Bump commons-lang 3.11 → 3.12.0
[odlparent.git] / odlparent / pom.xml
index 8a97de77a77da478a108cc9cfef6fca5cff2a58e..285383bb93421e459770821360aa5656349f5ced 100644 (file)
@@ -13,7 +13,7 @@
   <parent>
     <groupId>org.opendaylight.odlparent</groupId>
     <artifactId>odlparent-lite</artifactId>
-    <version>8.1.0-SNAPSHOT</version>
+    <version>8.1.2-SNAPSHOT</version>
     <relativePath>../odlparent-lite</relativePath>
   </parent>
 
@@ -48,7 +48,7 @@
 
     <!-- Supporting Libraries -->
     <!-- Only used internally -->
-    <bouncycastle.version>1.66</bouncycastle.version>
+    <bouncycastle.version>1.68</bouncycastle.version>
 
     <!-- JaCoCo configuration, by default tied to Sonar configuration, but can be overridden separately
          to allow projects to report Sonar values from the entire project. -->
@@ -97,7 +97,7 @@
       <dependency>
         <groupId>org.opendaylight.odlparent</groupId>
         <artifactId>odlparent-artifacts</artifactId>
-        <version>8.1.0-SNAPSHOT</version>
+        <version>8.1.2-SNAPSHOT</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
         <groupId>com.puppycrawl.tools</groupId>
         <artifactId>checkstyle</artifactId>
         <!-- This should match the plugin management on maven-checkstyle-plugin below -->
-        <version>8.38</version>
+        <version>8.40</version>
       </dependency>
 
       <!-- Testing Dependencies -->
         <groupId>com.google.truth</groupId>
         <artifactId>truth</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
-        <version>1.1</version>
+        <version>1.1.2</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>com.google.truth.extensions</groupId>
         <artifactId>truth-java8-extension</artifactId>
-        <version>1.1</version>
+        <version>1.1.2</version>
         <scope>test</scope>
       </dependency>
       <dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
-        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite and docs -->
-        <version>3.11</version>
+        <version>3.12.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
-        <version>6.2.3</version>
+        <version>6.2.4</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
       <dependency>
         <groupId>commons-net</groupId>
         <artifactId>commons-net</artifactId>
-        <version>3.7.2</version>
+        <version>3.8.0</version>
       </dependency>
 
       <!-- Netty -->
         <artifactId>netty-bom</artifactId>
         <!-- If these are updated, the version in features.xml needs to be changed too -->
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
-        <version>4.1.56.Final</version>
+        <version>4.1.59.Final</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
         <artifactId>jolokia-osgi</artifactId>
         <version>1.6.2</version>
       </dependency>
-      <dependency>
-        <!--
-          These are usually used through osgi.cmpn, except when you also want
-          to be a JPMS module. In that case you need to depend on these and
-          have a 'require static org.osgi.service.component.annotations;'.
-          This incurs a warning about publishing the module to a public place.
-          We do not heed that warning, as nothing in this package is seen by
-          the runtime - thus the warning can be safely ignored :)
 
-          Keep this in sync with rest of OSGi:
-          - OSGi R7 (now) = 1.4.0
-        -->
+      <!--
+        These are usually used through osgi.cmpn, except when you also want
+        to be a JPMS module. In that case you need to depend on these and
+        have a 'require static org.osgi.service.component.annotations;'.
+        This incurs a warning about publishing the module to a public place.
+        We do not heed that warning, as nothing in this package is seen by
+        the runtime - thus the warning can be safely ignored :)
+
+        Keep this in sync with rest of OSGi:
+        - OSGi R7 (now) = 1.4.0
+      -->
+      <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.service.component.annotations</artifactId>
         <version>1.4.0</version>
         <scope>provided</scope>
       </dependency>
+      <dependency>
+        <groupId>org.osgi</groupId>
+        <artifactId>org.osgi.service.metatype.annotations</artifactId>
+        <version>1.4.0</version>
+      </dependency>
+
+      <dependency>
+        <groupId>org.osgi</groupId>
+        <artifactId>osgi.annotation</artifactId>
+        <version>7.0.0</version>
+        <scope>provided</scope>
+      </dependency>
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>osgi.cmpn</artifactId>
              We do not need to specify the groupId. -->
         <plugin>
           <artifactId>maven-checkstyle-plugin</artifactId>
-          <version>3.1.1</version>
+          <version>3.1.2</version>
           <dependencies>
             <dependency>
               <groupId>com.puppycrawl.tools</groupId>
               <artifactId>checkstyle</artifactId>
               <!-- This should match the dependency management on com.puppycrawl.tools:checkstyle above -->
-              <version>8.38</version>
+              <version>8.40</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>checkstyle</artifactId>
-              <version>8.1.0-SNAPSHOT</version>
+              <version>8.1.2-SNAPSHOT</version>
             </dependency>
             <dependency>
               <groupId>com.github.sevntu-checkstyle</groupId>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-pmd-plugin</artifactId>
-          <version>3.13.0</version>
+          <version>3.14.0</version>
           <executions>
             <execution>
               <id>cpd</id>
         </plugin>
         <plugin>
           <artifactId>maven-invoker-plugin</artifactId>
-          <version>3.2.1</version>
+          <version>3.2.2</version>
         </plugin>
         <plugin>
           <artifactId>maven-dependency-plugin</artifactId>
                   <artifactItem>
                     <groupId>org.opendaylight.odlparent</groupId>
                     <artifactId>odl-license</artifactId>
-                    <version>8.1.0-SNAPSHOT</version>
+                    <version>8.1.2-SNAPSHOT</version>
                     <type>license</type>
                     <outputDirectory>${project.build.outputDirectory}</outputDirectory>
                     <destFileName>LICENSE</destFileName>
           <artifactId>maven-remote-resources-plugin</artifactId>
           <version>1.7.0</version>
         </plugin>
-        <plugin>
-          <artifactId>maven-resources-plugin</artifactId>
-          <version>3.1.0</version>
-        </plugin>
         <plugin>
           <artifactId>maven-shade-plugin</artifactId>
           <version>3.2.4</version>
           <groupId>org.apache.karaf.tooling</groupId>
           <artifactId>karaf-maven-plugin</artifactId>
           <version>${karaf.version}</version>
+          <extensions>true</extensions>
         </plugin>
 
         <plugin>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>8.1.0-SNAPSHOT</version>
+              <version>8.1.2-SNAPSHOT</version>
             </dependency>
             <dependency>
               <!-- The SpotBugs Maven plugin uses SLF4J 1.8 beta 2 -->
       <plugin>
         <groupId>org.basepom.maven</groupId>
         <artifactId>duplicate-finder-maven-plugin</artifactId>
-        <version>1.4.0</version>
+        <version>1.5.0</version>
         <executions>
           <execution>
             <id>find-duplicate-classpath-entries</id>