Address security vulnerabilities
[aai/champ.git] / champ-service / pom.xml
1 <!--
2 ============LICENSE_START=======================================================
3 org.onap.aai
4 ================================================================================
5 Copyright © 2017-2018 AT&T Intellectual Property. All rights reserved.
6 Copyright © 2017-2018 Amdocs
7 ================================================================================
8 Licensed under the Apache License, Version 2.0 (the "License");
9 you may not use this file except in compliance with the License.
10 You may obtain a copy of the License at
11
12       http://www.apache.org/licenses/LICENSE-2.0
13
14 Unless required by applicable law or agreed to in writing, software
15 distributed under the License is distributed on an "AS IS" BASIS,
16 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 See the License for the specific language governing permissions and
18 limitations under the License.
19 ============LICENSE_END=========================================================
20 -->
21 <project xmlns="http://maven.apache.org/POM/4.0.0"
22          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
23          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
24     <modelVersion>4.0.0</modelVersion>
25
26     <parent>
27         <groupId>org.onap.oparent</groupId>
28         <artifactId>oparent</artifactId>
29         <version>1.1.0</version>
30     </parent>
31
32     <groupId>org.onap.aai</groupId>
33     <artifactId>champ-service</artifactId>
34     <version>1.2.0-SNAPSHOT</version>
35     <name>champ</name>
36
37     <properties>
38         <docker.location>${basedir}/target</docker.location>
39         <onap.nexus.url>https://nexus.onap.org</onap.nexus.url>
40         <common.logging.groupid>org.onap.aai.logging-service</common.logging.groupid>
41         <common.logging.version>1.2.2</common.logging.version>
42
43         <version.com.google.guava>18.0</version.com.google.guava>
44         <version.org.apache.commons.commons-lang3>3.7</version.org.apache.commons.commons-lang3>
45         <version.org.hamcrest.hamcrest-library>1.3</version.org.hamcrest.hamcrest-library>
46         <version.org.springframework.boot.spring-boot-dependencies>1.5.12.RELEASE</version.org.springframework.boot.spring-boot-dependencies>
47     </properties>
48
49     <dependencyManagement>
50         <dependencies>
51             <dependency>
52                 <groupId>org.springframework.boot</groupId>
53                 <artifactId>spring-boot-dependencies</artifactId>
54                 <version>${version.org.springframework.boot.spring-boot-dependencies}</version>
55                 <type>pom</type>
56                 <scope>import</scope>
57             </dependency>
58         </dependencies>
59     </dependencyManagement>
60
61     <dependencies>
62         <dependency>
63             <groupId>org.springframework.boot</groupId>
64             <artifactId>spring-boot-starter-web</artifactId>
65             <exclusions>
66                 <exclusion>
67                     <groupId>org.springframework.boot</groupId>
68                     <artifactId>spring-boot-starter-tomcat</artifactId>
69                 </exclusion>
70                 <exclusion>
71                     <groupId>ch.qos.logback</groupId>
72                     <artifactId>logback-classic</artifactId>
73                 </exclusion>
74             </exclusions>
75         </dependency>
76
77         <dependency>
78             <groupId>org.springframework.boot</groupId>
79             <artifactId>spring-boot-starter-jetty</artifactId>
80         </dependency>
81
82         <dependency>
83             <groupId>org.springframework.boot</groupId>
84             <artifactId>spring-boot-starter-jersey</artifactId>
85         </dependency>
86
87         <dependency>
88             <groupId>dom4j</groupId>
89             <artifactId>dom4j</artifactId>
90             <version>1.6.1</version>
91             <scope>provided</scope>
92         </dependency>
93
94         <dependency>
95             <groupId>org.json</groupId>
96             <artifactId>json</artifactId>
97             <version>20160212</version>
98         </dependency>
99
100         <dependency>
101             <groupId>commons-io</groupId>
102             <artifactId>commons-io</artifactId>
103             <version>2.4</version>
104         </dependency>
105
106         <dependency>
107             <groupId>com.google.code.gson</groupId>
108             <artifactId>gson</artifactId>
109             <version>2.6.2</version>
110         </dependency>
111
112          <dependency>
113           <groupId>com.google.guava</groupId>
114           <artifactId>guava</artifactId>
115           <version>${version.com.google.guava}</version>
116         </dependency>
117
118         <dependency>
119             <groupId>${common.logging.groupid}</groupId>
120             <artifactId>common-logging</artifactId>
121             <version>${common.logging.version}</version>
122             <exclusions>
123                 <exclusion>
124                     <groupId>ch.qos.logback</groupId>
125                     <artifactId>logback-classic</artifactId>
126                 </exclusion>
127                 <exclusion>
128                     <groupId>ch.qos.logback</groupId>
129                     <artifactId>logback-core</artifactId>
130                 </exclusion>
131                 <exclusion>
132                     <groupId>org.slf4j</groupId>
133                     <artifactId>slf4j-api</artifactId>
134                 </exclusion>
135             </exclusions>
136         </dependency>
137
138         <dependency>
139             <groupId>org.eclipse.persistence</groupId>
140             <artifactId>eclipselink</artifactId>
141             <version>2.6.2</version>
142         </dependency>
143
144         <dependency>
145             <groupId>org.apache.commons</groupId>
146             <artifactId>commons-lang3</artifactId>
147             <version>3.7</version>
148         </dependency>
149
150         <dependency>
151             <groupId>org.onap.aai</groupId>
152             <artifactId>champ-core</artifactId>
153             <version>1.2.0-SNAPSHOT</version>
154             <scope>compile</scope>
155             <exclusions>
156                 <exclusion>
157                     <groupId>org.apache.hbase</groupId>
158                     <artifactId>hbase-client</artifactId>
159                 </exclusion>
160                 <exclusion>
161                     <groupId>log4j</groupId>
162                     <artifactId>log4j</artifactId>
163                 </exclusion>
164                 <exclusion>
165                     <groupId>log4j</groupId>
166                     <artifactId>apache-log4j-extras</artifactId>
167                 </exclusion>
168                 <exclusion>
169                     <groupId>org.slf4j</groupId>
170                     <artifactId>slf4j-api</artifactId>
171                 </exclusion>
172             </exclusions>
173         </dependency>
174
175         <dependency>
176             <groupId>org.hamcrest</groupId>
177             <artifactId>hamcrest-library</artifactId>
178             <scope>test</scope>
179         </dependency>
180
181         <dependency>
182             <groupId>org.skyscreamer</groupId>
183             <artifactId>jsonassert</artifactId>
184             <version>1.5.0</version>
185             <scope>test</scope>
186         </dependency>
187
188         <dependency>
189             <groupId>ch.qos.logback</groupId>
190             <artifactId>logback-classic</artifactId>
191             <version>1.2.3</version>
192         </dependency>
193
194         <dependency>
195             <groupId>ch.qos.logback</groupId>
196             <artifactId>logback-core</artifactId>
197             <version>1.2.3</version>
198         </dependency>
199
200         <dependency>
201             <groupId>org.onap.dmaap.messagerouter.dmaapclient</groupId>
202             <artifactId>dmaapClient</artifactId>
203             <version>1.1.5</version>
204             <exclusions>
205                 <exclusion>
206                     <groupId>org.apache.httpcomponents</groupId>
207                     <artifactId>httpclient</artifactId>
208                 </exclusion>
209                 <exclusion>
210                     <groupId>org.apache.httpcomponents</groupId>
211                     <artifactId>httpclient-cache</artifactId>
212                 </exclusion>
213             </exclusions>
214         </dependency>
215
216         <dependency>
217             <groupId>org.apache.httpcomponents</groupId>
218             <artifactId>httpclient</artifactId>
219             <version>4.5.3</version>
220         </dependency>
221
222         <dependency>
223             <groupId>org.apache.httpcomponents</groupId>
224             <artifactId>httpclient-cache</artifactId>
225             <version>4.5.3</version>
226         </dependency>
227     </dependencies>
228
229     <distributionManagement>
230         <repository>
231             <id>ecomp-releases</id>
232             <name>ECOMP Release Repository</name>
233             <url>${onap.nexus.url}/content/repositories/releases/</url>
234         </repository>
235         <snapshotRepository>
236             <id>ecomp-snapshots</id>
237             <name>ECOMP Snapshot Repository</name>
238             <url>${onap.nexus.url}/content/repositories/snapshots/</url>
239         </snapshotRepository>
240     </distributionManagement>
241
242     <build>
243         <finalName>${project.artifactId}</finalName>
244         <plugins>
245             <plugin>
246                 <groupId>org.springframework.boot</groupId>
247                 <artifactId>spring-boot-maven-plugin</artifactId>
248                 <configuration>
249                     <layout>ZIP</layout>
250                 </configuration>
251                 <executions>
252                     <execution>
253                         <goals>
254                             <goal>repackage</goal>
255                         </goals>
256                     </execution>
257                 </executions>
258             </plugin>
259
260             <plugin>
261                 <groupId>org.apache.maven.plugins</groupId>
262                 <artifactId>maven-resources-plugin</artifactId>
263                 <version>2.7</version>
264                 <executions>
265                     <execution>
266                         <id>copy-docker-file</id>
267                         <phase>package</phase>
268                         <goals>
269                             <goal>copy-resources</goal>
270                         </goals>
271                         <configuration>
272                             <outputDirectory>target</outputDirectory>
273                             <overwrite>true</overwrite>
274                             <resources>
275                                 <resource>
276                                     <directory>${basedir}/src/main/docker</directory>
277                                     <filtering>true</filtering>
278                                     <includes>
279                                         <include>**/*</include>
280                                     </includes>
281                                 </resource>
282                                 <resource>
283                                     <directory>${basedir}/src/main/bin/</directory>
284                                 </resource>
285                                 <resource>
286                                     <directory>../champ-service-deps-janus/target/</directory>
287                                 </resource>
288                                 <resource>
289                                     <directory>../champ-service-deps-titan/target/</directory>
290                                 </resource>
291                                 <resource>
292                                     <directory>${basedir}</directory>
293                                     <includes>
294                                         <include>**/dynamic/**/*</include>
295                                     </includes>
296                                 </resource>
297                             </resources>
298                         </configuration>
299                     </execution>
300                 </executions>
301             </plugin>
302
303             <plugin>
304                 <groupId>org.apache.maven.plugins</groupId>
305                 <artifactId>maven-deploy-plugin</artifactId>
306                 <configuration>
307                     <skip>true</skip>
308                 </configuration>
309             </plugin>
310
311             <plugin>
312                  <groupId>org.sonatype.plugins</groupId>
313                  <artifactId>nexus-staging-maven-plugin</artifactId>
314                  <configuration>
315                      <skipNexusStagingDeployMojo>true</skipNexusStagingDeployMojo>
316                  </configuration>
317             </plugin>
318
319             <plugin>
320                 <groupId>com.mycila</groupId>
321                 <artifactId>license-maven-plugin</artifactId>
322                 <version>3.0</version>
323                 <configuration>
324                     <header>License.txt</header>
325                     <includes>
326                         <include>src/main/java/**</include>
327                         <include>src/test/java/**</include>
328                         <include>pom.xml</include>
329                     </includes>
330                     <skipExistingHeaders>true</skipExistingHeaders>
331                 </configuration>
332                 <executions>
333                     <execution>
334                         <goals>
335                             <!-- Set goal to "format" to auto update license headers -->
336                             <goal>check</goal>
337                         </goals>
338                         <phase>process-sources</phase>
339                     </execution>
340                 </executions>
341             </plugin>
342
343             <plugin>
344                 <groupId>com.spotify</groupId>
345                 <artifactId>docker-maven-plugin</artifactId>
346                 <version>0.4.11</version>
347                 <configuration>
348                     <verbose>true</verbose>
349                     <serverId>docker-hub</serverId>
350                     <imageName>${docker.push.registry}/onap/${project.name}</imageName>
351                     <dockerDirectory>${docker.location}</dockerDirectory>
352                     <imageTags>
353                         <imageTag>latest</imageTag>
354                     </imageTags>
355                     <forceTags>true</forceTags>
356                 </configuration>
357             </plugin>
358         </plugins>
359     </build>
360 </project>