vnfmarket-be/vnf-sdk-marketplace/pom.xml

   1 <?xml version="1.0"?>
   2 <!-- Copyright 2017 Huawei Technologies Co., Ltd. Licensed under the Apache
   3     License, Version 2.0 (the "License"); you may not use this file except in
   4     compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
   5     Unless required by applicable law or agreed to in writing, software distributed
   6     under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
   7     OR CONDITIONS OF ANY KIND, either express or implied. See the License for
   8     the specific language governing permissions and limitations under the License. -->
   9 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  10     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  11     <parent>
  12         <groupId>org.onap.vnfsdk.refrepo</groupId>
  13         <artifactId>vnf-sdk-marketplace-core-parent</artifactId>
  14         <version>1.5.1-SNAPSHOT</version>
  15     </parent>
  16
  17     <modelVersion>4.0.0</modelVersion>
  18     <artifactId>vnf-sdk-marketplace</artifactId>
  19     <name>vnf-sdk-marketplace/vnf-sdk-marketplace</name>
  20     <packaging>war</packaging>
  21
  22     <properties>
  23         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
  24         <cxf.version>3.2.5</cxf.version>
  25         <!-- slf4j.version>1.6.1</slf4j.version> -->
  26         <maven.test.skip>false</maven.test.skip>
  27         <maven.test.failure.ignore>false</maven.test.failure.ignore>
  28         <swagger-ui.version>3.12.0</swagger-ui.version>
  29         <jmockit.version>1.43</jmockit.version>
  30     </properties>
  31
  32
  33
  34     <dependencies>
  35           <dependency>
  36              <groupId>javax.xml.bind</groupId>
  37              <artifactId>jaxb-api</artifactId>
  38              <version>2.3.1</version>
  39           </dependency>
  40     <!--  oclip -->
  41           <dependency>
  42             <groupId>org.onap.cli</groupId>
  43             <artifactId>oclip-grpc-client</artifactId>
  44             <version>5.0.3</version>
  45           </dependency>
  46         <dependency>
  47             <groupId>org.apache.cxf</groupId>
  48             <artifactId>cxf-rt-frontend-jaxrs</artifactId>
  49             <version>${cxf.version}</version>
  50             <exclusions>
  51                 <exclusion>
  52                     <groupId>com.fasterxml.woodstox</groupId>
  53                     <artifactId>woodstox-core</artifactId>
  54                 </exclusion>
  55             </exclusions>
  56         </dependency>
  57         <!-- added invulnerable version of woodstox-core -->
  58         <dependency>
  59             <groupId>com.fasterxml.woodstox</groupId>
  60             <artifactId>woodstox-core</artifactId>
  61             <version>5.3.0</version>
  62         </dependency>
  63         <dependency>
  64             <groupId>org.apache.cxf</groupId>
  65             <artifactId>cxf-rt-rs-client</artifactId>
  66             <version>${cxf.version}</version>
  67         </dependency>
  68         <dependency>
  69             <groupId>org.apache.cxf</groupId>
  70             <artifactId>cxf-rt-transports-http-hc</artifactId>
  71             <version>${cxf.version}</version>
  72         </dependency>
  73         <dependency>
  74             <groupId>org.apache.logging.log4j</groupId>
  75             <artifactId>log4j-slf4j-impl</artifactId>
  76             <version>2.13.0</version>
  77             <exclusions>
  78                 <exclusion>
  79                     <groupId>org.slf4j</groupId>
  80                     <artifactId>slf4j-ext</artifactId>
  81                 </exclusion>
  82             </exclusions>
  83         </dependency>
  84
  85         <dependency>
  86             <groupId>org.eclipse.persistence</groupId>
  87             <artifactId>javax.persistence</artifactId>
  88             <version>2.1.0</version>
  89         </dependency>
  90
  91         <dependency>
  92           <groupId>com.fasterxml.jackson.core</groupId>
  93           <artifactId>jackson-databind</artifactId>
  94             <version>2.10.0</version>
  95         </dependency>
  96         <!--excluded com.fasterxml.jackson.core:jackson-databind:jar:2.9.5
  97             CVE-2018-11307-->
  98         <dependency>
  99             <groupId>io.swagger</groupId>
 100             <artifactId>swagger-jersey2-jaxrs</artifactId>
 101             <version>1.5.19</version>
 102             <exclusions>
 103                 <exclusion>
 104                     <groupId>com.fasterxml.jackson.core</groupId>
 105                     <artifactId>jackson-databind</artifactId>
 106                 </exclusion>
 107             </exclusions>
 108         </dependency>
 109         <!-- jersey -->
 110 <!-- excluded jetty-util and added invulnerable version -->
 111         <dependency>
 112             <groupId>org.glassfish.jersey.containers</groupId>
 113             <artifactId>jersey-container-jetty-servlet</artifactId>
 114             <version>2.24.1</version>
 115                 <exclusions>
 116                 <exclusion>
 117                    <groupId>org.eclipse.jetty</groupId>
 118                    <artifactId>jetty-util</artifactId>
 119                </exclusion>
 120             </exclusions>
 121         </dependency>
 122 <!-- commons-codec excluded due to Security Issues:- Sonatype-2012-0050
 123         and added invulnerable commons-codec-1.13  -->
 124         <dependency>
 125             <groupId>org.apache.httpcomponents</groupId>
 126             <artifactId>httpmime</artifactId>
 127             <version>4.5.3</version>
 128            <exclusions>
 129                 <exclusion>
 130                     <groupId>commons-codec</groupId>
 131                     <artifactId>commons-codec</artifactId>
 132                 </exclusion>
 133            </exclusions>
 134         </dependency>
 135         <dependency>
 136             <groupId>commons-codec</groupId>
 137             <artifactId>commons-codec</artifactId>
 138             <version>1.14</version>
 139         </dependency>
 140         <!-- jetty -->
 141 <!-- Updated jetty-util,jetty-http,jetty-servlet and jetty-server
 142 due to Security Issues:- CVE-2019-10241,CVE-2019-10247,CVE-2019-10246
 143 -->
 144         <dependency>
 145             <groupId>org.eclipse.jetty</groupId>
 146             <artifactId>jetty-http</artifactId>
 147             <version>9.4.20.v20190813</version>
 148         </dependency>
 149         <dependency>
 150             <groupId>org.eclipse.jetty</groupId>
 151             <artifactId>jetty-servlet</artifactId>
 152             <version>9.4.20.v20190813</version>
 153         </dependency>
 154         <dependency>
 155             <groupId>org.eclipse.jetty</groupId>
 156             <artifactId>jetty-server</artifactId>
 157             <version>9.4.20.v20190813</version>
 158         </dependency>
 159         <dependency>
 160             <groupId>org.eclipse.jetty</groupId>
 161             <artifactId>jetty-util</artifactId>
 162             <version>9.4.20.v20190813</version>
 163         </dependency>
 164         <!-- consumer -->
 165         <dependency>
 166             <groupId>com.eclipsesource.jaxrs</groupId>
 167             <artifactId>consumer</artifactId>
 168             <exclusions>
 169                 <exclusion>
 170                     <groupId>com.eclipsesource.jaxrs</groupId>
 171                     <artifactId>jersey-all</artifactId>
 172                 </exclusion>
 173             </exclusions>
 174             <version>5.0</version>
 175         </dependency>
 176         <!-- gson -->
 177         <dependency>
 178             <groupId>com.google.code.gson</groupId>
 179             <artifactId>gson</artifactId>
 180             <version>2.8.2</version>
 181         </dependency>
 182         <dependency>
 183             <groupId>org.postgresql</groupId>
 184             <artifactId>postgresql</artifactId>
 185             <version>42.2.13</version>
 186         </dependency>
 187         <dependency>
 188             <groupId>org.mybatis</groupId>
 189             <artifactId>mybatis</artifactId>
 190             <version>3.2.7</version>
 191         </dependency>
 192         <!-- UT -->
 193         <dependency>
 194             <groupId>junit</groupId>
 195             <artifactId>junit</artifactId>
 196             <version>4.12</version>
 197             <scope>test</scope>
 198         </dependency>
 199         <dependency>
 200             <groupId>org.powermock</groupId>
 201             <artifactId>powermock-module-junit4</artifactId>
 202             <version>1.4.10</version>
 203             <scope>test</scope>
 204         </dependency>
 205         <dependency>
 206             <groupId>org.powermock</groupId>
 207             <artifactId>powermock-api-mockito</artifactId>
 208             <version>1.4.10</version>
 209             <scope>test</scope>
 210         </dependency>
 211         <dependency>
 212             <groupId>org.jmockit</groupId>
 213             <artifactId>jmockit</artifactId>
 214             <version>${jmockit.version}</version>
 215             <scope>test</scope>
 216         </dependency>
 217         <dependency>
 218             <groupId>org.jmockit</groupId>
 219             <artifactId>jmockit-coverage</artifactId>
 220             <version>1.19</version>
 221             <scope>test</scope>
 222         </dependency>
 223         <dependency>
 224             <groupId>org.apache.ant</groupId>
 225             <artifactId>ant</artifactId>
 226             <version>1.8.2</version>
 227             <scope>test</scope>
 228         </dependency>
 229
 230
 231         <dependency>
 232             <groupId>org.apache.commons</groupId>
 233             <artifactId>commons-io</artifactId>
 234             <version>1.3.2</version>
 235         </dependency>
 236         <dependency>
 237             <groupId>commons-io</groupId>
 238             <artifactId>commons-io</artifactId>
 239             <version>2.4</version>
 240         </dependency>
 241         <dependency>
 242             <groupId>com.google.guava</groupId>
 243             <artifactId>guava</artifactId>
 244             <version>25.0-jre</version>
 245         </dependency>
 246
 247     </dependencies>
 248     <profiles>
 249         <profile>
 250             <id>all-tests</id>
 251             <properties>
 252                 <build.profile.id>all-tests</build.profile.id>
 253                 <skip.unit.tests>false</skip.unit.tests>
 254             </properties>
 255         </profile>
 256         <profile>
 257             <id>docker</id>
 258             <properties>
 259                 <maven.test.skip>true</maven.test.skip>
 260             </properties>
 261         </profile>
 262     </profiles>
 263     <build>
 264         <finalName>ROOT</finalName>
 265         <plugins>
 266             <!-- Used for unit tests -->
 267             <plugin>
 268                 <groupId>org.apache.maven.plugins</groupId>
 269                 <artifactId>maven-surefire-plugin</artifactId>
 270                 <version>2.20</version>
 271                 <configuration>
 272                     <forkMode>always</forkMode>
 273                     <argLine>
 274                         -javaagent:${settings.localRepository}/org/jmockit/jmockit/${jmockit.version}/jmockit-${jmockit.version}.jar
 275                         <!--${surefireArgLine}-->
 276                     </argLine>
 277                     <skip>${maven.test.skip}</skip>
 278                     <testFailureIgnore>${maven.test.failure.ignore}</testFailureIgnore>
 279                     <!-- Excludes integration tests when unit tests are run. -->
 280                     <excludes>
 281                         <exclude>**/IT*.java</exclude>
 282                     </excludes>
 283                 </configuration>
 284             </plugin>
 285             <plugin>
 286                 <groupId>com.googlecode.maven-download-plugin</groupId>
 287                 <artifactId>download-maven-plugin</artifactId>
 288                 <version>1.2.1</version>
 289                 <executions>
 290                     <execution>
 291                         <id>swagger-ui</id>
 292                         <goals>
 293                             <goal>wget</goal>
 294                         </goals>
 295                         <configuration>
 296                             <url>https://github.com/swagger-api/swagger-ui/archive/master.tar.gz</url>
 297                             <unpack>true</unpack>
 298                             <outputDirectory>${project.build.directory}</outputDirectory>
 299                         </configuration>
 300                     </execution>
 301                 </executions>
 302             </plugin>
 303         </plugins>
 304     </build>
 305 </project>