId>commons-codec</groupId>
 125                     <artifactId>commons-codec</artifactId>
 126                 </exclusion>
 127            </exclusions>
 128         </dependency>
 129         <dependency>
 130             <groupId>commons-codec</groupId>
 131             <artifactId>commons-codec</artifactId>
 132             <version>1.13</version>
 133         </dependency>
 134         <!-- jetty -->
 135 <!-- Updated jetty-util,jetty-http,jetty-servlet and jetty-server
 136 due to Security Issues:- CVE-2019-10241,CVE-2019-10247,CVE-2019-10246
 137 -->
 138         <dependency>
 139             <groupId>org.eclipse.jetty</groupId>
 140             <artifactId>jetty-http</artifactId>
 141             <version>9.4.20.v20190813</version>
 142         </dependency>
 143         <dependency>
 144             <groupId>org.eclipse.jetty</groupId>
 145             <artifactId>jetty-servlet</artifactId>
 146             <version>9.4.20.v20190813</version>
 147         </dependency>
 148         <dependency>
 149             <groupId>org.eclipse.jetty</groupId>
 150             <artifactId>jetty-server</artifactId>
 151             <version>9.4.20.v20190813</version>
 152         </dependency>
 153         <dependency>
 154             <groupId>org.eclipse.jetty</groupId>
 155             <artifactId>jetty-util</artifactId>
 156             <version>9.4.20.v20190813</version>
 157         </dependency>
 158         <!-- consumer -->
 159         <dependency>
 160             <groupId>com.eclipsesource.jaxrs</groupId>
 161             <artifactId>consumer</artifactId>
 162             <exclusions>
 163                 <exclusion>
 164                     <groupId>com.eclipsesource.jaxrs</groupId>
 165                     <artifactId>jersey-all</artifactId>
 166                 </exclusion>
 167             </exclusions>
 168             <version>5.0</version>
 169         </dependency>
 170         <!-- gson -->
 171         <dependency>
 172             <groupId>com.google.code.gson</groupId>
 173             <artifactId>gson</artifactId>
 174             <version>2.8.2</version>
 175         </dependency>
 176         <dependency>
 177             <groupId>org.postgresql</groupId>
 178             <artifactId>postgresql</artifactId>
 179             <version>42.2.5</version>
 180         </dependency>
 181         <dependency>
 182             <groupId>org.mybatis</groupId>
 183             <artifactId>mybatis</artifactId>
 184             <version>3.2.7</version>
 185         </dependency>
 186         <!-- UT -->
 187         <dependency>
 188             <groupId>junit</groupId>
 189             <artifactId>junit</artifactId>
 190             <version>4.12</version>
 191             <scope>test</scope>
 192         </dependency>
 193         <dependency>
 194             <groupId>org.powermock</groupId>
 195             <artifactId>powermock-module-junit4</artifactId>
 196             <version>1.4.10</version>
 197             <scope>test</scope>
 198         </dependency>
 199         <dependency>
 200             <groupId>org.powermock</groupId>
 201             <artifactId>powermock-api-mockito</artifactId>
 202             <version>1.4.10</version>
 203             <scope>test</scope>
 204         </dependency>
 205         <dependency>
 206             <groupId>org.jmockit</groupId>
 207             <artifactId>jmockit</artifactId>
 208             <version>1.19</version>
 209             <scope>test</scope>
 210         </dependency>
 211         <dependency>
 212             <groupId>org.jmockit</groupId>
 213             <artifactId>jmockit-coverage</artifactId>
 214             <version>1.19</version>
 215             <scope>test</scope>
 216         </dependency>
 217         <dependency>
 218             <groupId>org.apache.ant</groupId>
 219             <artifactId>ant</artifactId>
 220             <version>1.8.2</version>
 221             <scope>test</scope>
 222         </dependency>
 223
 224
 225         <dependency>
 226             <groupId>org.apache.commons</groupId>
 227             <artifactId>commons-io</artifactId>
 228             <version>1.3.2</version>
 229         </dependency>
 230         <dependency>
 231             <groupId>commons-io</groupId>
 232             <artifactId>commons-io</artifactId>
 233             <version>2.4</version>
 234         </dependency>
 235         <dependency>
 236             <groupId>com.google.guava</groupId>
 237             <artifactId>guava</artifactId>
 238             <version>25.0-jre</version>
 239         </dependency>
 240
 241     </dependencies>
 242     <profiles>
 243         <profile>
 244             <id>all-tests</id>
 245             <properties>
 246                 <build.profile.id>all-tests</build.profile.id>
 247                 <skip.unit.tests>false</skip.unit.tests>
 248             </properties>
 249         </profile>
 250         <profile>
 251             <id>docker</id>
 252             <properties>
 253                 <maven.test.skip>true</maven.test.skip>
 254             </properties>
 255         </profile>
 256     </profiles>
 257     <build>
 258         <finalName>ROOT</finalName>
 259         <plugins>
 260             <!-- Used for unit tests -->
 261             <plugin>
 262                 <groupId>org.apache.maven.plugins</groupId>
 263                 <artifactId>maven-surefire-plugin</artifactId>
 264                 <version>2.20</version>
 265                 <configuration>
 266                     <forkMode>always</forkMode>
 267                     <argLine>${surefireArgLine}</argLine>
 268                     <skip>${maven.test.skip}</skip>
 269                     <testFailureIgnore>${maven.test.failure.ignore}</testFailureIgnore>
 270                     <!-- Excludes integration tests when unit tests are run. -->
 271                     <excludes>
 272                         <exclude>**/IT*.java</exclude>
 273                     </excludes>
 274                 </configuration>
 275             </plugin>
 276             <plugin>
 277                 <groupId>com.googlecode.maven-download-plugin</groupId>
 278                 <artifactId>download-maven-plugin</artifactId>
 279                 <version>1.2.1</version>
 280                 <executions>
 281                     <execution>
 282                         <id>swagger-ui</id>
 283                         <goals>
 284                             <goal>wget</goal>
 285                         </goals>
 286                         <configuration>
 287                             <url>https://github.com/swagger-api/swagger-ui/archive/master.tar.gz</url>
 288                             <unpack>true</unpack>
 289                             <outputDirectory>${project.build.directory}</outputDirectory>
 290                         </configuration>
 291                     </execution>
 292                 </executions>
 293             </plugin>
 294         </plugins>
 295     </build>
 296 </project>