Upgrade vulnerable dependencies

Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech>
Change-Id: I15347b8587ae4cd675d33c3bb57578919bf320fe
Issue-ID: SDC-4287

diff --git a/pom.xml b/pom.xml
index 8750bd2..5bf46b2 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -48,6 +48,7 @@
                <assertj-core.version>3.23.1</assertj-core.version>
                <awaitility-proxy.version>3.1.6</awaitility-proxy.version>
                <awaitility.version>4.2.0</awaitility.version>
+               <jackson.version>2.14.2</jackson.version>
 
                <nexus.proxy>https://nexus.onap.org</nexus.proxy>
                <sitePath>/content/sites/site/org/onap/sdc/sdc-distribution-client/${project.version}</sitePath>
@@ -111,6 +112,24 @@
                                </plugins>
                        </build>
                </profile>
+               <profile>
+                       <id>fast-build</id>
+                       <activation>
+                               <activeByDefault>false</activeByDefault>
+                       </activation>
+                       <properties>
+                               <maven.test.skip>true</maven.test.skip>
+                               <skipYamlJsonValidator>true</skipYamlJsonValidator>
+                               <checkstyle.skip>true</checkstyle.skip>
+                               <jacoco.skip>true</jacoco.skip>
+                               <maven.antrun.skip>true</maven.antrun.skip>
+                               <swagger.skip>true</swagger.skip>
+                       </properties>
+                       <modules>
+                               <module>sdc-distribution-client</module>
+                               <module>sdc-distribution-ci</module>
+                       </modules>
+               </profile>
        </profiles>
 
        <reporting>

diff --git a/sdc-distribution-ci/pom.xml b/sdc-distribution-ci/pom.xml
index d799f0a..48e0c9c 100644 (file)
--- a/sdc-distribution-ci/pom.xml
+++ b/sdc-distribution-ci/pom.xml
@@ -54,6 +54,14 @@
           <groupId>com.google.guava</groupId>
           <artifactId>guava</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>com.fasterxml.jackson.core</groupId>
+          <artifactId>jackson-core</artifactId>
+        </exclusion>
+        <exclusion>
+          <groupId>com.fasterxml.jackson.core</groupId>
+          <artifactId>jackson-databind</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>
@@ -145,7 +153,7 @@
     <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-annotations</artifactId>
-            <version>2.8.2</version>
+      <version>${jackson.version}</version>
         </dependency>
         <dependency>
       <groupId>org.mockito</groupId>

diff --git a/sdc-distribution-client/pom.xml b/sdc-distribution-client/pom.xml
index 65ef511..e46c61b 100644 (file)
--- a/sdc-distribution-client/pom.xml
+++ b/sdc-distribution-client/pom.xml
@@ -19,7 +19,6 @@
         <mockito-all.version>3.6.28</mockito-all.version>
         <commons-io.version>2.8.0</commons-io.version>
         <slf4j-api.version>1.7.30</slf4j-api.version>
-        <jackson.version>2.8.6</jackson.version>
         <kafka.version>3.3.1</kafka.version>
         <gson.version>2.8.9</gson.version>
         <lombok.version>1.18.24</lombok.version>
@@ -229,6 +228,20 @@
             <artifactId>kafka_2.13</artifactId>
             <version>${kafka.version}</version>
             <scope>test</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>com.fasterxml.jackson.module</groupId>
+                    <artifactId>jackson-module-scala_2.13</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>com.fasterxml.jackson.dataformat</groupId>
+                    <artifactId>jackson-dataformat-csv</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>com.fasterxml.jackson.datatype</groupId>
+                    <artifactId>jackson-datatype-jdk8</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
     </dependencies>
 </project>