pom.xml

<?xml version="1.0"?>
<!--

    SPDX LGPL-2.1-or-later
    Copyright (C) 2016 The eXist-db Authors

-->
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">

	<modelVersion>4.0.0</modelVersion>

	<parent>
		<groupId>org.exist-db</groupId>
		<artifactId>exist-apps-parent</artifactId>
		<version>3.0.0</version>
	</parent>

	<groupId>org.exist-db.xquery.extensions.expath</groupId>
	<artifactId>expath-crypto-module</artifactId>
	<version>7.0.0</version>

	<name>eXist-db EXPath Cryptographic library</name>
	<description>eXist-db wrapper for EXPath Cryptographic Java library</description>
	<url>http://expath.org/spec/crypto</url>
	<inceptionYear>2016</inceptionYear>

	<licenses>
		<license>
			<name>GNU Lesser General Public License version 2.1</name>
			<url>https://opensource.org/licenses/LGPL-2.1</url>
			<distribution>repo</distribution>
		</license>
	</licenses>

	<scm>
		<url>scm:git://github.com/exist-db/expath-crypto-module.git</url>
		<connection>scm:git:https://github.com/exist-db/expath-crypto-module.git</connection>
		<developerConnection>scm:git:https://github.com/exist-db/expath-crypto-module.git</developerConnection>
	    <tag>7.0.0</tag>
  </scm>

	<organization>
		<name>The eXist-db Project</name>
		<url>https://exist-db.org</url>
	</organization>

	<developers>
		<developer>
			<id>claudius</id>
			<name>Claudius Teodorescu</name>
			<email>claudius.teodorescu@gmail.com</email>
		</developer>
		<developer>
			<id>olaf</id>
			<name>Olaf Schreck</name>
			<email>olaf@existsolutions.com</email>
		</developer>
		<developer>
			<id>adamretter</id>
			<name>Adam Retter</name>
			<email>adam@evolvedbinary.com</email>
			<organization>Evolved Binary</organization>
			<organizationUrl>https://www.evolvedbinary.com</organizationUrl>
		</developer>
	</developers>

	<contributors>
		<contributor>
			<name>Juri Leino</name>
			<email>juri@existsolutions.com</email>
		</contributor>
		<contributor>
			<name>Joseph Wicentowski</name>
			<email>joewiz@gmail.com</email>
		</contributor>
	</contributors>

	<properties>
		<package.title>EXPath Cryptographic Module Implementation</package.title>
		<crypto.java.lib.version>1.9.0</crypto.java.lib.version>
		<exist.version>7.0.0-SNAPSHOT</exist.version>
		<crypto.module.ns>http://expath.org/ns/crypto</crypto.module.ns>
		<crypto.module.java.class>org.expath.exist.crypto.ExistExpathCryptoModule</crypto.module.java.class>
		<package-abbrev>crypto</package-abbrev>
		<package-name>${crypto.module.ns}</package-name>
	</properties>

	<dependencies>
		<dependency>
			<groupId>org.expath.crypto</groupId>
			<artifactId>crypto-java</artifactId>
			<version>${crypto.java.lib.version}</version>
		</dependency>
		<dependency>
			<groupId>org.exist-db</groupId>
			<artifactId>exist-core</artifactId>
			<version>${exist.version}</version>
			<scope>provided</scope>
		</dependency>
		<dependency>
			<groupId>org.slf4j</groupId>
			<artifactId>slf4j-api</artifactId>
			<version>2.0.18</version>
			<scope>provided</scope>
		</dependency>
		<dependency>
			<groupId>com.evolvedbinary.j8fu</groupId>
			<artifactId>j8fu</artifactId>
			<version>1.24.0</version>
			<scope>provided</scope>
		</dependency>
		<dependency>
			<groupId>com.google.code.findbugs</groupId>
			<artifactId>jsr305</artifactId>
			<version>3.0.2</version>
			<scope>provided</scope>
		</dependency>
		<dependency>
			<groupId>commons-io</groupId>
			<artifactId>commons-io</artifactId>
			<version>2.22.0</version>
			<scope>provided</scope>
		</dependency>

		<dependency>
			<groupId>junit</groupId>
			<artifactId>junit</artifactId>
			<scope>test</scope>
		</dependency>

	</dependencies>

	<build>
		<testResources>
			<testResource>
				<directory>src/test/resources</directory>
				<filtering>false</filtering>
			</testResource>
			<testResource>
				<directory>src/test/resources-filtered</directory>
				<filtering>true</filtering>
			</testResource>
		</testResources>

		<plugins>
			<plugin>
				<groupId>com.mycila</groupId>
				<artifactId>license-maven-plugin</artifactId>
				<version>5.0.0</version>
				<configuration>
					<failIfMissing>true</failIfMissing>
					<aggregate>true</aggregate>
					<strictCheck>true</strictCheck>
					<licenseSets>

						<!-- this enforces the original Copyright and License -->
						<licenseSet>
							<header>LGPL2.1-claudius-template.txt</header>
							<excludes>
								<exclude>.github/**</exclude>
								<exclude>README.md</exclude>
								<exclude>LICENSE</exclude>
								<exclude>xquery-license-style.xml</exclude>
								<exclude>LGPL2.1-*-template.txt</exclude>
								<exclude>src/main/resources/**</exclude>
								<exclude>src/markdown-page-generator/**</exclude>
								<exclude>src/test/resources/**</exclude>
								<exclude>src/test/resources-filtered/**</exclude>

								<!-- files now authored by the EXPath project (see below) -->
								<exclude>pom.xml</exclude>
								<exclude>src/test/java/xquery/crypto/CryptoIT.java</exclude>
								<exclude>src/main/java/org/expath/exist/crypto/utils/SecureXmlParsers.java</exclude>
							</excludes>
						</licenseSet>

						<!-- this enforces the EXPath Copyright and License on newer files -->
						<licenseSet>
							<header>LGPL2.1-existdb-template.txt</header>
							<includes>
								<include>pom.xml</include>
								<include>src/test/java/xquery/crypto/CryptoIT.java</include>
								<include>src/main/java/org/expath/exist/crypto/utils/SecureXmlParsers.java</include>
							</includes>
						</licenseSet>
					</licenseSets>
				</configuration>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-jar-plugin</artifactId>
				<configuration>
					<archive>
						<manifest>
							<addDefaultSpecificationEntries>true</addDefaultSpecificationEntries>
							<addDefaultImplementationEntries>true</addDefaultImplementationEntries>
						</manifest>
						<manifestEntries>
							<Build-Tag>${build-tag}</Build-Tag>
							<Git-Commit>${build-commit}</Git-Commit>
							<Git-Commit-Abbrev>${build-commit-abbrev}</Git-Commit-Abbrev>
							<Build-Version>${build-version}</Build-Version>
							<Build-Timestamp>${build-tstamp}</Build-Timestamp>
							<Source-Repository>${project.scm.connection}</Source-Repository>
							<Description>${project.description}</Description>
							<Implementation-URL>${project.url}</Implementation-URL>
						</manifestEntries>
					</archive>
				</configuration>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-failsafe-plugin</artifactId>
				<version>3.5.6</version>
				<configuration>
					<!-- The xmldsig algorithms supported by crypto-java 1.8.0/1.9.0 (RSA_SHA1, DSA_SHA1)
					     are all rejected by the JDK's default secureValidation policy. Disable for tests
					     until the underlying library gains SHA256-based signature support. -->
					<systemPropertyVariables>
						<org.jcp.xml.dsig.secureValidation>false</org.jcp.xml.dsig.secureValidation>
					</systemPropertyVariables>
				</configuration>
				<executions>
					<execution>
						<goals>
							<goal>integration-test</goal>
							<goal>verify</goal>
						</goals>
					</execution>
				</executions>
			</plugin>
			<plugin>
				<!-- SpotBugs + FindSecBugs static analysis. Crypto-focused via FindSecBugs
				     plugin. Currently report-only; once findings are triaged, switch the
				     <goal> in <executions> from "spotbugs" to "check" to fail the build. -->
				<groupId>com.github.spotbugs</groupId>
				<artifactId>spotbugs-maven-plugin</artifactId>
				<version>4.10.2.0</version>
				<configuration>
					<effort>Max</effort>
					<threshold>Low</threshold>
					<failOnError>false</failOnError>
					<xmlOutput>true</xmlOutput>
					<sarifOutput>true</sarifOutput>
					<plugins>
						<plugin>
							<groupId>com.h3xstream.findsecbugs</groupId>
							<artifactId>findsecbugs-plugin</artifactId>
							<version>1.14.0</version>
						</plugin>
					</plugins>
				</configuration>
				<executions>
					<execution>
						<phase>verify</phase>
						<goals>
							<goal>spotbugs</goal>
						</goals>
					</execution>
				</executions>
			</plugin>
			<plugin>
				<groupId>com.ruleoftech</groupId>
				<artifactId>markdown-page-generator-plugin</artifactId>
				<version>2.5.2</version>
				<executions>
					<execution>
						<phase>prepare-package</phase>
						<goals>
							<goal>generate</goal>
						</goals>
					</execution>
				</executions>
				<configuration>
					<inputDirectory>${project.basedir}</inputDirectory>
					<headerHtmlFile>${project.basedir}/src/markdown-page-generator/header.html</headerHtmlFile>
					<footerHtmlFile>${project.basedir}/src/markdown-page-generator/footer.html</footerHtmlFile>
				</configuration>
			</plugin>
			<plugin>
				<groupId>com.coderplus.maven.plugins</groupId>
				<artifactId>copy-rename-maven-plugin</artifactId>
				<version>1.0.1</version>
				<executions>
					<execution>
						<id>rename-readme-file</id>
						<phase>prepare-package</phase>
						<goals>
							<goal>rename</goal>
						</goals>
						<configuration>
							<sourceFile>${project.build.directory}/html/README.html</sourceFile>
							<destinationFile>${project.build.directory}/html/index.html</destinationFile>
						</configuration>
					</execution>
				</executions>
			</plugin>
			<plugin>
				<groupId>ro.kuberam.maven.plugins</groupId>
				<artifactId>kuberam-expath-plugin</artifactId>
				<executions>
					<execution>
						<id>create-xar</id>
						<phase>package</phase>
						<goals>
							<goal>make-xar</goal>
						</goals>
						<configuration>
							<descriptor>xar-assembly.xml</descriptor>
							<finalName>${package-final-name}</finalName>
						</configuration>
					</execution>
				</executions>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-gpg-plugin</artifactId>
				<configuration>
					<useAgent>true</useAgent>
				</configuration>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-release-plugin</artifactId>
				<configuration>
					<mavenExecutorId>forked-path</mavenExecutorId> <!-- avoid a bug with GPG plugin hanging http://jira.codehaus.org/browse/MGPG-9 -->
					<autoVersionSubmodules>true</autoVersionSubmodules>
					<tagNameFormat>@{project.version}</tagNameFormat>
				</configuration>
			</plugin>
			<plugin>
				<groupId>de.jutzig</groupId>
				<artifactId>github-release-plugin</artifactId>
				<version>1.6.0</version>
				<executions>
				  <execution>
					<id>github-upload</id>
					<phase>deploy</phase>
					<goals>
					  <goal>release</goal>
					</goals>
					<inherited>false</inherited>
					<configuration>
						<description>eXist implementation for EXPath Cryptographic Module</description>
						<releaseName>v6.0.0</releaseName>
						<tag>${project.version}</tag>
					  <fileSets>
						<fileSet>
						  <directory>${project.build.directory}</directory>
						  <includes>
							<include>${project.artifactId}*.xar</include>
						  </includes>
						</fileSet>
					  </fileSets>
					</configuration>
				  </execution>
				</executions>
			  </plugin>
		</plugins>
	</build>

	<repositories>
		<!-- GitHub Packages is the authoritative source for exist-core SNAPSHOT
		     builds (deployed from develop by eXist-db/exist's ci-snapshots.yml).
		     Listed first so Maven queries it before the stale snapshot at
		     repo.exist-db.org. The id `github` matches the credentials block
		     injected by setup-java in CI. -->
		<repository>
			<id>github</id>
			<name>GitHub Packages — eXist-db</name>
			<url>https://maven.pkg.github.com/eXist-db/exist</url>
			<releases><enabled>true</enabled></releases>
			<snapshots><enabled>true</enabled></snapshots>
		</repository>
		<!-- Override the eXist-db repository URLs inherited from exist-apps-parent
		     1.11.0, which still declares them as http:// — blocked by Maven
		     3.8.1+'s default HTTP-mirror policy. Snapshots here are stale (the
		     publish pipeline only pushes to GitHub Packages), so this is kept
		     as a release-only source. -->
		<repository>
			<id>exist-db</id>
			<name>eXist-db Releases</name>
			<url>https://repo.exist-db.org/repository/exist-db/</url>
			<releases><enabled>true</enabled></releases>
			<snapshots><enabled>false</enabled></snapshots>
		</repository>
	</repositories>

</project>