X-Git-Url: https://git.opendaylight.org/gerrit/gitweb?a=blobdiff_plain;f=odlparent%2Fpom.xml;h=707fbb67ad2b88a1f36de6b51ad6cefe543cd2f2;hb=b13c4b88eb334651cb4201eebf43510e459b5fe9;hp=f362444674fc26594857da938928439ca7d850b5;hpb=bfe75252d4097c29124e903e37b60945a3987180;p=odlparent.git

diff --git a/odlparent/pom.xml b/odlparent/pom.xml
index f36244467..ba783bda1 100644
--- a/odlparent/pom.xml
+++ b/odlparent/pom.xml
@@ -13,7 +13,7 @@
   <parent>
     <groupId>org.opendaylight.odlparent</groupId>
     <artifactId>odlparent-lite</artifactId>
-    <version>12.0.6-SNAPSHOT</version>
+    <version>13.1.1</version>
     <relativePath>../odlparent-lite</relativePath>
   </parent>
 
@@ -38,11 +38,11 @@
     <nexus.repository.snapshot>opendaylight.snapshot</nexus.repository.snapshot>
 
     <!-- Used in controller, genius, infrautils, netconf, netvirt, ovsdb, serviceutils -->
-    <karaf.version>4.4.3</karaf.version>
+    <karaf.version>4.4.6</karaf.version>
 
     <!-- Supporting Libraries -->
     <!-- Only used internally -->
-    <bouncycastle.version>1.73</bouncycastle.version>
+    <bouncycastle.version>1.77</bouncycastle.version>
 
     <!-- JaCoCo configuration, by default tied to Sonar configuration, but can be overridden separately
          to allow projects to report Sonar values from the entire project. -->
@@ -82,6 +82,8 @@
          to true. Set to 'false' in pom.xml of project which desires to not enforce
          no reported violations. -->
     <odlparent.spotbugs.enforce>true</odlparent.spotbugs.enforce>
+    <!-- Do not for a new JVM for spotbugs execution -->
+    <spotbugs.fork>false</spotbugs.fork>
 
     <!-- Opt-in into maven-dependency-plugin dependency declaration consistency
          enforcement. Defaults to false. Set to 'true' in pom.xml of a project which
@@ -100,7 +102,7 @@
       <dependency>
         <groupId>org.opendaylight.odlparent</groupId>
         <artifactId>odlparent-artifacts</artifactId>
-        <version>12.0.6-SNAPSHOT</version>
+        <version>13.1.1</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -123,7 +125,7 @@
         <groupId>com.puppycrawl.tools</groupId>
         <artifactId>checkstyle</artifactId>
         <!-- This should match the plugin management on maven-checkstyle-plugin below -->
-        <version>10.11.0</version>
+        <version>10.15.0</version>
       </dependency>
 
       <!-- Testing Dependencies -->
@@ -131,14 +133,14 @@
       <dependency>
         <groupId>org.junit</groupId>
         <artifactId>junit-bom</artifactId>
-        <version>5.9.3</version>
+        <version>5.10.2</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-bom</artifactId>
-        <version>5.3.1</version>
+        <version>5.11.0</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -171,7 +173,7 @@
       <dependency>
         <groupId>org.awaitility</groupId>
         <artifactId>awaitility</artifactId>
-        <version>4.1.1</version>
+        <version>4.2.1</version>
         <scope>test</scope>
       </dependency>
 
@@ -184,9 +186,8 @@
         <artifactId>value</artifactId>
         <classifier>annotations</classifier>
         <!-- Keep this version in sync with annotationProcessorPaths declaration below -->
-        <version>2.9.3</version>
-        <!-- Must be provided; scope=test here breaks APT in Eclipse :( -->
-        <scope>provided</scope>
+        <version>2.10.1</version>
+        <optional>true</optional>
       </dependency>
 
       <dependency>
@@ -194,30 +195,38 @@
         <groupId>org.kohsuke.metainf-services</groupId>
         <artifactId>metainf-services</artifactId>
         <!-- Keep this version in sync with annotationProcessorPaths declaration below -->
-        <version>1.9</version>
+        <version>1.11</version>
         <optional>true</optional>
         <scope>provided</scope>
       </dependency>
 
       <!--
            Supporting Libraries
-       -->
+      -->
+      <dependency>
+        <groupId>org.slf4j</groupId>
+        <artifactId>slf4j-bom</artifactId>
+        <version>2.0.9</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-core</artifactId>
-        <version>1.2.11</version>
+        <version>1.3.14</version>
       </dependency>
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
-        <version>1.2.11</version>
+        <version>1.3.14</version>
       </dependency>
 
       <!-- log4j2 -->
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-bom</artifactId>
-        <version>2.17.1</version>
+        <version>2.23.1</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -226,7 +235,7 @@
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite and docs -->
-        <version>31.1-jre</version>
+        <version>32.1.3-jre</version>
         <exclusions>
           <exclusion>
             <!-- Do not leak JSR305 onto the classpath by default -->
@@ -239,7 +248,7 @@
         <groupId>com.google.guava</groupId>
         <artifactId>guava-testlib</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite and docs -->
-        <version>31.1-jre</version>
+        <version>32.1.3-jre</version>
         <scope>test</scope>
         <exclusions>
           <exclusion>
@@ -252,12 +261,12 @@
       <dependency>
         <groupId>org.checkerframework</groupId>
         <artifactId>checker-qual</artifactId>
-        <version>3.34.0</version>
+        <version>3.42.0</version>
       </dependency>
       <dependency>
         <groupId>com.google.errorprone</groupId>
         <artifactId>error_prone_annotations</artifactId>
-        <version>2.19.1</version>
+        <version>2.26.1</version>
       </dependency>
 
       <dependency>
@@ -268,18 +277,12 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
-        <version>3.12.0</version>
+        <version>3.14.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-text</artifactId>
-        <version>1.10.0</version>
-      </dependency>
-      <dependency>
-        <groupId>commons-lang</groupId>
-        <artifactId>commons-lang</artifactId>
-        <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite and docs -->
-        <version>2.6</version>
+        <version>1.11.0</version>
       </dependency>
 
       <!-- Jersey for JAXRS -->
@@ -291,7 +294,7 @@
       <dependency>
         <groupId>org.glassfish.jersey</groupId>
         <artifactId>jersey-bom</artifactId>
-        <version>2.39.1</version>
+        <version>2.42</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -327,23 +330,23 @@
       </dependency>
 
       <!-- These three need to be consistent:
-        jackson-2.14.3 needs woodstox-6.4.0+
+        jackson-2.16.2 needs woodstox-6.6.0+
         woodstox-5.3+ needs stax2-api-4.2.x
         -->
       <dependency>
         <groupId>org.codehaus.woodstox</groupId>
         <artifactId>stax2-api</artifactId>
-        <version>4.2.1</version>
+        <version>4.2.2</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
-        <version>6.5.1</version>
+        <version>6.6.2</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
-        <version>2.14.3</version>
+        <version>2.16.2</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -351,8 +354,7 @@
       <dependency>
         <groupId>com.github.spotbugs</groupId>
         <artifactId>spotbugs-annotations</artifactId>
-        <version>4.7.3</version>
-        <scope>provided</scope>
+        <version>4.8.3</version>
         <!-- Contains retention=RUNTIME annotations, which are not really needed -->
         <optional>true</optional>
         <exclusions>
@@ -366,8 +368,7 @@
       <dependency>
         <groupId>org.eclipse.jdt</groupId>
         <artifactId>org.eclipse.jdt.annotation</artifactId>
-        <version>2.2.700</version>
-        <scope>provided</scope>
+        <version>2.3.0</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.gson</groupId>
@@ -377,7 +378,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.12.0</version>
+        <version>2.16.0</version>
       </dependency>
 
       <!-- Netty -->
@@ -385,7 +386,7 @@
         <groupId>io.netty</groupId>
         <artifactId>netty-bom</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
-        <version>4.1.92.Final</version>
+        <version>4.1.108.Final</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -414,7 +415,7 @@
       <dependency>
         <groupId>org.javassist</groupId>
         <artifactId>javassist</artifactId>
-        <version>3.29.2-GA</version>
+        <version>3.30.2-GA</version>
       </dependency>
       <dependency>
         <groupId>org.jboss.spec.javax.transaction</groupId>
@@ -475,7 +476,7 @@
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.service.jdbc</artifactId>
-        <version>1.0.1</version>
+        <version>1.1.0</version>
         <scope>provided</scope>
         <exclusions>
           <!-- Causes class path duplicates -->
@@ -603,19 +604,19 @@
       <dependency>
         <groupId>org.ops4j.pax.url</groupId>
         <artifactId>pax-url-link</artifactId>
-        <version>2.6.12</version>
+        <version>2.6.14</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.url</groupId>
         <artifactId>pax-url-aether</artifactId>
-        <version>2.6.12</version>
+        <version>2.6.14</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.ops4j.pax.url</groupId>
         <artifactId>pax-url-wrap</artifactId>
-        <version>2.6.12</version>
+        <version>2.6.14</version>
       </dependency>
 
       <dependency>
@@ -650,19 +651,38 @@
         <scope>test</scope>
       </dependency>
 
+      <dependency>
+        <groupId>org.assertj</groupId>
+        <artifactId>assertj-core</artifactId>
+        <version>3.25.3</version>
+        <scope>test</scope>
+        <exclusions>
+          <exclusion>
+            <groupId>net.bytebuddy</groupId>
+            <artifactId>byte-buddy</artifactId>
+          </exclusion>
+        </exclusions>
+      </dependency>
+      <dependency>
+        <groupId>org.assertj</groupId>
+        <artifactId>assertj-guava</artifactId>
+        <version>3.25.3</version>
+        <scope>test</scope>
+      </dependency>
+
       <!-- Annotations for modernizer-maven-plugin -->
       <dependency>
         <groupId>org.gaul</groupId>
         <artifactId>modernizer-maven-annotations</artifactId>
         <!-- This should match the plugin version below -->
-        <version>2.6.0</version>
+        <version>2.7.0</version>
         <scope>provided</scope>
       </dependency>
 
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-bom</artifactId>
-        <version>9.4.50.v20221201</version>
+        <version>9.4.54.v20240208</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -672,7 +692,7 @@
       <dependency>
         <groupId>com.guicedee.services</groupId>
         <artifactId>javax.inject</artifactId>
-        <version>1.0.20.0</version>
+        <version>1.0.20.2</version>
         <scope>provided</scope>
         <optional>true</optional>
       </dependency>
@@ -695,7 +715,7 @@
       <dependency>
         <groupId>org.antlr</groupId>
         <artifactId>antlr4-runtime</artifactId>
-        <version>4.12.0</version>
+        <version>4.13.1</version>
       </dependency>
 
       <!-- TrieMap library -->
@@ -711,7 +731,7 @@
       <dependency>
         <groupId>io.dropwizard.metrics</groupId>
         <artifactId>metrics-bom</artifactId>
-        <version>4.2.18</version>
+        <version>4.2.25</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -737,27 +757,6 @@
       <scope>provided</scope>
     </dependency>
 
-    <!--
-          Enable useful code quality annotations everywhere. Since these annotations
-          are not required at runtime.
-    -->
-    <dependency>
-      <groupId>org.eclipse.jdt</groupId>
-      <artifactId>org.eclipse.jdt.annotation</artifactId>
-      <scope>provided</scope>
-    </dependency>
-    <dependency>
-      <groupId>com.github.spotbugs</groupId>
-      <artifactId>spotbugs-annotations</artifactId>
-      <scope>provided</scope>
-      <optional>true</optional>
-    </dependency>
-    <dependency>
-      <groupId>org.gaul</groupId>
-      <artifactId>modernizer-maven-annotations</artifactId>
-      <scope>provided</scope>
-    </dependency>
-
     <!--
           Testing output should be routed through slf4j-simple.
     -->
@@ -768,8 +767,15 @@
     </dependency>
 
     <!--
-          Unit tests can use JUnit + Mockito + Hamcrest by default.
+        Unit tests can use JUnit + Mockito + Hamcrest/AssertJ by default.
     -->
+    <dependency>
+      <groupId>org.assertj</groupId>
+      <artifactId>assertj-core</artifactId>
+      <scope>test</scope>
+    </dependency>
+
+    <!-- Hamcrest, for now -->
     <dependency>
       <groupId>org.hamcrest</groupId>
       <artifactId>hamcrest</artifactId>
@@ -834,18 +840,18 @@
              We do not need to specify the groupId. -->
         <plugin>
           <artifactId>maven-checkstyle-plugin</artifactId>
-          <version>3.3.0</version>
+          <version>3.3.1</version>
           <dependencies>
             <dependency>
               <groupId>com.puppycrawl.tools</groupId>
               <artifactId>checkstyle</artifactId>
               <!-- This should match the dependency management on com.puppycrawl.tools:checkstyle above -->
-              <version>10.11.0</version>
+              <version>10.15.0</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>checkstyle</artifactId>
-              <version>12.0.6-SNAPSHOT</version>
+              <version>13.1.1</version>
             </dependency>
             <dependency>
               <groupId>com.github.sevntu-checkstyle</groupId>
@@ -929,24 +935,24 @@
                 <groupId>org.immutables</groupId>
                 <artifactId>value</artifactId>
                 <!-- Keep this version in sync with dependency declaration above -->
-                <version>2.9.3</version>
+                <version>2.10.1</version>
               </dependency>
               <dependency>
                 <groupId>org.kohsuke.metainf-services</groupId>
                 <artifactId>metainf-services</artifactId>
                 <!-- Keep this version in sync with dependency declaration above -->
-                <version>1.9</version>
+                <version>1.11</version>
               </dependency>
             </annotationProcessorPaths>
           </configuration>
         </plugin>
         <plugin>
           <artifactId>maven-failsafe-plugin</artifactId>
-          <version>3.1.0</version>
+          <version>3.2.5</version>
         </plugin>
         <plugin>
           <artifactId>maven-invoker-plugin</artifactId>
-          <version>3.5.1</version>
+          <version>3.6.1</version>
         </plugin>
         <plugin>
           <artifactId>maven-dependency-plugin</artifactId>
@@ -962,7 +968,7 @@
                   <artifactItem>
                     <groupId>org.opendaylight.odlparent</groupId>
                     <artifactId>odl-license</artifactId>
-                    <version>12.0.6-SNAPSHOT</version>
+                    <version>13.1.1</version>
                     <type>license</type>
                     <outputDirectory>${project.build.outputDirectory}</outputDirectory>
                     <destFileName>LICENSE</destFileName>
@@ -988,20 +994,20 @@
 
         <plugin>
           <artifactId>maven-plugin-plugin</artifactId>
-          <version>3.8.2</version>
+          <version>3.12.0</version>
         </plugin>
 
         <plugin>
           <artifactId>maven-remote-resources-plugin</artifactId>
-          <version>3.0.0</version>
+          <version>3.2.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-shade-plugin</artifactId>
-          <version>3.4.1</version>
+          <version>3.5.2</version>
         </plugin>
         <plugin>
           <artifactId>maven-source-plugin</artifactId>
-          <version>3.3.0</version>
+          <version>3.3.1</version>
           <executions>
             <execution>
               <id>attach-sources</id>
@@ -1014,7 +1020,7 @@
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.1.0</version>
+          <version>3.2.5</version>
           <configuration>
             <redirectTestOutputToFile>${maven.test.redirectTestOutputToFile}</redirectTestOutputToFile>
             <trimStackTrace>false</trimStackTrace>
@@ -1025,19 +1031,19 @@
         <plugin>
           <groupId>org.basepom.maven</groupId>
           <artifactId>duplicate-finder-maven-plugin</artifactId>
-          <version>1.5.1</version>
+          <version>2.0.1</version>
         </plugin>
 
         <plugin>
           <groupId>com.github.ekryd.echo-maven-plugin</groupId>
           <artifactId>echo-maven-plugin</artifactId>
-          <version>2.0.1</version>
+          <version>2.1.0</version>
         </plugin>
 
         <plugin>
           <groupId>org.apache.felix</groupId>
           <artifactId>maven-bundle-plugin</artifactId>
-          <version>5.1.8</version>
+          <version>5.1.9</version>
           <extensions>true</extensions>
           <configuration>
             <instructions>
@@ -1063,7 +1069,7 @@
         <plugin>
           <groupId>org.apache.servicemix.tooling</groupId>
           <artifactId>depends-maven-plugin</artifactId>
-          <version>1.4.0</version>
+          <version>1.5.0</version>
           <executions>
             <execution>
               <id>generate-depends-file</id>
@@ -1077,7 +1083,7 @@
         <plugin>
           <groupId>org.gaul</groupId>
           <artifactId>modernizer-maven-plugin</artifactId>
-          <version>2.6.0</version>
+          <version>2.7.0</version>
           <configuration>
             <javaVersion>${odlparent.modernizer.target}</javaVersion>
             <failOnViolations>${odlparent.modernizer.enforce}</failOnViolations>
@@ -1125,29 +1131,17 @@
         <plugin>
           <groupId>com.github.spotbugs</groupId>
           <artifactId>spotbugs-maven-plugin</artifactId>
-          <version>4.7.3.4</version>
+          <version>4.8.3.1</version>
           <dependencies>
             <dependency>
               <groupId>com.github.spotbugs</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>4.7.3</version>
+              <version>4.8.3</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>12.0.6-SNAPSHOT</version>
-            </dependency>
-
-            <!-- The SpotBugs Maven plugin uses SLF4J-2 -->
-            <dependency>
-              <groupId>org.slf4j</groupId>
-              <artifactId>slf4j-api</artifactId>
-              <version>2.0.0</version>
-            </dependency>
-            <dependency>
-              <groupId>org.slf4j</groupId>
-              <artifactId>slf4j-simple</artifactId>
-              <version>2.0.0</version>
+              <version>13.1.1</version>
             </dependency>
           </dependencies>
           <configuration>
@@ -1192,7 +1186,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>properties-maven-plugin</artifactId>
-          <version>1.1.0</version>
+          <version>1.2.1</version>
         </plugin>
         <plugin>
           <groupId>org.eclipse.m2e</groupId>
@@ -1344,7 +1338,7 @@
         <plugin>
           <groupId>org.antlr</groupId>
           <artifactId>antlr4-maven-plugin</artifactId>
-          <version>4.12.0</version>
+          <version>4.13.1</version>
         </plugin>
       </plugins>
     </pluginManagement>
@@ -1391,7 +1385,6 @@
             <failBuildInCaseOfDifferentContentConflict>true</failBuildInCaseOfDifferentContentConflict>
             <failBuildInCaseOfEqualContentConflict>false</failBuildInCaseOfEqualContentConflict>
             <printEqualFiles>false</printEqualFiles>
-            <quiet>true</quiet>
             <!-- In addition to https://github.com/basepom/duplicate-finder-maven-plugin/wiki/Default%20ignored%20elements,
                  as explained on https://github.com/basepom/duplicate-finder-maven-plugin/wiki/Ignoring%20Dependencies%20and%20Resources,
                  we use resources not dependencies (see https://github.com/basepom/duplicate-finder-maven-plugin/wiki/Classpath%20Exceptions)
@@ -1461,7 +1454,7 @@
       <plugin>
         <groupId>org.opendaylight.odlparent</groupId>
         <artifactId>copy-files-plugin</artifactId>
-        <version>12.0.6-SNAPSHOT</version>
+        <version>13.1.1</version>
         <executions>
           <execution>
             <phase>prepare-package</phase>