From 8cc8606b7e4c0514f24a6d1103390302213342e5 Mon Sep 17 00:00:00 2001 From: "Lee, Tian (tl5884)" Date: Wed, 19 Dec 2018 22:36:55 +0000 Subject: [PATCH] Fix issue with ActiveMQ versions being overridden Spring Boot dependency management was overriding aai-core's ActiveMQ dependency versions with older, less secure versions. Change-Id: I6c8b537b99d849f7da45e18fe755a9cd217b09a6 Issue-ID: AAI-1936 Signed-off-by: Lee, Tian (tl5884) --- pom.xml | 773 +++++++++++++++++++++++++++++++++------------------------------- 1 file changed, 395 insertions(+), 378 deletions(-) diff --git a/pom.xml b/pom.xml index d565980..b96b2c8 100644 --- a/pom.xml +++ b/pom.xml @@ -28,50 +28,51 @@ aai-cacher 1.1.0-SNAPSHOT - - org.onap.oparent - oparent - 1.2.0 - + + org.onap.oparent + oparent + 1.2.0 + service.json org.onap.aai.cacher.service.rest - 1.8 - 1.8 - 1.8 - UTF-8 + 1.8 + 1.8 + 1.8 + UTF-8 - false - true + false + true - 1.5.18.RELEASE - + 1.5.18.RELEASE + 9.4.1.v20170120 - + docker.io local aai-svc-account openecomp - - check + + check - https://nexus.onap.org - /content/sites/site/org/onap/aai/cacher/${project.artifactId}/${project.version} - /content/repositories/releases/ - /content/repositories/snapshots/ - - org.onap.aai.cacher.Application - + https://nexus.onap.org + /content/sites/site/org/onap/aai/cacher/${project.artifactId}/${project.version} + /content/repositories/releases/ + /content/repositories/snapshots/ + + org.onap.aai.cacher.Application + 1.3.0 + 5.15.8 java @@ -81,18 +82,18 @@ false ${project.version} - + 20090211 1.2.3 1.0.0 1.10.19 1.5.0 1.0.8.RELEASE - 1.2.2 - 0.2.12 + 1.2.2 + 0.2.12 2.8.5 - 1.9 - + 1.9 + 0.23.0 docker.io @@ -107,10 +108,10 @@ --> ${project.build.directory}/${project.artifactId}-${project.version}-build/ openecomp - - true - - .001 + + true + + .001 @@ -118,7 +119,7 @@ ${userId} - + docker @@ -187,47 +188,63 @@ - - runAjsc - - ${maven.skip.tests} - - - pre-integration-test - - - org.codehaus.mojo - exec-maven-plugin - 1.6.0 - - - run-spring-boot - package - - java - - - - - ${start-class} - - - - - - - - - - - org.springframework.boot - spring-boot-starter-parent - ${spring.boot.version} - import - pom - - - + + runAjsc + + ${maven.skip.tests} + + + pre-integration-test + + + org.codehaus.mojo + exec-maven-plugin + 1.6.0 + + + run-spring-boot + package + + java + + + + + ${start-class} + + + + + + + + + + + org.springframework.boot + spring-boot-starter-parent + ${spring.boot.version} + import + pom + + + org.apache.activemq + activemq-broker + ${activemq.version} + + + org.apache.activemq + activemq-client + ${activemq.version} + + + org.apache.activemq + activemq-openwire-legacy + ${activemq.version} + + + + @@ -249,23 +266,23 @@ de.flapdoodle.embed de.flapdoodle.embed.mongo 2.0.3 - - - org.apache.commons - commons-compress - - + + + org.apache.commons + commons-compress + + org.apache.commons commons-compress 1.18 - + org.apache.commons commons-compress 1.18 - + org.mongodb mongodb-driver @@ -283,53 +300,53 @@ This needs to be added back if org.bouncy castle dependency sneaks backs in and causing issues with the two way ssl --> - - org.springframework.security - spring-security-rsa - ${spring.security.version} - - - org.bouncycastle - bcpkix-jdk15on - - - - - org.springframework.boot - spring-boot-starter-web - - - org.springframework.boot - spring-boot-starter-tomcat - - - org.slf4j - log4j-over-slf4j - - - - - org.springframework.boot - spring-boot-starter-jetty - + + org.springframework.security + spring-security-rsa + ${spring.security.version} + + + org.bouncycastle + bcpkix-jdk15on + + + + + org.springframework.boot + spring-boot-starter-web + + + org.springframework.boot + spring-boot-starter-tomcat + + + org.slf4j + log4j-over-slf4j + + + + + org.springframework.boot + spring-boot-starter-jetty + org.springframework.boot spring-boot-starter-jersey - - org.springframework.boot - spring-boot-starter-test - - - org.reflections - reflections - 0.9.10 - - - commons-lang - commons-lang - 2.6 - + + org.springframework.boot + spring-boot-starter-test + + + org.reflections + reflections + 0.9.10 + + + commons-lang + commons-lang + 2.6 + org.glassfish.jersey.core jersey-client @@ -371,66 +388,66 @@ 2.0.1 - org.onap.aai.aai-common - aai-core - ${aai-core.version} - - - com.sun.jersey - jersey-core - - - org.slf4j - slf4j-log4j12 - - - org.apache.cxf - cxf-core - - - - - commons-configuration - commons-configuration - ${commons.configuration.version} - - - commons-lang - commons-lang - - - - - com.att.eelf - eelf-core - ${eelf.core.version} - - - ch.qos.logback - logback-core - ${logback.version} - - - ch.qos.logback - logback-classic - ${logback.version} - - - ch.qos.logback - logback-access - ${logback.version} - - - junit - junit - test - - - org.mockito - mockito-all - ${mockito.version} - test - + org.onap.aai.aai-common + aai-core + ${aai-core.version} + + + com.sun.jersey + jersey-core + + + org.slf4j + slf4j-log4j12 + + + org.apache.cxf + cxf-core + + + + + commons-configuration + commons-configuration + ${commons.configuration.version} + + + commons-lang + commons-lang + + + + + com.att.eelf + eelf-core + ${eelf.core.version} + + + ch.qos.logback + logback-core + ${logback.version} + + + ch.qos.logback + logback-classic + ${logback.version} + + + ch.qos.logback + logback-access + ${logback.version} + + + junit + junit + test + + + org.mockito + mockito-all + ${mockito.version} + test + org.skyscreamer jsonassert @@ -459,54 +476,54 @@ - --> - - com.att.nsa - dmaapClient - ${dmaap.client.version} - - - org.slf4j - slf4j-log4j12 - - - com.att.aft - dme2 - - - - - commons-net - commons-net - 3.6 - + --> + + com.att.nsa + dmaapClient + ${dmaap.client.version} + + + org.slf4j + slf4j-log4j12 + + + com.att.aft + dme2 + + + + + commons-net + commons-net + 3.6 + - - - - - org.apache.maven.plugins - maven-deploy-plugin - - - default-deploy - none - - - - - org.sonatype.plugins - nexus-staging-maven-plugin - 1.6.7 - true - - ${nexusproxy} - 176c31dfe190a - ecomp-staging - - - - + + + + + org.apache.maven.plugins + maven-deploy-plugin + + + default-deploy + none + + + + + org.sonatype.plugins + nexus-staging-maven-plugin + 1.6.7 + true + + ${nexusproxy} + 176c31dfe190a + ecomp-staging + + + + maven-dependency-plugin @@ -527,7 +544,7 @@ due to the fact that the plugin 1.5.15.RELEASE was built using maven 3.5 while the current build version being used by our jenkins is 3.3.9 --> - 1.5.12.RELEASE + 1.5.12.RELEASE ${start-class} ZIP @@ -558,51 +575,51 @@ - com.github.kongchen - swagger-maven-plugin - + com.github.kongchen + swagger-maven-plugin + - org.apache.maven.plugins - maven-javadoc-plugin - - -Xdoclint:none - - + org.apache.maven.plugins + maven-javadoc-plugin + + -Xdoclint:none + + + + org.apache.maven.plugins + maven-surefire-plugin + 2.12.4 + + -noverify ${argLine} + + . + src/main/resources + + + - org.apache.maven.plugins - maven-surefire-plugin - 2.12.4 - - -noverify ${argLine} - - . - src/main/resources - - - - - org.codehaus.mojo - sonar-maven-plugin - 3.2 - - - org.jacoco - jacoco-maven-plugin - 0.7.7.201606060606 - - true - - - - jacoco-initialize-unit-tests - - prepare-agent - - - ${project.build.directory}/coverage-reports/jacoco.exec + org.codehaus.mojo + sonar-maven-plugin + 3.2 + + + org.jacoco + jacoco-maven-plugin + 0.7.7.201606060606 + + true + + + + jacoco-initialize-unit-tests + + prepare-agent + + + ${project.build.directory}/coverage-reports/jacoco.exec - - + + post-unit-test test @@ -638,68 +655,68 @@ - - - - com.mycila - license-maven-plugin - 3.0 - -
LICENSE.TXT
- - src/main/java/** - src/test/java/** - pom.xml - - false - false -
- - - + +
+ + com.mycila + license-maven-plugin + 3.0 + +
LICENSE.TXT
+ + src/main/java/** + src/test/java/** + pom.xml + + false + false +
+ + + - ${license.goal.type} - - process-sources - - -
+ ${license.goal.type} + + process-sources + + +
- - - ${project.basedir}/src/main/swm - ${project.build.directory}/swm - false - - - ${project.basedir}/src/main/resources - - application.properties - logback.xml - localhost-access-logback.xml - - ${project.build.directory}/swm/package/nix/dist_files/opt/app/aai-cacher/appconfig - false - - - ${project.basedir}/src/main/resources/etc/auth/ - - aai-client-cert.p12 - tomcat_keystore - - ${project.build.directory}/swm/package/nix/dist_files/opt/app/aai-cacher/appconfig - true - - - ${project.basedir}/src/main/docker - - **/* - - ${aai.build.directory} - true - + + + ${project.basedir}/src/main/swm + ${project.build.directory}/swm + false + + + ${project.basedir}/src/main/resources + + application.properties + logback.xml + localhost-access-logback.xml + + ${project.build.directory}/swm/package/nix/dist_files/opt/app/aai-cacher/appconfig + false + + + ${project.basedir}/src/main/resources/etc/auth/ + + aai-client-cert.p12 + tomcat_keystore + + ${project.build.directory}/swm/package/nix/dist_files/opt/app/aai-cacher/appconfig + true + + + ${project.basedir}/src/main/docker + + **/* + + ${aai.build.directory} + true + ${project.basedir}/src/main/resources @@ -707,52 +724,52 @@ true - +
- - - ecomp-snapshots - ECOMP Snapshot Repository - ${onap.nexus.url}/content/repositories/snapshots/ - - - ecomp-site - dav:${onap.nexus.url}${sitePath} - - + + + ecomp-snapshots + ECOMP Snapshot Repository + ${onap.nexus.url}/content/repositories/snapshots/ + + + ecomp-site + dav:${onap.nexus.url}${sitePath} + + - - - AJSC - AJSC repository - https://mvnrepository.com/artifact/com.att.ajsc - - - restlet - maven reslet - https://maven.restlet.com/ - + + + AJSC + AJSC repository + https://mvnrepository.com/artifact/com.att.ajsc + + + restlet + maven reslet + https://maven.restlet.com/ + - - central - Maven 2 repository 2 - http://repo2.maven.org/maven2/ - - - ecomp-releases - ECOMP Release Repository - ${onap.nexus.url}/content/repositories/releases/ - - - ecomp-staging - ECOMP Staging Repository - ${onap.nexus.url}/content/repositories/staging/ - - - ecomp-snapshots - ECOMP Snapshot Repository - ${onap.nexus.url}/content/repositories/snapshots/ - - - + + central + Maven 2 repository 2 + http://repo2.maven.org/maven2/ + + + ecomp-releases + ECOMP Release Repository + ${onap.nexus.url}/content/repositories/releases/ + + + ecomp-staging + ECOMP Staging Repository + ${onap.nexus.url}/content/repositories/staging/ + + + ecomp-snapshots + ECOMP Snapshot Repository + ${onap.nexus.url}/content/repositories/snapshots/ + + + -- 2.16.6