Fixed Some Vulnerability Issues

[holmes/rule-management.git] / pom.xml

diff --git a/pom.xml b/pom.xml
index 07b5f60..9abc7e5 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -14,7 +14,8 @@
   ~ See the License for the specific language governing permissions and\r
   ~ limitations under the License.\r
   -->\r
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">\r
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"\r
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">\r
     <modelVersion>4.0.0</modelVersion>\r
     <parent>\r
         <groupId>org.onap.oparent</groupId>\r
@@ -45,8 +46,8 @@
         <bundle.name>${project.artifactId}-${project.version}</bundle.name>\r
 \r
         <powermock.version>2.0.7</powermock.version>\r
-        <dropwizard.version>2.0.9</dropwizard.version>\r
-        <jersey.version>2.30.1</jersey.version>\r
+        <dropwizard.version>2.0.10</dropwizard.version>\r
+        <jersey.version>2.31</jersey.version>\r
         <jacoco.version>0.8.5</jacoco.version>\r
         <slf4j.version>1.7.25</slf4j.version>\r
 \r
@@ -59,6 +60,18 @@
         </sonar.coverage.jacoco.xmlReportPaths>\r
     </properties>\r
 \r
+    <dependencyManagement>\r
+        <dependencies>\r
+            <dependency>\r
+                <groupId>org.glassfish.jersey</groupId>\r
+                <artifactId>jersey-bom</artifactId>\r
+                <version>${jersey.version}</version>\r
+                <type>pom</type>\r
+                <scope>import</scope>\r
+            </dependency>\r
+        </dependencies>\r
+    </dependencyManagement>\r
+\r
     <dependencies>\r
         <dependency>\r
             <groupId>ch.qos.logback</groupId>\r
@@ -90,8 +103,21 @@
                     <groupId>org.eclipse.jetty</groupId>\r
                     <artifactId>jetty-server</artifactId>\r
                 </exclusion>\r
+                <exclusion>\r
+                    <groupId>org.checkerframework</groupId>\r
+                    <artifactId>checker-qual</artifactId>\r
+                </exclusion>\r
+                <exclusion>\r
+                    <groupId>com.squareup.retrofit2</groupId>\r
+                    <artifactId>retrofit</artifactId>\r
+                </exclusion>\r
             </exclusions>\r
         </dependency>\r
+        <dependency>\r
+            <groupId>com.squareup.retrofit2</groupId>\r
+            <artifactId>retrofit</artifactId>\r
+            <version>2.5.0</version>\r
+        </dependency>\r
         <dependency>\r
             <groupId>org.reflections</groupId>\r
             <artifactId>reflections</artifactId>\r
@@ -100,7 +126,7 @@
         <dependency>\r
             <groupId>org.onap.holmes.common</groupId>\r
             <artifactId>holmes-actions</artifactId>\r
-            <version>1.2.13</version>\r
+            <version>1.3.0</version>\r
             <exclusions>\r
                 <exclusion>\r
                     <groupId>org.glassfish.jersey.containers</groupId>\r
@@ -155,7 +181,7 @@
         <dependency>\r
             <groupId>org.postgresql</groupId>\r
             <artifactId>postgresql</artifactId>\r
-            <version>42.2.5</version>\r
+            <version>42.2.13</version>\r
         </dependency>\r
         <dependency>\r
             <groupId>junit</groupId>\r
@@ -183,7 +209,7 @@
         <dependency>\r
             <groupId>io.swagger</groupId>\r
             <artifactId>swagger-jersey2-jaxrs</artifactId>\r
-            <version>1.5.3</version>\r
+            <version>1.6.1</version>\r
             <exclusions>\r
                 <exclusion>\r
                     <groupId>com.fasterxml.jackson.core</groupId>\r
@@ -205,6 +231,14 @@
                     <groupId>org.glassfish.jersey.containers</groupId>\r
                     <artifactId>jersey-container-servlet-core</artifactId>\r
                 </exclusion>\r
+                <exclusion>\r
+                    <groupId>com.fasterxml.jackson.jaxrs</groupId>\r
+                    <artifactId>jackson-jaxrs-json-provider</artifactId>\r
+                </exclusion>\r
+                <exclusion>\r
+                    <groupId>com.fasterxml.jackson.jaxrs</groupId>\r
+                    <artifactId>jackson-datatype-joda</artifactId>\r
+                </exclusion>\r
             </exclusions>\r
             <scope>provided</scope>\r
         </dependency>\r
@@ -288,14 +322,14 @@
             <version>3.2.2</version>\r
         </dependency>\r
         <dependency>\r
-            <groupId>com.alibaba</groupId>\r
-            <artifactId>fastjson</artifactId>\r
-            <version>1.2.49</version>\r
+            <groupId>com.google.code.gson</groupId>\r
+            <artifactId>gson</artifactId>\r
+            <version>2.8.6</version>\r
         </dependency>\r
+\r
         <dependency>\r
             <groupId>org.glassfish.jersey.core</groupId>\r
             <artifactId>jersey-server</artifactId>\r
-            <version>${jersey.version}</version>\r
             <exclusions>\r
                 <exclusion>\r
                     <groupId>javax.validation</groupId>\r
@@ -306,17 +340,56 @@
         <dependency>\r
             <groupId>org.glassfish.jersey.core</groupId>\r
             <artifactId>jersey-client</artifactId>\r
-            <version>${jersey.version}</version>\r
         </dependency>\r
         <dependency>\r
             <groupId>org.glassfish.jersey.core</groupId>\r
             <artifactId>jersey-common</artifactId>\r
-            <version>${jersey.version}</version>\r
+        </dependency>\r
+        <dependency>\r
+            <groupId>javax.annotation</groupId>\r
+            <artifactId>javax.annotation-api</artifactId>\r
+            <version>1.3.2</version>\r
+        </dependency>\r
+        <dependency>\r
+            <groupId>javax.xml.bind</groupId>\r
+            <artifactId>jaxb-api</artifactId>\r
+            <version>2.4.0-b180725.0427</version>\r
+        </dependency>\r
+        <dependency>\r
+            <groupId>org.glassfish.jaxb</groupId>\r
+            <artifactId>jaxb-runtime</artifactId>\r
+            <version>2.4.0-b180725.0644</version>\r
         </dependency>\r
     </dependencies>\r
 \r
     <build>\r
         <plugins>\r
+            <plugin>\r
+                <groupId>org.apache.maven.plugins</groupId>\r
+                <artifactId>maven-compiler-plugin</artifactId>\r
+                <version>3.8.0</version>\r
+                <configuration>\r
+                    <release>11</release>\r
+                </configuration>\r
+            </plugin>\r
+<!--            <plugin>-->\r
+<!--                <groupId>org.apache.maven.plugins</groupId>-->\r
+<!--                <artifactId>maven-enforcer-plugin</artifactId>-->\r
+<!--                <version>1.4.1</version>-->\r
+<!--                <executions>-->\r
+<!--                    <execution>-->\r
+<!--                        <id>enforce</id>-->\r
+<!--                        <configuration>-->\r
+<!--                            <rules>-->\r
+<!--                                <dependencyConvergence/>-->\r
+<!--                            </rules>-->\r
+<!--                        </configuration>-->\r
+<!--                        <goals>-->\r
+<!--                            <goal>enforce</goal>-->\r
+<!--                        </goals>-->\r
+<!--                    </execution>-->\r
+<!--                </executions>-->\r
+<!--            </plugin>-->\r
             <plugin>\r
                 <groupId>org.jacoco</groupId>\r
                 <artifactId>jacoco-maven-plugin</artifactId>\r