Fixed Some Vulnerability Issues
[holmes/rule-management.git] / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>\r
2 <!--\r
3   ~ Copyright 2017-2020 ZTE Corporation.\r
4   ~\r
5   ~ Licensed under the Apache License, Version 2.0 (the "License");\r
6   ~ you may not use this file except in compliance with the License.\r
7   ~ You may obtain a copy of the License at\r
8   ~\r
9   ~     http://www.apache.org/licenses/LICENSE-2.0\r
10   ~\r
11   ~ Unless required by applicable law or agreed to in writing, software\r
12   ~ distributed under the License is distributed on an "AS IS" BASIS,\r
13   ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
14   ~ See the License for the specific language governing permissions and\r
15   ~ limitations under the License.\r
16   -->\r
17 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"\r
18          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">\r
19     <modelVersion>4.0.0</modelVersion>\r
20     <parent>\r
21         <groupId>org.onap.oparent</groupId>\r
22         <artifactId>oparent</artifactId>\r
23         <version>3.0.0</version>\r
24     </parent>\r
25 \r
26     <groupId>org.onap.holmes.rule-management</groupId>\r
27     <artifactId>holmes-rulemgt-parent</artifactId>\r
28     <version>1.2.7-SNAPSHOT</version>\r
29     <packaging>pom</packaging>\r
30     <name>holmes-rule-management</name>\r
31     <modules>\r
32         <module>rulemgt</module>\r
33         <module>rulemgt-frontend</module>\r
34         <module>rulemgt-standalone</module>\r
35     </modules>\r
36 \r
37     <properties>\r
38         <packagename>onap-holmes-rulemgt</packagename>\r
39         <finalName>${project.artifactId}-${project.version}</finalName>\r
40 \r
41         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>\r
42         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>\r
43         <maven.test.failure.ignore>false</maven.test.failure.ignore>\r
44 \r
45         <release.dir>${basedir}/target</release.dir>\r
46         <bundle.name>${project.artifactId}-${project.version}</bundle.name>\r
47 \r
48         <powermock.version>2.0.7</powermock.version>\r
49         <dropwizard.version>2.0.10</dropwizard.version>\r
50         <jersey.version>2.31</jersey.version>\r
51         <jacoco.version>0.8.5</jacoco.version>\r
52         <slf4j.version>1.7.25</slf4j.version>\r
53 \r
54         <linux64id>linux64</linux64id>\r
55         <linux64outputdir>target/assembly/${linux64id}</linux64outputdir>\r
56         <version.output>target/version</version.output>\r
57 \r
58         <sonar.coverage.jacoco.xmlReportPaths>\r
59             ${project.reporting.outputDirectory}/jacoco-ut/jacoco.xml\r
60         </sonar.coverage.jacoco.xmlReportPaths>\r
61     </properties>\r
62 \r
63     <dependencyManagement>\r
64         <dependencies>\r
65             <dependency>\r
66                 <groupId>org.glassfish.jersey</groupId>\r
67                 <artifactId>jersey-bom</artifactId>\r
68                 <version>${jersey.version}</version>\r
69                 <type>pom</type>\r
70                 <scope>import</scope>\r
71             </dependency>\r
72         </dependencies>\r
73     </dependencyManagement>\r
74 \r
75     <dependencies>\r
76         <dependency>\r
77             <groupId>ch.qos.logback</groupId>\r
78             <artifactId>logback-classic</artifactId>\r
79             <version>1.2.3</version>\r
80         </dependency>\r
81         <dependency>\r
82             <groupId>org.onap.msb.java-sdk</groupId>\r
83             <artifactId>msb-java-sdk</artifactId>\r
84             <version>1.1.1</version>\r
85             <exclusions>\r
86                 <exclusion>\r
87                     <groupId>ch.qos.logback</groupId>\r
88                     <artifactId>logback-classic</artifactId>\r
89                 </exclusion>\r
90                 <exclusion>\r
91                     <groupId>com.fasterxml.jackson.core</groupId>\r
92                     <artifactId>jackson-databind</artifactId>\r
93                 </exclusion>\r
94                 <exclusion>\r
95                     <groupId>com.fasterxml.jackson.core</groupId>\r
96                     <artifactId>jackson-core</artifactId>\r
97                 </exclusion>\r
98                 <exclusion>\r
99                     <groupId>com.squareup.okhttp3</groupId>\r
100                     <artifactId>okhttp</artifactId>\r
101                 </exclusion>\r
102                 <exclusion>\r
103                     <groupId>org.eclipse.jetty</groupId>\r
104                     <artifactId>jetty-server</artifactId>\r
105                 </exclusion>\r
106                 <exclusion>\r
107                     <groupId>org.checkerframework</groupId>\r
108                     <artifactId>checker-qual</artifactId>\r
109                 </exclusion>\r
110                 <exclusion>\r
111                     <groupId>com.squareup.retrofit2</groupId>\r
112                     <artifactId>retrofit</artifactId>\r
113                 </exclusion>\r
114             </exclusions>\r
115         </dependency>\r
116         <dependency>\r
117             <groupId>com.squareup.retrofit2</groupId>\r
118             <artifactId>retrofit</artifactId>\r
119             <version>2.5.0</version>\r
120         </dependency>\r
121         <dependency>\r
122             <groupId>org.reflections</groupId>\r
123             <artifactId>reflections</artifactId>\r
124             <version>0.9.9</version>\r
125         </dependency>\r
126         <dependency>\r
127             <groupId>org.onap.holmes.common</groupId>\r
128             <artifactId>holmes-actions</artifactId>\r
129             <version>1.3.0</version>\r
130             <exclusions>\r
131                 <exclusion>\r
132                     <groupId>org.glassfish.jersey.containers</groupId>\r
133                     <artifactId>jersey-container-servlet-core</artifactId>\r
134                 </exclusion>\r
135                 <exclusion>\r
136                     <groupId>io.swagger</groupId>\r
137                     <artifactId>swagger-jersey2-jaxrs</artifactId>\r
138                 </exclusion>\r
139                 <exclusion>\r
140                     <groupId>org.slf4j</groupId>\r
141                     <artifactId>slf4j-api</artifactId>\r
142                 </exclusion>\r
143             </exclusions>\r
144         </dependency>\r
145         <dependency>\r
146             <groupId>org.easymock</groupId>\r
147             <artifactId>easymock</artifactId>\r
148             <version>4.2</version>\r
149             <scope>test</scope>\r
150         </dependency>\r
151         <dependency>\r
152             <groupId>io.dropwizard</groupId>\r
153             <artifactId>dropwizard-core</artifactId>\r
154             <version>${dropwizard.version}</version>\r
155         </dependency>\r
156         <dependency>\r
157             <groupId>io.dropwizard</groupId>\r
158             <artifactId>dropwizard-db</artifactId>\r
159             <version>${dropwizard.version}</version>\r
160         </dependency>\r
161         <dependency>\r
162             <groupId>io.dropwizard</groupId>\r
163             <artifactId>dropwizard-jdbi</artifactId>\r
164             <version>2.0.0-rc9</version>\r
165         </dependency>\r
166         <dependency>\r
167             <groupId>org.antlr</groupId>\r
168             <artifactId>stringtemplate</artifactId>\r
169             <version>3.2.1</version>\r
170         </dependency>\r
171         <dependency>\r
172             <groupId>com.squareup.okhttp3</groupId>\r
173             <artifactId>okhttp</artifactId>\r
174             <version>3.14.1</version>\r
175         </dependency>\r
176         <dependency>\r
177             <groupId>org.projectlombok</groupId>\r
178             <artifactId>lombok</artifactId>\r
179             <version>1.18.4</version>\r
180         </dependency>\r
181         <dependency>\r
182             <groupId>org.postgresql</groupId>\r
183             <artifactId>postgresql</artifactId>\r
184             <version>42.2.13</version>\r
185         </dependency>\r
186         <dependency>\r
187             <groupId>junit</groupId>\r
188             <artifactId>junit</artifactId>\r
189             <version>4.8.2</version>\r
190             <scope>test</scope>\r
191         </dependency>\r
192         <dependency>\r
193             <groupId>org.hamcrest</groupId>\r
194             <artifactId>hamcrest-core</artifactId>\r
195             <version>1.3</version>\r
196             <scope>test</scope>\r
197         </dependency>\r
198         <dependency>\r
199             <groupId>org.powermock</groupId>\r
200             <artifactId>powermock-module-junit4</artifactId>\r
201             <version>${powermock.version}</version>\r
202             <scope>test</scope>\r
203         </dependency>\r
204         <dependency>\r
205             <groupId>org.slf4j</groupId>\r
206             <artifactId>slf4j-api</artifactId>\r
207             <version>${slf4j.version}</version>\r
208         </dependency>\r
209         <dependency>\r
210             <groupId>io.swagger</groupId>\r
211             <artifactId>swagger-jersey2-jaxrs</artifactId>\r
212             <version>1.6.1</version>\r
213             <exclusions>\r
214                 <exclusion>\r
215                     <groupId>com.fasterxml.jackson.core</groupId>\r
216                     <artifactId>jackson-databind</artifactId>\r
217                 </exclusion>\r
218                 <exclusion>\r
219                     <groupId>com.fasterxml.jackson.core</groupId>\r
220                     <artifactId>jackson-core</artifactId>\r
221                 </exclusion>\r
222                 <exclusion>\r
223                     <groupId>com.fasterxml.jackson.dataformat</groupId>\r
224                     <artifactId>jackson-dataformat-xml</artifactId>\r
225                 </exclusion>\r
226                 <exclusion>\r
227                     <groupId>javax.validation</groupId>\r
228                     <artifactId>validation-api</artifactId>\r
229                 </exclusion>\r
230                 <exclusion>\r
231                     <groupId>org.glassfish.jersey.containers</groupId>\r
232                     <artifactId>jersey-container-servlet-core</artifactId>\r
233                 </exclusion>\r
234                 <exclusion>\r
235                     <groupId>com.fasterxml.jackson.jaxrs</groupId>\r
236                     <artifactId>jackson-jaxrs-json-provider</artifactId>\r
237                 </exclusion>\r
238                 <exclusion>\r
239                     <groupId>com.fasterxml.jackson.jaxrs</groupId>\r
240                     <artifactId>jackson-datatype-joda</artifactId>\r
241                 </exclusion>\r
242             </exclusions>\r
243             <scope>provided</scope>\r
244         </dependency>\r
245         <dependency>\r
246             <groupId>org.powermock</groupId>\r
247             <artifactId>powermock-api-easymock</artifactId>\r
248             <version>${powermock.version}</version>\r
249             <scope>test</scope>\r
250         </dependency>\r
251         <dependency>\r
252             <groupId>org.mockito</groupId>\r
253             <artifactId>mockito-core</artifactId>\r
254             <version>2.18.0</version>\r
255             <scope>test</scope>\r
256         </dependency>\r
257         <dependency>\r
258             <groupId>org.powermock</groupId>\r
259             <artifactId>powermock-core</artifactId>\r
260             <version>${powermock.version}</version>\r
261             <scope>test</scope>\r
262         </dependency>\r
263         <dependency>\r
264             <groupId>org.powermock</groupId>\r
265             <artifactId>powermock-module-junit4-rule</artifactId>\r
266             <version>${powermock.version}</version>\r
267             <scope>test</scope>\r
268         </dependency>\r
269         <dependency>\r
270             <groupId>org.powermock</groupId>\r
271             <artifactId>powermock-api-mockito2</artifactId>\r
272             <version>${powermock.version}</version>\r
273             <scope>test</scope>\r
274         </dependency>\r
275         <dependency>\r
276             <groupId>org.javassist</groupId>\r
277             <artifactId>javassist</artifactId>\r
278             <version>3.24.1-GA</version>\r
279         </dependency>\r
280         <dependency>\r
281             <groupId>org.powermock</groupId>\r
282             <artifactId>powermock-classloading-xstream</artifactId>\r
283             <version>${powermock.version}</version>\r
284             <scope>test</scope>\r
285         </dependency>\r
286         <dependency>\r
287             <groupId>io.reactivex.rxjava2</groupId>\r
288             <artifactId>rxjava</artifactId>\r
289             <version>2.1.5</version>\r
290             <scope>test</scope>\r
291         </dependency>\r
292         <dependency>\r
293             <groupId>org.hamcrest</groupId>\r
294             <artifactId>hamcrest-library</artifactId>\r
295             <version>1.3</version>\r
296             <scope>test</scope>\r
297         </dependency>\r
298         <dependency>\r
299             <groupId>com.googlecode.json-simple</groupId>\r
300             <artifactId>json-simple</artifactId>\r
301             <version>1.1.1</version>\r
302         </dependency>\r
303         <dependency>\r
304             <groupId>net.sf.json-lib</groupId>\r
305             <artifactId>json-lib</artifactId>\r
306             <version>2.4</version>\r
307             <classifier>jdk15</classifier>\r
308             <exclusions>\r
309                 <exclusion>\r
310                     <groupId>commons-collections</groupId>\r
311                     <artifactId>commons-collections</artifactId>\r
312                 </exclusion>\r
313                 <exclusion>\r
314                     <groupId>commons-beanutils</groupId>\r
315                     <artifactId>commons-beanutils</artifactId>\r
316                 </exclusion>\r
317             </exclusions>\r
318         </dependency>\r
319         <dependency>\r
320             <groupId>commons-collections</groupId>\r
321             <artifactId>commons-collections</artifactId>\r
322             <version>3.2.2</version>\r
323         </dependency>\r
324         <dependency>\r
325             <groupId>com.google.code.gson</groupId>\r
326             <artifactId>gson</artifactId>\r
327             <version>2.8.6</version>\r
328         </dependency>\r
329 \r
330         <dependency>\r
331             <groupId>org.glassfish.jersey.core</groupId>\r
332             <artifactId>jersey-server</artifactId>\r
333             <exclusions>\r
334                 <exclusion>\r
335                     <groupId>javax.validation</groupId>\r
336                     <artifactId>validation-api</artifactId>\r
337                 </exclusion>\r
338             </exclusions>\r
339         </dependency>\r
340         <dependency>\r
341             <groupId>org.glassfish.jersey.core</groupId>\r
342             <artifactId>jersey-client</artifactId>\r
343         </dependency>\r
344         <dependency>\r
345             <groupId>org.glassfish.jersey.core</groupId>\r
346             <artifactId>jersey-common</artifactId>\r
347         </dependency>\r
348         <dependency>\r
349             <groupId>javax.annotation</groupId>\r
350             <artifactId>javax.annotation-api</artifactId>\r
351             <version>1.3.2</version>\r
352         </dependency>\r
353         <dependency>\r
354             <groupId>javax.xml.bind</groupId>\r
355             <artifactId>jaxb-api</artifactId>\r
356             <version>2.4.0-b180725.0427</version>\r
357         </dependency>\r
358         <dependency>\r
359             <groupId>org.glassfish.jaxb</groupId>\r
360             <artifactId>jaxb-runtime</artifactId>\r
361             <version>2.4.0-b180725.0644</version>\r
362         </dependency>\r
363     </dependencies>\r
364 \r
365     <build>\r
366         <plugins>\r
367             <plugin>\r
368                 <groupId>org.apache.maven.plugins</groupId>\r
369                 <artifactId>maven-compiler-plugin</artifactId>\r
370                 <version>3.8.0</version>\r
371                 <configuration>\r
372                     <release>11</release>\r
373                 </configuration>\r
374             </plugin>\r
375 <!--            <plugin>-->\r
376 <!--                <groupId>org.apache.maven.plugins</groupId>-->\r
377 <!--                <artifactId>maven-enforcer-plugin</artifactId>-->\r
378 <!--                <version>1.4.1</version>-->\r
379 <!--                <executions>-->\r
380 <!--                    <execution>-->\r
381 <!--                        <id>enforce</id>-->\r
382 <!--                        <configuration>-->\r
383 <!--                            <rules>-->\r
384 <!--                                <dependencyConvergence/>-->\r
385 <!--                            </rules>-->\r
386 <!--                        </configuration>-->\r
387 <!--                        <goals>-->\r
388 <!--                            <goal>enforce</goal>-->\r
389 <!--                        </goals>-->\r
390 <!--                    </execution>-->\r
391 <!--                </executions>-->\r
392 <!--            </plugin>-->\r
393             <plugin>\r
394                 <groupId>org.jacoco</groupId>\r
395                 <artifactId>jacoco-maven-plugin</artifactId>\r
396                 <version>${jacoco.version}</version>\r
397                 <executions>\r
398                     <execution>\r
399                         <id>prepare-agent</id>\r
400                         <goals>\r
401                             <goal>prepare-agent</goal>\r
402                         </goals>\r
403                     </execution>\r
404                     <execution>\r
405                         <id>report</id>\r
406                         <goals>\r
407                             <goal>report</goal>\r
408                         </goals>\r
409                         <configuration>\r
410                             <dataFile>${project.build.directory}/code-coverage/jacoco.exec</dataFile>\r
411                             <outputDirectory>${project.reporting.outputDirectory}/jacoco-ut</outputDirectory>\r
412                         </configuration>\r
413                     </execution>\r
414                 </executions>\r
415             </plugin>\r
416         </plugins>\r
417     </build>\r
418 </project>\r