Remove jackson to avoid security issues

[vnfsdk/refrepo.git] / vnfmarket-be / vnf-sdk-marketplace / pom.xml

diff --git a/vnfmarket-be/vnf-sdk-marketplace/pom.xml b/vnfmarket-be/vnf-sdk-marketplace/pom.xml
index cea2253..cce1564 100644 (file)
--- a/vnfmarket-be/vnf-sdk-marketplace/pom.xml
+++ b/vnfmarket-be/vnf-sdk-marketplace/pom.xml
@@ -11,30 +11,24 @@
        <parent>
                <groupId>org.onap.vnfsdk.refrepo</groupId>
                <artifactId>vnf-sdk-marketplace-core-parent</artifactId>
-               <version>1.0.0-SNAPSHOT</version>
+               <version>1.0.0</version>
        </parent>
 
        <modelVersion>4.0.0</modelVersion>
        <artifactId>vnf-sdk-marketplace</artifactId>
-       <version>1.0.0-SNAPSHOT</version>
+       <version>1.1.0-SNAPSHOT</version>
        <name>vnf-sdk-marketplace/vnf-sdk-marketplace</name>
        <packaging>war</packaging>
 
        <properties>
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-               <cxf.version>3.1.6</cxf.version>
+               <cxf.version>3.2.2</cxf.version>
                <!-- slf4j.version>1.6.1</slf4j.version> -->
                <maven.test.skip>false</maven.test.skip>
                <maven.test.failure.ignore>false</maven.test.failure.ignore>
        </properties>
 
-       <repositories>
-               <repository>
-                       <id>open-o</id>
-                       <name>OPEN-O repository</name>
-                       <url>https://nexus.open-o.org/content/repositories/public/</url>
-               </repository>
-       </repositories>
+
 
        <dependencies>
                <dependency>
@@ -56,41 +50,33 @@
                        <groupId>log4j</groupId>
                        <artifactId>log4j</artifactId>
                        <version>1.2.16</version>
+               </dependency>
+
+               <dependency>
+                       <groupId>io.dropwizard</groupId>
+                       <artifactId>dropwizard-core</artifactId>
+                       <version>1.2.4</version>
                        <exclusions>
                                <exclusion>
                                        <groupId>org.slf4j</groupId>
-                                       <artifactId>slf4j-log4j12</artifactId>
-                               </exclusion>
-                               <exclusion>
-                                       <groupId>log4j</groupId>
-                                       <artifactId>log4j</artifactId>
+                                       <artifactId>log4j-over-slf4j</artifactId>
                                </exclusion>
                        </exclusions>
                </dependency>
-               <dependency>
-                       <groupId>org.openo.common-services.common-utilities</groupId>
-                       <artifactId>commonlib-cbb</artifactId>
-                       <version>2.0.0</version>
-               </dependency>
-               <dependency>
-                       <groupId>io.dropwizard</groupId>
-                       <artifactId>dropwizard-core</artifactId>
-                       <version>0.8.0</version>
-               </dependency>
                <dependency>
                        <groupId>io.dropwizard</groupId>
                        <artifactId>dropwizard-assets</artifactId>
-                       <version>0.8.0</version>
+                       <version>1.2.4</version>
                </dependency>
                <dependency>
                        <groupId>io.dropwizard</groupId>
                        <artifactId>dropwizard-hibernate</artifactId>
-                       <version>0.8.0</version>
+                       <version>1.2.4</version>
                </dependency>
                <dependency>
                        <groupId>io.swagger</groupId>
                        <artifactId>swagger-jersey2-jaxrs</artifactId>
-                       <version>1.5.3</version>
+                       <version>1.5.18</version>
                </dependency>
                <!-- jersey -->
                <dependency>
@@ -111,12 +97,7 @@
                <dependency>
                        <groupId>org.apache.httpcomponents</groupId>
                        <artifactId>httpmime</artifactId>
-                       <version>4.5.2</version>
-               </dependency>
-               <dependency>
-                       <groupId>org.openo.common-services.common-utilities</groupId>
-                       <artifactId>commonlib-restclient</artifactId>
-                       <version>2.0.0</version>
+                       <version>4.5.3</version>
                </dependency>
                <!-- consumer -->
                <dependency>
@@ -137,9 +118,9 @@
                        <version>2.2.4</version>
                </dependency>
                <dependency>
-                       <groupId>mysql</groupId>
-                       <artifactId>mysql-connector-java</artifactId>
-                       <version>5.1.18</version>
+                       <groupId>org.postgresql</groupId>
+                       <artifactId>postgresql</artifactId>
+                       <version>42.1.1</version>
                </dependency>
                <dependency>
                        <groupId>org.mybatis</groupId>
@@ -182,8 +163,25 @@
                        <artifactId>ant</artifactId>
                        <version>1.8.2</version>
                        <scope>test</scope>
+               </dependency>              
+               
+               
+               <dependency>
+                       <groupId>org.apache.commons</groupId>
+                       <artifactId>commons-io</artifactId>
+                       <version>1.3.2</version>
+               </dependency>
+               <dependency>
+                       <groupId>commons-io</groupId>
+                       <artifactId>commons-io</artifactId>
+                       <version>2.4</version>
                </dependency>
                <!-- UT end -->
+               <dependency>
+                       <groupId>org.onap.vnfsdk.validation</groupId>
+                       <artifactId>validation-csar</artifactId>
+                       <version>1.0.0-SNAPSHOT</version>
+               </dependency>
        </dependencies>
        <profiles>
                <profile>
@@ -201,7 +199,7 @@
                        <plugin>
                                <groupId>org.apache.maven.plugins</groupId>
                                <artifactId>maven-surefire-plugin</artifactId>
-                               <version>2.19.1</version>
+                               <version>2.20</version>
                                <configuration>
                                        <forkMode>always</forkMode>
                                        <argLine>${surefireArgLine}</argLine>