bump sevntu CS mvn from 1.30.0 to 1.32.0

see http://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.32.0
incl. upgrade to eclipse-cs 8.12.

Change-Id: Ie1e51fc41189b4130b980cd7bda70b932d2e5523
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump mockito to 2.20.1

Important changes since previous notable release:
    new lenient() API - see blog post
    Java 11 compatibility
    fixed wrong artifact ids (regression in 2.20.0)

Change-Id: I31e0445714483840508024a5d2282586477ac7b9
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump dependency-check-maven from 3.3.0 to 3.3.1

Bumps [dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md)
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v3.3.0...v3.3.1)

Change-Id: I5541da5079ffa34eae211197de770d42d6bf3725
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add xmlunit2

https://github.com/xmlunit/user-guide/wiki/Migrating-from-XMLUnit-1.x-to-2.x

This removes xmlunit1 and adds xmlunit-legacy to support downstreams.

Change-Id: I2698a6d9adcbc26321f0ae2994b9844a923edebc
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

bump karaf-plugin maven deps from 3.5.3 to 3.5.4

for maven-core, maven-model, maven-plugin-api

following up on I72bdb59d75b08425d002d88d0624e42296863e90

JIRA: ODLPARENT-138
Change-Id: I8be3e95b74121d776326bd63b6cafdd78c565e3d
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump checkstyle from 8.11 to 8.12

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.11 to 8.12.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.11...checkstyle-8.12)

Change-Id: I393037c5c553e15ae3121136779668cb2054ffcb
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump sevntu CS mvn from 1.29.0 to 1.30.0

see http://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.30.0

Change-Id: I8e0eff697d5b7f81949b23182a050ef628a0d308
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Javassist to 3.23.1GA

https://github.com/jboss-javassist/javassist/issues/165
https://github.com/jboss-javassist/javassist/issues/171

Change-Id: I6ebb2e837a8acffdc3a5cc9830d0a1b9d2c0d375
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

fix commons-lang JavaDoc

and add comments to remember this for future bumps

inspired by I6e0e7503ccd44fa174caf75a6aabf4cb97ef94f4

Change-Id: I1bce0a440f945efc0c5ca5384ae792dc9cb84aed
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

align guava-testlib with guava

Change-Id: I7274d532a4422c1efdd2cb08da61db3f98ddafb8
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Realign javadoc links

We missed javadoc links during update of truth, guava and akka.
Fix that.

Change-Id: I6e0e7503ccd44fa174caf75a6aabf4cb97ef94f4
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump netty to 4.1.28

http://netty.io/news/2018/05/14/4-1-25-Final.html
http://netty.io/news/2018/07/10/4-1-26-Final.html
http://netty.io/news/2018/07/11/4-1-27-Final.html
http://netty.io/news/2018/07/27/4-1-28-Final.html

Change-Id: Ibe92ba9f0a508906c40e5af971d3402554d2ed48
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Switch to odl-guava throughout

This fixes odl-akka-leveldb-0.10 which is currently broken, and
reduces the risk of such breakages in the future.

Change-Id: I8806f5e8ba0b031a82ec662a1a1e222ed04e3c4e
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump mockito to 2.19.1

https://github.com/mockito/mockito/wiki/What%27s-new-in-Mockito-2

Possible downstream issues blog:
https://asolntsev.github.io/en/2016/10/11/mockito-2.1/

Change-Id: I0a4a2ea45b7e5ba795f1598c96155f0785adcca8
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump to owasp-dependency-check 3.3.0

Release notes:
https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md#version-330-2018-07-22

Change-Id: Ib3a799d43f2fc94128efd4184deb4e97a6a2908f
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add LevelDB 0.10 feature

Change-Id: Ic0fa4f8a2f08fb23c50007c97a8b21d7e34c9ac6
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump checkstyle from 8.10 to 8.11

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.10 to 8.11.
- [Release notes](http://checkstyle.sourceforge.net/releasenotes.html#Release_8.11)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.10...checkstyle-8.11)

Change-Id: Id7a6a33be89f4fffb61b19a43442af34f985fef2
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump jolokia-osgi from 1.5.0 to 1.6.0

https://jolokia.org/changes-report.html#a1.6.0

Change-Id: Ibbffe5145902fa7a9e9fd54ff820f5ace8a0af32
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Update property information for version 4

This drops a number of obsolete properties.

Change-Id: Ic0657f603cb27ccf7ca0c1a8728a74ece677cf0b
Signed-off-by: Stephen Kitt <skitt@redhat.com>

bump spotbugs (+ maven-plugin) from 3.1.5 to 3.1.6

Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 3.1.5 to 3.1.6.
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/release-3.1/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/3.1.5...3.1.6)

Change-Id: Ib986923148ad46d063252436e58d2a2476c9b060
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump to BouncyCastle 1.60

Release notes: http://bouncycastle.org/releasenotes.html

This includes fixes for CVE-2018-1000180 and CVE-2018-1000613.

Change-Id: I798d49208f443cfed954244998eedb7e40e70753
Signed-off-by: Stephen Kitt <skitt@redhat.com>

bump PAX URL from 2.5.3 to 2.5.4

looking at https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.5.3...url-2.5.4
the only change seems to be https://github.com/ops4j/org.ops4j.pax.url/commit/fe6131e87f255c45b7886d392bd3e7e70245ee0c
for https://ops4j1.jira.com/browse/PAXURL-346, which looks useful to pick up.

Change-Id: Idf5c165b9ffecb295c641ba7eef1754f6e0f4743
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Guava 23.6 → 25.1 and add default feature

This replaces the odl-guava-23 feature with odl-guava-25 and adds a
default odl-guava feature which downstreams should depend on.

Release notes:
* https://github.com/google/guava/releases/tag/v24.0
* https://github.com/google/guava/releases/tag/v24.1
* https://github.com/google/guava/releases/tag/v25.0
* https://github.com/google/guava/releases/tag/v25.1

Change-Id: Ied2e93b4d6546df5ecd521672a6945cbb59e4b8a
Signed-off-by: Stephen Kitt <skitt@redhat.com>

bump truth from 0.41 to 0.42

Bumps [truth](https://github.com/google/truth) from 0.41 to 0.42.
- [Release notes](https://github.com/google/truth/releases)
- [Commits](https://github.com/google/truth/commits)

Change-Id: I4d722f4e5f0255b237a767b67cd3aac390d7b077
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump PAX exam.version from 4.11.0 to 4.12.0

Updates the following from 4.11.0 to 4.12.0 :
* `pax-exam-container-karaf`
* `pax-exam-junit4`
* `pax-exam`
* `pax-exam-container-forked`
* `pax-exam-container-native`
* `pax-exam-extender-service`
* `pax-exam-inject`
* `pax-exam-invoker-junit`
* `pax-exam-features`
* `pax-exam-link-mvn`
* `pax-exam-link-assembly`

There don't seem to be real release notes,
but this JIRA query identifies issues that went into 4.12.0 :
https://ops4j1.jira.com/browse/PAXEXAM-917?jql=project%20%3D%20PAXEXAM%20AND%20fixVersion%20%3D%204.12.0

Change-Id: I54e4a46556b795e6ce6ac648223224f03c3f39dd
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump value from 2.6.1 to 2.6.3

There are unfortunately no release notes yet on
https://github.com/immutables/immutables#changelog, but it seems to be just:

* https://github.com/immutables/immutables/issues/784
* https://github.com/immutables/immutables/issues/788

proposed release notes in https://github.com/immutables/immutables/pull/805

Change-Id: I2295be6c49de054e5352398e1ac7396667975636
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Remove unneeded guava version declaration

This removes an unneeded declaration and removes site configuration
which we are not using anyway.

Change-Id: Iee371b5bf15c194ed87ed1e1d200a6f6f7f800d5
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Do not declare junit-dep dependency

junit-dep is now obsolete, and no longer depends on anything.
We used to use it to pull in Mockito and Hamcrest but these are made
available through other means (junit itself pulls in Hamcrest, and we
pull in Mockito explicitly).

Change-Id: I70ee5e0080ceb2f0bf2d37db3d4824c727b8385d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
Reviewed-by: Stephen Kitt <skitt@redhat.com>

Add junit/mockito-core as test dependencies

These are used all over the place and everyone is using them. Also
document some of the other dependencies.

Change-Id: I36cb11bd9ea5a496dfac376fd111aa4bd607c698
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump powermock to 1.7.4

https://github.com/powermock/powermock/releases/tag/powermock-1.7.0
https://github.com/powermock/powermock/releases/tag/powermock-1.7.1
https://github.com/powermock/powermock/releases/tag/powermock-1.7.2
https://github.com/powermock/powermock/releases/tag/powermock-1.7.3
https://github.com/powermock/powermock/releases/tag/powermock-1.7.4

This is required to upgrade to mockito 2.x.x.

Change-Id: Id2390bc39d7bc5ac5736af4d2ba33f5eca2aafb6
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump powermock to 1.6.6

https://github.com/powermock/powermock/releases/tag/powermock-1.6.5
https://github.com/powermock/powermock/releases/tag/powermock-1.6.6

Change-Id: If2b8e26ef003bf92858658f6f45b0befd7f17441
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump agrona to 0.9.21

https://github.com/real-logic/agrona/releases/tag/0.9.19
https://github.com/real-logic/agrona/releases/tag/0.9.20
https://github.com/real-logic/agrona/releases/tag/0.9.21

Change-Id: If4c462e0321bc6340442ab77cb9e0847342a6f1d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump akka to 2.5.14

https://akka.io/blog/news/2018/07/13/akka-2.5.14-released

Change-Id: Ie62ba414b4856af1381ee4492dd955a6c6744fc7
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

bump slf4j bug-pattern from 1.4.0 to 1.4.1

Bumps [bug-pattern](https://github.com/KengoTODA/findbugs-slf4j) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/KengoTODA/findbugs-slf4j/releases)
- [Changelog](https://github.com/KengoTODA/findbugs-slf4j/blob/master/CHANGELOG.md)
- [Commits](https://github.com/KengoTODA/findbugs-slf4j/compare/findbugs-slf4j-1.4.0...findbugs-slf4j-1.4.1)

Change-Id: I59d55a8bc9311a535740d300c880d9b8bbf0fa35
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump jdt.annotation from 2.1.150 to 2.2.0

Change-Id: I6ecfc61d555998ff5ad6951ce1e8aedfc619efaf
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump maven-blueprint-plugin to 1.10.0

Release notes are hard to come by, but this removes a chunk of
unneeded antrun.

Change-Id: I1196f3305b0d83b33e3bbd6819144b28719588fd
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump Jackson 2.8.9 → 2.9.6

Release notes:
* https://medium.com/@cowtowncoder/jackson-2-9-features-b2a19029e9ff
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.1
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.2
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.3
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.4
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.5
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.6

Change-Id: I1cb0a34a8fc602de24c9233c93fdacdf24a18763
Signed-off-by: Stephen Kitt <skitt@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump akka to 2.5.13

This bumps akka to 2.5.13, along with aeron, agrona,
ssl-config and scala-parser-combinators.

Akka:
https://akka.io/blog/news/2018/04/13/akka-2.5.12-released
https://akka.io/blog/news/2018/06/08/akka-2.5.13-released

ssl-config-core:
https://github.com/lightbend/ssl-config/releases/tag/v0.2.3
https://github.com/lightbend/ssl-config/releases/tag/v0.2.4

scala-parser-combinators:
https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.0
https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.1

Minimum versions for agrona/aeron are 0.9.17 and 1.9.1,
we bump to latest compatible versions:

Agrona:
https://github.com/real-logic/agrona/releases/tag/0.9.13
https://github.com/real-logic/agrona/releases/tag/0.9.14
https://github.com/real-logic/agrona/releases/tag/0.9.15
https://github.com/real-logic/agrona/releases/tag/0.9.16
https://github.com/real-logic/agrona/releases/tag/0.9.17
https://github.com/real-logic/agrona/releases/tag/0.9.18

Aeron:
https://github.com/real-logic/aeron/releases/tag/1.8.0
https://github.com/real-logic/aeron/releases/tag/1.8.1
https://github.com/real-logic/aeron/releases/tag/1.8.2
https://github.com/real-logic/aeron/releases/tag/1.9.0
https://github.com/real-logic/aeron/releases/tag/1.9.1
https://github.com/real-logic/aeron/releases/tag/1.9.2
https://github.com/real-logic/aeron/releases/tag/1.9.3

Change-Id: I4aad5b890f1c4550da90c1020e86e7ba1a343f9a
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 5a129329f3c6c3776cfdfe99c202772cf970749f)

Fix xtend-maven-plugin

xtend-maven-plugin (really, xtend-core) has bad set of dependencies,
as it pulls an ancient core (3.8.0) and new plugins (to the point of
fetching new ones as they become available).

Since their certification authority expired in February, new artifacts
use one different certificate. This coupled with the fact there is
a split package involved leads to different parts of the package having
different keys -- leading to an reactor-shattering SecurityException.

Change-Id: Id443f229f105ea65c7adc4b09e3e25338075b59d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 7fe105ebc18f9f51119ef189e7f2a034473596e2)

Add missing odl-jackson-2.8 declaration

This feature should be declared in artifacts, do that.

Change-Id: I64eef278f2798ab2a2e8123ca8a6ddab69dd97e2
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 5eed9dbf9c0364596ef2ba3953164d5670aa2027)

Bump metainf-services from 1.7 to 1.8

https://github.com/kohsuke/metainf-services/compare/metainf-services-1.7...metainf-services-1.8

Change-Id: I64d2f1c910668c6ba0b4eb9ea6da9dcfaca7b016
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Fix javadoc warning with JDK9+

JDK9 has introduced support for HTML5 javadocs and the doclet
emits a warning about not being sure how to interpret javadocs.

Fix this by specifying html4 on JDK9+.

Change-Id: I1d2bfa82918b220e6154cd825e602548f4450567
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit d213f479082b63fc7a0514e82f5978ea889e3b7f)

Bump spotbugs from 3.1.3 to 3.1.5

https://github.com/spotbugs/spotbugs/blob/release-3.1/CHANGELOG.md

Change-Id: I096f8c1d10822391503c636091ca9dfe2f05cd1a
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Kill maven.javadoc.version

This property is no longer used downstream, kill it.

Change-Id: Idfda7f0ee27b3a48a7736b7da599b74005af81f7
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-javadoc-plugin to 3.0.1

<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12342283>

Change-Id: Ib952ca3472033c876596d14aa1ade1d1877ada58
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump maven-pmd-plugin from 3.9 to 3.10.0

Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.9 to 3.10.0.
- [Release notes](https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12342689&styleName=Text&projectId=12317621)

Change-Id: I4698da50438f3909a041eeb627adc963b80e5fd6
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump truth from 0.40 to 0.41

Bumps [truth](https://github.com/google/truth) from 0.40 to 0.41.
- [Release notes](https://github.com/google/truth/releases/tag/release_0_41)

Change-Id: I03522e0052bc7995a85097f56ea67696c6f07881
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump commons-text from 1.3 to 1.4

https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.4.txt

Change-Id: Id90fc0e955c6a16631b06a6688b497771b043898
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump sevntu-checkstyle-maven-plugin 1.27.0-1.29.0

https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.28.0
https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.29.0

Change-Id: I0481f2091da68717a3a26c18c8d82dd07079e1ae
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump enunciate-core-annotations 2.10.1 to 2.11.1

Changes according to https://github.com/stoicflame/enunciate/releases :

* Add support for Java 9, drop support for Java 7.
* Minor release covering two issues.
* Numerous bugs and enhancements.

Change-Id: I597ef360e57f2b30369978e390b6976d837f9dbd
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump wagon-http from 2.10 to 3.1.0

Release notes: <https://lists.apache.org/thread.html/96024c54db7680697cb066e22a37b0ed5b4498386714a8a9ae1ec9cd@%3Cannounce.maven.apache.org%3E>

Change-Id: I686e43c34a0909fcd505919162ea5a9cd7c9606a
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump maven-bundle-plugin from 3.3.0 to 3.5.0

https://svn.apache.org/repos/asf/felix/releases/maven-bundle-plugin-3.5.0/changelog.txt

Change-Id: I503ffb51c718cf740f8f5bd30dc8f64b72fb4907
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump scala-parser-combinators to 1.0.7

https://github.com/scala/scala-parser-combinators/releases/tag/v1.0.7

Change-Id: Id221cf4e9700d24b52ef0be34047bde28b68446b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit e8c5b50da7401bdbe9a06c45d4a6df69f8444a81)

add org.osgi.compendium to single-feature-parent

fixes SFT bug
java.lang.ClassNotFoundException:
org.osgi.service.resolver.ResolutionException

This now really fixes it (I've reproduced and verified it);
whereas the earlier Ifaa39b35d1975ccd2aec15f6ed56191637f43d73
actually had not.

Change-Id: Iebf8e8c7c72b787f8858d469944aef716b4c2830
JIRA: ODLPARENT-136
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump commons-text from 1.1 to 1.3

https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.2.txt
https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.3.txt

Change-Id: I63e5da392b401c5eafdd2d68af8c351b83a89e84
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump duplicate-finder-maven-plugin 1.2.1 to 1.3.0

Bumps [duplicate-finder-maven-plugin](https://github.com/basepom/duplicate-finder-maven-plugin) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/basepom/duplicate-finder-maven-plugin/releases)
- [Changelog](https://github.com/basepom/duplicate-finder-maven-plugin/blob/master/CHANGES.md)
- [Commits](https://github.com/basepom/duplicate-finder-maven-plugin/compare/duplicate-finder-maven-plugin-1.2.1...duplicate-finder-maven-plugin-1.3.0)

Change-Id: I2ac62255af7a9ee3c48a4e8bf17dbf6e784f9f42
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump jettison from 1.3.8 to 1.4.0

Bumps [jettison](https://github.com/jettison-json/jettison) from 1.3.8 to 1.4.0.
- [Release notes](https://github.com/jettison-json/jettison/releases)
- [Commits](https://github.com/jettison-json/jettison/compare/jettison-1.3.8...jettison-1.4.0)

Change-Id: Ie081aa5d8972496506deecb17190c9e0b836cb35
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

remove SingleFeatureTest's old INFO log config

because since we switched to log4j2 that has no more effect anyway:

  log4j.logger.org.opendaylight.odlparent.featuretest=INFO

because all properties must by log4j2.* and this is the default anyway:

  log4j2.rootLogger.level=INFO

Change-Id: Ic934a4d4ff7bf9d565ff88669c8f1a7607566368
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

remove SingleFeatureTest log4j.rootLogger override

because since we switched to log4j2 that has no more effect anyway:

  log4j.rootLogger=INFO, stdout, osgi\:*

because all properties must by log4j2.* and this is the default anyway:

  log4j2.rootLogger.level=INFO

Change-Id: I0b6755403668d6723b036ba1532fe5e89f437df2
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump checkstyle from 8.10 to 8.10.1

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.10 to 8.10.1.
- [Release notes](http://checkstyle.sourceforge.net/releasenotes.html#Release_8.10.1)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.10...checkstyle-8.10.1)

Change-Id: I332d089e544d9c675c28cf68e009918865f70c31
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump scala to 2.12.6

https://github.com/scala/scala/releases/tag/v2.12.6

Change-Id: Ie3c281606b6c4b63cec6d9be50fc86cb72a3dd2f
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 900aaf37f03c0f80ae0bc10b480f30d7873cd269)

Bump karaf-plugin Maven deps 3.3.3 to 3.5.3

in line with I13eabefc4e4316b0be204a808c69f09be8e7d59d
https://git.opendaylight.org/gerrit/#/c/67554/

JIRA: ODLPARENT-138
Change-Id: I72bdb59d75b08425d002d88d0624e42296863e90
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

bump dependency-check-maven from 3.0.2 to 3.2.1

Bumps [dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 3.0.2 to 3.2.1.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md)
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v3.0.2...v3.2.1)

Change-Id: Iad1636e1be72ab529aea7b65ddd3d1b57a0039c9
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

add com.sun.management to jre.properties

JIRA: INFRAUTILS-41
Change-Id: Ic80a16b21b1e4ac9460f5493e2e6b1ce22204a7b
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump maven-pmd-plugin from 3.8 to 3.9.0

Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.8 to 3.9.0.
- [Release notes](https://mail-archives.apache.org/mod_mbox/maven-announce/201801.mbox/%3Ce915d011-91cf-cfdd-c60c-9d8266f74722%40apache.org%3E)
- [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.8...maven-pmd-plugin-3.9.0)

Change-Id: If9a1dae0e6804cd98fad4c3d6e0666093719899b
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump exec-maven-plugin from 1.5.0 to 1.6.0

Bumps [exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/milestone/3?closed=1)
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/exec-maven-plugin-1.5.0...exec-maven-plugin-1.6.0)

Change-Id: I7cade702be72a618566173e98e7d7cbe83cc7142
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump build-helper-maven-plugin from 1.12 to 3.0.0

Bumps [build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) from 1.12 to 3.0.0.
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/build-helper-maven-plugin/compare/build-helper-maven-plugin-1.12...build-helper-maven-plugin-3.0.0)

Change-Id: Ie461a02da1762cb8d4ca0307a9f4c4a7cb523b60
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump org.eclipse.jdt.annotation 2.1.0 → 2.1.150

Change-Id: Ifa7bb2136273659d8f9daab2f6a4ef4f1052674e
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Immutables.org value from 2.6.0 to 2.6.1

https://github.com/immutables/immutables#261-2018-05-23
https://github.com/immutables/immutables/milestone/69?closed=1

Change-Id: Ibea81189578af1ecf37dce7f6445d2f7eccfe17c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump jacoco-maven-plugin from 0.8.0 to 0.8.1

https://github.com/jacoco/jacoco/releases/tag/v0.8.1

Change-Id: Ie232b96256facf7fd6429a52fbd252077703b473
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Guava 23.6 to 23.6.1

Commit log: https://github.com/google/guava/compare/v23.6...v23.6.1

This addresses CVE-2018-10237 (and only that).

Change-Id: I41e9fd17f8edad70f1501807966201e4f0b6aff6
JIRA: ODLPARENT-155
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump gson from 2.8.2 to 2.8.5

Bumps [gson](https://github.com/google/gson) from 2.8.2 to 2.8.5.
- [Changelog](https://github.com/google/gson/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.8.2...gson-parent-2.8.5)

Change-Id: Ia5205c86a58a2fbd08d2bb5f82abe6f07532fa5e
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump org.eclipse.xtend.lib from 2.13.0 to 2.14.0

Bumps [org.eclipse.xtend.lib](https://github.com/eclipse/xtext-lib) from 2.13.0 to 2.14.0.
- [Release notes](https://github.com/eclipse/xtext-lib/releases)
- [Commits](https://github.com/eclipse/xtext-lib/compare/v2.13.0...v2.14.0)

Change-Id: I90e0b093121f192d39758c40406d4d921ad91463
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump spotbugs from 3.1.2 to 3.1.3

Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 3.1.2 to 3.1.3.
- [Changelog](https://github.com/spotbugs/spotbugs/blob/3.1.3/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/3.1.2...3.1.3)

Change-Id: Idbb5c94c535a91b9c367559e7d412b4b85466a59
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump truth from 0.36 to 0.40

Bumps [truth](https://github.com/google/truth) from 0.36 to 0.40.
- [Release notes](https://github.com/google/truth/releases)
- [Commits](https://github.com/google/truth/commits)

Change-Id: I46b8efd37c9503ebf1f5d49019bec873f91cba3b
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump spotbugs-maven-plugin from 3.1.3 to 3.1.3.1

Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 3.1.3 to 3.1.3.1.
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-3.1.3...e974b5a56a10b110f77bbefbf427a10f5c58a83c)

Change-Id: I0ae8347f7bb04f55be77bef18590e52c597321d6
Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump Immutables.org from 2.5.6 to 2.6.0

https://github.com/immutables/immutables#260-2018-05-19

https://github.com/immutables/immutables/milestone/68?closed=1

Thanks to https://dependabot.com for notifying me about this.

Change-Id: I2a01d7a0c11834b747a5a77d23df9d95b7477b9c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Bump checkstyle from 8.7 to 8.10

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.7 to 8.10.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.7...checkstyle-8.10)

Thanks to https://dependabot.com for notifying me about this.

Change-Id: Ief8880af475832f79e3711f1616e1bc6c98e8a8d
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

remove redundancy in SingleFeatureTest

The aries.quiesce, aries.blueprint, equinox customizations
are already part of OpenDaylight's base Karaf customization.

see https://lists.opendaylight.org/pipermail/odlparent-dev/2018-April/001830.html

Change-Id: I4c89cddf07b5e144e9dc3cd21e4a7275f42815f8
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Provide better traces with invalid URLs

When a feature or bundle contains an invalid URL (or missing URL), the
resulting plugin error is rather inscrutable. This attempts to improve
the situation by indicating which feature is at fault.

Change-Id: If235349f5dcc6a73e5f77a97123feae43bc2eef2
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Bump netty to 4.1.24

http://netty.io/news/2018/04/04/4-1-23-Final.html
http://netty.io/news/2018/04/19/4-1-24-Final.html

Change-Id: I6eb7d1362e7574c12239faa63d31d53a37391c6c
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Upgr. maven-site-plugin → 3.7, asciidoctor → 1.5.6

maven-site-plugin:
https://mail-archives.apache.org/mod_mbox/maven-announce/201712.mbox/%3C1970630.7WseVgZzlZ%40giga%3E

Notable fix here is java9 compatibility, allowing us to remove
a dependency override.

asciidoctor-maven-plugin:
https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-1.5.4
https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-1.5.5
https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-1.5.6

Notable fix is alignment with doxia, allowing us to get to a sane
configuration again.

Change-Id: I0b26797128b19ac4cb2a93ebc3d6588e61104e0a
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Disable more null-related FindBugs checks

These produce false-positives with Guava 23.6+. This effectively
neuters null-pointer analysis using FindBugs unfortunately (but is
necessary to avoid having lots of irrelevant @SuppressFBWarnings
statements throughout the project).

Change-Id: I10445789b1266b8636fae1ae1130d7e64e0f67b3
JIRA: ODLPARENT-146
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add jersey-client to odl-jersey-1

The Jersey feature needs to include the client.

Change-Id: Ifa9d3d5a7b6ffe46bb4c20c68740178b85cbecbc
Signed-off-by: Stephen Kitt <skitt@redhat.com>

SingleFeatureTest preserves target/SFT/karaf.log

see issue for background; reason why, and impact

Issue: ODLPARENT-148
Change-Id: I15eeac652057fabb0dbc161e554dbe81164ebe0a
Signed-off-by: Michael Vorburger <vorburger@redhat.com>
(cherry picked from commit 4e5972854acffbe2faca51d8884f97475a433d3c)

Remove ancient thirdparty jersey 1.17 packaging

We apparently used to ship an inlined version of jersey.  This is
no longer needed, and is removed here.

Change-Id: Id926a4d84140d8084e73f5228b47c38e428aec81
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Bump EclipseLink Moxy JAXB impl 2.6.2 → 2.7.1

see https://www.eclipse.org/eclipselink/releases/2.7.php

Issue: NEUTRON-160
Change-Id: I38f0285643ca0a1aea99a5e7f9e2b158bb86168c
Signed-off-by: Michael Vorburger <vorburger@redhat.com>

Switch to Karaf 4.2

This upgrades a number of related dependencies in the process.

Change-Id: I1aadc6f4a0ca95fd1bec256a2272ccc4e9ca6860
Signed-off-by: Stephen Kitt <skitt@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Clean up Apache Commons features

We were missing the dependency-tracking files, and commons-text
depends on commons-lang3 which we need to represent in the feature.

Change-Id: I0ef952688f9589f2385ef919bed2e3d1410d831d
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Update dependency-check

The jackson dependencies have been replaced by jackson-bom.

Change-Id: I1064e546c76acb357d3734c81c0a27b6312fe66a
Signed-off-by: Stephen Kitt <skitt@redhat.com>

remove ovsdb config from custom.properties

Change-Id: Ic3f4762c8f92ebcc958a80cec01fbda5749544af
Issue-ID: NETVIRT-434
Issue-ID: ODLPARENT-34
Signed-off-by: Sam Hague <shague@redhat.com>

ODLPARENT-137: restore the opendaylight prompt

In Karaf 4.1 and later, it turns out that the prompt defined in the
branding is overridden by the shell initialisation script,
etc/shell.init.script, which defines its own prompt. This patch adds
our own version of that script which disables the override.

Thanks to Guillaume Nodet for figuring out where the override was
coming from, and to Michael Vorburger for the initial investigation!
See https://issues.apache.org/jira/browse/KARAF-5570 for details.

Change-Id: I22410cb0425ab5b8a3f6e7c410fbb76587f9f973
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 732b0dc09d15b3b001fa636783dc4cdafc224b40)

ODLPARENT-146: disable NP_NONNULL_PARAM_VIOLATION

Guava 23.6 switched from @Nullable to @NullableDecl, which causes
false positives in FindBugs’ ``NP_NONNULL_PARAM_VIOLATION`` rule;
we’re disabling the rule for now.

Change-Id: I135c90930ff7e8a2203da46e3106ed69c570f1c1
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 82eee8769f07ec730cfbfa45dfa1ab5652bb8f07)

Add 3.1.0 release notes

Change-Id: Ia77f26ac993219bcf7b90dfbad6cd254ea07d89d
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 34b60e9b2bb82afd7c11e0609c85f61f562d11c5)

Add 3.0.3 release notes

Change-Id: Ia19badf04234d5a03ef2e7d18ffe4db835b7a0be
Signed-off-by: Stephen Kitt <skitt@redhat.com>
(cherry picked from commit 07de5fbcfc958ca416c1f2317ac4ed58050f6a94)

Use SpotBugs 3.1.2, and NP_NONNULL_PARAM_VIOLATION

This patch upgrades the SpotBugs plugin to 3.1.3 and the engine to
3.1.2. The changelog is
https://github.com/spotbugs/spotbugs/blob/3.1.2/CHANGELOG.md

SpotBugs 3.1.2 supports the nullable annotations in Checker Framework
(see
https://github.com/spotbugs/spotbugs/commit/dd436ff56abf0273a080ad228fcf5abd8ee3a097
for the patch), so we can re-enable NP_NONNULL_PARAM_VIOLATION when
using SpotBugs. This involves using a separate configuration, so this
patch splits everything out, including the report directory for
projects which run both FindBugs and SpotBugs.

Change-Id: I8cb110f12d79414d476b7a6c525412f3b7e2c188
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Add features for Apache Commons

This adds features for the four Apache Commons libraries we declare in
dependency management: Codec, Lang 3, Net and Text.

Change-Id: I6df54e97e44b14ce79c2ab7d5acd6b792ce59d9b
Signed-off-by: Stephen Kitt <skitt@redhat.com>

Switch <issueManagement> from Bugzilla to JIRA

Change-Id: I432548aa2a3c7a3c3850a6a419abb24751d1ebef
Signed-off-by: Lorand Jakab <lojakab@cisco.com>

Bump lmax disruptor to 3.4.1

https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.0
https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.1

Change-Id: Ie702b3b97d2dc099b8402283b69eb18e114136ef
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

Bump javassist to 3.22.0

https://github.com/jboss-javassist/javassist/compare/rel_3_21_0_ga...rel_3_22_0_ga

Change-Id: Iae54ca698e04a55bfdfbcc6fd24ed46e9af1b647
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 47fe27592502cbd042c269bf21e8e03ed5df4ac2)