aboutsummaryrefslogtreecommitdiffstats
path: root/container-dependencies-enforcer/pom.xml
blob: 70c572185dcb7fd9d9a6c8dc904118d32f8d989f (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
<?xml version="1.0"?>
<!-- Copyright 2017 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root. -->
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
                             http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>com.yahoo.vespa</groupId>
        <artifactId>parent</artifactId>
        <version>7-SNAPSHOT</version>
        <relativePath>../parent/pom.xml</relativePath>
    </parent>

    <artifactId>container-dependencies-enforcer</artifactId>
    <version>7-SNAPSHOT</version>
    <packaging>pom</packaging>

    <dependencies>
        <dependency>
            <groupId>com.yahoo.vespa</groupId>
            <artifactId>container</artifactId>
            <version>${project.version}</version>
            <scope>provided</scope>
        </dependency>
        <dependency>
            <groupId>com.yahoo.vespa</groupId>
            <artifactId>container-test</artifactId>
            <version>${project.version}</version>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>junit</groupId>
            <artifactId>junit</artifactId>
            <scope>test</scope>
        </dependency>
    </dependencies>
    <profiles>
        <profile>
            <id>enforce-container-deps</id>
            <activation>
                <activeByDefault>false</activeByDefault>
                 <property>
                     <!-- Dependency resolution is broken for old maven used in our CentOS docker containers -->
                    <name>maven.version</name>
                    <value>!3.0.5</value>
                </property>
            </activation>
            <build>
                <plugins>
                    <plugin>
                        <groupId>org.apache.maven.plugins</groupId>
                        <artifactId>maven-enforcer-plugin</artifactId>
                        <executions>
                            <execution>
                                <!-- To allow running 'mvn enforcer:enforce' from the command line -->
                                <id>default-cli</id>
                                <goals>
                                    <goal>enforce</goal>
                                </goals>
                                <configuration>
                                    <rules>
                                        <bannedDependencies>
                                            <excludes>
                                                <!-- Only allow explicitly listed deps in provided and compile scope -->
                                                <exclude>*:*:*:jar:provided:*</exclude>
                                                <exclude>*:*:*:jar:compile:*</exclude>
                                            </excludes>
                                            <includes>
                                                <include>com.yahoo.vespa</include>
                                                <include>aopalliance:aopalliance:[1.0]:jar:provided</include>
                                                <include>com.fasterxml.jackson.core:jackson-annotations:[${jackson2.version}]:jar:provided</include>
                                                <include>com.fasterxml.jackson.core:jackson-core:[${jackson2.version}]:jar:provided</include>
                                                <include>com.fasterxml.jackson.core:jackson-databind:[${jackson-databind.version}]:jar:provided</include>
                                                <include>com.fasterxml.jackson.datatype:jackson-datatype-jdk8:[${jackson2.version}]:jar:provided</include>
                                                <include>com.fasterxml.jackson.datatype:jackson-datatype-jsr310:[${jackson2.version}]:jar:provided</include>


                                                <!-- Use version range for jax deps, because jersey and junit affect the versions. -->
                                                <include>com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:[2.5.4, ${jackson2.version}]:jar:provided</include>
                                                <include>com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:[2.5.4, ${jackson2.version}]:jar:provided</include>
                                                <include>com.fasterxml.jackson.module:jackson-module-jaxb-annotations:[2.5.4, ${jackson2.version}]:jar:provided</include>

                                                <include>com.google.code.findbugs:annotations:[${findbugs.version}]:jar:provided</include>
                                                <include>com.google.code.findbugs:jsr305:[${findbugs.version}]:jar:provided</include>
                                                <include>com.google.guava:guava:[${guava.version}]:jar:provided</include>
                                                <include>com.google.inject.extensions:guice-assistedinject:[${guice.version}]:jar:provided</include>
                                                <include>com.google.inject.extensions:guice-multibindings:[${guice.version}]:jar:provided</include>
                                                <include>com.google.inject:guice:[${guice.version}]:jar:provided:no_aop</include>
                                                <include>com.sun.activation:javax.activation:[1.2.0]:jar:provided</include>
                                                <include>com.sun.xml.bind:jaxb-core:[${jaxb.version}]:jar:provided</include>
                                                <include>com.sun.xml.bind:jaxb-impl:[${jaxb.version}]:jar:provided</include>
                                                <include>commons-daemon:commons-daemon:[1.0.3]:jar:provided</include>
                                                <include>commons-logging:commons-logging:[1.1.1]:jar:provided</include>
                                                <include>javax.annotation:javax.annotation-api:[${javax.annotation-api.version}]:jar:provided</include>
                                                <include>javax.inject:javax.inject:[1]:jar:provided</include>
                                                <include>javax.servlet:javax.servlet-api:[3.1.0]:jar:provided</include>
                                                <include>javax.validation:validation-api:[${javax.validation-api.version}]:jar:provided</include>
                                                <include>javax.ws.rs:javax.ws.rs-api:[${javax.ws.rs-api.version}]:jar:provided</include>
                                                <include>javax.xml.bind:jaxb-api:[${jaxb.version}]:jar:provided</include>
                                                <include>net.jcip:jcip-annotations:[1.0]:jar:provided</include>
                                                <include>net.jpountz.lz4:lz4:[1.3.0]:jar:provided</include>
                                                <include>org.apache.felix:org.apache.felix.framework:[${felix.version}]:jar:provided</include>
                                                <include>org.apache.felix:org.apache.felix.log:[1.0.1]:jar:provided</include>
                                                <include>org.apache.felix:org.apache.felix.main:[${felix.version}]:jar:provided</include>
                                                <include>org.bouncycastle:bcpkix-jdk15on:[${bouncycastle.version}]:jar:provided</include>
                                                <include>org.bouncycastle:bcprov-jdk15on:[${bouncycastle.version}]:jar:provided</include>
                                                <include>org.eclipse.jetty:jetty-http:[${jetty.version}]:jar:provided</include>
                                                <include>org.eclipse.jetty:jetty-io:[${jetty.version}]:jar:provided</include>
                                                <include>org.eclipse.jetty:jetty-util:[${jetty.version}]:jar:provided</include>
                                                <include>org.glassfish.hk2.external:aopalliance-repackaged:[${hk2.version}]:jar:provided</include>
                                                <include>org.glassfish.hk2.external:javax.inject:[${hk2.version}]:jar:provided</include>
                                                <include>org.glassfish.hk2:hk2-api:[${hk2.version}]:jar:provided</include>
                                                <include>org.glassfish.hk2:hk2-locator:[${hk2.version}]:jar:provided</include>
                                                <include>org.glassfish.hk2:hk2-utils:[${hk2.version}]:jar:provided</include>
                                                <include>org.glassfish.hk2:osgi-resource-locator:[${hk2.osgi-resource-locator.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.bundles.repackaged:jersey-guava:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.containers:jersey-container-servlet-core:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.containers:jersey-container-servlet:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.core:jersey-client:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.core:jersey-common:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.core:jersey-server:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.ext:jersey-entity-filtering:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.ext:jersey-proxy-client:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.media:jersey-media-jaxb:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.media:jersey-media-json-jackson:[${jersey2.version}]:jar:provided</include>
                                                <include>org.glassfish.jersey.media:jersey-media-multipart:[${jersey2.version}]:jar:provided</include>
                                                <include>org.javassist:javassist:[${javassist.version}]:jar:provided</include>
                                                <include>org.json:json:[20090211]:jar:provided</include>
                                                <include>org.jvnet.mimepull:mimepull:[${mimepull.version}]:jar:provided</include>
                                                <include>org.slf4j:jcl-over-slf4j:[${slf4j.version}]:jar:provided</include>
                                                <include>org.slf4j:log4j-over-slf4j:[${slf4j.version}]:jar:provided</include>
                                                <include>org.slf4j:slf4j-api:[${slf4j.version}]:jar:provided</include>
                                                <include>org.slf4j:slf4j-jdk14:[${slf4j.version}]:jar:provided</include>
                                                <include>xml-apis:xml-apis:[1.4.01]:jar:provided</include>
                                            </includes>
                                        </bannedDependencies>
                                    </rules>
                                    <fail>true</fail>
                                </configuration>
                            </execution>
                        </executions>
                    </plugin>
                </plugins>
            </build>
        </profile>
    </profiles>

</project>