updated few jars for security fix
[portal.git] / ecomp-portal-widget-ms / widget-ms / pom.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
4                 <modelVersion>4.0.0</modelVersion>
5
6         <!-- This project must name Spring as parent; cannot name Portal -->
7         
8         <parent>
9                 <groupId>org.springframework.boot</groupId>
10                 <artifactId>spring-boot-starter-parent</artifactId>
11                 <version>2.2.5.RELEASE</version>
12                 <relativePath /> <!-- lookup parent from repository -->
13         </parent>
14
15         <groupId>org.onap.portal</groupId>
16         <artifactId>widget-ms</artifactId>
17         <version>3.4.0</version>
18         <packaging>jar</packaging>
19         <name>widget-microservice</name>
20
21         <properties>
22                 <docker.imagename>widget-ms</docker.imagename>
23                 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
24                 <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
25                 <java.version>1.8</java.version>
26                 <hibernate.version>5.4.14.Final</hibernate.version>
27                 <skipTests>false</skipTests>
28                 <!-- Replicate this from OParent -->
29                 <jacocoVersion>0.8.2</jacocoVersion>
30         </properties>
31
32         <dependencies>
33                 <!-- This pom pulls in artifacts -->
34                 <dependency>
35                         <groupId>org.onap.portal</groupId>
36                         <artifactId>common-widgets</artifactId>
37                         <version>${project.version}</version>
38                         <type>pom</type>
39                 </dependency>
40                 <dependency>
41                         <!-- Setup Spring Data JPA Repository support -->
42                         <groupId>org.springframework.boot</groupId>
43                         <artifactId>spring-boot-starter-data-jpa</artifactId>
44                 </dependency>
45                 <dependency>
46                         <groupId>org.springframework.boot</groupId>
47                         <artifactId>spring-boot-starter-security</artifactId>
48                         <exclusions>
49                                 <exclusion>
50                                         <groupId>org.springframework.security</groupId>
51                                 <artifactId>spring-security-web</artifactId>
52                                 </exclusion>
53                         </exclusions>
54                 </dependency>
55                 <dependency>
56                         <groupId>org.springframework.boot</groupId>
57                         <artifactId>spring-boot-starter-thymeleaf</artifactId>
58                 </dependency>
59                 <!-- <dependency>
60                         <groupId>org.springframework.boot</groupId>
61                         <artifactId>spring-boot-devtools</artifactId>
62                         <optional>true</optional>
63                 </dependency> -->
64                 <dependency>
65                         <groupId>org.springframework.boot</groupId>
66                         <artifactId>spring-boot-configuration-processor</artifactId>
67                         <optional>true</optional>
68                 </dependency>
69                 <dependency>
70                         <groupId>org.hibernate</groupId>
71                         <artifactId>hibernate-core</artifactId>
72                         <version>${hibernate.version}</version>
73                 </dependency>
74                 <dependency>
75                         <groupId>org.springframework.boot</groupId>
76                         <artifactId>spring-boot-starter</artifactId>
77                 </dependency>
78                 <dependency>
79                         <groupId>org.springframework.boot</groupId>
80                         <artifactId>spring-boot-starter-test</artifactId>
81                         <scope>test</scope>
82                 </dependency>
83                 <dependency>
84                         <groupId>org.springframework.boot</groupId>
85                         <artifactId>spring-boot-starter-web</artifactId>
86                 </dependency>
87                 <dependency>
88                         <groupId>commons-codec</groupId>
89                         <artifactId>commons-codec</artifactId>
90                         <!-- <version>1.10</version> -->
91                 </dependency>
92                 <dependency>
93                         <groupId>org.mariadb.jdbc</groupId>
94                         <artifactId>mariadb-java-client</artifactId>
95                         <version>1.5.8</version>
96                 </dependency>
97                 <dependency>
98                         <groupId>com.github.ulisesbocchio</groupId>
99                         <artifactId>jasypt-spring-boot-starter</artifactId>
100                         <version>2.1.0</version>
101                 </dependency>
102                 <dependency>
103                         <groupId>org.jsoup</groupId>
104                         <artifactId>jsoup</artifactId>
105                         <version>1.12.1</version>
106        </dependency>
107                 <!-- hibernate-core depends on dom4j, which has optional dependencies. 
108                         On jenkins, contrary to doc, mvn 3.0.5 packages the optional dependencies 
109                         in the war. Workaround: exclude them explicitly. -->
110                 <dependency>
111                         <groupId>dom4j</groupId>
112                         <artifactId>dom4j</artifactId>
113                         <version>1.6.1</version>
114                         <exclusions>
115                                 <exclusion>
116                                         <groupId>jaxme</groupId>
117                                         <artifactId>jaxme-api</artifactId>
118                                 </exclusion>
119                                 <exclusion>
120                                         <groupId>jaxen</groupId>
121                                         <artifactId>jaxen</artifactId>
122                                 </exclusion>
123                                 <exclusion>
124                                         <groupId>msv</groupId>
125                                         <artifactId>xsdlib</artifactId>
126                                 </exclusion>
127                                 <exclusion>
128                                         <groupId>msv</groupId>
129                                         <artifactId>relaxngDatatype</artifactId>
130                                 </exclusion>
131                                 <exclusion>
132                                         <groupId>pull-parser</groupId>
133                                         <artifactId>pull-parser</artifactId>
134                                 </exclusion>
135                                 <exclusion>
136                                         <groupId>xpp3</groupId>
137                                         <artifactId>xpp3</artifactId>
138                                 </exclusion>
139                                 <exclusion>
140                                         <groupId>stax</groupId>
141                                         <artifactId>stax-api</artifactId>
142                                 </exclusion>
143                         </exclusions>
144                 </dependency>
145                 <!-- Jacoco offline instrumentation agent -->
146                 <dependency>
147                         <groupId>org.jacoco</groupId>
148                         <artifactId>org.jacoco.agent</artifactId>
149                         <version>${jacocoVersion}</version>
150                         <classifier>runtime</classifier>
151                 </dependency>
152                 <dependency>
153                 <groupId>org.apache.tomcat.embed</groupId>
154                 <artifactId>tomcat-embed-core</artifactId>
155                 <version>9.0.36</version>
156                 </dependency>
157                 <dependency>
158                         <groupId>ch.qos.logback</groupId>
159                         <artifactId>logback-core</artifactId>
160                         <version>1.2.3</version>
161                 </dependency>
162                 <dependency>
163                         <groupId>ch.qos.logback</groupId>
164                         <artifactId>logback-classic</artifactId>
165                         <version>1.2.3</version>
166                 </dependency>
167                 <dependency>
168                         <groupId>com.fasterxml.jackson.core</groupId>
169                         <artifactId>jackson-annotations</artifactId>
170                         <version>2.11.0</version>
171                 </dependency>
172                 <dependency>
173                         <groupId>com.fasterxml.jackson.core</groupId>
174                         <artifactId>jackson-core</artifactId>
175                         <version>2.11.0</version>
176                 </dependency>
177                 <dependency>
178                         <groupId>com.fasterxml.jackson.core</groupId>
179                         <artifactId>jackson-databind</artifactId>
180                         <version>2.11.0</version>
181                 </dependency>
182                 <dependency>
183                 <groupId>org.springframework.security</groupId>
184                 <artifactId>spring-security-web</artifactId>
185                 <version>5.2.3.RELEASE</version>
186                 </dependency>
187                 <dependency>
188                         <groupId>org.projectlombok</groupId>
189                         <artifactId>lombok</artifactId>
190                         <version>1.18.4</version>
191                 </dependency>
192         </dependencies>
193
194         <build>
195
196                 <finalName>${project.artifactId}</finalName>
197
198                 <!-- To add resources, must name all including usual src/main/resources -->
199                 <resources>
200                         <resource>
201                                 <directory>src/main/resources</directory>
202                                 <filtering>true</filtering>
203                         </resource>
204                         <resource>
205                                 <directory>../common-widgets/target</directory>
206                                 <includes>
207                                         <include>**/*.zip</include>
208                                 </includes>
209                         </resource>
210                 </resources>
211
212                 <pluginManagement>
213                         <plugins>
214                                 <!-- replicated from OParent -->
215                                 <plugin>
216                                         <groupId>org.apache.maven.plugins</groupId>
217                                         <artifactId>maven-site-plugin</artifactId>
218                                         <version>3.6</version>
219                                         <dependencies>
220                                                 <dependency>
221                                                         <groupId>org.apache.maven.wagon</groupId>
222                                                         <artifactId>wagon-webdav-jackrabbit</artifactId>
223                                                         <version>2.10</version>
224                                                 </dependency>
225                                         </dependencies>
226                                 </plugin>
227                         </plugins>
228                 </pluginManagement>
229
230                 <plugins>
231
232                         <plugin>
233                                 <groupId>org.springframework.boot</groupId>
234                                 <artifactId>spring-boot-maven-plugin</artifactId>
235                         </plugin>
236
237                         <!-- No deployment step for this project -->
238                         <plugin>
239                                 <groupId>org.apache.maven.plugins</groupId>
240                                 <artifactId>maven-deploy-plugin</artifactId>
241                                 <!-- version set by spring <version>2.8</version> -->
242                                 <configuration>
243                                         <skip>true</skip>
244                                 </configuration>
245                         </plugin>
246                         <plugin>
247                                 <groupId>org.jacoco</groupId>
248                                 <artifactId>jacoco-maven-plugin</artifactId>
249                                 <version>${jacocoVersion}</version>
250                                 <executions>
251                                         <!-- disable jacoco executions from oparent -->
252                                         <execution>
253                                                 <id>pre-unit-test</id>
254                                                 <phase>none</phase>
255                                         </execution>
256                                         <execution>
257                                                 <id>post-unit-test</id>
258                                                 <phase>none</phase>
259                                         </execution>
260                                         <execution>
261                                                 <id>pre-integration-test</id>
262                                                 <phase>none</phase>
263                                         </execution>
264                                         <execution>
265                                                 <id>post-integration-test</id>
266                                                 <phase>none</phase>
267                                         </execution>
268                                         <!-- Order matters -->
269                                         <execution>
270                                                 <id>portal-prepare-agent</id>
271                                                 <goals>
272                                                         <goal>prepare-agent</goal>
273                                                 </goals>
274                                                 <configuration>
275                                                         <destFile>${sonar.jacoco.reportPath}</destFile>
276                                                 </configuration>
277                                         </execution>
278                                         <!-- offline instrumentation for PowerMock -->
279                                         <execution>
280                                                 <id>portal-offline-instrument</id>
281                                                 <goals>
282                                                         <goal>instrument</goal>
283                                                 </goals>
284                                         </execution>
285                                         <execution>
286                                                 <id>portal-restore-instrumented-classes</id>
287                                                 <phase>test</phase>
288                                                 <goals>
289                                                         <goal>restore-instrumented-classes</goal>
290                                                 </goals>
291                                         </execution>
292                                         <execution>
293                                                 <id>portal-post-unit-test</id>
294                                                 <phase>test</phase>
295                                                 <goals>
296                                                         <goal>report</goal>
297                                                 </goals>
298                                                 <configuration>
299                                                         <dataFile>${sonar.jacoco.reportPath}</dataFile>
300                                                         <outputDirectory>${project.basedir}/target/site/jacoco</outputDirectory>
301                                                 </configuration>
302                                         </execution>
303                                 </executions>
304                         </plugin>
305
306                         <plugin>
307                                 <groupId>org.apache.maven.plugins</groupId>
308                                 <artifactId>maven-surefire-plugin</artifactId>
309                                 <configuration>
310                                         <systemPropertyVariables>
311                                                 <jacoco-agent.destfile>${project.build.directory}/code-coverage/jacoco-ut.exec</jacoco-agent.destfile>
312                                         </systemPropertyVariables>
313                                 </configuration>
314                         </plugin>
315                 </plugins>
316
317         </build>
318
319         <!-- This POM cannot inherit from OParent -->
320         <distributionManagement>
321                 <site>
322                         <id>ecomp-site</id>
323                         <url>dav:https://nexus.onap.org/content/sites/site/${project.groupId}/${project.artifactId}/${project.version}</url>
324                 </site>
325         </distributionManagement>
326
327 </project>