coherence-spring-sockshop-sample/pom.xml at main · oracle/coherence-spring-sockshop-sample · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
<?xml version="1.0" encoding="UTF-8"?>
<!--
  Copyright (c) 2021, 2025 Oracle and/or its affiliates.

  Licensed under the Universal Permissive License v 1.0 as shown at
  https://oss.oracle.com/licenses/upl.
-->
<project xmlns="http://maven.apache.org/POM/4.0.0"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <groupId>com.oracle.coherence.examples.sockshop.spring</groupId>
    <artifactId>sockshop-parent</artifactId>
    <packaging>pom</packaging>
    <version>1.5.3-SNAPSHOT</version>

    <properties>
        <sockshop.root>${basedir}</sockshop.root>

        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
        <maven.minimum.version>3.6.0</maven.minimum.version>

        <maven.compiler.source>17</maven.compiler.source>
        <maven.compiler.target>17</maven.compiler.target>
        <java.version>17</java.version>

        <container.repo>ghcr.io/oracle/coherence-spring-sockshop</container.repo>
        <container.version>${project.version}</container.version>
        <jib.goal>dockerBuild</jib.goal>

        <version.lib.awaitility>4.3.0</version.lib.awaitility>
        <version.lib.bcprov>1.81</version.lib.bcprov>
        <version.lib.bedrock>7.0.6</version.lib.bedrock>
        <version.lib.coherence>25.03.2</version.lib.coherence>
        <version.lib.coherence-spring>4.3.1</version.lib.coherence-spring>
        <version.lib.commons-io>2.20.0</version.lib.commons-io>
        <version.lib.httpclient>5.5</version.lib.httpclient>
        <version.lib.logback>1.5.18</version.lib.logback>
        <version.lib.lombok>1.18.28</version.lib.lombok>
        <version.lib.okhttp>5.1.0</version.lib.okhttp>
        <version.lib.rest-assured>5.5.5</version.lib.rest-assured>
        <version.lib.spring-boot>3.5.3</version.lib.spring-boot>
        <version.lib.spring-cloud>2025.0.0</version.lib.spring-cloud>
        <version.lib.springdoc-openapi>2.8.9</version.lib.springdoc-openapi>
        <version.lib.springframework>6.2.9</version.lib.springframework>
        <version.lib.tomcat-embed>10.1.43</version.lib.tomcat-embed>
        <version.lib.opentracing-spring-jaeger>3.3.1</version.lib.opentracing-spring-jaeger>
        <version.lib.jackson>2.19.2</version.lib.jackson>
        <version.lib.jaeger-client>1.8.1</version.lib.jaeger-client>
        <version.lib.apache.commons.lang3>3.18.0</version.lib.apache.commons.lang3>

        <version.plugin.dependency-check-maven>12.1.3</version.plugin.dependency-check-maven>
        <version.plugin.jib>3.4.6</version.plugin.jib>
        <version.plugin.failsafe>3.5.3</version.plugin.failsafe>
        <version.plugin.maven-enforcer>3.6.1</version.plugin.maven-enforcer>
        <version.plugin.maven-jar>3.4.2</version.plugin.maven-jar>
        <version.plugin.surefire>3.5.3</version.plugin.surefire>
    </properties>

    <modules>
        <module>carts</module>
        <module>catalog</module>
        <module>users</module>
        <module>orders</module>
        <module>payment</module>
        <module>shipping</module>
        <module>sockshop-test</module>
    </modules>

    <repositories>
        <repository>
            <id>central</id>
            <url>https://repo1.maven.org/maven2/</url>
            <releases>
                <enabled>true</enabled>
            </releases>
            <snapshots>
                <enabled>false</enabled>
            </snapshots>
        </repository>
        <repository>
            <id>sonatype-snapshots</id>
            <url>https://central.sonatype.com/repository/maven-snapshots</url>
            <releases>
                <enabled>false</enabled>
            </releases>
            <snapshots>
                <enabled>true</enabled>
            </snapshots>
        </repository>
    </repositories>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>${version.lib.spring-boot}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>org.springframework.cloud</groupId>
                <artifactId>spring-cloud-dependencies</artifactId>
                <version>${version.lib.spring-cloud}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>org.bouncycastle</groupId>
                <artifactId>bcprov-jdk18on</artifactId>
                <version>${version.lib.bcprov}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-web</artifactId>
                <version>${version.lib.springframework}</version>
            </dependency>
            <!-- override for CVE-2025-48924 -->
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-lang3</artifactId>
                <version>${version.lib.apache.commons.lang3}</version>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <build>
        <plugins>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-enforcer-plugin</artifactId>
                <version>${version.plugin.maven-enforcer}</version>
                <executions>
                    <execution>
                        <id>enforce-plugin-versions</id>
                        <goals>
                            <goal>enforce</goal>
                        </goals>
                        <configuration>
                            <rules>
                                <requireMavenVersion>
                                    <version>${maven.minimum.version}</version>
                                </requireMavenVersion>
                                <requireJavaVersion>
                                    <version>${java.version}</version>
                                </requireJavaVersion>
                            </rules>
                        </configuration>
                    </execution>
                </executions>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-surefire-plugin</artifactId>
                <version>${version.plugin.surefire}</version>
                <configuration>
                    <forkCount>1</forkCount>
                    <reuseForks>false</reuseForks>
                </configuration>
            </plugin>
        </plugins>
        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-failsafe-plugin</artifactId>
                    <version>${version.plugin.failsafe}</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>integration-test</goal>
                                <goal>verify</goal>
                            </goals>
                        </execution>
                    </executions>
                    <configuration>
                        <classesDirectory>${project.build.outputDirectory}</classesDirectory>
                    </configuration>
                </plugin>
            </plugins>
        </pluginManagement>
    </build>
    <profiles>
        <profile>
            <id>owasp</id>
            <build>
                <plugins>
                    <plugin>
                        <groupId>org.owasp</groupId>
                        <artifactId>dependency-check-maven</artifactId>
                        <version>${version.plugin.dependency-check-maven}</version>
                        <inherited>false</inherited>
                        <configuration>
                            <failBuildOnCVSS>7</failBuildOnCVSS>
                            <skipProvidedScope>true</skipProvidedScope>
                            <skipRuntimeScope>true</skipRuntimeScope>
                            <skipTestScope>true</skipTestScope>
                            <suppressionFiles>
                                <suppressionFile>${sockshop.root}/src/main/config/dependency-check-suppression.xml</suppressionFile>
                            </suppressionFiles>
                        </configuration>
                        <executions>
                            <execution>
                                <goals>
                                    <goal>aggregate</goal>
                                </goals>
                            </execution>
                        </executions>
                    </plugin>
                </plugins>
            </build>
        </profile>
    </profiles>
</project>