X-Git-Url: https://git.opendaylight.org/gerrit/gitweb?a=blobdiff_plain;f=odlparent%2Fpom.xml;h=1061e40ccb8e9dc90c572aa68b5173b0710b8bb8;hb=1a20d2f8af7bdf04430030ab2ccb3a7a2192b685;hp=5123f35fa60103255f3b21127533747da9a26545;hpb=6370cd1f581151aab17d7ef27c2930043a86b99e;p=odlparent.git

diff --git a/odlparent/pom.xml b/odlparent/pom.xml
index 5123f35fa..1061e40cc 100644
--- a/odlparent/pom.xml
+++ b/odlparent/pom.xml
@@ -13,7 +13,7 @@
   <parent>
     <groupId>org.opendaylight.odlparent</groupId>
     <artifactId>odlparent-lite</artifactId>
-    <version>4.0.0-SNAPSHOT</version>
+    <version>4.0.2-SNAPSHOT</version>
     <relativePath>../odlparent-lite</relativePath>
   </parent>
 
@@ -47,63 +47,36 @@
     <java.version.source>${maven.compiler.source}</java.version.source>
     <java.version.target>${maven.compiler.target}</java.version.target>
 
-    <!-- Maven plugin versions, in the 'canonical' format -->
-    <!-- Used in controller, didm, ocpplugin, openflowplugin, persistence -->
-    <maven.bundle.version>3.3.0</maven.bundle.version>
-    <!-- Used in didm, l2switch, lacp, persistence; see also controller -->
-    <maven.compile.plugin.version>3.7.0</maven.compile.plugin.version>
-    <!-- Used in snbi, tsdr -->
-    <maven.javadoc.version>3.0.0</maven.javadoc.version>
-    <!-- Used in snmp -->
-    <maven.plugin.version>3.5</maven.plugin.version>
-    <!-- Used in controller, iotdm, neutron, of-config -->
-    <!-- Later versions break tests in downstream projects -->
-    <maven.surefire.version>2.18.1</maven.surefire.version>
-
-    <!-- Maven plugin versions, in random formats -->
-    <!-- Used in alto, controller, didm, tsdr; see also vpnservice -->
-    <bundle.plugin.version>${maven.bundle.version}</bundle.plugin.version>
-    <!-- Used in packetcable -->
-    <odl.checkstyle.version>3.0.0-SNAPSHOT</odl.checkstyle.version>
-    <!-- Used in l2switch, lacp, netide, ocpplugin, openflowjava, openflowplugin, snbi, tsdr -->
-    <enforcer.version>3.0.0-M1</enforcer.version>
-    <!-- Used in snmp4sdn; see also nemo -->
-    <enunciate.version>1.31</enunciate.version>
-    <!-- Used in controller, infrautils, netide, openflowplugin -->
-    <exam.version>4.11.0</exam.version>
-    <!-- Used in of-config, snmp4sdn -->
-    <failsafe.version>2.20.1</failsafe.version>
-    <!-- Used in genius, neutron, of-config, ovsdb, persistence, snmp4sdn, usc, vtn -->
-    <jacoco.version>0.8.1</jacoco.version>
-    <!-- Used in aaa, alto, bgpcep, bier, controller, coretutorials, genius, infrautils, iotdm,
-         l2switch, lacp, netconf, netide, netvirt, nic, ocpplugin, ovsdb, persistence, snbi, sxp,
-         tsdr, unimgr, vtn -->
-    <karaf.version>4.2.0</karaf.version>
-    <!-- Used in sxp -->
-    <karaf.plugin.version>4.2.0</karaf.plugin.version>
-    <!-- Used in lispflowmapping, snmp4sdn, vtn -->
+    <!-- Used in openflowplugin -->
+    <enforcer.version>3.0.0-M2</enforcer.version>
+    <!-- Used in controller, genius, infrautils, netconf, netvirt, ovsdb, serviceutils -->
+    <karaf.version>4.2.1</karaf.version>
+    <!-- Used in bgpcep, lispflowmapping -->
     <projectinfo>2.8.1</projectinfo>
-    <!-- Used in of-config; see also snmp4sdn -->
-    <propertymavenplugin.version>1.0.0</propertymavenplugin.version>
 
     <!-- Supporting Libraries -->
     <!-- Only used internally -->
-    <bouncycastle.version>1.59</bouncycastle.version>
+    <bouncycastle.version>1.60</bouncycastle.version>
 
-    <!-- Used by snbi; see also bier, dlux, iotdm, tsdr, unimgr -->
-    <osgi.core.version>5.0.0</osgi.core.version>
+    <!-- JaCoCo configuration, by default tied to Sonar configuration, but can be overridden separately
+         to allow projects to report Sonar values from the entire project. -->
+    <jacoco.destFile>${project.build.directory}/code-coverage/jacoco.exec</jacoco.destFile>
 
     <!-- Default Sonar configuration -->
     <sonar-jacoco-listeners.version>3.8</sonar-jacoco-listeners.version>
     <sonar.core.codeCoveragePlugin>jacoco</sonar.core.codeCoveragePlugin>
-    <sonar.jacoco.reportPath>${project.build.directory}/code-coverage/jacoco.exec</sonar.jacoco.reportPath>
+    <sonar.jacoco.reportPath>${jacoco.destFile}</sonar.jacoco.reportPath>
     <sonar.jacoco.itReportPath>${project.build.directory}/code-coverage/jacoco-it.exec</sonar.jacoco.itReportPath>
+
     <!-- Note: This list should match jacoco-maven-plugin's exclusion list below -->
     <sonar.exclusions>**/gen/**,**/generated-sources/**,**/generated-test-sources/**,**/yang-gen/**,**/yang-gen-config/**,**/yang-gen-sal/**,**/yang-gen-code/**,**/pax/**</sonar.exclusions>
 
     <!-- Opt-in code quality checks -->
     <pmd.cpd.fail>false</pmd.cpd.fail>                  <!-- Copy/paste detection -->
     <duplicate-finder.skip>true</duplicate-finder.skip> <!-- Classpath duplicates -->
+
+    <!-- Redirect test output to files (overridable) -->
+    <maven.test.redirectTestOutputToFile>true</maven.test.redirectTestOutputToFile>
   </properties>
 
   <dependencyManagement>
@@ -112,7 +85,7 @@
       <dependency>
         <groupId>org.opendaylight.odlparent</groupId>
         <artifactId>odlparent-artifacts</artifactId>
-        <version>4.0.0-SNAPSHOT</version>
+        <version>4.0.2-SNAPSHOT</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -126,7 +99,7 @@
         <groupId>com.puppycrawl.tools</groupId>
         <artifactId>checkstyle</artifactId>
         <!-- This should match the plugin management on maven-checkstyle-plugin below -->
-        <version>8.10</version>
+        <version>8.12</version>
       </dependency>
 
       <!-- Testing Dependencies -->
@@ -137,12 +110,7 @@
       <dependency>
         <groupId>junit</groupId>
         <artifactId>junit</artifactId>
-        <version>4.11</version>
-        <scope>test</scope>
-      </dependency>
-      <dependency>
-        <groupId>junit</groupId>
-        <artifactId>junit-dep</artifactId>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
         <version>4.11</version>
         <scope>test</scope>
       </dependency>
@@ -155,12 +123,19 @@
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-core</artifactId>
-        <version>1.10.19</version>
+        <version>2.20.1</version>
+        <scope>test</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.mockito</groupId>
+        <artifactId>mockito-inline</artifactId>
+        <version>2.20.1</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.hamcrest</groupId>
         <artifactId>hamcrest-core</artifactId>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
         <version>1.3</version>
         <scope>test</scope>
       </dependency>
@@ -173,13 +148,14 @@
       <dependency>
         <groupId>com.google.truth</groupId>
         <artifactId>truth</artifactId>
-        <version>0.40</version>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
+        <version>0.42</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>com.google.truth.extensions</groupId>
         <artifactId>truth-java8-extension</artifactId>
-        <version>0.40</version>
+        <version>0.42</version>
         <scope>test</scope>
       </dependency>
       <dependency>
@@ -197,31 +173,31 @@
       <dependency>
         <groupId>org.powermock</groupId>
         <artifactId>powermock-api-mockito</artifactId>
-        <version>1.6.4</version>
+        <version>1.7.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.powermock</groupId>
         <artifactId>powermock-api-support</artifactId>
-        <version>1.6.4</version>
+        <version>1.7.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.powermock</groupId>
         <artifactId>powermock-core</artifactId>
-        <version>1.6.4</version>
+        <version>1.7.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.powermock</groupId>
         <artifactId>powermock-module-junit4</artifactId>
-        <version>1.6.4</version>
+        <version>1.7.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.powermock</groupId>
         <artifactId>powermock-reflect</artifactId>
-        <version>1.6.4</version>
+        <version>1.7.4</version>
         <scope>test</scope>
       </dependency>
 
@@ -232,7 +208,7 @@
         <!-- Generates immutable implementations, builders, the works -->
         <groupId>org.immutables</groupId>
         <artifactId>value</artifactId>
-        <version>2.6.1</version>
+        <version>2.7.1</version>
         <!-- Must be provided; scope=test here breaks APT in Eclipse :( -->
         <scope>provided</scope>
       </dependency>
@@ -240,7 +216,7 @@
         <!-- Generates META-INF/services entries for ServiceLoader -->
         <groupId>org.kohsuke.metainf-services</groupId>
         <artifactId>metainf-services</artifactId>
-        <version>1.7</version>
+        <version>1.8</version>
         <optional>true</optional>
         <scope>provided</scope>
       </dependency>
@@ -284,10 +260,21 @@
         <artifactId>logback-classic</artifactId>
         <version>1.2.3</version>
       </dependency>
+
+      <!-- log4j2 -->
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-bom</artifactId>
+        <version>2.11.1</version>
+        <scope>import</scope>
+        <type>pom</type>
+      </dependency>
+
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>23.6.1-jre</version>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
+        <version>25.1-jre</version>
         <exclusions>
           <exclusion>
             <groupId>com.google.code.findbugs</groupId>
@@ -299,7 +286,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava-testlib</artifactId>
-        <version>23.6.1-jre</version>
+        <version>25.1-jre</version>
         <scope>test</scope>
         <exclusions>
           <exclusion>
@@ -325,16 +312,18 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
-        <version>3.7</version>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
+        <version>3.8</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-text</artifactId>
-        <version>1.1</version>
+        <version>1.4</version>
       </dependency>
       <dependency>
         <groupId>commons-lang</groupId>
         <artifactId>commons-lang</artifactId>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
         <version>2.6</version>
       </dependency>
       <dependency>
@@ -450,7 +439,7 @@
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
-        <version>2.8.9</version>
+        <version>2.9.6</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -484,7 +473,7 @@
       <dependency>
         <groupId>org.eclipse.jdt</groupId>
         <artifactId>org.eclipse.jdt.annotation</artifactId>
-        <version>2.1.150</version>
+        <version>2.2.0</version>
         <scope>provided</scope>
       </dependency>
       <dependency>
@@ -513,37 +502,38 @@
         <groupId>io.netty</groupId>
         <artifactId>netty-all</artifactId>
         <!-- If these are updated, the version in features.xml needs to be changed too -->
-        <version>4.1.24.Final</version>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-buffer</artifactId>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-codec</artifactId>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-codec-http</artifactId>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-common</artifactId>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-handler</artifactId>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-transport</artifactId>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <!-- Here we need to define all available native epoll implementations; we can't limit ourselves to the build
       platform and we can't require the build platform to have an implementation (e.g. OS X) -->
@@ -551,7 +541,7 @@
         <groupId>io.netty</groupId>
         <artifactId>netty-transport-native-epoll</artifactId>
         <classifier>linux-x86_64</classifier>
-        <version>4.1.24.Final</version>
+        <version>4.1.28.Final</version>
       </dependency>
       <dependency>
         <groupId>javax.ws.rs</groupId>
@@ -576,7 +566,7 @@
       <dependency>
         <groupId>org.apache.felix</groupId>
         <artifactId>org.apache.felix.metatype</artifactId>
-        <version>1.1.6</version>
+        <version>1.2.0</version>
       </dependency>
       <dependency>
         <groupId>org.bouncycastle</groupId>
@@ -596,7 +586,8 @@
       <dependency>
         <groupId>org.codehaus.enunciate</groupId>
         <artifactId>enunciate-core-annotations</artifactId>
-        <version>${enunciate.version}</version>
+        <!-- This must be aligned with the version of maven-enunciate-plugin specified below -->
+        <version>1.31</version>
         <exclusions>
           <exclusion>
             <!-- JSR 250 API has 6 very old versions of javax.annotation @PreDestroy & Co.
@@ -611,7 +602,7 @@
       <dependency>
         <groupId>com.webcohesion.enunciate</groupId>
         <artifactId>enunciate-core-annotations</artifactId>
-        <version>2.10.1</version>
+        <version>2.11.1</version>
         <exclusions>
           <exclusion>
             <!-- see above -->
@@ -623,7 +614,7 @@
       <dependency>
         <groupId>org.codehaus.jettison</groupId>
         <artifactId>jettison</artifactId>
-        <version>1.3.8</version>
+        <version>1.4.0</version>
       </dependency>
       <!-- To upgrade org.eclipse.persistence dependencies to 2.6.0+, we need to ensure all downstreams consumers
          pull in javax.validation first:
@@ -631,17 +622,17 @@
       <dependency>
         <groupId>org.eclipse.persistence</groupId>
         <artifactId>org.eclipse.persistence.antlr</artifactId>
-        <version>2.7.1</version>
+        <version>2.7.3</version>
       </dependency>
       <dependency>
         <groupId>org.eclipse.persistence</groupId>
         <artifactId>org.eclipse.persistence.core</artifactId>
-        <version>2.7.1</version>
+        <version>2.7.3</version>
       </dependency>
       <dependency>
         <groupId>org.eclipse.persistence</groupId>
         <artifactId>org.eclipse.persistence.moxy</artifactId>
-        <version>2.7.1</version>
+        <version>2.7.3</version>
       </dependency>
       <dependency>
         <groupId>javax.validation</groupId>
@@ -651,7 +642,7 @@
       <dependency>
         <groupId>org.javassist</groupId>
         <artifactId>javassist</artifactId>
-        <version>3.22.0-GA</version>
+        <version>3.23.1-GA</version>
       </dependency>
       <dependency>
         <groupId>org.jboss.spec.javax.transaction</groupId>
@@ -661,7 +652,7 @@
       <dependency>
         <groupId>org.jolokia</groupId>
         <artifactId>jolokia-osgi</artifactId>
-        <version>1.5.0</version>
+        <version>1.6.0</version>
       </dependency>
       <dependency>
         <groupId>org.json</groupId>
@@ -671,13 +662,13 @@
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.compendium</artifactId>
-        <version>${osgi.core.version}</version>
+        <version>5.0.0</version>
         <scope>provided</scope>
       </dependency>
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.core</artifactId>
-        <version>${osgi.core.version}</version>
+        <version>5.0.0</version>
         <scope>provided</scope>
       </dependency>
       <dependency>
@@ -694,7 +685,7 @@
       <dependency>
         <groupId>org.ow2.asm</groupId>
         <artifactId>asm</artifactId>
-        <version>6.0</version>
+        <version>6.2.1</version>
       </dependency>
 
       <!-- Configuration library -->
@@ -716,58 +707,59 @@
       <dependency>
         <groupId>com.typesafe</groupId>
         <artifactId>ssl-config-core_2.12</artifactId>
-        <version>0.2.2</version>
+        <version>0.2.4</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-actor_2.12</artifactId>
-        <version>2.5.11</version>
+        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-cluster_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-osgi_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-persistence_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-persistence-tck_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-protobuf_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-remote_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-slf4j_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-stream_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
       </dependency>
       <dependency>
         <groupId>com.typesafe.akka</groupId>
         <artifactId>akka-testkit_2.12</artifactId>
-        <version>2.5.11</version>
+        <version>2.5.14</version>
         <scope>test</scope>
       </dependency>
       <dependency>
@@ -778,44 +770,29 @@
       <dependency>
         <groupId>org.scala-lang.modules</groupId>
         <artifactId>scala-parser-combinators_2.12</artifactId>
-        <version>1.0.6</version>
-      </dependency>
-      <dependency>
-        <groupId>org.iq80.leveldb</groupId>
-        <artifactId>leveldb</artifactId>
-        <version>0.7</version>
-      </dependency>
-      <dependency>
-        <groupId>org.fusesource.leveldbjni</groupId>
-        <artifactId>leveldbjni-all</artifactId>
-        <version>1.8-odl</version>
+        <version>1.1.1</version>
       </dependency>
       <dependency>
         <groupId>org.uncommons.maths</groupId>
         <artifactId>uncommons-maths</artifactId>
         <version>1.2.2a</version>
       </dependency>
-      <dependency>
-        <groupId>com.google.protobuf</groupId>
-        <artifactId>protobuf-java</artifactId>
-        <version>2.5.0</version>
-      </dependency>
 
       <!-- Aeron, required by Akka -->
       <dependency>
         <groupId>org.agrona</groupId>
         <artifactId>agrona</artifactId>
-        <version>0.9.12</version>
+        <version>0.9.21</version>
       </dependency>
       <dependency>
         <groupId>io.aeron</groupId>
         <artifactId>aeron-client</artifactId>
-        <version>1.7.0</version>
+        <version>1.9.3</version>
       </dependency>
       <dependency>
         <groupId>io.aeron</groupId>
         <artifactId>aeron-driver</artifactId>
-        <version>1.7.0</version>
+        <version>1.9.3</version>
       </dependency>
 
       <!-- Scala -->
@@ -841,87 +818,94 @@
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-container-forked</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-container-karaf</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-container-native</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-extender-service</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-inject</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-invoker-junit</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-features</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <type>xml</type>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-junit4</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-link-mvn</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.exam</groupId>
         <artifactId>pax-exam-link-assembly</artifactId>
-        <version>${exam.version}</version>
+        <version>4.12.0</version>
         <scope>test</scope>
       </dependency>
 
       <dependency>
         <groupId>org.ops4j.pax.url</groupId>
         <artifactId>pax-url-link</artifactId>
-        <version>2.5.3</version>
+        <version>2.5.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.url</groupId>
         <artifactId>pax-url-aether</artifactId>
-        <version>2.5.3</version>
+        <version>2.5.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.url</groupId>
         <artifactId>pax-url-wrap</artifactId>
-        <version>2.5.3</version>
+        <version>2.5.4</version>
+      </dependency>
+
+      <dependency>
+        <groupId>org.ops4j.pax.web</groupId>
+        <artifactId>pax-web-api</artifactId>
+        <!-- Note: keep this version synchronized with karaf -->
+        <version>7.2.3</version>
       </dependency>
 
       <dependency>
@@ -930,32 +914,46 @@
         <version>1.2.1</version>
         <scope>test</scope>
       </dependency>
+
+      <dependency>
+        <groupId>org.xmlunit</groupId>
+        <artifactId>xmlunit-core</artifactId>
+        <version>2.6.2</version>
+        <scope>test</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.xmlunit</groupId>
+        <artifactId>xmlunit-matchers</artifactId>
+        <version>2.6.2</version>
+        <scope>test</scope>
+      </dependency>
+      <!-- FIXME: remove this once we have migrated over -->
       <dependency>
-        <groupId>xmlunit</groupId>
-        <artifactId>xmlunit</artifactId>
-        <version>1.6</version>
+        <groupId>org.xmlunit</groupId>
+        <artifactId>xmlunit-legacy</artifactId>
+        <version>2.6.2</version>
         <scope>test</scope>
       </dependency>
 
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-client</artifactId>
-        <version>9.3.21.v20170918</version>
+        <version>9.4.11.v20180605</version>
       </dependency>
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-server</artifactId>
-        <version>9.3.21.v20170918</version>
+        <version>9.4.11.v20180605</version>
       </dependency>
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-servlets</artifactId>
-        <version>9.3.21.v20170918</version>
+        <version>9.4.11.v20180605</version>
       </dependency>
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-webapp</artifactId>
-        <version>9.3.21.v20170918</version>
+        <version>9.4.11.v20180605</version>
       </dependency>
 
       <dependency>
@@ -993,12 +991,6 @@
         <version>1</version>
         <optional>true</optional>
       </dependency>
-      <dependency>
-        <groupId>org.ops4j.pax.cdi</groupId>
-        <artifactId>pax-cdi-api</artifactId>
-        <version>1.0.0.RC2</version>
-        <optional>true</optional>
-      </dependency>
 
       <!-- Cassandra -->
       <dependency>
@@ -1040,7 +1032,7 @@
       <dependency>
         <groupId>org.threeten</groupId>
         <artifactId>threeten-extra</artifactId>
-        <version>1.3.2</version>
+        <version>1.4</version>
       </dependency>
 
       <!-- When updating this version, consider antl4-maven-plugin below -->
@@ -1057,25 +1049,47 @@
         <artifactId>org.apache.aries.blueprint.core</artifactId>
         <version>1.9.0</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.aries.blueprint</groupId>
+        <artifactId>blueprint-maven-plugin-annotation</artifactId>
+        <version>1.3.0</version>
+        <optional>true</optional>
+      </dependency>
 
+      <!-- Apache SSHD with netty -->
+      <dependency>
+        <groupId>org.apache.sshd</groupId>
+        <artifactId>sshd-core</artifactId>
+        <version>2.0.0</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.sshd</groupId>
+        <artifactId>sshd-netty</artifactId>
+        <version>2.0.0</version>
+      </dependency>
+      <dependency>
+        <groupId>net.i2p.crypto</groupId>
+        <artifactId>eddsa</artifactId>
+        <version>0.3.0</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
 
   <dependencies>
-    <!-- Karaf provides SL4FJ encapsulation -->
+    <!--
+         We expect slf4j-api to be provided by the platform.
+         Karaf provides it, other containers need to provide it themselves.
+    -->
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-api</artifactId>
       <scope>provided</scope>
     </dependency>
 
-    <dependency>
-      <groupId>org.slf4j</groupId>
-      <artifactId>slf4j-simple</artifactId>
-      <scope>test</scope>
-    </dependency>
-
-    <!-- Enable useful code quality annotations everywhere -->
+    <!--
+          Enable useful code quality annotations everywhere. Since these annotations
+          are not required at runtime.
+    -->
     <dependency>
       <groupId>com.google.code.findbugs</groupId>
       <artifactId>annotations</artifactId>
@@ -1086,6 +1100,29 @@
       <artifactId>org.eclipse.jdt.annotation</artifactId>
       <scope>provided</scope>
     </dependency>
+
+    <!--
+          Testing output should be routed through slf4j-simple.
+    -->
+    <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-simple</artifactId>
+      <scope>test</scope>
+    </dependency>
+
+    <!--
+          Unit tests can use JUnit + Mockito + Hamcrest by default.
+    -->
+    <dependency>
+      <groupId>junit</groupId>
+      <artifactId>junit</artifactId>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.mockito</groupId>
+      <artifactId>mockito-core</artifactId>
+      <scope>test</scope>
+    </dependency>
   </dependencies>
 
   <build>
@@ -1105,22 +1142,22 @@
               <groupId>com.puppycrawl.tools</groupId>
               <artifactId>checkstyle</artifactId>
               <!-- This should match the dependency management on com.puppycrawl.tools:checkstyle above -->
-              <version>8.10.1</version>
+              <version>8.12</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>checkstyle</artifactId>
-              <version>4.0.0-SNAPSHOT</version>
+              <version>4.0.2-SNAPSHOT</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>odl-license</artifactId>
-              <version>4.0.0-SNAPSHOT</version>
+              <version>4.0.2-SNAPSHOT</version>
             </dependency>
             <dependency>
               <groupId>com.github.sevntu-checkstyle</groupId>
               <artifactId>sevntu-checkstyle-maven-plugin</artifactId>
-              <version>1.27.0</version>
+              <version>1.32.0</version>
             </dependency>
           </dependencies>
           <configuration>
@@ -1179,7 +1216,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-pmd-plugin</artifactId>
-          <version>3.9.0</version>
+          <version>3.10.0</version>
           <executions>
             <execution>
               <id>cpd</id>
@@ -1209,7 +1246,7 @@
         </plugin>
         <plugin>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>${maven.compile.plugin.version}</version>
+          <version>3.8.0</version>
           <configuration>
             <source>1.8</source>
             <target>1.8</target>
@@ -1217,6 +1254,7 @@
             <compilerArgs>
               <arg>-parameters</arg>
               <arg>-Xlint:deprecation</arg>
+              <arg>-Xlint:unchecked</arg>
             </compilerArgs>
           </configuration>
         </plugin>
@@ -1226,15 +1264,15 @@
         </plugin>
         <plugin>
           <artifactId>maven-failsafe-plugin</artifactId>
-          <version>${failsafe.version}</version>
+          <version>2.22.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-invoker-plugin</artifactId>
-          <version>2.0.0</version>
+          <version>3.1.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-jar-plugin</artifactId>
-          <version>3.0.2</version>
+          <version>3.1.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-dependency-plugin</artifactId>
@@ -1248,7 +1286,7 @@
                   <artifactItem>
                     <groupId>org.opendaylight.odlparent</groupId>
                     <artifactId>odl-license</artifactId>
-                    <version>4.0.0-SNAPSHOT</version>
+                    <version>4.0.2-SNAPSHOT</version>
                   </artifactItem>
                 </artifactItems>
                 <outputDirectory>${project.build.outputDirectory}</outputDirectory>
@@ -1260,7 +1298,7 @@
 
         <plugin>
           <artifactId>maven-plugin-plugin</artifactId>
-          <version>${maven.plugin.version}</version>
+          <version>3.5</version>
         </plugin>
 
         <plugin>
@@ -1269,11 +1307,11 @@
         </plugin>
         <plugin>
           <artifactId>maven-resources-plugin</artifactId>
-          <version>3.0.1</version>
+          <version>3.1.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-shade-plugin</artifactId>
-          <version>3.1.0</version>
+          <version>3.2.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-source-plugin</artifactId>
@@ -1290,9 +1328,9 @@
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>${maven.surefire.version}</version>
+          <version>2.22.0</version>
           <configuration>
-            <redirectTestOutputToFile>true</redirectTestOutputToFile>
+            <redirectTestOutputToFile>${maven.test.redirectTestOutputToFile}</redirectTestOutputToFile>
             <trimStackTrace>false</trimStackTrace>
           </configuration>
         </plugin>
@@ -1302,21 +1340,21 @@
           <!-- Support Blueprint XML construction using annotations -->
           <groupId>org.apache.aries.blueprint</groupId>
           <artifactId>blueprint-maven-plugin</artifactId>
-          <version>1.4.0</version>
-          <configuration>
-            <scanPaths>
-              <scanPath>org.opendaylight</scanPath>
-            </scanPaths>
-          </configuration>
+          <version>1.10.0</version>
+          <!-- TODO remove dependencies when we bump from 1.10.0 to 1.11.0 (or 1.10.1);
+             see https://jira.opendaylight.org/browse/ODLPARENT-167 & https://jira.apache.org/jira/browse/ARIES-1826 -->
           <dependencies>
             <dependency>
-              <!-- See https://issues.apache.org/jira/browse/ARIES-1596 -->
-              <!-- This shouldn't be necessary with plugin version 1.5.0 -->
               <groupId>org.apache.xbean</groupId>
               <artifactId>xbean-finder-shaded</artifactId>
-              <version>4.5</version>
+              <version>4.9</version>
             </dependency>
           </dependencies>
+          <configuration>
+            <scanPaths>
+              <scanPath>org.opendaylight</scanPath>
+            </scanPaths>
+          </configuration>
           <executions>
             <execution>
               <goals>
@@ -1329,7 +1367,7 @@
         <plugin>
           <groupId>org.apache.felix</groupId>
           <artifactId>maven-bundle-plugin</artifactId>
-          <version>${maven.bundle.version}</version>
+          <version>4.0.0</version>
           <extensions>true</extensions>
           <configuration>
             <instructions>
@@ -1337,6 +1375,10 @@
                    so that the build doesn't fail if there is no .../.git/ - so git.properties is effectively optional;
                    and so the '-' there is needed to make the maven-bundle-plugin if that resource is not present.  -->
               <Include-Resource>{maven-resources},${project.build.directory}/classes/LICENSE,META-INF/git.properties=-${project.build.directory}/classes/META-INF/git.properties</Include-Resource>
+
+              <!-- Based on https://dev.eclipse.org/mhonarc/lists/equinox-dev/msg01088.html we do want
+                   to generate Import-Service and Export-Service headers. -->
+              <_removeheaders>Import-Service,Export-Service</_removeheaders>
             </instructions>
           </configuration>
         </plugin>
@@ -1364,7 +1406,8 @@
         <plugin>
           <groupId>org.codehaus.enunciate</groupId>
           <artifactId>maven-enunciate-plugin</artifactId>
-          <version>${enunciate.version}</version>
+          <!-- This must be aligned with the version of enunciate-core-annotations specified above -->
+          <version>1.31</version>
         </plugin>
         <plugin>
           <groupId>org.codehaus.groovy.maven</groupId>
@@ -1384,7 +1427,7 @@
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>findbugs</artifactId>
-              <version>4.0.0-SNAPSHOT</version>
+              <version>4.0.2-SNAPSHOT</version>
             </dependency>
           </dependencies>
           <configuration>
@@ -1392,7 +1435,8 @@
               <plugin>
                 <groupId>jp.skypencil.findbugs.slf4j</groupId>
                 <artifactId>bug-pattern</artifactId>
-                <!-- NOTE: This version MUST be kept in sync with the same version in the new spotbugs-maven-plugin below -->
+                <!-- NOTE: This version SHOULD be kept in sync with the same version in the new spotbugs-maven-plugin below,
+                     but 1.4.1 broke compability with (the version we use of) FindBugs, so must keep this at 1.4.0. -->
                 <version>1.4.0</version>
               </plugin>
             </plugins>
@@ -1429,17 +1473,17 @@
         <plugin>
           <groupId>com.github.spotbugs</groupId>
           <artifactId>spotbugs-maven-plugin</artifactId>
-          <version>3.1.3.1</version>
+          <version>3.1.6</version>
           <dependencies>
             <dependency>
               <groupId>com.github.spotbugs</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>3.1.3</version>
+              <version>3.1.7</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>4.0.0-SNAPSHOT</version>
+              <version>4.0.2-SNAPSHOT</version>
             </dependency>
           </dependencies>
           <configuration>
@@ -1447,8 +1491,8 @@
               <plugin>
                 <groupId>jp.skypencil.findbugs.slf4j</groupId>
                 <artifactId>bug-pattern</artifactId>
-                <!-- NOTE: This version MUST be kept in sync with the same version in the old findbugs-maven-plugin above -->
-                <version>1.4.0</version>
+                <!-- NOTE: This version MUST be kept in sync with the same version in the old findbugs-maven-plugin above, if possible -->
+                <version>1.4.1</version>
               </plugin>
             </plugins>
             <!--
@@ -1484,7 +1528,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>properties-maven-plugin</artifactId>
-          <version>${propertymavenplugin.version}</version>
+          <version>1.0.0</version>
         </plugin>
         <plugin>
           <groupId>org.eclipse.xtend</groupId>
@@ -1503,6 +1547,16 @@
               </configuration>
             </execution>
           </executions>
+
+          <!-- This is needed because upstream got broken by their inconsistency: pulling in old core,
+               but using ranges for other components. No wonder it blew up. -->
+          <dependencies>
+            <dependency>
+              <groupId>org.eclipse.platform</groupId>
+              <artifactId>org.eclipse.equinox.common</artifactId>
+              <version>3.10.0</version>
+            </dependency>
+          </dependencies>
         </plugin>
         <plugin>
           <groupId>org.eclipse.m2e</groupId>
@@ -1597,7 +1651,6 @@
                     <versionRange>[0.7.0,)</versionRange>
                     <goals>
                       <goal>prepare-agent</goal>
-                      <goal>report</goal>
                     </goals>
                   </pluginExecutionFilter>
                   <action>
@@ -1642,7 +1695,6 @@
         <plugin>
           <groupId>org.jacoco</groupId>
           <artifactId>jacoco-maven-plugin</artifactId>
-          <version>${jacoco.version}</version>
           <configuration>
             <!-- Note: This exclusion list should match <sonar.exclusions>
                        property above -->
@@ -1722,7 +1774,7 @@
       <plugin>
         <groupId>org.basepom.maven</groupId>
         <artifactId>duplicate-finder-maven-plugin</artifactId>
-        <version>1.2.1</version>
+        <version>1.3.0</version>
         <executions>
           <execution>
             <id>find-duplicate-classpath-entries</id>
@@ -1790,16 +1842,7 @@
               <goal>prepare-agent</goal>
             </goals>
             <configuration>
-              <destFile>${sonar.jacoco.reportPath}</destFile>
-            </configuration>
-          </execution>
-          <execution>
-            <id>post-unit-test</id>
-            <goals>
-              <goal>report</goal>
-            </goals>
-            <configuration>
-              <dataFile>${sonar.jacoco.reportPath}</dataFile>
+              <destFile>${jacoco.destFile}</destFile>
             </configuration>
           </execution>
         </executions>
@@ -1858,86 +1901,6 @@
            </dependency>
          </dependencies>
       </plugin>
-
-      <!-- Blueprint dependency injection -->
-      <!-- Remove when upgrading to plugin 1.5.0, and use
-           <configuration><generatedDir>org/opendaylight/blueprint/</...></...>
-           See https://issues.apache.org/jira/browse/ARIES-1597
-           BUT beware that the directory is now conditional... -->
-      <plugin>
-        <artifactId>maven-antrun-plugin</artifactId>
-        <executions>
-          <!-- This should only run once, in the process-classes phase; but we need it to run after
-               process-classes in child projects. Attaching to process-test-classes and prepare-package
-               ensures that the file will be moved whether tests are skipped or not. -->
-          <execution>
-            <id>move-autowire-test</id>
-            <phase>process-test-classes</phase>
-            <goals>
-              <goal>run</goal>
-            </goals>
-            <configuration>
-              <target>
-                <taskdef resource="net/sf/antcontrib/antcontrib.properties"/>
-                <if>
-                  <available file="${project.basedir}/src/main/resources/org/opendaylight/blueprint" type="dir"/>
-                  <then>
-                    <echo>Moving autowire.xml to org/opendaylight/blueprint</echo>
-                    <move file="${project.build.directory}/generated-resources/OSGI-INF/blueprint/autowire.xml"
-                          todir="${project.build.directory}/generated-resources/org/opendaylight/blueprint"
-                          failonerror="false" quiet="true" />
-                  </then>
-                  <else>
-                    <echo>NOT moving autowire.xml (to org/opendaylight/blueprint)</echo>
-                  </else>
-                </if>
-              </target>
-            </configuration>
-          </execution>
-          <execution>
-            <id>move-autowire-package</id>
-            <phase>prepare-package</phase>
-            <goals>
-              <goal>run</goal>
-            </goals>
-            <configuration>
-              <target>
-                <taskdef resource="net/sf/antcontrib/antcontrib.properties"/>
-                <if>
-                  <available file="${project.basedir}/src/main/resources/org/opendaylight/blueprint" type="dir"/>
-                  <then>
-                    <echo>Moving autowire.xml to org/opendaylight/blueprint</echo>
-                    <move file="${project.build.directory}/generated-resources/OSGI-INF/blueprint/autowire.xml"
-                          todir="${project.build.directory}/generated-resources/org/opendaylight/blueprint"
-                          failonerror="false" quiet="true" />
-                  </then>
-                  <else>
-                    <echo>NOT moving autowire.xml (to org/opendaylight/blueprint)</echo>
-                  </else>
-                </if>
-              </target>
-            </configuration>
-          </execution>
-        </executions>
-        <dependencies>
-          <dependency>
-            <groupId>ant-contrib</groupId>
-            <artifactId>ant-contrib</artifactId>
-            <version>1.0b3</version>
-            <exclusions>
-              <exclusion>
-                <groupId>ant</groupId>
-                <artifactId>ant</artifactId>
-              </exclusion>
-            </exclusions>
-          </dependency>
-          <dependency>
-            <groupId>org.apache.ant</groupId>
-            <artifactId>ant-nodeps</artifactId>
-            <version>1.8.1</version>
-          </dependency>
-        </dependencies>
-      </plugin>
     </plugins>
   </build>
 
@@ -1967,21 +1930,27 @@
     </plugins>
   </reporting>
 
-  <!--
-    Maven Site Configuration
-
-    The following configuration is necessary for maven-site-plugin to
-    correctly identify the correct deployment path for OpenDaylight Maven
-    sites.
-  -->
-  <url>${odl.site.url}/${project.groupId}/${stream}/${project.artifactId}/</url>
-
-  <distributionManagement>
-    <site>
-      <id>opendaylight-site</id>
-      <url>${nexus.site.url}/${project.artifactId}/</url>
-    </site>
-  </distributionManagement>
+  <profiles>
+    <profile>
+      <!-- On JDK9-and-later findbugs fails -->
+      <id>jdk9-findbugs</id>
+      <activation>
+        <jdk>[9,)</jdk>
+      </activation>
+
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.codehaus.mojo</groupId>
+            <artifactId>findbugs-maven-plugin</artifactId>
+            <configuration combine.children="append">
+              <skip>true</skip>
+            </configuration>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+  </profiles>
 
 </project>