reduce CDS java security vulnerabilities
[ccsdk/parent.git] / dependencies-bom / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
3     <modelVersion>4.0.0</modelVersion>
4
5     <groupId>org.onap.ccsdk.parent</groupId>
6     <artifactId>dependencies-bom</artifactId>
7     <version>2.7.0-SNAPSHOT</version>
8     <packaging>pom</packaging>
9
10     <distributionManagement>
11         <repository>
12             <id>ecomp-releases</id>
13             <url>https://nexus.onap.org/content/repositories/releases</url>
14         </repository>
15         <snapshotRepository>
16             <id>ecomp-snapshots</id>
17             <url>https://nexus.onap.org/content/repositories/snapshots</url>
18         </snapshotRepository>
19     </distributionManagement>
20
21     <dependencyManagement>
22         <dependencies>
23             <dependency>
24                 <groupId>ch.qos.logback</groupId>
25                 <artifactId>logback-classic</artifactId>
26                 <version>1.2.11</version>
27             </dependency>
28             <dependency>
29                 <groupId>ch.qos.logback</groupId>
30                 <artifactId>logback-core</artifactId>
31                 <version>1.2.11</version>
32             </dependency>
33             <dependency>
34                 <groupId>ch.vorburger.mariaDB4j</groupId>
35                 <artifactId>mariaDB4j</artifactId>
36                 <version>2.4.0</version>
37                 <scope>test</scope>
38             </dependency>
39             <dependency>
40                 <groupId>com.att.eelf</groupId>
41                 <artifactId>eelf-core</artifactId>
42                 <version>1.0.0</version>
43             </dependency>
44             <dependency>
45                 <groupId>com.fasterxml.jackson</groupId>
46                 <artifactId>jackson-bom</artifactId>
47                 <version>2.14.1</version>
48                 <type>pom</type>
49                 <scope>import</scope>
50             </dependency>
51             <dependency>
52                 <groupId>com.google.code.gson</groupId>
53                 <artifactId>gson</artifactId>
54                 <version>2.9.0</version>
55             </dependency>
56             <dependency>
57                 <groupId>com.google.guava</groupId>
58                 <artifactId>guava</artifactId>
59                 <version>28.2-jre</version>
60             </dependency>
61             <dependency>
62                 <groupId>com.google.protobuf</groupId>
63                 <artifactId>protobuf-java</artifactId>
64                 <version>3.10.0</version>
65             </dependency>
66             <dependency>
67                 <groupId>com.google.protobuf</groupId>
68                 <artifactId>protobuf-java-util</artifactId>
69                 <version>3.10.0</version>
70             </dependency>
71             <dependency>
72                 <groupId>com.jayway.jsonpath</groupId>
73                 <artifactId>json-path</artifactId>
74                 <version>2.4.0</version>
75             </dependency>
76             <dependency>
77                 <groupId>com.sun.xml.bind</groupId>
78                 <artifactId>jaxb-core</artifactId>
79                 <version>2.2.11</version>
80             </dependency>
81             <dependency>
82                 <groupId>com.sun.xml.bind</groupId>
83                 <artifactId>jaxb-impl</artifactId>
84                 <version>2.2.11</version>
85             </dependency>
86             <dependency>
87                 <groupId>commons-codec</groupId>
88                 <artifactId>commons-codec</artifactId>
89                 <version>1.15</version>
90             </dependency>
91             <dependency>
92                 <groupId>commons-lang</groupId>
93                 <artifactId>commons-lang</artifactId>
94                 <version>2.6</version>
95             </dependency>
96             <dependency>
97                 <groupId>commons-logging</groupId>
98                 <artifactId>commons-logging</artifactId>
99                 <version>1.2</version>
100             </dependency>
101             <dependency>
102                 <groupId>io.grpc</groupId>
103                 <artifactId>grpc-bom</artifactId>
104                 <version>1.29.0</version>
105                 <type>pom</type>
106                 <scope>import</scope>
107             </dependency>
108             <dependency>
109                 <groupId>io.swagger</groupId>
110                 <artifactId>swagger-annotations</artifactId>
111                 <version>1.6.0</version>
112             </dependency>
113             <dependency>
114                 <groupId>io.swagger</groupId>
115                 <artifactId>swagger-core</artifactId>
116                 <version>1.6.0</version>
117             </dependency>
118             <dependency>
119                 <groupId>javax</groupId>
120                 <artifactId>javaee-api</artifactId>
121                 <version>7.0</version>
122             </dependency>
123             <!-- Below provides javax.annotations -->
124             <dependency>
125                 <groupId>com.google.code.findbugs</groupId>
126                 <artifactId>annotations</artifactId>
127                 <version>3.0.1</version>
128             </dependency>
129             <dependency>
130                 <groupId>javax.annotation</groupId>
131                 <artifactId>javax.annotation-api</artifactId>
132                 <version>1.3.1</version>
133                 <optional>true</optional>
134             </dependency>
135             <dependency>
136                 <groupId>javax.servlet</groupId>
137                 <artifactId>javax.servlet-api</artifactId>
138                 <version>3.1.0</version>
139             </dependency>
140             <dependency>
141                 <groupId>javax.ws.rs</groupId>
142                 <artifactId>javax.ws.rs-api</artifactId>
143                 <version>2.1.1</version>
144             </dependency>
145             <!-- Below provides javax.jws -->
146             <dependency>
147                 <groupId>com.sun.xml.ws</groupId>
148                 <artifactId>jaxws-ri</artifactId>
149                 <version>2.3.4</version>
150                 <type>pom</type>
151             </dependency>
152             <dependency>
153                 <groupId>javax.xml.bind</groupId>
154                 <artifactId>jaxb-api</artifactId>
155                 <version>2.3.1</version>
156                 <exclusions>
157                     <exclusion>
158                         <groupId>*</groupId>
159                         <artifactId>*</artifactId>
160                     </exclusion>
161                 </exclusions>
162             </dependency>
163             <dependency>
164                 <groupId>jakarta.activation</groupId>
165                 <artifactId>jakarta.activation-api</artifactId>
166                 <version>2.0.1</version>
167             </dependency>
168             <dependency>
169                 <groupId>junit</groupId>
170                 <artifactId>junit</artifactId>
171                 <version>4.13.2</version>
172                 <scope>test</scope>
173             </dependency>
174             <dependency>
175                 <groupId>org.antlr</groupId>
176                 <artifactId>antlr4-runtime</artifactId>
177                 <version>4.12.0</version>
178             </dependency>
179             <dependency>
180                 <groupId>org.apache.commons</groupId>
181                 <artifactId>commons-io</artifactId>
182                 <version>1.3.2</version>
183             </dependency>
184             <dependency>
185                 <groupId>org.apache.commons</groupId>
186                 <artifactId>commons-lang3</artifactId>
187                 <version>3.12.0</version>
188             </dependency>
189             <dependency>
190                 <groupId>org.apache.commons</groupId>
191                 <artifactId>commons-text</artifactId>
192                 <version>1.9</version>
193             </dependency>
194             <dependency>
195                 <groupId>org.apache.derby</groupId>
196                 <artifactId>derby</artifactId>
197                 <version>10.14.2.0</version>
198                 <scope>test</scope>
199             </dependency>
200             <dependency>
201                 <groupId>org.apache.httpcomponents</groupId>
202                 <artifactId>httpcore</artifactId>
203                 <version>4.4.14</version>
204             </dependency>
205             <dependency>
206                 <groupId>org.apache.httpcomponents</groupId>
207                 <artifactId>httpclient</artifactId>
208                 <version>4.5.13</version>
209             </dependency>
210             <dependency>
211                 <groupId>org.apache.logging.log4j</groupId>
212                 <artifactId>log4j-slf4j-impl</artifactId>
213                 <version>2.17.2</version>
214             </dependency>
215             <dependency>
216                 <groupId>org.apache.logging.log4j</groupId>
217                 <artifactId>log4j-core</artifactId>
218                 <version>2.17.2</version>
219             </dependency>
220             <dependency>
221                 <groupId>org.apache.tomcat</groupId>
222                 <artifactId>tomcat-jdbc</artifactId>
223                 <version>9.0.52</version>
224             </dependency>
225             <dependency>
226                 <groupId>org.apache.velocity</groupId>
227                 <artifactId>velocity</artifactId>
228                 <version>1.7</version>
229             </dependency>
230             <dependency>
231                 <groupId>org.apache.velocity</groupId>
232                 <artifactId>velocity-engine-core</artifactId>
233                 <version>2.3</version>
234             </dependency>
235             <dependency>
236                 <groupId>org.codehaus.jackson</groupId>
237                 <artifactId>jackson-jaxrs</artifactId>
238                 <version>1.9.13</version>
239             </dependency>
240             <dependency>
241                 <groupId>org.codehaus.jettison</groupId>
242                 <artifactId>jettison</artifactId>
243                 <version>1.4.1</version>
244             </dependency>
245             <dependency>
246                 <groupId>org.glassfish.jersey</groupId>
247                 <artifactId>jersey-bom</artifactId>
248                 <!-- ODL has 2.27 -->
249                 <version>2.33</version>
250                 <type>pom</type>
251                 <scope>import</scope>
252             </dependency>
253             <dependency>
254                 <groupId>org.glassfish.jersey.bundles.repackaged</groupId>
255                 <artifactId>jersey-guava</artifactId>
256                 <version>2.26-b03</version>
257             </dependency>
258             <dependency>
259                 <groupId>org.hamcrest</groupId>
260                 <artifactId>hamcrest-library</artifactId>
261                 <version>1.3</version>
262             </dependency>
263             <dependency>
264                 <groupId>org.json</groupId>
265                 <artifactId>json</artifactId>
266                 <!-- ODL has 20131018 -->
267                 <version>20201115</version>
268             </dependency>
269             <dependency>
270                 <groupId>org.jsoup</groupId>
271                 <artifactId>jsoup</artifactId>
272                 <!-- ODL has 1.8.3 -->
273                 <version>1.12.1</version>
274             </dependency>
275             <dependency>
276                 <groupId>org.liquibase</groupId>
277                 <artifactId>liquibase-core</artifactId>
278                 <version>4.4.2-nordix</version>
279             </dependency>    
280             <dependency>
281                 <groupId>org.mariadb.jdbc</groupId>
282                 <artifactId>mariadb-java-client</artifactId>
283                 <version>2.7.5</version>
284             </dependency>
285             <dependency>
286                 <groupId>org.mockito</groupId>
287                 <artifactId>mockito-core</artifactId>
288                 <version>3.12.4</version>
289                 <scope>test</scope>
290             </dependency>
291             <dependency>
292                 <groupId>org.onap.logging-analytics</groupId>
293                 <artifactId>logging-filter-base</artifactId>
294                 <version>1.6.9</version>
295             </dependency>
296             <dependency>
297                 <groupId>org.onap.logging-analytics</groupId>
298                 <artifactId>logging-slf4j</artifactId>
299                 <version>1.6.9</version>
300             </dependency>
301             <dependency>
302                 <groupId>org.osgi</groupId>
303                 <artifactId>org.osgi.core</artifactId>
304                 <version>5.0.0</version>
305                 <scope>provided</scope>
306             </dependency>
307             <dependency>
308                 <groupId>org.slf4j</groupId>
309                 <artifactId>jcl-over-slf4j</artifactId>
310                 <version>1.7.32</version>
311             </dependency>
312             <dependency>
313                 <groupId>org.slf4j</groupId>
314                 <artifactId>slf4j-api</artifactId>
315                 <!-- ODL has 1.7.29 -->
316                 <version>1.7.32</version>
317             </dependency>
318             <dependency>
319                 <groupId>org.slf4j</groupId>
320                 <artifactId>slf4j-simple</artifactId>
321                 <version>1.7.32</version>
322             </dependency>
323             <dependency>
324                 <groupId>org.testng</groupId>
325                 <artifactId>testng</artifactId>
326                 <version>7.3.0</version>
327             </dependency>
328             <dependency>
329                 <groupId>org.apache.sshd</groupId>
330                 <artifactId>sshd-core</artifactId>
331                 <version>2.7.0</version>
332             </dependency>
333             <dependency>
334                 <groupId>org.apache.sshd</groupId>
335                 <artifactId>sshd-scp</artifactId>
336                 <version>2.7.0</version>
337             </dependency>
338             <dependency>
339                 <groupId>org.apache.sshd</groupId>
340                 <artifactId>sshd-sftp</artifactId>
341                 <version>2.7.0</version>
342             </dependency>
343         </dependencies>
344     </dependencyManagement>
345     <dependencies>
346         <dependency>
347             <groupId>org.slf4j</groupId>
348             <artifactId>slf4j-api</artifactId>
349         </dependency>
350     </dependencies>
351
352     <build>
353         <plugins>
354             <plugin>
355                 <groupId>org.apache.maven.plugins</groupId>
356                 <artifactId>maven-deploy-plugin</artifactId>
357                 <!-- This version supports the "deployAtEnd" parameter -->
358                 <version>2.8</version>
359                 <configuration>
360                     <skip/>
361                     <deployAtEnd>true</deployAtEnd>
362                 </configuration>
363             </plugin>
364         </plugins>
365     </build>
366 </project>