vnfmarket-be/vnf-sdk-marketplace/pom.xml

   1 <?xml version="1.0"?>
   2 <!-- Copyright 2017 Huawei Technologies Co., Ltd. Licensed under the Apache
   3     License, Version 2.0 (the "License"); you may not use this file except in
   4     compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
   5     Unless required by applicable law or agreed to in writing, software distributed
   6     under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
   7     OR CONDITIONS OF ANY KIND, either express or implied. See the License for
   8     the specific language governing permissions and limitations under the License. -->
   9 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  10     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  11     <parent>
  12         <groupId>org.onap.vnfsdk.refrepo</groupId>
  13         <artifactId>vnf-sdk-marketplace-core-parent</artifactId>
  14         <version>1.5.1-SNAPSHOT</version>
  15     </parent>
  16
  17     <modelVersion>4.0.0</modelVersion>
  18     <artifactId>vnf-sdk-marketplace</artifactId>
  19     <name>vnf-sdk-marketplace/vnf-sdk-marketplace</name>
  20     <packaging>war</packaging>
  21
  22     <properties>
  23         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
  24         <cxf.version>3.2.5</cxf.version>
  25         <!-- slf4j.version>1.6.1</slf4j.version> -->
  26         <maven.test.skip>false</maven.test.skip>
  27         <maven.test.failure.ignore>false</maven.test.failure.ignore>
  28         <swagger-ui.version>3.12.0</swagger-ui.version>
  29         <jmockit.version>1.43</jmockit.version>
  30     </properties>
  31
  32
  33
  34     <dependencies>
  35     <!--  oclip -->
  36           <dependency>
  37             <groupId>org.onap.cli</groupId>
  38             <artifactId>oclip-grpc-client</artifactId>
  39             <version>5.0.3</version>
  40           </dependency>
  41         <dependency>
  42             <groupId>org.apache.cxf</groupId>
  43             <artifactId>cxf-rt-frontend-jaxrs</artifactId>
  44             <version>${cxf.version}</version>
  45             <exclusions>
  46                 <exclusion>
  47                     <groupId>com.fasterxml.woodstox</groupId>
  48                     <artifactId>woodstox-core</artifactId>
  49                 </exclusion>
  50             </exclusions>
  51         </dependency>
  52         <!-- added invulnerable version of woodstox-core -->
  53         <dependency>
  54             <groupId>com.fasterxml.woodstox</groupId>
  55             <artifactId>woodstox-core</artifactId>
  56             <version>5.3.0</version>
  57         </dependency>
  58         <dependency>
  59             <groupId>org.apache.cxf</groupId>
  60             <artifactId>cxf-rt-rs-client</artifactId>
  61             <version>${cxf.version}</version>
  62         </dependency>
  63         <dependency>
  64             <groupId>org.apache.cxf</groupId>
  65             <artifactId>cxf-rt-transports-http-hc</artifactId>
  66             <version>${cxf.version}</version>
  67         </dependency>
  68         <dependency>
  69             <groupId>org.apache.logging.log4j</groupId>
  70             <artifactId>log4j-slf4j-impl</artifactId>
  71             <version>2.13.0</version>
  72             <exclusions>
  73                 <exclusion>
  74                     <groupId>org.slf4j</groupId>
  75                     <artifactId>slf4j-ext</artifactId>
  76                 </exclusion>
  77             </exclusions>
  78         </dependency>
  79
  80         <dependency>
  81             <groupId>org.eclipse.persistence</groupId>
  82             <artifactId>javax.persistence</artifactId>
  83             <version>2.1.0</version>
  84         </dependency>
  85
  86         <dependency>
  87           <groupId>com.fasterxml.jackson.core</groupId>
  88           <artifactId>jackson-databind</artifactId>
  89             <version>2.10.0</version>
  90         </dependency>
  91         <!--excluded com.fasterxml.jackson.core:jackson-databind:jar:2.9.5
  92             CVE-2018-11307-->
  93         <dependency>
  94             <groupId>io.swagger</groupId>
  95             <artifactId>swagger-jersey2-jaxrs</artifactId>
  96             <version>1.5.19</version>
  97             <exclusions>
  98                 <exclusion>
  99                     <groupId>com.fasterxml.jackson.core</groupId>
 100                     <artifactId>jackson-databind</artifactId>
 101                 </exclusion>
 102                 <exclusion>
 103                     <groupId>com.fasterxml.jackson.dataformat</groupId>
 104                     <artifactId>jackson-dataformat-yaml</artifactId>
 105                 </exclusion>
 106             </exclusions>
 107         </dependency>
 108         <dependency>
 109             <groupId>com.fasterxml.jackson.dataformat</groupId>
 110             <artifactId>jackson-dataformat-yaml</artifactId>
 111             <version>2.9.5</version>
 112             <exclusions>
 113                 <exclusion>
 114                     <groupId>org.yaml</groupId>
 115                     <artifactId>snakeyaml</artifactId>
 116                 </exclusion>
 117             </exclusions>
 118         </dependency>
 119         <dependency>
 120             <groupId>org.yaml</groupId>
 121             <artifactId>snakeyaml</artifactId>
 122             <version>1.26</version>
 123         </dependency>
 124         <!-- jersey -->
 125 <!-- excluded jetty-util and added invulnerable version -->
 126         <dependency>
 127             <groupId>org.glassfish.jersey.containers</groupId>
 128             <artifactId>jersey-container-jetty-servlet</artifactId>
 129             <version>2.24.1</version>
 130                 <exclusions>
 131                 <exclusion>
 132                    <groupId>org.eclipse.jetty</groupId>
 133                    <artifactId>jetty-util</artifactId>
 134                </exclusion>
 135             </exclusions>
 136         </dependency>
 137 <!-- commons-codec excluded due to Security Issues:- Sonatype-2012-0050
 138         and added invulnerable commons-codec-1.13  -->
 139         <dependency>
 140             <groupId>org.apache.httpcomponents</groupId>
 141             <artifactId>httpmime</artifactId>
 142             <version>4.5.3</version>
 143            <exclusions>
 144                 <exclusion>
 145                     <groupId>commons-codec</groupId>
 146                     <artifactId>commons-codec</artifactId>
 147                 </exclusion>
 148            </exclusions>
 149         </dependency>
 150         <dependency>
 151             <groupId>commons-codec</groupId>
 152             <artifactId>commons-codec</artifactId>
 153             <version>1.14</version>
 154         </dependency>
 155         <!-- jetty -->
 156 <!-- Updated jetty-util,jetty-http,jetty-servlet and jetty-server
 157 due to Security Issues:- CVE-2019-10241,CVE-2019-10247,CVE-2019-10246
 158 -->
 159         <dependency>
 160             <groupId>org.eclipse.jetty</groupId>
 161             <artifactId>jetty-http</artifactId>
 162             <version>9.4.20.v20190813</version>
 163         </dependency>
 164         <dependency>
 165             <groupId>org.eclipse.jetty</groupId>
 166             <artifactId>jetty-servlet</artifactId>
 167             <version>9.4.20.v20190813</version>
 168         </dependency>
 169         <dependency>
 170             <groupId>org.eclipse.jetty</groupId>
 171             <artifactId>jetty-server</artifactId>
 172             <version>9.4.20.v20190813</version>
 173         </dependency>
 174         <dependency>
 175             <groupId>org.eclipse.jetty</groupId>
 176             <artifactId>jetty-util</artifactId>
 177             <version>9.4.20.v20190813</version>
 178         </dependency>
 179         <!-- consumer -->
 180         <dependency>
 181             <groupId>com.eclipsesource.jaxrs</groupId>
 182             <artifactId>consumer</artifactId>
 183             <exclusions>
 184                 <exclusion>
 185                     <groupId>com.eclipsesource.jaxrs</groupId>
 186                     <artifactId>jersey-all</artifactId>
 187                 </exclusion>
 188             </exclusions>
 189             <version>5.0</version>
 190         </dependency>
 191         <!-- gson -->
 192         <dependency>
 193             <groupId>com.google.code.gson</groupId>
 194             <artifactId>gson</artifactId>
 195             <version>2.8.2</version>
 196         </dependency>
 197         <dependency>
 198             <groupId>org.postgresql</groupId>
 199             <artifactId>postgresql</artifactId>
 200             <version>42.2.13</version>
 201         </dependency>
 202         <dependency>
 203             <groupId>org.mybatis</groupId>
 204             <artifactId>mybatis</artifactId>
 205             <version>3.2.7</version>
 206         </dependency>
 207         <dependency>
 208             <groupId>javax.activation</groupId>
 209             <artifactId>javax.activation-api</artifactId>
 210             <version>${javax.activation-api.version}</version>
 211         </dependency>
 212         <dependency>
 213             <groupId>javax.xml.bind</groupId>
 214             <artifactId>jaxb-api</artifactId>
 215             <version>${jaxb-api.version}</version>
 216         </dependency>
 217         <!-- UT -->
 218         <dependency>
 219             <groupId>junit</groupId>
 220             <artifactId>junit</artifactId>
 221             <version>4.12</version>
 222             <scope>test</scope>
 223         </dependency>
 224         <dependency>
 225             <groupId>org.powermock</groupId>
 226             <artifactId>powermock-module-junit4</artifactId>
 227             <version>1.4.10</version>
 228             <scope>test</scope>
 229         </dependency>
 230         <dependency>
 231             <groupId>org.powermock</groupId>
 232             <artifactId>powermock-api-mockito</artifactId>
 233             <version>1.4.10</version>
 234             <scope>test</scope>
 235         </dependency>
 236         <dependency>
 237             <groupId>org.jmockit</groupId>
 238             <artifactId>jmockit</artifactId>
 239             <version>${jmockit.version}</version>
 240             <scope>test</scope>
 241         </dependency>
 242         <dependency>
 243             <groupId>org.jmockit</groupId>
 244             <artifactId>jmockit-coverage</artifactId>
 245             <version>1.19</version>
 246             <scope>test</scope>
 247         </dependency>
 248         <dependency>
 249             <groupId>org.apache.ant</groupId>
 250             <artifactId>ant</artifactId>
 251             <version>1.8.2</version>
 252             <scope>test</scope>
 253         </dependency>
 254
 255
 256         <dependency>
 257             <groupId>org.apache.commons</groupId>
 258             <artifactId>commons-io</artifactId>
 259             <version>1.3.2</version>
 260         </dependency>
 261         <dependency>
 262             <groupId>commons-io</groupId>
 263             <artifactId>commons-io</artifactId>
 264             <version>2.4</version>
 265         </dependency>
 266         <dependency>
 267             <groupId>com.google.guava</groupId>
 268             <artifactId>guava</artifactId>
 269             <version>25.0-jre</version>
 270         </dependency>
 271
 272     </dependencies>
 273     <profiles>
 274         <profile>
 275             <id>all-tests</id>
 276             <properties>
 277                 <build.profile.id>all-tests</build.profile.id>
 278                 <skip.unit.tests>false</skip.unit.tests>
 279             </properties>
 280         </profile>
 281         <profile>
 282             <id>docker</id>
 283             <properties>
 284                 <maven.test.skip>true</maven.test.skip>
 285             </properties>
 286         </profile>
 287     </profiles>
 288     <build>
 289         <finalName>ROOT</finalName>
 290         <plugins>
 291             <!-- Used for unit tests -->
 292             <plugin>
 293                 <groupId>org.apache.maven.plugins</groupId>
 294                 <artifactId>maven-surefire-plugin</artifactId>
 295                 <version>2.20</version>
 296                 <configuration>
 297                     <forkMode>always</forkMode>
 298                     <argLine>
 299                         -javaagent:${settings.localRepository}/org/jmockit/jmockit/${jmockit.version}/jmockit-${jmockit.version}.jar
 300                         <!--${surefireArgLine}-->
 301                     </argLine>
 302                     <skip>${maven.test.skip}</skip>
 303                     <testFailureIgnore>${maven.test.failure.ignore}</testFailureIgnore>
 304                     <!-- Excludes integration tests when unit tests are run. -->
 305                     <excludes>
 306                         <exclude>**/IT*.java</exclude>
 307                     </excludes>
 308                 </configuration>
 309             </plugin>
 310             <plugin>
 311                 <groupId>com.googlecode.maven-download-plugin</groupId>
 312                 <artifactId>download-maven-plugin</artifactId>
 313                 <version>1.2.1</version>
 314                 <executions>
 315                     <execution>
 316                         <id>swagger-ui</id>
 317                         <goals>
 318                             <goal>wget</goal>
 319                         </goals>
 320                         <configuration>
 321                             <url>https://github.com/swagger-api/swagger-ui/archive/master.tar.gz</url>
 322                             <unpack>true</unpack>
 323                             <outputDirectory>${project.build.directory}</outputDirectory>
 324                         </configuration>
 325                     </execution>
 326                 </executions>
 327             </plugin>
 328         </plugins>
 329     </build>
 330 </project>