From 8d7d751d44e48634eb61d71e3c3309fe151fc504 Mon Sep 17 00:00:00 2001 From: xiaoQQya <xiaoQQya@126.com> Date: 星期一, 06 十一月 2023 16:11:31 +0800 Subject: [PATCH] perf(pom.xml): 移除重复依赖,升级部分已知有漏洞的依赖版本 --- pom.xml | 674 ++++++++++++++++++++++++++++--------------------------- 1 files changed, 344 insertions(+), 330 deletions(-) diff --git a/pom.xml b/pom.xml index 9899d27..5b3e945 100644 --- a/pom.xml +++ b/pom.xml @@ -1,368 +1,382 @@ <?xml version="1.0"?> -<project - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" - xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> - <modelVersion>4.0.0</modelVersion> - <parent> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-parent</artifactId> - <version>2.7.2</version> - </parent> +<project + xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" + xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> + <modelVersion>4.0.0</modelVersion> + <parent> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-parent</artifactId> + <version>2.7.17</version> + </parent> - <groupId>com.genersoft</groupId> - <artifactId>wvp-pro</artifactId> - <version>2.6.9</version> - <name>web video platform</name> - <description>鍥芥爣28181瑙嗛骞冲彴</description> - <packaging>${project.packaging}</packaging> + <groupId>com.genersoft</groupId> + <artifactId>wvp-pro</artifactId> + <version>2.6.9</version> + <name>web video platform</name> + <description>鍥芥爣28181瑙嗛骞冲彴</description> + <packaging>${project.packaging}</packaging> - <repositories> - <repository> - <id>nexus-aliyun</id> - <name>Nexus aliyun</name> - <url>https://maven.aliyun.com/repository/public</url> - <layout>default</layout> - <snapshots> - <enabled>false</enabled> - </snapshots> - <releases> - <enabled>true</enabled> - </releases> - </repository> - </repositories> - <pluginRepositories> - <pluginRepository> - <id>nexus-aliyun</id> - <name>Nexus aliyun</name> - <url>https://maven.aliyun.com/repository/public</url> - <snapshots> - <enabled>false</enabled> - </snapshots> - <releases> - <enabled>true</enabled> - </releases> - </pluginRepository> - </pluginRepositories> + <repositories> + <repository> + <id>nexus-aliyun</id> + <name>Nexus aliyun</name> + <url>https://maven.aliyun.com/repository/public</url> + <layout>default</layout> + <snapshots> + <enabled>false</enabled> + </snapshots> + <releases> + <enabled>true</enabled> + </releases> + </repository> + </repositories> - <properties> - <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> - <maven.build.timestamp.format>MMddHHmm</maven.build.timestamp.format> - <maven-jar-plugin.version>3.1.1</maven-jar-plugin.version> + <pluginRepositories> + <pluginRepository> + <id>nexus-aliyun</id> + <name>Nexus aliyun</name> + <url>https://maven.aliyun.com/repository/public</url> + <snapshots> + <enabled>false</enabled> + </snapshots> + <releases> + <enabled>true</enabled> + </releases> + </pluginRepository> + </pluginRepositories> - <!-- 渚濊禆鐗堟湰 --> - <snippetsDirectory>${project.build.directory}/generated-snippets</snippetsDirectory> - <asciidoctor.input.directory>${project.basedir}/docs/asciidoc</asciidoctor.input.directory> - <generated.asciidoc.directory>${project.build.directory}/asciidoc</generated.asciidoc.directory> - <asciidoctor.html.output.directory>${project.build.directory}/asciidoc/html</asciidoctor.html.output.directory> - <asciidoctor.pdf.output.directory>${project.build.directory}/asciidoc/pdf</asciidoctor.pdf.output.directory> - </properties> + <properties> + <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> + <maven.build.timestamp.format>MMddHHmm</maven.build.timestamp.format> + <maven-jar-plugin.version>3.1.1</maven-jar-plugin.version> - <profiles> - <profile> - <id>jar</id> - <activation> - <activeByDefault>true</activeByDefault> - </activation> - <properties> - <project.packaging>jar</project.packaging> - </properties> - </profile> - <profile> - <id>war</id> - <properties> - <project.packaging>war</project.packaging> - </properties> - <dependencies> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-web</artifactId> - <exclusions> - <exclusion> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-jetty</artifactId> - </exclusion> - </exclusions> - </dependency> - <dependency> - <groupId>javax.servlet</groupId> - <artifactId>javax.servlet-api</artifactId> - <version>3.1.0</version> - <scope>provided</scope> - </dependency> - </dependencies> - </profile> - </profiles> + <!-- 渚濊禆鐗堟湰 --> + <snippetsDirectory>${project.build.directory}/generated-snippets</snippetsDirectory> + <asciidoctor.input.directory>${project.basedir}/docs/asciidoc</asciidoctor.input.directory> + <generated.asciidoc.directory>${project.build.directory}/asciidoc</generated.asciidoc.directory> + <asciidoctor.html.output.directory>${project.build.directory}/asciidoc/html</asciidoctor.html.output.directory> + <asciidoctor.pdf.output.directory>${project.build.directory}/asciidoc/pdf</asciidoctor.pdf.output.directory> + </properties> - <dependencies> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-data-redis</artifactId> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-web</artifactId> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-configuration-processor</artifactId> - <optional>true</optional> - </dependency> - <dependency> - <groupId>org.mybatis.spring.boot</groupId> - <artifactId>mybatis-spring-boot-starter</artifactId> - <version>2.2.2</version> - <exclusions> - <exclusion> - <groupId>com.zaxxer</groupId> - <artifactId>HikariCP</artifactId> - </exclusion> - </exclusions> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-security</artifactId> - </dependency> + <profiles> + <profile> + <id>jar</id> + <activation> + <activeByDefault>true</activeByDefault> + </activation> + <properties> + <project.packaging>jar</project.packaging> + </properties> + </profile> + <profile> + <id>war</id> + <properties> + <project.packaging>war</project.packaging> + </properties> + <dependencies> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-web</artifactId> + <exclusions> + <exclusion> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-jetty</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>javax.servlet</groupId> + <artifactId>javax.servlet-api</artifactId> + <version>3.1.0</version> + <scope>provided</scope> + </dependency> + </dependencies> + </profile> + </profiles> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-jdbc</artifactId> - </dependency> + <dependencies> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-data-redis</artifactId> + </dependency> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-web</artifactId> + </dependency> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-configuration-processor</artifactId> + <optional>true</optional> + </dependency> + <dependency> + <groupId>org.mybatis.spring.boot</groupId> + <artifactId>mybatis-spring-boot-starter</artifactId> + <version>2.2.2</version> + <exclusions> + <exclusion> + <groupId>com.zaxxer</groupId> + <artifactId>HikariCP</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-security</artifactId> + </dependency> - <!-- mysql鏁版嵁搴� --> - <dependency> - <groupId>mysql</groupId> - <artifactId>mysql-connector-java</artifactId> - <version>8.0.30</version> - </dependency> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-jdbc</artifactId> + </dependency> - <!--postgresql--> - <dependency> - <groupId>org.postgresql</groupId> - <artifactId>postgresql</artifactId> - <version>42.5.1</version> - </dependency> + <!-- mysql鏁版嵁搴� --> + <dependency> + <groupId>com.mysql</groupId> + <artifactId>mysql-connector-j</artifactId> + <version>8.2.0</version> + </dependency> - <!-- kingbase浜哄ぇ閲戜粨 --> - <!-- 鎵嬪姩涓嬭浇椹卞姩鍚庡畨瑁� --> - <!-- mvn install:install-file -Dfile=/home/lin/soft/kingbase/jdbc-aarch/kingbase8-8.6.0.jar -DgroupId=com.kingbase -DartifactId=kingbase8 -Dversion=8.6.0 -Dpackaging=jar - --> - <dependency> - <groupId>com.kingbase</groupId> - <artifactId>kingbase8</artifactId> - <version>8.6.0</version> - <scope>system</scope> - <systemPath>${basedir}/libs/jdbc-aarch/kingbase8-8.6.0.jar</systemPath> - </dependency> + <!--postgresql--> + <dependency> + <groupId>org.postgresql</groupId> + <artifactId>postgresql</artifactId> + <version>42.5.1</version> + </dependency> - <!--Mybatis鍒嗛〉鎻掍欢 --> - <dependency> - <groupId>com.github.pagehelper</groupId> - <artifactId>pagehelper-spring-boot-starter</artifactId> - <version>1.4.6</version> - </dependency> + <!-- kingbase浜哄ぇ閲戜粨 --> + <!-- 鎵嬪姩涓嬭浇椹卞姩鍚庡畨瑁� --> + <!-- mvn install:install-file -Dfile=/home/lin/soft/kingbase/jdbc-aarch/kingbase8-8.6.0.jar -DgroupId=com.kingbase -DartifactId=kingbase8 + -Dversion=8.6.0 -Dpackaging=jar --> + <dependency> + <groupId>com.kingbase</groupId> + <artifactId>kingbase8</artifactId> + <version>8.6.0</version> + <scope>system</scope> + <systemPath>${basedir}/libs/jdbc-aarch/kingbase8-8.6.0.jar</systemPath> + </dependency> - <!--鍦ㄧ嚎鏂囨。 --> - <dependency> - <groupId>org.springdoc</groupId> - <artifactId>springdoc-openapi-ui</artifactId> - <version>1.6.10</version> - </dependency> + <!--Mybatis鍒嗛〉鎻掍欢 --> + <dependency> + <groupId>com.github.pagehelper</groupId> + <artifactId>pagehelper-spring-boot-starter</artifactId> + <version>1.4.6</version> + </dependency> - <dependency> - <groupId>com.github.xiaoymin</groupId> - <artifactId>knife4j-springdoc-ui</artifactId> - <version>3.0.3</version> - </dependency> + <!--鍦ㄧ嚎鏂囨。 --> + <dependency> + <groupId>org.springdoc</groupId> + <artifactId>springdoc-openapi-ui</artifactId> + <version>1.7.0</version> + <exclusions> + <exclusion> + <groupId>org.yaml</groupId> + <artifactId>snakeyaml</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>org.yaml</groupId> + <artifactId>snakeyaml</artifactId> + <version>2.2</version> + </dependency> - <!--鍙傛暟鏍¢獙 --> - <dependency> - <groupId>javax.validation</groupId> - <artifactId>validation-api</artifactId> - </dependency> + <dependency> + <groupId>com.github.xiaoymin</groupId> + <artifactId>knife4j-springdoc-ui</artifactId> + <version>3.0.3</version> + </dependency> - <!-- 鏃ュ織鐩稿叧 --> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-aop</artifactId> - </dependency> + <!--鍙傛暟鏍¢獙 --> + <dependency> + <groupId>javax.validation</groupId> + <artifactId>validation-api</artifactId> + </dependency> - <!-- sip鍗忚鏍� --> - <dependency> - <groupId>javax.sip</groupId> - <artifactId>jain-sip-ri</artifactId> - <version>1.3.0-91</version> - </dependency> + <!-- 鏃ュ織鐩稿叧 --> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-aop</artifactId> + </dependency> - <!-- 鍙栦唬log4j --> - <dependency> - <groupId>org.slf4j</groupId> - <artifactId>log4j-over-slf4j</artifactId> - <version>1.7.36</version> - </dependency> + <!-- sip鍗忚鏍� --> + <dependency> + <groupId>javax.sip</groupId> + <artifactId>jain-sip-ri</artifactId> + <version>1.3.0-91</version> + </dependency> - <!-- xml瑙f瀽搴� --> - <dependency> - <groupId>org.dom4j</groupId> - <artifactId>dom4j</artifactId> - <version>2.1.3</version> - </dependency> + <!-- 鍙栦唬log4j --> + <dependency> + <groupId>org.slf4j</groupId> + <artifactId>log4j-over-slf4j</artifactId> + <version>1.7.36</version> + </dependency> - <dependency> - <groupId>com.google.guava</groupId> - <artifactId>guava</artifactId> - <version>20.0</version> - </dependency> + <!-- xml瑙f瀽搴� --> + <dependency> + <groupId>org.dom4j</groupId> + <artifactId>dom4j</artifactId> + <version>2.1.3</version> + </dependency> - <!-- json瑙f瀽搴揻astjson2 --> - <dependency> - <groupId>com.alibaba.fastjson2</groupId> - <artifactId>fastjson2</artifactId> - <version>2.0.17</version> - </dependency> - <dependency> - <groupId>com.alibaba.fastjson2</groupId> - <artifactId>fastjson2-extension</artifactId> - <version>2.0.17</version> - </dependency> + <!-- json瑙f瀽搴揻astjson2 --> + <dependency> + <groupId>com.alibaba.fastjson2</groupId> + <artifactId>fastjson2</artifactId> + <version>2.0.17</version> + </dependency> + <dependency> + <groupId>com.alibaba.fastjson2</groupId> + <artifactId>fastjson2-extension</artifactId> + <version>2.0.17</version> + </dependency> - <!-- okhttp --> - <dependency> - <groupId>com.squareup.okhttp3</groupId> - <artifactId>okhttp</artifactId> - <version>4.10.0</version> - </dependency> + <!-- okhttp --> + <dependency> + <groupId>com.squareup.okhttp3</groupId> + <artifactId>okhttp</artifactId> + <version>4.10.0</version> + </dependency> - <!-- okhttp 璋冭瘯鏃ュ織 --> - <dependency> - <groupId>com.squareup.okhttp3</groupId> - <artifactId>logging-interceptor</artifactId> - <version>4.10.0</version> - </dependency> + <!-- okhttp 璋冭瘯鏃ュ織 --> + <dependency> + <groupId>com.squareup.okhttp3</groupId> + <artifactId>logging-interceptor</artifactId> + <version>4.10.0</version> + </dependency> - <!-- okhttp-digest --> - <dependency> - <groupId>io.github.rburgst</groupId> - <artifactId>okhttp-digest</artifactId> - <version>2.7</version> - </dependency> + <!-- okhttp-digest --> + <dependency> + <groupId>io.github.rburgst</groupId> + <artifactId>okhttp-digest</artifactId> + <version>2.7</version> + </dependency> - <!-- https://mvnrepository.com/artifact/net.sf.kxml/kxml2 --> -<!-- <dependency>--> -<!-- <groupId>net.sf.kxml</groupId>--> -<!-- <artifactId>kxml2</artifactId>--> -<!-- <version>2.3.0</version>--> -<!-- </dependency>--> + <!-- https://mvnrepository.com/artifact/net.sf.kxml/kxml2 --> + <!-- <dependency>--> + <!-- <groupId>net.sf.kxml</groupId>--> + <!-- <artifactId>kxml2</artifactId>--> + <!-- <version>2.3.0</version>--> + <!-- </dependency>--> - <!-- jwt瀹炵幇 --> - <dependency> - <groupId>org.bitbucket.b_c</groupId> - <artifactId>jose4j</artifactId> - <version>0.9.3</version> - </dependency> + <!-- jwt瀹炵幇 --> + <dependency> + <groupId>org.bitbucket.b_c</groupId> + <artifactId>jose4j</artifactId> + <version>0.9.3</version> + </dependency> - <!--鍙嶅悜浠g悊--> - <dependency> - <groupId>org.mitre.dsmiley.httpproxy</groupId> - <artifactId>smiley-http-proxy-servlet</artifactId> - <version>1.12.1</version> - </dependency> + <!--鍙嶅悜浠g悊--> + <dependency> + <groupId>org.mitre.dsmiley.httpproxy</groupId> + <artifactId>smiley-http-proxy-servlet</artifactId> + <version>1.12.1</version> + </dependency> - <!--excel瑙f瀽搴�--> - <dependency> - <groupId>com.alibaba</groupId> - <artifactId>easyexcel</artifactId> - <version>3.1.1</version> - </dependency> + <!--excel瑙f瀽搴�--> + <dependency> + <groupId>com.alibaba</groupId> + <artifactId>easyexcel</artifactId> + <version>3.3.2</version> + <exclusions> + <exclusion> + <groupId>org.apache.commons</groupId> + <artifactId>commons-compress</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>org.apache.commons</groupId> + <artifactId>commons-compress</artifactId> + <version>1.24.0</version> + </dependency> - <!-- 鑾峰彇绯荤粺淇℃伅 --> - <dependency> - <groupId>com.github.oshi</groupId> - <artifactId>oshi-core</artifactId> - <version>6.2.2</version> - </dependency> + <!-- 鑾峰彇绯荤粺淇℃伅 --> + <dependency> + <groupId>com.github.oshi</groupId> + <artifactId>oshi-core</artifactId> + <version>6.2.2</version> + </dependency> - <dependency> - <groupId>org.springframework.session</groupId> - <artifactId>spring-session-core</artifactId> - </dependency> + <dependency> + <groupId>org.springframework.session</groupId> + <artifactId>spring-session-core</artifactId> + </dependency> -<!-- <!– 妫�娴嬫枃浠剁紪鐮� –>--> -<!-- <!– https://mvnrepository.com/artifact/cpdetector/cpdetector –>--> -<!-- <dependency>--> -<!-- <groupId>cpdetector</groupId>--> -<!-- <artifactId>cpdetector</artifactId>--> -<!-- <version>1.0.8</version>--> -<!-- </dependency>--> + <!-- 妫�娴嬫枃浠剁紪鐮� --> + <!-- https://mvnrepository.com/artifact/cpdetector/cpdetector --> + <!--<dependency>--> + <!-- <groupId>cpdetector</groupId>--> + <!-- <artifactId>cpdetector</artifactId>--> + <!-- <version>1.0.8</version>--> + <!--</dependency>--> - <!-- https://mvnrepository.com/artifact/com.google.guava/guava --> - <dependency> - <groupId>com.google.guava</groupId> - <artifactId>guava</artifactId> - <version>31.1-jre</version> - </dependency> + <!-- https://mvnrepository.com/artifact/com.google.guava/guava --> + <dependency> + <groupId>com.google.guava</groupId> + <artifactId>guava</artifactId> + <version>32.1.3-jre</version> + </dependency> + <dependency> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-test</artifactId> + <scope>test</scope> + </dependency> + </dependencies> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-test</artifactId> -<!-- <scope>test</scope>--> - </dependency> + <build> + <finalName>${project.artifactId}-${project.version}-${maven.build.timestamp}</finalName> + <plugins> + <plugin> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-maven-plugin</artifactId> + <version>2.7.2</version> + <configuration> + <includeSystemScope>true</includeSystemScope> + </configuration> + </plugin> - </dependencies> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-compiler-plugin</artifactId> + <version>3.8.1</version> + <configuration> + <source>1.8</source> + <target>1.8</target> + </configuration> + </plugin> + <plugin> + <groupId>pl.project13.maven</groupId> + <artifactId>git-commit-id-plugin</artifactId> + <version>3.0.1</version> + <configuration> + <offline>true</offline> + <failOnNoGitDirectory>false</failOnNoGitDirectory> + <dateFormat>yyyyMMdd</dateFormat> + </configuration> + </plugin> - <build> - <finalName>${project.artifactId}-${project.version}-${maven.build.timestamp}</finalName> - <plugins> - <plugin> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-maven-plugin</artifactId> - <version>2.7.2</version> - <configuration> - <includeSystemScope>true</includeSystemScope> - </configuration> - </plugin> - <plugin> - <groupId>org.apache.maven.plugins</groupId> - <artifactId>maven-compiler-plugin</artifactId> - <version>3.8.1</version> - <configuration> - <source>1.8</source> - <target>1.8</target> - </configuration> - </plugin> - - <plugin> - <groupId>pl.project13.maven</groupId> - <artifactId>git-commit-id-plugin</artifactId> - <version>3.0.1</version> - <configuration> - <offline>true</offline> - <failOnNoGitDirectory>false</failOnNoGitDirectory> - <dateFormat>yyyyMMdd</dateFormat> - </configuration> - </plugin> - - <plugin> - <groupId>org.apache.maven.plugins</groupId> - <artifactId>maven-surefire-plugin</artifactId> - <version>2.22.2</version> - <configuration> - <skipTests>true</skipTests> - </configuration> - </plugin> - - </plugins> - <resources> - <resource> - <directory>src/main/resources</directory> - </resource> - <resource> - <directory>src/main/java</directory> - <includes> - <include>**/*.xml</include> - </includes> - </resource> - </resources> - </build> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-surefire-plugin</artifactId> + <version>2.22.2</version> + <configuration> + <skipTests>true</skipTests> + </configuration> + </plugin> + </plugins> + <resources> + <resource> + <directory>src/main/resources</directory> + </resource> + <resource> + <directory>src/main/java</directory> + <includes> + <include>**/*.xml</include> + </includes> + </resource> + </resources> + </build> </project> -- Gitblit v1.8.0