From: egernug <gerard.nugent@est.tech>
Date: Mon, 14 Apr 2025 15:50:26 +0000 (+0100)
Subject: Update dependencies to eliminate vulnerabilities
X-Git-Tag: 1.7.0~7
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=bd1503f3753879dcaca724243b9f684439dde641;p=cps%2Fncmp-dmi-plugin.git

Update dependencies to eliminate vulnerabilities

-Updated json-smart
-Update spotbugs
-Fixes for new spotbugs SE_NO_SERIALVERSIONID bug
-Deleted fixbugs dependency as it is obsolete

Issue-ID: CPS-89

Change-Id: I8f33e9c66e5243c2b5c2079267c184af9c0dcd80
Signed-off-by: egernug <gerard.nugent@est.tech>
---

diff --git a/dmi-service/pom.xml b/dmi-service/pom.xml
index 93ebe488..44dadd7b 100644
--- a/dmi-service/pom.xml
+++ b/dmi-service/pom.xml
@@ -41,14 +41,13 @@
         <checkstyle.config.location>${project.basedir}</checkstyle.config.location>
 
         <!-- Global properties for version management -->
-        <bug.pattern.version>1.5.0</bug.pattern.version>
         <gmavenplus.plugin.version>4.0.1</gmavenplus.plugin.version>
         <maven.deploy.plugin.version>3.1.2</maven.deploy.plugin.version>
         <maven.surefire.plugin.version>3.3.1</maven.surefire.plugin.version>
         <openapi.generator.maven.plugin.version>6.6.0</openapi.generator.maven.plugin.version>
         <sonar.version>4.0.0.4121</sonar.version>
-        <spring.boot.maven.plugin.version>3.4.1</spring.boot.maven.plugin.version>
-        <spotbugs.maven.plugin.version>4.4.2</spotbugs.maven.plugin.version>
+        <spring.boot.maven.plugin.version>3.4.4</spring.boot.maven.plugin.version>
+        <spotbugs.maven.plugin.version>4.7.3.0</spotbugs.maven.plugin.version>
         <maven-resources-plugin.version>3.3.1</maven-resources-plugin.version>
 
         <!-- Code Coverage Configuration -->
@@ -69,7 +68,7 @@
             <dependency>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>
-                <version>3.4.1</version>
+                <version>${spring.boot.maven.plugin.version}</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -118,7 +117,7 @@
             <dependency>
                 <groupId>net.minidev</groupId>
                 <artifactId>json-smart</artifactId>
-                <version>2.5.0</version>
+                <version>2.5.2</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.httpcomponents</groupId>
@@ -370,6 +369,7 @@
                                 <useSpringBoot3>true</useSpringBoot3>
                                 <openApiNullable>false</openApiNullable>
                                 <skipDefaultInterface>true</skipDefaultInterface>
+                                <serializableModel>true</serializableModel>
                             </configOptions>
                         </configuration>
                     </execution>
@@ -394,6 +394,7 @@
                                 <useSpringBoot3>true</useSpringBoot3>
                                 <openApiNullable>false</openApiNullable>
                                 <skipDefaultInterface>true</skipDefaultInterface>
+                                <serializableModel>true</serializableModel>
                             </configOptions>
                         </configuration>
                     </execution>
@@ -523,18 +524,11 @@
                     </dependency>
                 </dependencies>
                 <configuration>
-                    <plugins>
-                        <plugin>
-                            <groupId>jp.skypencil.findbugs.slf4j</groupId>
-                            <artifactId>bug-pattern</artifactId>
-                            <version>${bug.pattern.version}</version>
-                        </plugin>
-                    </plugins>
                     <effort>Max</effort>
                     <threshold>Low</threshold>
                     <failOnError>true</failOnError>
                     <excludeFilterFile>spotbugs-exclude.xml</excludeFilterFile>
-                    <addSourceDirs>true</addSourceDirs>
+                    <addSources>true</addSources>
                     <xmlOutput>true</xmlOutput>
                     <xmlOutputDirectory>${basedir}/target/spotbugs</xmlOutputDirectory>
                 </configuration>
diff --git a/docs/api/swagger/openapi.yaml b/docs/api/swagger/openapi.yaml
index fcc2302a..ef3ccae2 100644
--- a/docs/api/swagger/openapi.yaml
+++ b/docs/api/swagger/openapi.yaml
@@ -181,7 +181,7 @@ paths:
         name: resourceIdentifier
         required: true
         schema:
-          example: '/ManagedElement=NRNode1/GNBDUFunction=1'
+          example: /ManagedElement=NRNode1/GNBDUFunction=1
           type: string
       - description: "options parameter in query, it is mandatory to wrap key(s)=value(s)\
           \ in parenthesis'()'."
@@ -339,7 +339,7 @@ components:
       name: resourceIdentifier
       required: true
       schema:
-        example: '/ManagedElement=NRNode1/GNBDUFunction=1'
+        example: /ManagedElement=NRNode1/GNBDUFunction=1
         type: string
     optionsParamInQuery:
       description: "options parameter in query, it is mandatory to wrap key(s)=value(s)\
@@ -637,7 +637,7 @@ components:
       type: object
     DataOperationRequest:
       example:
-        resourceIdentifier: '/ManagedElement=NRNode1/GNBDUFunction=1'
+        resourceIdentifier: /ManagedElement=NRNode1/GNBDUFunction=1
         datastore: ncmp-datastore:passthrough-operational
         options: (fields=NRCellDU/attributes/cellLocalId)
         operationId: "12"
@@ -669,7 +669,7 @@ components:
           example: (fields=NRCellDU/attributes/cellLocalId)
           type: string
         resourceIdentifier:
-          example: '/ManagedElement=NRNode1/GNBDUFunction=1'
+          example: /ManagedElement=NRNode1/GNBDUFunction=1
           type: string
         cmHandles:
           items: