Bump maven-project-info-reports-plugin to 3.2.2

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12351291
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12351375

Change-Id: Ife2227ed0b050c7998695a36ed8370c63b9f7f80
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-compiler-plugin to 3.10.1

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12351339

Change-Id: I3fa520d6a194d60aa39ea1c8691f81be592d93ea
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-shade-plugin to 3.3.0

https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12348391&styleName=Text&projectId=12317921

Change-Id: I2cdea82cbd746a778ba35e678d868d5f955009c3
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump surefire-maven-plugin to 3.0.0-M6

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12344613

Change-Id: I531ee7556e5b5d17ddf899c7fc98de825e356ff9
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump netty to 4.1.75

https://netty.io/news/2022/03/10/4-1-75-Final.html

Change-Id: Icda6586eb6d387b19dbd7fc529d7f0779f874b0c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump dropwizard metrics to 4.2.9

https://github.com/dropwizard/metrics/releases/tag/v4.2.9

Change-Id: I58a2f3cb97bdd96ff0582a9681ab70261f07b142
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump modernizer-maven-plugin to 2.4.0

https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.4.0

Change-Id: Ica1cd3c4452b29765ead8a1fa76073c4aa616e39
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump metainf-services to 1.9

https://github.com/kohsuke/metainf-services/pull/18

Change-Id: I861dee6002030b41db27b5eb59e2043ac2cce1f2
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump checkstyle to 10.1

https://checkstyle.org/releasenotes.html#Release_9.3
https://checkstyle.org/releasenotes.html#Release_10.0
https://checkstyle.org/releasenotes.html#Release_10.1

Change-Id: If9b1faf6020e60c8355395c714187b3714d1efd9
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump spotbugs to 4.6.0

https://github.com/spotbugs/spotbugs/releases/tag/4.6.0
https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.6.0.0

Change-Id: Ib33e1992e8916f5d1bd70c36cccdd8611871335f
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump mockito to 4.4.0

https://github.com/mockito/mockito/releases/tag/v4.4.0

Change-Id: Ia4b13b898668cbb703cbe19492428b13d1b4665a
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Improve Junit4->5 migration experience

@Rule and @Ignore support can more easily be achieved if we bring in
junit-jupiter-migrationsupport into the picture by default.

Change-Id: I38312a498e3826be18070e596907af5990e7d4b8
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump versions to 10.0.1-SNAPSHOT

This starts the next development iteration.

Change-Id: I6f755b5f7f25e3666ffbb65c19d650c71c3d765c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Update NEWS for 10.0.0 release

Sum up the changes delivered in this release.

Change-Id: Ib621b5c8b5bc701efffb8f45c192edb7b363b587
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Reduce custom.properties

We have quite a few legacy properties defined from Hydrogen/AD-SAL days.
Clean them up.

JIRA: ODLPARENT-34
Change-Id: I4370a89b2f94894115844148ac66caa395959b3a
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Disable NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE

This check is getting more aggressive as more and more things are
annotated. At the end of the day, even fully @NonNull-annotated return
values trigger this for unknown reasons.

Change-Id: Iac45b8848dbc07cb64b04549fab8f01b14119695
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump xmlunit to 2.9.0

https://github.com/xmlunit/xmlunit/releases/tag/v2.9.0

Change-Id: Ifd08136c545068ca93ad6af9a42d3df4f8e14a5b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump bnd-maven-plugin to 6.2.0

https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0

Change-Id: I63fc2a5a09fbd90da15231c14fe18f5799eeee90
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump asciidoctor-{jdiagram,maven-plugin} to 2.2.2

https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.2

Change-Id: I4f7642ce3983ccf0fad53c73a27290e35aef0182
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump dropwizard metrics to 4.2.8

https://github.com/dropwizard/metrics/releases/tag/v4.2.8

Change-Id: I3a541475b3500efacf221ca04fa9374ac6780546
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump mockito to 4.3.1

https://github.com/mockito/mockito/releases/tag/v4.3.0
https://github.com/mockito/mockito/releases/tag/v4.3.1

Change-Id: I55f969c9ed8ecd89b8cc5eca1be93947120fdad9
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump spotbugs-annotations to 4.5.3

We missed an upgrade in the previous bump, fix that.

Change-Id: I4e120bbe9b6b550967f4117fcdd4d2594ca54c37
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Guava to 31.1

https://github.com/google/guava/releases/tag/v31.1

Also update errorprone-annotations version to match.

Change-Id: I97a3887c4b4fbe2b9bc1516fc32178d75d392aeb
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Generate CycloneDX aggregate SBOMs by default

This adds the plugin definition and execution to generate an SBOM for
every artifact built.

JIRA: ODLPARENT-280
Change-Id: I22eda9b50a9a5587d111d51f111bd6f39ad382ea
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Package more Netty native transports

Netty-4.1.74 has packaging finally fixed in that Java code is packaged
separately from native libraries and those are correctly attaching as
fragment bundles.

Add support for :
- epoll on linux/aarch64
- unix domain on linux/{aarch64,x86_64}

JIRA: ODLPARENT-241
Change-Id: Ie3bab85fcbe8cdf6cec0336fec56927cfdc45eda
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Exclude MS_EXPOSE_REP

Another case where SpotBugs is overly-aggressive is MS_EXPOSE_REP,
for example in shared objects implementing Collection.

Change-Id: I42b6ffd66bdbc72eedeab293db6f7b02690bc2cb
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump spotbugs to 4.5.3

Adopt newer versions to improve JDK compatiblity, the migration guide is
available at https://spotbugs.readthedocs.io/en/latest/migration.html#for-spotbugs-users

EI_EXPOSE_REP and EI_EXPOSE_REP2 are disabled as they produce a ton of
false positives.

Change-Id: Iac2bb34ae6fdaec9183e04b0bbd3224f0fbaf307
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Enable SFT on JDK17

Karaf has now support for Java 17, enable SFT on it.

Change-Id: Ifeaeb68824643696501242be328496ad6bd7a596
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-compiler-plugin to 3.10.0

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12345214
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12351256

Change-Id: Idafb81482f801b08b194bb36ca93780e816d60eb
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Refactor untested-single-feature-parent

We do not use this parent directly and actually want to reverse the
inheritence structure: we want to keep the testing harness common
and use single-feature-parent to generate and test features.

JIRA: ODLPARENT-235
Change-Id: Ib18710583d08c2762921637a800fdfb7bbd70496
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump GSON to 2.9.0

https://github.com/google/gson/releases/tag/gson-parent-2.9.0

Change-Id: I1666b45afad90607d8fc792636f74e7ee5fe5edf
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Netty to 4.1.74

https://netty.io/news/2022/02/08/4-1-74-Final.html

Change-Id: I603c3ece81813ff1a212ac35df9eaf61a362db38
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Fix javadoc build

Since we have annotations as provided, the build fails to generate
javadocs. Fix that.

Change-Id: I1ba1b2454f0118cb7c4e67756705bc33a31c6b4d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Update JUnit5/Mockito integration

Mockito integration with JUnit5 requires an extension, make sure it is
available by default.

JIRA: ODLPARENT-271
Change-Id: Ief876fdad78624ff0dd920003065a6ae68c40e15
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Fix jsonassert indent

We have three spaces here, fix that.

Change-Id: Ib4ffd151d49a79c5ffbcb7c655ed9063376b6261
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Revert "Bump compiler-maven-plugin to 3.9.0"

This reverts commit 67038dea10c031a8f8f69b2f6e5c1de65fddf034.

JIRA: ODLPARENT-278
Change-Id: Ifed35943c5181058050c9b12953c31741a27f5e1
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Update copy-files-plugin dependencies

Modernize dependencies and prerequisites to 3.8.3, which is the version
we enforce from odlparent-lite.

Change-Id: Ic56cdfca7bc0329af5110d75e38e706145178c17
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Cleanup filter-manifest plugin dependencies

Maven dependencies should be scope=provided. Update their declaration
and also modernize them to 3.8.3, which is the version we require in
odlparent-lite.

Change-Id: I27dc9d40914d54344163bd5879d3fb158c5b4292
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Cleanup karaf-plugin dependencies

Maven dependencies should be scoped as provided, as otherwise maven
complains rather loudly. Also modernize their versions to match our
requirement from odlparent-lite.

Change-Id: I454198c958263cf0912e203249ddef34bd75acaf
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump woodstox to 6.2.8

https://github.com/FasterXML/woodstox/milestone/26?closed=1

Change-Id: I64fa97073b5f063f39739a4d66397cff3e4c8e1c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Change git-commit-id maven plugin coordinates

https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v5.0.0

Change-Id: I0d097df5c33e720119638e70663c660b97a9db89
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump git-commit-id-plugin to 4.9.10

https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.9.9
https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.9.10

Change-Id: Ib91a0dd9625133b1b4fc4b9311b7511ac4f19a37
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump sevntu to 1.41.0

https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.41.0

Change-Id: I3b2a5171594e10302d8d796559de96b367fadb68
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump karaf to 4.3.6

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12351123

Change-Id: I3cdc93c8c96d586cb1e148ff2ac12dbbcb3e30a0
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump netty to 4.1.73

https://netty.io/news/2022/01/12/4-1-73-Final.html

Change-Id: I1afd3a1ace43f377794fad6c9506badbc0455ad8
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-site-plugin to 3.10.0

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317923&version=12348370

Change-Id: I79924c48176639a36bedd1ea8306bc7f95771db0
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-jar-plugin to 3.2.2

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12348050
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12351215

Change-Id: I7bdc667744ef73759b9b79a04557d53fbf773335
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump compiler-maven-plugin to 3.9.0

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12345214

Change-Id: Ibb4387b4975a95566494752661de5bc1f1c606aa
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump build-helper-maven-plugin to 3.3.0

https://github.com/mojohaus/build-helper-maven-plugin/releases/tag/build-helper-maven-plugin-3.3.0

Change-Id: Icc149881a0285a47644afa07686a915e6d48d730
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Remove H2 declaration

H2 database is used only by a single downstream, let aaa manage the
version itself.

Change-Id: I52b50de5b40776127cf982f0c553babf48686335
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-bundle-plugin to 5.1.4

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12351195

Change-Id: Ie0838a0aca1dc786a5f919e6526f79e956ffda6b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 4ebad7e58cc77cad8d9607c13ad7e3cfbdc657bd)

Override pax-logging versions

karaf's bom is leaking these versions, let's make sure we override them
in maven reactor.

Change-Id: I73e7bad978c3d342857190a1ad49aee343c6d099
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 2dd84c39064a951cfa5b89947afdcc8f0fb02dfe)

Bump guava to 31.0.1

https://github.com/google/guava/releases/tag/v31.0
https://github.com/google/guava/releases/tag/v31.0.1

Change-Id: Iaba80e84da100965652c0190bd771f8adaa8f714
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump javassist to 3.28.0-GA

https://github.com/jboss-javassist/javassist/issues/305
https://github.com/jboss-javassist/javassist/issues/328
https://github.com/jboss-javassist/javassist/issues/339
https://github.com/jboss-javassist/javassist/issues/350
https://github.com/jboss-javassist/javassist/pull/357
https://github.com/jboss-javassist/javassist/pull/363

Change-Id: I29963013cf637731fe1064425b9d2e80d63bd9d3
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump dropwizard-metrics to 4.2.7

https://github.com/dropwizard/metrics/releases/tag/v4.2.7

Change-Id: I1037be5f596e06a9f3254da01126f2e3e363a67d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump checkstyle to 9.2.1

https://checkstyle.org/releasenotes.html#Release_9.0
https://checkstyle.org/releasenotes.html#Release_9.0.1
https://checkstyle.org/releasenotes.html#Release_9.1
https://checkstyle.org/releasenotes.html#Release_9.2
https://checkstyle.org/releasenotes.html#Release_9.2.1

Change-Id: I058ff9ceab4c8cdacab218362508e1765bb66abd
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump pax-logging to 2.0.14

https://github.com/ops4j/org.ops4j.pax.logging/milestone/78?closed=1

Change-Id: I150438462292c72ac8aa86ad61f6601abcaeab79
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump log2j to 2.17.1

https://logging.apache.org/log4j/2.x/changes-report.html#a2.17.1

Change-Id: Ibbc0a8de198a864d9e9b3b779d8b5fd07ef7a33c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump logback to 1.2.10

https://logback.qos.ch/news.html

Change-Id: I6173d38ab042982d7c995b85e78741060bd17756
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump junit to 5.8.2

https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.8.2

Change-Id: I380a4c99d48b31bdff8de86ef29d069169a23417
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump mockito to 4.2.0

https://github.com/mockito/mockito/releases/tag/v4.2.0

Change-Id: I1ba2465a1dda886a62ccacc47fa92404400b5dca
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump karaf to 4.3.5

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350856

Change-Id: Ia6156f48f2d8e53cdb33899bd02e9e25927bc8e4
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump pax-logging to 2.0.13

Update Karaf's packaged pax-logging from 2.0.12 to 2.0.13, closing
CVE-2021-45105 and CVE-2021-42550.

Change-Id: I72ff7a27d4cdad75214f161f0e5b58ba8328e6b1
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit b1717f15d5c28a0a6b70f5aba7837c8ba1576586)

Bump xmlunit to 2.8.4

https://github.com/xmlunit/xmlunit/releases/tag/v2.8.4

Change-Id: I7bf90727ea772a56d7c839b1630787eda94d9839
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 7bcf09ad25becfb66970b861607e0534cc0e8adb)

Bump maven-bundle-plugin to 5.1.3

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117

Change-Id: Ia9cac070cf25cf293caad74088dbc7b7738009fe
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Realign maven-bundle-plugin version

We are using 5.1.2 in other places, let's make sure branding does
the same.

Change-Id: Ifdaa1b4940f4c46efeccd393ed7fddbca56e8803
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump bnd to 6.1.0

Changes: https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0

The plugin in karaf-branding should be addressed too, that is left as
an exercise for another patch.

Change-Id: Iaa3b078b73bc1e3e28bfa03c01f912e844e4aaaa
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump dropwizard-metrics to 4.2.6

https://github.com/dropwizard/metrics/releases/tag/v4.2.0
https://github.com/dropwizard/metrics/releases/tag/v4.2.1
https://github.com/dropwizard/metrics/releases/tag/v4.2.2
https://github.com/dropwizard/metrics/releases/tag/v4.2.3
https://github.com/dropwizard/metrics/releases/tag/v4.2.4
https://github.com/dropwizard/metrics/releases/tag/v4.2.5
https://github.com/dropwizard/metrics/releases/tag/v4.2.6

Most of these have already been mirrored in 4.1.x series.

Change-Id: I84e523f3fccbf3295583ed947a73cec5bcd8bf53
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Jackson to 2.12.6

https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6

Change-Id: Ic78749ca970344d6903fe12bba91c25a5c77bcef
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump log4j2 to 2.17.0

https://issues.apache.org/jira/browse/LOG4J2-3230

Change-Id: I7625b1513ea8bf9c02a5dcb7ef8bca0aa7d98a5d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump karaf to 4.3.4

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350547

Change-Id: Ia8c180383d47f80bb241c4f7aa464b00635ecb20
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump logback to 1.2.9

https://jira.qos.ch/browse/LOGBACK-1591

Change-Id: I93e2d6ef56dd7e9736f9d8bf38d8c8cf86d3268b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Fix javadoc generation

Our merge job is failing on javadocs, fix that up.

Change-Id: I5c696d2244db6000bbae7be9e93291299a40d911
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump netty to 4.1.72

https://netty.io/news/2021/12/09/4-1-71-Final.html
https://netty.io/news/2021/12/13/4-1-72-Final.html

Change-Id: I3326cf639cccdb92033e116200a3a972fdae5d76
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump logback to 1.2.8

https://jira.qos.ch/browse/LOGBACK-1465
https://jira.qos.ch/browse/LOGBACK-1574
https://jira.qos.ch/browse/LOGBACK-1591

Change-Id: I49132dde99c91088859f5401dbbe40eec3633cda
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Enforce log4j versions

CVE-2021-44228 is a real nasty which needs to be protected against
as much as possible. This adds an enforcer rule to ensure downstreams
do not accidentally have the wrong version.

While we are at it also prevent CVE-2021-45046 by requiring
log4j-2.16.0+.

Change-Id: I179cd44b93e5ca28ca39242bed23f171c67871bc
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Log4J2 to 2.16.0

Changes:
https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4
(removing message lookups and disabling JNDI by default).

Change-Id: I94aafb9ed7465a6e035e0988d5076b507c2c19f3
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump Log4J2 to 2.15.0

Changes:
http://mail-archives.apache.org/mod_mbox/www-announce/202112.mbox/%3cD88D40C5-8884-470E-8FA3-3B6D6899A7B0@apache.org%3e

This fixes CVE-2021-44228.

Change-Id: I2c1470672e2e6223e3eca7eab2af7f0721209286
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Fix plugin dependency scope

Maven is complaining about wrong scope here, fix that.

Change-Id: I5d011a5c9863d392737ff21d3c7d52f08e2407d0
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump the Modernizer plugin to 2.3.0

Changes:
https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.3.0

Change-Id: I140f9f1d16fb542bfe029790dd03ae2c400768e3
Signed-off-by: Stephen Kitt <skitt@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump BouncyCastle to 1.70

https://www.bouncycastle.org/releasenotes.html

Change-Id: Ie448c556f7a9c6b01046be1a83e0f417c480da81
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Remove declarations of osgi.{annotation,cmpn,core}

These uber-bundles are deprecated and are going to go away with OSGi
R8. Remove them to force downstreams to prepare for OSGi R8 adoption.

JIRA: ODLPARENT-277
Change-Id: Ied0d3642a68aaf42ade0bd313ca96a31e8835bde
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump woodstox to 6.2.7

https://github.com/FasterXML/woodstox/milestone/24?closed=1

Change-Id: If826f21f0e263fb0c1845974b3f85c76469bd172
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit dc4acc809701abe40f35054673a0656efa4570f7)

Bump maven-plugin-plugin to 3.6.2

Changes: https://maven.apache.org/docs/3.6.2/release-notes.html

Change-Id: Ib80a895a474f8f71920a81a844f4392c6153d3e3
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Remove xtend declaration

xtend is slowly getting obsolete and we exactly one downstream artifact
which is still using it. Remove the declaration and let
mdsal-binding-java-api-generator manage its relationship with Xtend.

JIRA: ODLPARENT-273
Change-Id: I2dcb06e3b68580ac58a11e207153394af5d5df73
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Remove pmd plugin declaration and execution

There is pretty much noone watching the copy&paste stats and we have
them in SonarCloud, let's not bother executing it.

JIRA: ODLPARENT-269
Change-Id: I3dc5b5e7523ec96234082379845fce3729f2f3f7
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump mockito to 4.1.0

https://github.com/mockito/mockito/releases/tag/v4.1.0

Change-Id: I8c72b44458c420ea3b2871857b1c09052d0d7c21
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Require maven-3.8.3

Bump minimum required version to 3.8.3.

JIRA: ODLPARENT-260
Change-Id: I4d27945faf9bfe55586398c28021387757722c11
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump xtend to 2.26.0.M2

Versions before 2.26.0.M2 just do not work with JDK17, making it
difficult for us to prepare the migration path. Upgrade to a prerelease,
so that we unblock testing.

JIRA: ODLPARENT-273
Change-Id: Ief03514955561aee79642973c3baeb09d926fef5
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Remove powermock declarations

Powermock does not bring anything to the table when compared to
Mockito-4 and is only used by a few projects. Remove its declaration.

JIRA: ODLPARENT-275
Change-Id: I370f469f4834fa9312caaf566d072587f4960186
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Remove blueprint-maven-plugin declaration

blueprint-maven-plugin is a dead upstream, which has failed to make a
release to fix its XBean dependencies to work with recent Java version.
Furthermore the entire Blueprint spec runs contrary to what we want to
do in OSGi. Remove the plugin and its annotations.

JIRA: ODLPARENT-267
Change-Id: I7e86bf3bc05428b48912e9ddbad8ac6de81b77cc
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump mockito to 4.0.0

https://github.com/mockito/mockito/releases/tag/v4.0.0

JIRA: ODLPARENT-272
Change-Id: I9cf8a7f6ea4955b13d2ec7d2ed1b905da9270ba0
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Use JUnit5 for test execution

We should have everything for supporting both Junit 3-5, provide
the appropriate declarations, surefire/failsafe will take it from there.

JIRA: ODLPARENT-271
Change-Id: Ida21d55ff04d0312b7596212471f5558b911bbaf
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump versions to 10.0.0-SNAPSHOT

This starts the next major development iteration.

Change-Id: If228996457e7f32087f019b0d0553272d382a667
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Fix duplicate osg.service.event check

Previous update introduced a maven warning, fix that.

Change-Id: Ia49014ed0a2fc96524fb580033bd7d9f39a1b0e8
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump netty to 4.1.70

https://netty.io/news/2021/10/11/4-1-70-Final.html

Change-Id: I9c682ee2b2cad83f7ec99250e0136e15fa69b203
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump GSON to 2.8.9

https://github.com/google/gson/blob/master/CHANGELOG.md#version-289

Change-Id: I418b8211d9420e6fe30755568486b0de692ae102
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump awaitility to 4.1.1

https://raw.githubusercontent.com/awaitility/awaitility/master/changelog.txt

Change-Id: Ie6b6c76502c40627a8c8ceb90a4cc6db4ac98cb3
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump xmlunit to 2.8.3

https://github.com/xmlunit/xmlunit/releases/tag/v2.8.3

Change-Id: I0acfd1652cf3001d546ac4e4a74fe118d3361d36
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump minor OSGi spec versions

We have a couple versions at their base versions, while some of them
have seen a patch version bump. Update them.

JIRA: ODLPARENT-276
Change-Id: Ib633d4ab87756cc0ecbc4aaa9c5544e3abe6c73c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>