Release dmaap/dbcapi

[dmaap/dbcapi.git] / pom.xml

diff --git a/pom.xml b/pom.xml
index 99fc35e..106401d 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -23,12 +23,12 @@
        <modelVersion>4.0.0</modelVersion>
        <groupId>org.onap.dmaap.dbcapi</groupId>
        <artifactId>dbcapi</artifactId>
-       <version>${artifact.version}</version>
+       <version>2.0.2</version>
        <name>dmaap-dbcapi</name>
        <parent>
                <groupId>org.onap.oparent</groupId>
                <artifactId>oparent</artifactId>
-               <version>1.2.0</version>
+               <version>2.0.0</version>
                <relativePath/>
        </parent>
        <build>
@@ -124,18 +124,15 @@
                        </plugin>
 
                        <!-- for Staging -->
-            <plugin>
-                <groupId>org.sonatype.plugins</groupId>
-                <artifactId>nexus-staging-maven-plugin</artifactId>
-                <version>1.6.7</version>
-                <extensions>true</extensions>
-                <configuration>
-                    <serverId>ecomp-staging</serverId>
-                    <nexusUrl>${nexusproxy}</nexusUrl>
-                    <stagingProfileId>176c31dfe190a</stagingProfileId>
-                </configuration>
-            </plugin>
 
+               <plugin>
+                       <groupId>org.apache.maven.plugins</groupId>
+                       <artifactId>maven-compiler-plugin</artifactId>
+                       <version>3.8.0</version>
+                       <configuration>
+                               <release>11</release>
+                       </configuration>
+               </plugin>
 
                <!-- for Distribution Managment -->
                <plugin>
@@ -151,6 +148,48 @@
                  </dependencies>
                </plugin>
 
+               <!-- prevent SNAPSHOT dependencies -->
+               <plugin>
+                       <groupId>org.apache.maven.plugins</groupId>
+                       <artifactId>maven-enforcer-plugin</artifactId>
+                       <executions>
+                               <execution>
+                                       <id>enforce-no-snapshots</id>
+                                       <goals>
+                                               <goal>enforce</goal>
+                                       </goals>
+                                       <configuration>
+                                               <rules>
+                                                       <requireReleaseDeps>
+                                                               <message>No Snapshots Allowed!</message>
+                                                               <excludes>
+                                                                       <exclude>org.onap.aaf.authz:aaf-cadi-client</exclude>
+                                                                       <exclude>org.onap.aaf.authz:aaf-misc-env</exclude>
+                                                                       <exclude>org.onap.aaf.authz:aaf-cadi-aaf</exclude>
+                                                                       <exclude>org.onap.aaf.authz:aaf-auth-client</exclude>
+                                                                       <exclude>org.onap.aaf.authz:aaf-cadi-core</exclude>
+                                                                       <exclude>org.onap.aaf.authz:aaf-misc-rosetta</exclude>
+                                                               </excludes>
+                                                       </requireReleaseDeps>
+                                               </rules>
+                                               <fail>true</fail>
+                                       </configuration>
+                               </execution>
+                       </executions>
+               </plugin>
+ <plugin>
+    <groupId>org.apache.maven.plugins</groupId>
+    <artifactId>maven-surefire-plugin</artifactId>
+    <version>3.0.0-M4</version>
+       <configuration>
+               <useSystemClassLoader>false</useSystemClassLoader>
+               <forkCount>0</forkCount>
+               <argLine>
+                       --illegal-access=permit
+               </argLine>
+       </configuration>
+  </plugin>
+
                </plugins>
                <pluginManagement>
                        <plugins>
@@ -198,7 +237,7 @@
         <dependency>
                        <groupId>org.onap.aaf.authz</groupId>
                        <artifactId>aaf-cadi-aaf</artifactId>
-                       <version>2.1.2-SNAPSHOT</version>
+                       <version>2.1.7</version>
             <classifier>full</classifier>
         </dependency>
                <dependency>
@@ -206,14 +245,6 @@
                        <artifactId>jackson-annotations</artifactId>
                        <version>${jackson.version}</version>
                </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.core</groupId>
-                       <artifactId>jackson-databind</artifactId>
-<!-- for DMAAP-205, a point release on the common version
-        addresses a security issue.  Note the add notation here
-  -->
-                       <version>${jackson.version}.1</version>
-               </dependency>
                <dependency>
                        <groupId>com.fasterxml.jackson.dataformat</groupId>
                        <artifactId>jackson-dataformat-yaml</artifactId>
@@ -222,27 +253,36 @@
                <dependency>
                        <groupId>ch.qos.logback</groupId>
                        <artifactId>logback-core</artifactId>
-                       <version>1.2.0</version>
+                       <version>1.2.3</version>
                </dependency>
                <dependency>
                        <groupId>ch.qos.logback</groupId>
                        <artifactId>logback-classic</artifactId>
-                       <version>1.2.0</version>
+                       <version>1.2.3</version>
+               </dependency>
+<!-- DMAAP-656:
+   - override this dependency because it utilized a third party
+   - lib called com.google.guava:20.0 which had severe security threat identified.
+ -->
+               <dependency>
+                       <groupId>com.google.guava</groupId>
+                       <artifactId>guava</artifactId>
+                       <version>24.1.1-jre</version>
                </dependency>
                <dependency>
                        <groupId>io.swagger</groupId>
                        <artifactId>swagger-core</artifactId>
-                       <version>1.5.13</version>
+                       <version>${swagger.version}</version>
                </dependency>
                <dependency>
                        <groupId>io.swagger</groupId>
                        <artifactId>swagger-jersey2-jaxrs</artifactId>
-                       <version>1.5.13</version>
+                       <version>${swagger.version}</version>
                </dependency>
                <dependency>
                        <groupId>io.swagger</groupId>
                        <artifactId>swagger-annotations</artifactId>
-                       <version>1.5.13</version>
+                       <version>${swagger.version}</version>
                </dependency>
                <dependency>
                        <groupId>org.glassfish.jersey.containers</groupId>
@@ -285,13 +325,13 @@
                <dependency>
                        <groupId>commons-codec</groupId>
                        <artifactId>commons-codec</artifactId>
-                       <version>1.6</version>
+                       <version>1.11</version>
                </dependency>
                <!-- https://mvnrepository.com/artifact/org.postgresql/postgresql -->
                <dependency>
                        <groupId>org.postgresql</groupId>
                        <artifactId>postgresql</artifactId>
-                       <version>9.4.1208.jre7</version>
+                       <version>42.2.5</version>
                </dependency>
                <dependency>
                        <groupId>com.att.eelf</groupId>
@@ -310,13 +350,43 @@
                <version>${jersey.version}</version>
                        -->
                        <artifactId>jersey-test-framework-provider-jdk-http</artifactId>
-               <version>2.22.1</version>
+               <version>2.29.1</version>
                </dependency>
                <dependency>
                <groupId>org.glassfish.jersey.inject</groupId>
                <artifactId>jersey-hk2</artifactId>
+                       <version>2.29.1</version>
+               </dependency>
+               <dependency>
+                               <!-- use 2.3.1 to avoid this issue: https://github.com/eclipse-ee4j/jaxb-ri/issues/1222 -->
+                               <groupId>javax.xml.bind</groupId>
+                               <artifactId>jaxb-api</artifactId>
+                               <version>2.3.1</version>
+               </dependency>
+               <dependency>
+                       <groupId>javax.activation</groupId>
+                       <artifactId>javax.activation-api</artifactId>
+                       <version>1.2.0</version>
+               </dependency>
+
+               <dependency>
+                       <groupId>junit</groupId>
+                       <artifactId>junit</artifactId>
+                       <version>${junit.version}</version>
+                       <scope>test</scope>
                </dependency>
-       </dependencies>
+    <dependency>
+      <groupId>pl.pragmatists</groupId>
+      <artifactId>JUnitParams</artifactId>
+      <version>1.1.0</version>
+      <scope>test</scope>
+    </dependency>
+<dependency>
+    <groupId>org.apache.maven.plugins</groupId>
+    <artifactId>maven-enforcer-plugin</artifactId>
+    <version>3.0.0-M3</version>
+</dependency>
+  </dependencies>
        <reporting>
                <plugins>
                        <plugin>
@@ -344,12 +414,14 @@
                </site>
        </distributionManagement>
        <properties>
-           <jackson.version>2.8.11</jackson.version>
-               <jersey.version>2.26</jersey.version>
+               <swagger.version>1.5.19</swagger.version>
+           <jackson.version>2.9.5</jackson.version>
+               <jersey.version>2.29</jersey.version>
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-               <jettyVersion>9.3.9.v20160517</jettyVersion> 
-               <eelf.version>0.0.1</eelf.version>
-               <artifact.version>1.0.14-SNAPSHOT</artifact.version>
+               <jettyVersion>9.4.24.v20191120</jettyVersion>
+               <eelf.version>1.0.0</eelf.version>
+               <artifact.version>2.0.2-SNAPSHOT</artifact.version>
+               <junit.version>4.12</junit.version>
                <!-- SONAR -->
                <jacoco.version>0.7.7.201606060606</jacoco.version>
                <sonar-jacoco-listeners.version>3.2</sonar-jacoco-listeners.version>