Files
Orchestrator/bahn/project-audit/data/pom-analysis/auftrags-verwaltung-trasse_pom.xml
T
ankn a5f8fb49ab Migrate all repos into monorepo context folders
Bahn: aisupport, Analyse-O2C-C2S, awesome-bahn-mcp-servers, beam-mcp,
      Confluence_Bot, db-planet-mcp-server, O2C-Harness, project-audit,
      Projekt-KIQ-HP, teamlandkarte-mcp
Dhive: Jury-Voting
Privat: CV, NoteGraph (NOTE: NoteGraph needs complete redo after consolidation)
Shared: AI-Orchestrator, OrgMyLife, power_skills_and_more
Shared/references: symphony (read-only)

Bahn repos remain available as independent remotes - this monorepo
pulls them in via subtree, the originals are untouched.
2026-06-30 20:39:52 +02:00

296 lines
12 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://maven.apache.org/POM/4.0.0"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>bestellsystem-parent-pom</artifactId>
<version>1.8.0</version>
<relativePath>../bestellsystem-parent-pom</relativePath>
</parent>
<artifactId>auftrags-verwaltung-trasse</artifactId>
<version>1.7.1-SNAPSHOT</version>
<name>auftrags-verwaltung-trasse</name>
<description>Auftragsverwaltung der Trassenbestellungen</description>
<properties>
<java.version>21</java.version>
<maven.compiler.target>21</maven.compiler.target>
<auftragsverwaltung.api.version>6.0.0</auftragsverwaltung.api.version>
<auftraege.api.version>6.0.0</auftraege.api.version>
<eventmodel.api.version>3.3.0</eventmodel.api.version>
<data-model.version>10.0.0</data-model.version>
<openapi.generator.version>7.21.0</openapi.generator.version>
<logging-util.version>1.3.0</logging-util.version>
<signature-database.version>1.5.0</signature-database.version>
<base.package>com.dbnetz.bestellsystem.auftragsverwaltungtrasse</base.package>
<base.package.api>com.dbnetz.bestellsystem.api</base.package.api>
<!-- Kafka Dependencies -->
<spring-kafka.version>3.3.14</spring-kafka.version>
<aws-msk-iam-auth.version>2.3.5</aws-msk-iam-auth.version>
<jsonwebtoken>0.13.0</jsonwebtoken>
<!-- Signature Message -->
<signature-message.version>1.7.0</signature-message.version>
<togglz.version>4.6.1</togglz.version>
<buildDirectory>${project.basedir}/target</buildDirectory>
</properties>
<dependencies>
<dependency>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>signature-database</artifactId>
<version>${signature-database.version}</version>
</dependency>
<dependency>
<groupId>org.springframework.kafka</groupId>
<artifactId>spring-kafka</artifactId>
<version>${spring-kafka.version}</version>
<exclusions>
<!-- CVE-2025-12183 und CVE-2025-66566 -->
<exclusion>
<groupId>org.lz4</groupId>
<artifactId>lz4-java</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- CVE-2025-12183 und CVE-2025-66566 -->
<dependency>
<groupId>at.yawk.lz4</groupId>
<artifactId>lz4-java</artifactId>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>software.amazon.msk</groupId>
<artifactId>aws-msk-iam-auth</artifactId>
<version>${aws-msk-iam-auth.version}</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.datatype</groupId>
<artifactId>jackson-datatype-jsr310</artifactId>
<version>2.21.2</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
</dependency>
<dependency>
<groupId>org.togglz</groupId>
<artifactId>togglz-spring-boot-starter</artifactId>
<version>${togglz.version}</version>
<exclusions>
<!-- CVE-2026-40477 und CVE-2026-40478 -->
<exclusion>
<groupId>org.thymeleaf</groupId>
<artifactId>thymeleaf</artifactId>
</exclusion>
<exclusion>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-thymeleaf</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- Dependency for it - test jwt generate -->
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>jjwt-impl</artifactId>
<version>${jsonwebtoken}</version>
<scope>runtime</scope>
</dependency>
<!-- Dependency for it - test jwt generate -->
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>jjwt-jackson</artifactId>
<version>${jsonwebtoken}</version>
<scope>runtime</scope>
</dependency>
<!-- APIs of Bestellsystem-->
<dependency>
<groupId>com.dbnetz.bestellsystem.api</groupId>
<artifactId>auftragsverwaltung</artifactId>
<version>${auftragsverwaltung.api.version}</version>
<exclusions>
<exclusion>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>data-model</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>com.dbnetz.bestellsystem.api</groupId>
<artifactId>auftraege</artifactId>
<version>${auftraege.api.version}</version>
<exclusions>
<exclusion>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>data-model</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>com.dbnetz.bestellsystem.api</groupId>
<artifactId>event-model</artifactId>
<version>${eventmodel.api.version}</version>
<exclusions>
<exclusion>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>data-model</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>logging-util</artifactId>
<version>${logging-util.version}</version>
</dependency>
<dependency>
<groupId>com.dbnetz.bestellsystem.api</groupId>
<artifactId>data-model</artifactId>
<version>${data-model.version}</version>
<classifier>openapi</classifier>
</dependency>
<!-- H2 for Tests -->
<dependency>
<groupId>com.h2database</groupId>
<artifactId>h2</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>com.dbnetz.bestellsystem</groupId>
<artifactId>signature-message</artifactId>
<version>${signature-message.version}</version>
</dependency>
<!-- findings tomcat-embed-core
GHSA-95jq-rwvf-vjx4, GHSA-69cc-cv78-qc8g,
GHSA-x4m4-345f-5h5g, GHSA-h468-7pvh-8vr8,
GHSA-rv64-5gf8-9qq8, GHSA-9m3c-qcxr-9x87,
GHSA-8mc5-53m5-3qj2, GHSA-24j9-x2wg-9qv6 -->
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
<version>10.1.54</version>
</dependency>
<!-- findings log4j-core GHSA-3pxv-7cmr-fjr4e -->
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>2.25.4</version>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-dependency-plugin</artifactId>
<executions>
<execution>
<id>unpack-data-model-yamls</id>
<phase>generate-sources</phase>
<goals>
<goal>unpack</goal>
</goals>
<configuration>
<artifactItems>
<artifactItem>
<groupId>com.dbnetz.bestellsystem.api</groupId>
<artifactId>data-model</artifactId>
<type>jar</type>
<overWrite>true</overWrite>
<version>${data-model.version}</version>
<classifier>openapi</classifier>
</artifactItem>
</artifactItems>
<includes>openapi/*.yaml</includes>
<outputDirectory>${project.build.directory}</outputDirectory>
</configuration>
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.openapitools</groupId>
<artifactId>openapi-generator-maven-plugin</artifactId>
<version>${openapi.generator.version}</version>
<executions>
<execution>
<id>internal-data-model</id>
<goals>
<goal>generate</goal>
</goals>
<configuration>
<inputSpec>${project.build.directory}/openapi/data-model.openapi.yaml</inputSpec>
<generatorName>spring</generatorName>
<modelPackage>com.dbnetz.bestellsystem.auftragsverwaltungtrasse.model.idm</modelPackage>
<modelNameSuffix>Idm</modelNameSuffix>
<generateApiTests>false</generateApiTests>
<generateModelTests>false</generateModelTests>
<generateSupportingFiles>false</generateSupportingFiles>
<configOptions>
<interfaceOnly>true</interfaceOnly>
<dateLibrary>java8</dateLibrary>
<useJakartaEe>true</useJakartaEe>
<library>spring-boot</library>
<useTags>true</useTags>
<containerDefaultToNull>true</containerDefaultToNull>
</configOptions>
<typeMappings>
<typeMapping>OffsetDateTime=java.time.Instant</typeMapping>
</typeMappings>
</configuration>
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-antrun-plugin</artifactId>
<version>3.2.0</version>
<executions>
<execution>
<phase>process-sources</phase>
<goals>
<goal>run</goal>
</goals>
<configuration>
<target>
<delete file="${project.build.directory}/generated-sources/openapi/src/main/java/org/openapitools/api/DataModelApi.java" />
</target>
</configuration>
</execution>
</executions>
</plugin>
</plugins>
</build>
</project>