add org.osgi.compendium to single-feature-parent

fixes SFT bug
java.lang.ClassNotFoundException:
org.osgi.service.resolver.ResolutionException

This now really fixes it (I've reproduced and verified it);
whereas the earlier Ifaa39b35d1975ccd2aec15f6ed56191637f43d73
actually had not.

Change-Id: Iebf8e8c7c72b787f8858d469944aef716b4c2830
JIRA: ODLPARENT-136
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump commons-text from 1.1 to 1.3

https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.2.txt
https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.3.txt

Change-Id: I63e5da392b401c5eafdd2d68af8c351b83a89e84
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump duplicate-finder-maven-plugin 1.2.1 to 1.3.0

Bumps [duplicate-finder-maven-plugin](https://github.com/basepom/duplicate-finder-maven-plugin) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/basepom/duplicate-finder-maven-plugin/releases)
- [Changelog](https://github.com/basepom/duplicate-finder-maven-plugin/blob/master/CHANGES.md)
- [Commits](https://github.com/basepom/duplicate-finder-maven-plugin/compare/duplicate-finder-maven-plugin-1.2.1...duplicate-finder-maven-plugin-1.3.0)

Change-Id: I2ac62255af7a9ee3c48a4e8bf17dbf6e784f9f42
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump jettison from 1.3.8 to 1.4.0

Bumps [jettison](https://github.com/jettison-json/jettison) from 1.3.8 to 1.4.0.
- [Release notes](https://github.com/jettison-json/jettison/releases)
- [Commits](https://github.com/jettison-json/jettison/compare/jettison-1.3.8...jettison-1.4.0)

Change-Id: Ie081aa5d8972496506deecb17190c9e0b836cb35
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

remove SingleFeatureTest's old INFO log config

because since we switched to log4j2 that has no more effect anyway:

  log4j.logger.org.opendaylight.odlparent.featuretest=INFO

because all properties must by log4j2.* and this is the default anyway:

  log4j2.rootLogger.level=INFO

Change-Id: Ic934a4d4ff7bf9d565ff88669c8f1a7607566368
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

remove SingleFeatureTest log4j.rootLogger override

because since we switched to log4j2 that has no more effect anyway:

  log4j.rootLogger=INFO, stdout, osgi\:*

because all properties must by log4j2.* and this is the default anyway:

  log4j2.rootLogger.level=INFO

Change-Id: I0b6755403668d6723b036ba1532fe5e89f437df2
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump checkstyle from 8.10 to 8.10.1

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.10 to 8.10.1.
- [Release notes](http://checkstyle.sourceforge.net/releasenotes.html#Release_8.10.1)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.10...checkstyle-8.10.1)

Change-Id: I332d089e544d9c675c28cf68e009918865f70c31
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump scala to 2.12.6

https://github.com/scala/scala/releases/tag/v2.12.6

Change-Id: Ie3c281606b6c4b63cec6d9be50fc86cb72a3dd2f
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 900aaf37f03c0f80ae0bc10b480f30d7873cd269)

Bump karaf-plugin Maven deps 3.3.3 to 3.5.3

in line with I13eabefc4e4316b0be204a808c69f09be8e7d59d
https://git.opendaylight.org/gerrit/#/c/67554/

JIRA: ODLPARENT-138
Change-Id: I72bdb59d75b08425d002d88d0624e42296863e90
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump dependency-check-maven from 3.0.2 to 3.2.1

Bumps [dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 3.0.2 to 3.2.1.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md)
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v3.0.2...v3.2.1)

Change-Id: Iad1636e1be72ab529aea7b65ddd3d1b57a0039c9
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

add com.sun.management to jre.properties

JIRA: INFRAUTILS-41
Change-Id: Ic80a16b21b1e4ac9460f5493e2e6b1ce22204a7b
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump maven-pmd-plugin from 3.8 to 3.9.0

Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.8 to 3.9.0.
- [Release notes](https://mail-archives.apache.org/mod_mbox/maven-announce/201801.mbox/%3Ce915d011-91cf-cfdd-c60c-9d8266f74722%40apache.org%3E)
- [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.8...maven-pmd-plugin-3.9.0)

Change-Id: If9a1dae0e6804cd98fad4c3d6e0666093719899b
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump exec-maven-plugin from 1.5.0 to 1.6.0

Bumps [exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/milestone/3?closed=1)
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/exec-maven-plugin-1.5.0...exec-maven-plugin-1.6.0)

Change-Id: I7cade702be72a618566173e98e7d7cbe83cc7142
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump build-helper-maven-plugin from 1.12 to 3.0.0

Bumps [build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) from 1.12 to 3.0.0.
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/build-helper-maven-plugin/compare/build-helper-maven-plugin-1.12...build-helper-maven-plugin-3.0.0)

Change-Id: Ie461a02da1762cb8d4ca0307a9f4c4a7cb523b60
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump org.eclipse.jdt.annotation 2.1.0 → 2.1.150

Change-Id: Ifa7bb2136273659d8f9daab2f6a4ef4f1052674e
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Immutables.org value from 2.6.0 to 2.6.1

https://github.com/immutables/immutables#261-2018-05-23
https://github.com/immutables/immutables/milestone/69?closed=1

Change-Id: Ibea81189578af1ecf37dce7f6445d2f7eccfe17c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump jacoco-maven-plugin from 0.8.0 to 0.8.1

https://github.com/jacoco/jacoco/releases/tag/v0.8.1

Change-Id: Ie232b96256facf7fd6429a52fbd252077703b473
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Guava 23.6 to 23.6.1

Commit log: https://github.com/google/guava/compare/v23.6...v23.6.1

This addresses CVE-2018-10237 (and only that).

Change-Id: I41e9fd17f8edad70f1501807966201e4f0b6aff6
JIRA: ODLPARENT-155
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump gson from 2.8.2 to 2.8.5

Bumps [gson](https://github.com/google/gson) from 2.8.2 to 2.8.5.
- [Changelog](https://github.com/google/gson/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.8.2...gson-parent-2.8.5)

Change-Id: Ia5205c86a58a2fbd08d2bb5f82abe6f07532fa5e
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump org.eclipse.xtend.lib from 2.13.0 to 2.14.0

Bumps [org.eclipse.xtend.lib](https://github.com/eclipse/xtext-lib) from 2.13.0 to 2.14.0.
- [Release notes](https://github.com/eclipse/xtext-lib/releases)
- [Commits](https://github.com/eclipse/xtext-lib/compare/v2.13.0...v2.14.0)

Change-Id: I90e0b093121f192d39758c40406d4d921ad91463
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump spotbugs from 3.1.2 to 3.1.3

Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 3.1.2 to 3.1.3.
- [Changelog](https://github.com/spotbugs/spotbugs/blob/3.1.3/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/3.1.2...3.1.3)

Change-Id: Idbb5c94c535a91b9c367559e7d412b4b85466a59
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump truth from 0.36 to 0.40

Bumps [truth](https://github.com/google/truth) from 0.36 to 0.40.
- [Release notes](https://github.com/google/truth/releases)
- [Commits](https://github.com/google/truth/commits)

Change-Id: I46b8efd37c9503ebf1f5d49019bec873f91cba3b
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump spotbugs-maven-plugin from 3.1.3 to 3.1.3.1

Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 3.1.3 to 3.1.3.1.
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-3.1.3...e974b5a56a10b110f77bbefbf427a10f5c58a83c)

Change-Id: I0ae8347f7bb04f55be77bef18590e52c597321d6
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Immutables.org from 2.5.6 to 2.6.0

https://github.com/immutables/immutables#260-2018-05-19

https://github.com/immutables/immutables/milestone/68?closed=1

Thanks to https://dependabot.com for notifying me about this.

Change-Id: I2a01d7a0c11834b747a5a77d23df9d95b7477b9c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump checkstyle from 8.7 to 8.10

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.7 to 8.10.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.7...checkstyle-8.10)

Thanks to https://dependabot.com for notifying me about this.

Change-Id: Ief8880af475832f79e3711f1616e1bc6c98e8a8d
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

remove redundancy in SingleFeatureTest

The aries.quiesce, aries.blueprint, equinox customizations
are already part of OpenDaylight's base Karaf customization.

see https://lists.opendaylight.org/pipermail/odlparent-dev/2018-April/001830.html

Change-Id: I4c89cddf07b5e144e9dc3cd21e4a7275f42815f8
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Provide better traces with invalid URLs

When a feature or bundle contains an invalid URL (or missing URL), the
resulting plugin error is rather inscrutable. This attempts to improve
the situation by indicating which feature is at fault.

Change-Id: If235349f5dcc6a73e5f77a97123feae43bc2eef2
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump netty to 4.1.24

http://netty.io/news/2018/04/04/4-1-23-Final.html
http://netty.io/news/2018/04/19/4-1-24-Final.html

Change-Id: I6eb7d1362e7574c12239faa63d31d53a37391c6c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Upgr. maven-site-plugin → 3.7, asciidoctor → 1.5.6

maven-site-plugin:
https://mail-archives.apache.org/mod_mbox/maven-announce/201712.mbox/%3C1970630.7WseVgZzlZ%40giga%3E

Notable fix here is java9 compatibility, allowing us to remove
a dependency override.

asciidoctor-maven-plugin:
https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-1.5.4
https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-1.5.5
https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-1.5.6

Notable fix is alignment with doxia, allowing us to get to a sane
configuration again.

Change-Id: I0b26797128b19ac4cb2a93ebc3d6588e61104e0a
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Disable more null-related FindBugs checks

These produce false-positives with Guava 23.6+. This effectively
neuters null-pointer analysis using FindBugs unfortunately (but is
necessary to avoid having lots of irrelevant @SuppressFBWarnings
statements throughout the project).

Change-Id: I10445789b1266b8636fae1ae1130d7e64e0f67b3
JIRA: ODLPARENT-146
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add jersey-client to odl-jersey-1

The Jersey feature needs to include the client.

Change-Id: Ifa9d3d5a7b6ffe46bb4c20c68740178b85cbecbc
Signed-off-by: Stephen Kitt <skitt@redhat.com>

SingleFeatureTest preserves target/SFT/karaf.log

see issue for background; reason why, and impact

Issue: ODLPARENT-148
Change-Id: I15eeac652057fabb0dbc161e554dbe81164ebe0a
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
(cherry picked from commit 4e5972854acffbe2faca51d8884f97475a433d3c)

Remove ancient thirdparty jersey 1.17 packaging

We apparently used to ship an inlined version of jersey.  This is
no longer needed, and is removed here.

Change-Id: Id926a4d84140d8084e73f5228b47c38e428aec81
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Bump EclipseLink Moxy JAXB impl 2.6.2 → 2.7.1

see https://www.eclipse.org/eclipselink/releases/2.7.php

Issue: NEUTRON-160
Change-Id: I38f0285643ca0a1aea99a5e7f9e2b158bb86168c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Switch to Karaf 4.2

This upgrades a number of related dependencies in the process.

Change-Id: I1aadc6f4a0ca95fd1bec256a2272ccc4e9ca6860
Signed-off-by: Stephen Kitt <skitt@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Clean up Apache Commons features

We were missing the dependency-tracking files, and commons-text
depends on commons-lang3 which we need to represent in the feature.

Change-Id: I0ef952688f9589f2385ef919bed2e3d1410d831d
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Update dependency-check

The jackson dependencies have been replaced by jackson-bom.

Change-Id: I1064e546c76acb357d3734c81c0a27b6312fe66a
Signed-off-by: Stephen Kitt <skitt@redhat.com>

remove ovsdb config from custom.properties

Change-Id: Ic3f4762c8f92ebcc958a80cec01fbda5749544af
Issue-ID: NETVIRT-434
Issue-ID: ODLPARENT-34
Signed-off-by: Sam Hague <shague@redhat.com>

ODLPARENT-137: restore the opendaylight prompt

In Karaf 4.1 and later, it turns out that the prompt defined in the
branding is overridden by the shell initialisation script,
etc/shell.init.script, which defines its own prompt. This patch adds
our own version of that script which disables the override.

Thanks to Guillaume Nodet for figuring out where the override was
coming from, and to Michael Vorburger for the initial investigation!
See https://issues.apache.org/jira/browse/KARAF-5570 for details.

Change-Id: I22410cb0425ab5b8a3f6e7c410fbb76587f9f973
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 732b0dc09d15b3b001fa636783dc4cdafc224b40)

ODLPARENT-146: disable NP_NONNULL_PARAM_VIOLATION

Guava 23.6 switched from @Nullable to @NullableDecl, which causes
false positives in FindBugs’ ``NP_NONNULL_PARAM_VIOLATION`` rule;
we’re disabling the rule for now.

Change-Id: I135c90930ff7e8a2203da46e3106ed69c570f1c1
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 82eee8769f07ec730cfbfa45dfa1ab5652bb8f07)

Add 3.1.0 release notes

Change-Id: Ia77f26ac993219bcf7b90dfbad6cd254ea07d89d
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 34b60e9b2bb82afd7c11e0609c85f61f562d11c5)

Add 3.0.3 release notes

Change-Id: Ia19badf04234d5a03ef2e7d18ffe4db835b7a0be
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 07de5fbcfc958ca416c1f2317ac4ed58050f6a94)

Use SpotBugs 3.1.2, and NP_NONNULL_PARAM_VIOLATION

This patch upgrades the SpotBugs plugin to 3.1.3 and the engine to
3.1.2. The changelog is
https://github.com/spotbugs/spotbugs/blob/3.1.2/CHANGELOG.md

SpotBugs 3.1.2 supports the nullable annotations in Checker Framework
(see
https://github.com/spotbugs/spotbugs/commit/dd436ff56abf0273a080ad228fcf5abd8ee3a097
for the patch), so we can re-enable NP_NONNULL_PARAM_VIOLATION when
using SpotBugs. This involves using a separate configuration, so this
patch splits everything out, including the report directory for
projects which run both FindBugs and SpotBugs.

Change-Id: I8cb110f12d79414d476b7a6c525412f3b7e2c188
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add features for Apache Commons

This adds features for the four Apache Commons libraries we declare in
dependency management: Codec, Lang 3, Net and Text.

Change-Id: I6df54e97e44b14ce79c2ab7d5acd6b792ce59d9b
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Switch <issueManagement> from Bugzilla to JIRA

Change-Id: I432548aa2a3c7a3c3850a6a419abb24751d1ebef
Signed-off-by: Lorand Jakab <lojakab@cisco.com>

Bump lmax disruptor to 3.4.1

https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.0
https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.1

Change-Id: Ie702b3b97d2dc099b8402283b69eb18e114136ef
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump javassist to 3.22.0

https://github.com/jboss-javassist/javassist/compare/rel_3_21_0_ga...rel_3_22_0_ga

Change-Id: Iae54ca698e04a55bfdfbcc6fd24ed46e9af1b647
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 47fe27592502cbd042c269bf21e8e03ed5df4ac2)

Bump netty to 4.1.22

http://netty.io/news/2018/02/05/4-0-56-Final-4-1-21-Final.html
http://netty.io/news/2018/02/21/4-1-22-Final.html

Change-Id: If7688af77baf5d9e1a3289d1cf5f42b0abf6f34e
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit aae07f7a0cad6f94e4f511bcc3f466e14f93f235)

Bump scala to 2.12.5

http://www.scala-lang.org/news/2.12.5

Change-Id: I6a9fddc5ca58822367c146ec2d2cc547e61d7e7b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit e44d7d01ea051fb3dd51bdccf783c0f3e32ea963)

Bump akka to 2.5.11

https://akka.io/blog/news/2018/02/28/akka-2.5.11-released

Change-Id: Ida5ba9a519ec7336f32521e259d587b8cca3e57d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 9e31a398d1c8a8b3d76bc5596e2599d8ed6bd0eb)

add org.apache.karaf.scr.management to whitelist

to fix spurious SingleFeatureTest (SFT) failures

see ODLPARENT-144; although unclear why this suddenly fails now

Change-Id: Ife9bdf0d94b028048cd6321e8fbdc5ec554a8bdb
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Update usage information for odlparent properties

This patch updates the usage information for all active projects in
ODL, and removes some unused properties:
* maven.clean.plugin.version
* compiler.version
* releaseplugin.version
* akka.version
* leveldb.version

This is technically a breaking change, so this is 4.0 material only.

Change-Id: Ia68136adef7c6ab3c40544546908653e81d8ba11
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump jacoco to 0.8.0

https://github.com/jacoco/jacoco/releases/tag/v0.8.0

Change-Id: Ibca747463e8c568bdc48147999f3d6f232ff6599
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Add odl-jackson-2.8

This a package containing a pre-configured jackson software package.

Change-Id: I459cfda5fb147b21a1e5339360fac06522307fbc
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump akka to 2.5.10

https://akka.io/blog/news/2018/02/23/akka-2.5.10-released

Change-Id: I10d598a96e4a08078e10551517cee7f3882fc49d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

suppress CRLF_INJECTION_LOGS in TestBundleDiag

https://find-sec-bugs.github.io/bugs.htm#CRLF_INJECTION_LOGS

Change-Id: I1969245de6d4e95e44787311fb61c0cc3adc7a15
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

add modernizer.skip to -Pq

I'm adding https://github.com/gaul/modernizer-maven-plugin/
to infrautils in Id85737d789efb7ee07c8c7a34bdac39d8a96e076,
and cannot figure out how to get Maven to merge an additional
property in a profile, so why don't we just have this in
odlparent already?  Some day modernizer-maven-plugin could
be in odlparent.

Change-Id: Id270c4a7f363eb4a0557810526e17043cac326e8
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump sevntu-checkstyle to 1.27

https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.25.0
https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.26.0
https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.27.0

Change-Id: Ifdc5c6c3d8f499893997af2258dbf0672a42b2b5
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump checkstyle dependency to 8.7

http://checkstyle.sourceforge.net/releasenotes.html#Release_8.5
http://checkstyle.sourceforge.net/releasenotes.html#Release_8.6
http://checkstyle.sourceforge.net/releasenotes.html#Release_8.7

Change-Id: I0008e14482d07309a6c9e41cb9456e0004cfc8c2
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-checkstyle-plugin to 3.0.0

https://mail-archives.apache.org/mod_mbox/maven-announce/201801.mbox/%3Cop.zchs68akkdkhrr%40desktop-2khsk44.mshome.net%3E

Also removes checkstyle.version property, as noted in its TODO, and
switches from <sourceDirectory/> to <sourceDirectories/>, as
documented on the plugin site on
https://maven.apache.org/plugins/maven-checkstyle-plugin/

Change-Id: I3bffa47a300f314aaefe5181ca92fd0a6c925755
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump BouncyCastle to 1.59

https://www.bouncycastle.org/releasenotes.html, most notably fixes
CVE-2017-13098.

Change-Id: Ifb3c972f5c41722850249168d36b6ab669c7e4d0
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump git-commit-id-plugin from 2.2.2 to 2.2.4

https://github.com/ktoso/maven-git-commit-id-plugin/releases/tag/v2.2.3
https://github.com/ktoso/maven-git-commit-id-plugin/releases/tag/v2.2.4

Change-Id: I3890a63b83434751e39f1a3bccd9c0727c317715
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Karaf 4.1.4 → 4.1.5

Release notes: http://karaf.apache.org/download.html#container-415

Change-Id: I4af39685f9f5c69a0f5fa5b22f1035dcef0936ba
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Exclude jsr250-api from enunciate-core-annotations

to fix this (correct) complaint from ClasspathHellDuplicatesCheckRule:

file:/.../javax/annotation/jsr250-api/1.0/jsr250-api-1.0.jar
overlaps with
file:/.../jre/lib/rt.jar
- total overlapping classes: 6 - different classloaders.

Change-Id: I6306d604d6b105f064e0e8f7f765a9af1ca7c11c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bundle-test-lib should be a bundle

This prevents the jar from being wrapped by users.

Change-Id: Ib2c2198dc2acca072f5c1dede8a85ca4d1b15963
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit afc1ccc1bc2e840855d1478c8e51299d72631e72)

ignore web.xml and BP *.xml in duplicate-finder

This avoids duplicate classpath errors when running the
duplicate-finder-maven-plugin on projects depending on ODL Karaf feature
artifacts (such as odl-netvirt-openstack), which will typically have
dependencies on several web related OSGi bundles that include
WEB-INF/web.xml, and allow any org/opendaylight/blueprint/*.xml,
not just autowire.xml.

Change-Id: Iacfb820d44febdcf20eafd99cf549e023ff47df9
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Remove <scope>test from mycila

This allows odlparent-based projects to use Guice with Mycila more
easily in non-test related Java environments, such as in a pure JSE
opendaylight.simple (POC).

As per the original commit message when Mycila was first added to
odlparent, there is still no intention of using it (or Guice) in our
standard deployment model of running ODL in OSGi.  Therefore, this
contribution does still not include an OSGi MANIFEST.MF for Mycila,
nor a Karaf wrap feature for it, as we still do not need that.

Change-Id: I1f5586bd1dcf8d12756e33f4b74c4326b924058d
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

AAA-147: Upgrade Jolokia to 1.5.0

Upgrades Jolokia to 1.5.0.  This version provides the ability to
delegate authentication for Jolokia to AAA, centralizing control
of AAA mechanisms.

Change-Id: Ic545ca2ad966e4ecee030bcaa6cfd3163c6dd606
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Detect slf4j API misuse via FindBugs extension

see http://kengotoda.github.io/findbugs-slf4j/

Change-Id: I60b127526ccc057d37ef900b7502f4ea84517d8a
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Add ThreeTen-Extra

This provides a number of useful date/time classes, on top of the new
features in Java 8. See http://www.threeten.org/threeten-extra/ for
details. (Inspired by I044c092a662f2b38ebc3f53a371c3c801ca0192c.)

Change-Id: Ib73744ec639d80e96b16f013ca8a75a99b1c2e3a
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Remove aggregator-parent

Unfortunately aggregator-parent can’t install or deploy itself, which
means it’s unusable outside odlparent. To avoid creating false hopes,
this patch removes aggregator-parent and adds two properties to
odlparent-lite to make it simpler to disable the corresponding
plugins.

Change-Id: I48705f7de0d8126818a4f16379e7775136b6e76c
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add an OWASP profile for vulnerability checking

This builds on the full dependency-check project, adding a -Powasp
option which checks all our published third-party dependencies against
the NVD database. This currently doesn’t fail the build.

Change-Id: I204f2c427c545a636cf2310b5902c8a4e4bcf873
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump findbugs-maven-plugin from 3.0.4 to 3.0.5

even though we're aiming for SpotBugs, it doesn't hurt to do a minor
version bump on the findbugs-maven-plugin, as we'll have to maintain it
for a while anyway until everything is switched to SpotBugs and we can
remove it.

Change-Id: I23a3aa939a30084157de5defcb5b9f09e762dea1
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump commons-lang3 3.6 → 3.7

Release notes:
http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt

Change-Id: Idcc2eccbc22420d578511f4017e2098ace9b9bd0
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump antlr to 4.7.1

https://github.com/antlr/antlr4/releases/tag/4.7.1

Change-Id: Ic6139e09043a70c22a72170d1ed4ddba3357ca25
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

metainf-services should be scope=provided

Feature generation picks up optional dependencies, leading to this
artifact being included in features, which is wrong, as it is
needed at build time only. Mark it at scope=provided to keep downstreams
from worrying about it.

Change-Id: I70fa32bf08a47c18efefa4d3a10e61558f8f62ac
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit cfd1cf6c23d21e27f95051dbf8b82c65342e1ea0)

Bug 7891: Place provided features to featuresBoot

Specifically, org.apache.sshd/sshd-core/0.14.0 is excluded,
thus "ssh" feature has to be always installed.

Without this, distribution4-check with odl-netconf-mdsal
in integration fails at installing boot features, because
org.opendaylight.netconf.netty-util depends on sshd-core bundle,
which is only activated by "ssh" feature
(as any ODL feature drops that dependency,
because of exclusions in feature parents).

Change-Id: Ic1d3b19981fccca9c320a5079aaf9e2eadf09397
Signed-off-by: Vratko Polak <vrpolak@cisco.com>
(cherry picked from commit d7cd41b97dc9081f7375af08ef5da07542f9b5c1)

Exclude leveldb-api from odl-akka-leveldb-0.7

to fix this (correct) complaint from ClasspathHellDuplicatesCheckRule:

file:/.../org/iq80/leveldb/leveldb-api/0.7/leveldb-api-0.7.jar overlaps
with
file:/.../leveldbjni/leveldbjni-all/1.8-odl/leveldbjni-all-1.8-odl.jar
- total overlapping classes: 13 - same classloader ! This is an ERROR!

Change-Id: I929fb28606a8f6456747229ac2ceee6a90a9f04e
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump H2 database to 1.4.196

http://www.h2database.com/html/changelog.html

Change-Id: Ifb33c7d06c3ec27851276b1c42837c7285a97396
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump spotbugs-maven-plugin from 3.1.0-RC6 to 3.1.1

https://github.com/spotbugs/spotbugs/blob/3.1.1/CHANGELOG.md

This requires a Maven version 3.5.0+, at the very least in
order to be able to "mvn deploy" without hitting a weird internal
Maven error related to consistency of the resolver pipeline.

Change-Id: I1325e628ce62bd0f8d426d7cc61246003fc06aed
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

ODLPARENT-138: Require maven-3.5.0 or later

Update maven enforcer to ensure odlparent-4.0.0 users use maven
3.5.0 or later. This is needed for update of spotbugs at the very
least, but will also allow us to use 3.5.0 features.

Change-Id: I13eabefc4e4316b0be204a808c69f09be8e7d59d
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump akka to 2.5.9 and typesafe config to 1.3.2

This is a major feature/preview release, the notes are at:
https://akka.io/blog/news/2017/09/28/akka-2.5.6-released
https://akka.io/blog/news/2017/11/17/akka-2.5.7-released
https://akka.io/blog/news/2017/12/08/akka-2.5.8-released
https://akka.io/blog/news/2018/01/11/akka-2.5.9-released-2.4.x-end-of-life

https://github.com/typesafehub/config/blob/master/NEWS.md

Also align aeron/agrona versions to match:
https://github.com/real-logic/Agrona/releases/tag/0.9.6
https://github.com/real-logic/Agrona/releases/tag/0.9.7
https://github.com/real-logic/Agrona/releases/tag/0.9.8
https://github.com/real-logic/Agrona/releases/tag/0.9.9
https://github.com/real-logic/Agrona/releases/tag/0.9.10
https://github.com/real-logic/Agrona/releases/tag/0.9.11
https://github.com/real-logic/Agrona/releases/tag/0.9.12

https://github.com/real-logic/aeron/releases/tag/1.3.0
https://github.com/real-logic/aeron/releases/tag/1.4.0
https://github.com/real-logic/aeron/releases/tag/1.5.0
https://github.com/real-logic/aeron/releases/tag/1.5.1
https://github.com/real-logic/aeron/releases/tag/1.5.2
https://github.com/real-logic/aeron/releases/tag/1.6.0
https://github.com/real-logic/aeron/releases/tag/1.7.0

Change-Id: I3bb94b6c33004366799f1c85f89fae61e3c6c6ec
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Guava to 23.6

https://github.com/google/guava/releases/tag/v23.4
https://github.com/google/guava/releases/tag/v23.5
https://github.com/google/guava/releases/tag/v23.6

Change-Id: I4b5e1619326e0d624be5743c5178da3447661f73
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump netty to 4.1.20

http://netty.io/news/2017/11/08/4-0-53-Final-4-1-17-Final.html
http://netty.io/news/2017/12/11/4-0-54-Final-4-1-18-Final.html
http://netty.io/news/2017/12/18/4-1-19-Final.html
http://netty.io/news/2018/01/22/4-0-55-Final-4-1-20-Final.html

Change-Id: I3b2328993299b2ee86ed643b22184a1ea09bbb35
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Drop wrap from karaf4-parent

Including wrap in the boot features was a work-around and is no longer
necessary (all features requiring it now include it explicitly).

Change-Id: I061e201d590540d46f30157c6126196ff1add5ac
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump versions to 4.0.0-SNAPSHOT

Prepare master for next incompatible release stream.

Change-Id: I7fc3219f6439c73f39e946123803f225be98dbb9
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump versions to 3.1.0-SNAPSHOT

In preparation for 3.1.x branch, bump versions on master.

Change-Id: I568e9b5536809d5b90018862fb6c737cc0ead77d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump jersey-1.x to 1.19.4 and package it

Rather than relying on downstreams doing their own packaging
of jersey, provide proper package of basic dependencies in a feature.

Change-Id: I576008ca9e9d6673f5f5d3ffc4081d9943b634e7
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Align jetty version with karaf

karaf is pulling in version 9.3.21, while we are advertizing
9.2.19 -- which leads to odl-karaf-feat-jetty not squashing
dependencies in features.

Change-Id: I914d9a3c2c83426d58e6d4f8f5def9d7d29f6114
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump karaf to 4.1.4

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12341702

of which most notable is jetty version alignment.

Change-Id: I23d74258d40635d78b20c4c3fe9e61f3f1c8ddd2
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

find-duplicate-classpath-entries in phase verify

instead of already during validate, because that's too early

https://lists.opendaylight.org/pipermail/odlparent-dev/2018-January/001597.html
https://lists.opendaylight.org/pipermail/odlparent-dev/2018-January/001589.html

Change-Id: I0e3ad52a3b8bc7175a2e98e320667a74001f54ae
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Use jackson-bom to declare jackson dependencies

Importing jackson-bom declares all jackson components versions
in a consistent set.

Change-Id: I839db437eb965925b6a4cd3dd572e7e81df7e10f
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

add org.osgi.compendium to features-test

fixes SFT bug ODLPARENT-136
java.lang.ClassNotFoundException:
org.osgi.service.resolver.ResolutionException

Change-Id: Ifaa39b35d1975ccd2aec15f6ed56191637f43d73
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Start 3.0.3-SNAPSHOT

Change-Id: Ie676ecbb5c74d7db8654cecb56e25c51d9156f80
Signed-off-by: Stephen Kitt <skitt@redhat.com>

odlparent 3.0.2 release notes

Change-Id: Ic8bc02873149704d7673f2d8d594ffcd32416562
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Use default upstream logging configuration

Now that Karaf uses Log4J2, our custom configuration no longer works;
this patch uses the default upstream setup for the time being.

Change-Id: I1786d9f50d60a030dc3b265fdb70dc5130806c1a
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump javadoc plugin to 3.0.0

Proper release is now available, bump to it:
https://mail-archives.apache.org/mod_mbox/maven-announce/201712.mbox/%3Cop.zaufhhzukdkhrr%40desktop-2khsk44.mshome.net%3E

Change-Id: Icbb6bc02496e937320424a1ec8a4edac0ca09478
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Remove JavaDoc <links> from odlparent

because all of these, and more, are already in odlparent-lite now

see also https://jira.opendaylight.org/browse/ODLPARENT-121

This change does NOT fix that performance problem; only
change I4ca0c9e81985c2827e16654e9d9413c7d93f6068 does that,
whereas this one is just a clean up I stumbled upon.

Change-Id: Ifd66f318dfc3b900ad6fe06fa26e80932783cce8
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Disable hiddenField check for abstract methods

There is a valid use case, where we are forwarding a private field
to an abstract method. This clearly does not hide the field, as it
is invisible to subclasses -- hence disable HiddenField on abstract
methods.

Change-Id: I00adfce58eea65660cae06649168a09a560713a4
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

ODLPARENT-134: ensure correct startup with BC

In Karaf 4.1, Bouncy Castle no longer starts correctly; or rather,
loading kpix results in prov being refreshed, which restarts sshd and
most of Karaf.

This patch cleans up the startup.properties construction, and enforces
the correct order for Bouncy Castle. It also adds metatype and
blueprint.core.compatibility which must be loaded at boot to avoid
unwanted refreshes.

Change-Id: Ic8e8e0e932b9d9eaea292003118ef1936b67b822
Signed-off-by: Stephen Kitt <skitt@redhat.com>