Orchestrator/bahn/project-audit/data/pom-analysis/vertragsdaten-verteiler_pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project
        xmlns="http://maven.apache.org/POM/4.0.0"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <parent>
        <groupId>com.dbnetz.bestellsystem</groupId>
        <artifactId>bestellsystem-parent-pom</artifactId>
        <version>1.8.0</version>
        <relativePath>../bestellsystem-parent-pom</relativePath>
    </parent>

    <!--suppress MavenRedundantGroupId -->
    <groupId>com.dbnetz.bestellsystem</groupId>
    <artifactId>vertragsdaten-verteiler</artifactId>
    <version>1.2.1-SNAPSHOT</version>
    <packaging>jar</packaging>

    <properties>
        <!-- General -->
        <java.version>21</java.version>
        <maven.compiler.target>21</maven.compiler.target>
        <skipTests>false</skipTests>
        <lombok.version>1.18.42</lombok.version>

        <!-- Signature Message -->
        <signature-message.version>1.7.0</signature-message.version>

        <!-- APIs -->
        <eventmodel.api.version>3.2.0</eventmodel.api.version>
        <stationsportal.api.version>2.1.0</stationsportal.api.version>

        <!-- Dependencies -->
        <logging-util.version>2.0.0</logging-util.version>
        <spring-kafka.version>3.3.14</spring-kafka.version>
        <aws-msk-iam-auth.version>2.3.5</aws-msk-iam-auth.version>
        <core-component-kafka.version>1.2.1</core-component-kafka.version>
    </properties>

    <dependencyManagement>
        <dependencies>
            <!-- findings tomcat-embed-core
			GHSA-95jq-rwvf-vjx4, GHSA-69cc-cv78-qc8g,
            GHSA-x4m4-345f-5h5g, GHSA-h468-7pvh-8vr8,
            GHSA-rv64-5gf8-9qq8, GHSA-9m3c-qcxr-9x87,
            GHSA-8mc5-53m5-3qj2, GHSA-24j9-x2wg-9qv6 -->
            <dependency>
                <groupId>org.apache.tomcat.embed</groupId>
                <artifactId>tomcat-embed-core</artifactId>
                <version>10.1.54</version>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <dependencies>
        <dependency>
            <groupId>org.springframework.kafka</groupId>
            <artifactId>spring-kafka</artifactId>
            <version>${spring-kafka.version}</version>
            <exclusions>
                <!-- CVE-2025-12183 und CVE-2025-66566 -->
                <exclusion>
                    <groupId>org.lz4</groupId>
                    <artifactId>lz4-java</artifactId>
                </exclusion>
            </exclusions>
        </dependency>

        <dependency>
            <groupId>at.yawk.lz4</groupId>
            <artifactId>lz4-java</artifactId>
            <scope>runtime</scope>
        </dependency>

        <dependency>
            <groupId>software.amazon.msk</groupId>
            <artifactId>aws-msk-iam-auth</artifactId>
            <version>${aws-msk-iam-auth.version}</version>
        </dependency>

        <dependency>
            <groupId>com.dbnetz.bestellsystem</groupId>
            <artifactId>signature-message</artifactId>
            <version>${signature-message.version}</version>
        </dependency>

        <dependency>
            <groupId>com.dbnetz.bestellsystem</groupId>
            <artifactId>logging-util</artifactId>
            <version>${logging-util.version}</version>
        </dependency>

        <dependency>
            <groupId>com.dbnetz.bestellsystem</groupId>
            <artifactId>core-components-kafka</artifactId>
            <version>${core-component-kafka.version}</version>
        </dependency>

        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
            <scope>provided</scope>
        </dependency>

        <dependency>
            <groupId>com.dbnetz.bestellsystem.api</groupId>
            <artifactId>event-model</artifactId>
            <version>${eventmodel.api.version}</version>
        </dependency>
        <dependency>
            <groupId>com.dbnetz.bestellsystem.api</groupId>
            <artifactId>stationsportal</artifactId>
            <version>${stationsportal.api.version}</version>
        </dependency>
    </dependencies>

    <build>
        <resources>
            <resource>
                <directory>src/main/config</directory>
                <filtering>true</filtering>
            </resource>
            <resource>
                <directory>src/main/resources</directory>
                <filtering>true</filtering>
                <includes>
                    <include>**/log4j2-spring.xml</include>
                    <include>*.yml</include>
                </includes>
            </resource>
            <resource>
                <directory>src/main/resources</directory>
                <filtering>false</filtering>
                <excludes>
                    <exclude>**/log4j2-spring.xml</exclude>
                    <exclude>*.yml</exclude>
                </excludes>
            </resource>
        </resources>
        <plugins>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-compiler-plugin</artifactId>
                <version>${maven-compiler-plugin.version}</version>
                <configuration>
                    <release>${java.version}</release>
                    <source>${java.version}</source>
                    <target>${java.version}</target>
                    <annotationProcessorPaths>
                        <path>
                            <groupId>org.projectlombok</groupId>
                            <artifactId>lombok</artifactId>
                            <version>${lombok.version}</version>
                        </path>
                        <path>
                            <groupId>org.mapstruct</groupId>
                            <artifactId>mapstruct-processor</artifactId>
                            <version>${mapstruct.version}</version>
                        </path>
                    </annotationProcessorPaths>
                    <compilerArgs>
                        <arg>-parameters</arg>
                    </compilerArgs>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-surefire-plugin</artifactId>
                <configuration>
                    <argLine>@{argLine} --add-opens java.xml/com.sun.org.apache.xerces.internal.jaxp.datatype=ALL-UNNAMED -XX:+EnableDynamicAgentLoading</argLine>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-failsafe-plugin</artifactId>
                <configuration>
                    <argLine>@{argLine} --add-opens java.xml/com.sun.org.apache.xerces.internal.jaxp.datatype=ALL-UNNAMED -XX:+EnableDynamicAgentLoading</argLine>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.jacoco</groupId>
                <artifactId>jacoco-maven-plugin</artifactId>
                <configuration combine.self="override">
                    <excludes>
                        <exclude>**/*Application.*</exclude>
                        <exclude>**/it/*.*</exclude>
                        <exclude>**/test/*.*</exclude>
                        <exclude>**/*Configuration.*</exclude>
                        <exclude>**/*Config.*</exclude>
                    </excludes>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-surefire-report-plugin</artifactId>
                <version>3.2.5</version>
                <executions>
                    <execution>
                        <id>integration-test-report</id>
                        <phase>verify</phase>
                        <goals>
                            <goal>failsafe-report-only</goal>
                        </goals>
                        <configuration>
                            <outputName>it-test-failsafe-report</outputName>
                        </configuration>
                    </execution>
                </executions>
            </plugin>
        </plugins>
    </build>
</project>