perf(pom.xml): 移除重复依赖,升级部分已知有漏洞的依赖版本

pull/1137/head
xiaoQQya 2023-11-06 16:11:31 +08:00
parent b73747138d
commit 8d7d751d44
1 changed files with 344 additions and 330 deletions

674
pom.xml
View File

@ -1,368 +1,382 @@
<?xml version="1.0"?> <?xml version="1.0"?>
<project <project
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<modelVersion>4.0.0</modelVersion> <modelVersion>4.0.0</modelVersion>
<parent> <parent>
<groupId>org.springframework.boot</groupId> <groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId> <artifactId>spring-boot-starter-parent</artifactId>
<version>2.7.2</version> <version>2.7.17</version>
</parent> </parent>
<groupId>com.genersoft</groupId> <groupId>com.genersoft</groupId>
<artifactId>wvp-pro</artifactId> <artifactId>wvp-pro</artifactId>
<version>2.6.9</version> <version>2.6.9</version>
<name>web video platform</name> <name>web video platform</name>
<description>国标28181视频平台</description> <description>国标28181视频平台</description>
<packaging>${project.packaging}</packaging> <packaging>${project.packaging}</packaging>
<repositories> <repositories>
<repository> <repository>
<id>nexus-aliyun</id> <id>nexus-aliyun</id>
<name>Nexus aliyun</name> <name>Nexus aliyun</name>
<url>https://maven.aliyun.com/repository/public</url> <url>https://maven.aliyun.com/repository/public</url>
<layout>default</layout> <layout>default</layout>
<snapshots> <snapshots>
<enabled>false</enabled> <enabled>false</enabled>
</snapshots> </snapshots>
<releases> <releases>
<enabled>true</enabled> <enabled>true</enabled>
</releases> </releases>
</repository> </repository>
</repositories> </repositories>
<pluginRepositories>
<pluginRepository>
<id>nexus-aliyun</id>
<name>Nexus aliyun</name>
<url>https://maven.aliyun.com/repository/public</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
<releases>
<enabled>true</enabled>
</releases>
</pluginRepository>
</pluginRepositories>
<properties> <pluginRepositories>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> <pluginRepository>
<maven.build.timestamp.format>MMddHHmm</maven.build.timestamp.format> <id>nexus-aliyun</id>
<maven-jar-plugin.version>3.1.1</maven-jar-plugin.version> <name>Nexus aliyun</name>
<url>https://maven.aliyun.com/repository/public</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
<releases>
<enabled>true</enabled>
</releases>
</pluginRepository>
</pluginRepositories>
<!-- 依赖版本 --> <properties>
<snippetsDirectory>${project.build.directory}/generated-snippets</snippetsDirectory> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<asciidoctor.input.directory>${project.basedir}/docs/asciidoc</asciidoctor.input.directory> <maven.build.timestamp.format>MMddHHmm</maven.build.timestamp.format>
<generated.asciidoc.directory>${project.build.directory}/asciidoc</generated.asciidoc.directory> <maven-jar-plugin.version>3.1.1</maven-jar-plugin.version>
<asciidoctor.html.output.directory>${project.build.directory}/asciidoc/html</asciidoctor.html.output.directory>
<asciidoctor.pdf.output.directory>${project.build.directory}/asciidoc/pdf</asciidoctor.pdf.output.directory>
</properties>
<profiles> <!-- 依赖版本 -->
<profile> <snippetsDirectory>${project.build.directory}/generated-snippets</snippetsDirectory>
<id>jar</id> <asciidoctor.input.directory>${project.basedir}/docs/asciidoc</asciidoctor.input.directory>
<activation> <generated.asciidoc.directory>${project.build.directory}/asciidoc</generated.asciidoc.directory>
<activeByDefault>true</activeByDefault> <asciidoctor.html.output.directory>${project.build.directory}/asciidoc/html</asciidoctor.html.output.directory>
</activation> <asciidoctor.pdf.output.directory>${project.build.directory}/asciidoc/pdf</asciidoctor.pdf.output.directory>
<properties> </properties>
<project.packaging>jar</project.packaging>
</properties>
</profile>
<profile>
<id>war</id>
<properties>
<project.packaging>war</project.packaging>
</properties>
<dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
<exclusions>
<exclusion>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-jetty</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>javax.servlet</groupId>
<artifactId>javax.servlet-api</artifactId>
<version>3.1.0</version>
<scope>provided</scope>
</dependency>
</dependencies>
</profile>
</profiles>
<dependencies> <profiles>
<dependency> <profile>
<groupId>org.springframework.boot</groupId> <id>jar</id>
<artifactId>spring-boot-starter-data-redis</artifactId> <activation>
</dependency> <activeByDefault>true</activeByDefault>
<dependency> </activation>
<groupId>org.springframework.boot</groupId> <properties>
<artifactId>spring-boot-starter-web</artifactId> <project.packaging>jar</project.packaging>
</dependency> </properties>
<dependency> </profile>
<groupId>org.springframework.boot</groupId> <profile>
<artifactId>spring-boot-configuration-processor</artifactId> <id>war</id>
<optional>true</optional> <properties>
</dependency> <project.packaging>war</project.packaging>
<dependency> </properties>
<groupId>org.mybatis.spring.boot</groupId> <dependencies>
<artifactId>mybatis-spring-boot-starter</artifactId> <dependency>
<version>2.2.2</version> <groupId>org.springframework.boot</groupId>
<exclusions> <artifactId>spring-boot-starter-web</artifactId>
<exclusion> <exclusions>
<groupId>com.zaxxer</groupId> <exclusion>
<artifactId>HikariCP</artifactId> <groupId>org.springframework.boot</groupId>
</exclusion> <artifactId>spring-boot-starter-jetty</artifactId>
</exclusions> </exclusion>
</dependency> </exclusions>
<dependency> </dependency>
<groupId>org.springframework.boot</groupId> <dependency>
<artifactId>spring-boot-starter-security</artifactId> <groupId>javax.servlet</groupId>
</dependency> <artifactId>javax.servlet-api</artifactId>
<version>3.1.0</version>
<scope>provided</scope>
</dependency>
</dependencies>
</profile>
</profiles>
<dependency> <dependencies>
<groupId>org.springframework.boot</groupId> <dependency>
<artifactId>spring-boot-starter-jdbc</artifactId> <groupId>org.springframework.boot</groupId>
</dependency> <artifactId>spring-boot-starter-data-redis</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-configuration-processor</artifactId>
<optional>true</optional>
</dependency>
<dependency>
<groupId>org.mybatis.spring.boot</groupId>
<artifactId>mybatis-spring-boot-starter</artifactId>
<version>2.2.2</version>
<exclusions>
<exclusion>
<groupId>com.zaxxer</groupId>
<artifactId>HikariCP</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<!-- mysql数据库 --> <dependency>
<dependency> <groupId>org.springframework.boot</groupId>
<groupId>mysql</groupId> <artifactId>spring-boot-starter-jdbc</artifactId>
<artifactId>mysql-connector-java</artifactId> </dependency>
<version>8.0.30</version>
</dependency>
<!--postgresql--> <!-- mysql数据库 -->
<dependency> <dependency>
<groupId>org.postgresql</groupId> <groupId>com.mysql</groupId>
<artifactId>postgresql</artifactId> <artifactId>mysql-connector-j</artifactId>
<version>42.5.1</version> <version>8.2.0</version>
</dependency> </dependency>
<!-- kingbase人大金仓 --> <!--postgresql-->
<!-- 手动下载驱动后安装 --> <dependency>
<!-- mvn install:install-file -Dfile=/home/lin/soft/kingbase/jdbc-aarch/kingbase8-8.6.0.jar -DgroupId=com.kingbase -DartifactId=kingbase8 -Dversion=8.6.0 -Dpackaging=jar <groupId>org.postgresql</groupId>
--> <artifactId>postgresql</artifactId>
<dependency> <version>42.5.1</version>
<groupId>com.kingbase</groupId> </dependency>
<artifactId>kingbase8</artifactId>
<version>8.6.0</version>
<scope>system</scope>
<systemPath>${basedir}/libs/jdbc-aarch/kingbase8-8.6.0.jar</systemPath>
</dependency>
<!--Mybatis分页插件 --> <!-- kingbase人大金仓 -->
<dependency> <!-- 手动下载驱动后安装 -->
<groupId>com.github.pagehelper</groupId> <!-- mvn install:install-file -Dfile=/home/lin/soft/kingbase/jdbc-aarch/kingbase8-8.6.0.jar -DgroupId=com.kingbase -DartifactId=kingbase8
<artifactId>pagehelper-spring-boot-starter</artifactId> -Dversion=8.6.0 -Dpackaging=jar -->
<version>1.4.6</version> <dependency>
</dependency> <groupId>com.kingbase</groupId>
<artifactId>kingbase8</artifactId>
<version>8.6.0</version>
<scope>system</scope>
<systemPath>${basedir}/libs/jdbc-aarch/kingbase8-8.6.0.jar</systemPath>
</dependency>
<!--在线文档 --> <!--Mybatis分页插件 -->
<dependency> <dependency>
<groupId>org.springdoc</groupId> <groupId>com.github.pagehelper</groupId>
<artifactId>springdoc-openapi-ui</artifactId> <artifactId>pagehelper-spring-boot-starter</artifactId>
<version>1.6.10</version> <version>1.4.6</version>
</dependency> </dependency>
<dependency> <!--在线文档 -->
<groupId>com.github.xiaoymin</groupId> <dependency>
<artifactId>knife4j-springdoc-ui</artifactId> <groupId>org.springdoc</groupId>
<version>3.0.3</version> <artifactId>springdoc-openapi-ui</artifactId>
</dependency> <version>1.7.0</version>
<exclusions>
<exclusion>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
<version>2.2</version>
</dependency>
<!--参数校验 --> <dependency>
<dependency> <groupId>com.github.xiaoymin</groupId>
<groupId>javax.validation</groupId> <artifactId>knife4j-springdoc-ui</artifactId>
<artifactId>validation-api</artifactId> <version>3.0.3</version>
</dependency> </dependency>
<!-- 日志相关 --> <!--参数校验 -->
<dependency> <dependency>
<groupId>org.springframework.boot</groupId> <groupId>javax.validation</groupId>
<artifactId>spring-boot-starter-aop</artifactId> <artifactId>validation-api</artifactId>
</dependency> </dependency>
<!-- sip协议栈 --> <!-- 日志相关 -->
<dependency> <dependency>
<groupId>javax.sip</groupId> <groupId>org.springframework.boot</groupId>
<artifactId>jain-sip-ri</artifactId> <artifactId>spring-boot-starter-aop</artifactId>
<version>1.3.0-91</version> </dependency>
</dependency>
<!-- 取代log4j --> <!-- sip协议栈 -->
<dependency> <dependency>
<groupId>org.slf4j</groupId> <groupId>javax.sip</groupId>
<artifactId>log4j-over-slf4j</artifactId> <artifactId>jain-sip-ri</artifactId>
<version>1.7.36</version> <version>1.3.0-91</version>
</dependency> </dependency>
<!-- xml解析库 --> <!-- 取代log4j -->
<dependency> <dependency>
<groupId>org.dom4j</groupId> <groupId>org.slf4j</groupId>
<artifactId>dom4j</artifactId> <artifactId>log4j-over-slf4j</artifactId>
<version>2.1.3</version> <version>1.7.36</version>
</dependency> </dependency>
<dependency> <!-- xml解析库 -->
<groupId>com.google.guava</groupId> <dependency>
<artifactId>guava</artifactId> <groupId>org.dom4j</groupId>
<version>20.0</version> <artifactId>dom4j</artifactId>
</dependency> <version>2.1.3</version>
</dependency>
<!-- json解析库fastjson2 --> <!-- json解析库fastjson2 -->
<dependency> <dependency>
<groupId>com.alibaba.fastjson2</groupId> <groupId>com.alibaba.fastjson2</groupId>
<artifactId>fastjson2</artifactId> <artifactId>fastjson2</artifactId>
<version>2.0.17</version> <version>2.0.17</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>com.alibaba.fastjson2</groupId> <groupId>com.alibaba.fastjson2</groupId>
<artifactId>fastjson2-extension</artifactId> <artifactId>fastjson2-extension</artifactId>
<version>2.0.17</version> <version>2.0.17</version>
</dependency> </dependency>
<!-- okhttp --> <!-- okhttp -->
<dependency> <dependency>
<groupId>com.squareup.okhttp3</groupId> <groupId>com.squareup.okhttp3</groupId>
<artifactId>okhttp</artifactId> <artifactId>okhttp</artifactId>
<version>4.10.0</version> <version>4.10.0</version>
</dependency> </dependency>
<!-- okhttp 调试日志 --> <!-- okhttp 调试日志 -->
<dependency> <dependency>
<groupId>com.squareup.okhttp3</groupId> <groupId>com.squareup.okhttp3</groupId>
<artifactId>logging-interceptor</artifactId> <artifactId>logging-interceptor</artifactId>
<version>4.10.0</version> <version>4.10.0</version>
</dependency> </dependency>
<!-- okhttp-digest --> <!-- okhttp-digest -->
<dependency> <dependency>
<groupId>io.github.rburgst</groupId> <groupId>io.github.rburgst</groupId>
<artifactId>okhttp-digest</artifactId> <artifactId>okhttp-digest</artifactId>
<version>2.7</version> <version>2.7</version>
</dependency> </dependency>
<!-- https://mvnrepository.com/artifact/net.sf.kxml/kxml2 --> <!-- https://mvnrepository.com/artifact/net.sf.kxml/kxml2 -->
<!-- <dependency>--> <!-- <dependency>-->
<!-- <groupId>net.sf.kxml</groupId>--> <!-- <groupId>net.sf.kxml</groupId>-->
<!-- <artifactId>kxml2</artifactId>--> <!-- <artifactId>kxml2</artifactId>-->
<!-- <version>2.3.0</version>--> <!-- <version>2.3.0</version>-->
<!-- </dependency>--> <!-- </dependency>-->
<!-- jwt实现 --> <!-- jwt实现 -->
<dependency> <dependency>
<groupId>org.bitbucket.b_c</groupId> <groupId>org.bitbucket.b_c</groupId>
<artifactId>jose4j</artifactId> <artifactId>jose4j</artifactId>
<version>0.9.3</version> <version>0.9.3</version>
</dependency> </dependency>
<!--反向代理--> <!--反向代理-->
<dependency> <dependency>
<groupId>org.mitre.dsmiley.httpproxy</groupId> <groupId>org.mitre.dsmiley.httpproxy</groupId>
<artifactId>smiley-http-proxy-servlet</artifactId> <artifactId>smiley-http-proxy-servlet</artifactId>
<version>1.12.1</version> <version>1.12.1</version>
</dependency> </dependency>
<!--excel解析库--> <!--excel解析库-->
<dependency> <dependency>
<groupId>com.alibaba</groupId> <groupId>com.alibaba</groupId>
<artifactId>easyexcel</artifactId> <artifactId>easyexcel</artifactId>
<version>3.1.1</version> <version>3.3.2</version>
</dependency> <exclusions>
<exclusion>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
<version>1.24.0</version>
</dependency>
<!-- 获取系统信息 --> <!-- 获取系统信息 -->
<dependency> <dependency>
<groupId>com.github.oshi</groupId> <groupId>com.github.oshi</groupId>
<artifactId>oshi-core</artifactId> <artifactId>oshi-core</artifactId>
<version>6.2.2</version> <version>6.2.2</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.springframework.session</groupId> <groupId>org.springframework.session</groupId>
<artifactId>spring-session-core</artifactId> <artifactId>spring-session-core</artifactId>
</dependency> </dependency>
<!-- &lt;!&ndash; 检测文件编码 &ndash;&gt;--> <!-- 检测文件编码 -->
<!-- &lt;!&ndash; https://mvnrepository.com/artifact/cpdetector/cpdetector &ndash;&gt;--> <!-- https://mvnrepository.com/artifact/cpdetector/cpdetector -->
<!-- <dependency>--> <!--<dependency>-->
<!-- <groupId>cpdetector</groupId>--> <!-- <groupId>cpdetector</groupId>-->
<!-- <artifactId>cpdetector</artifactId>--> <!-- <artifactId>cpdetector</artifactId>-->
<!-- <version>1.0.8</version>--> <!-- <version>1.0.8</version>-->
<!-- </dependency>--> <!--</dependency>-->
<!-- https://mvnrepository.com/artifact/com.google.guava/guava --> <!-- https://mvnrepository.com/artifact/com.google.guava/guava -->
<dependency> <dependency>
<groupId>com.google.guava</groupId> <groupId>com.google.guava</groupId>
<artifactId>guava</artifactId> <artifactId>guava</artifactId>
<version>31.1-jre</version> <version>32.1.3-jre</version>
</dependency> </dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
</dependencies>
<dependency> <build>
<groupId>org.springframework.boot</groupId> <finalName>${project.artifactId}-${project.version}-${maven.build.timestamp}</finalName>
<artifactId>spring-boot-starter-test</artifactId> <plugins>
<!-- <scope>test</scope>--> <plugin>
</dependency> <groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
<version>2.7.2</version>
<configuration>
<includeSystemScope>true</includeSystemScope>
</configuration>
</plugin>
</dependencies> <plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<version>3.8.1</version>
<configuration>
<source>1.8</source>
<target>1.8</target>
</configuration>
</plugin>
<plugin>
<groupId>pl.project13.maven</groupId>
<artifactId>git-commit-id-plugin</artifactId>
<version>3.0.1</version>
<configuration>
<offline>true</offline>
<failOnNoGitDirectory>false</failOnNoGitDirectory>
<dateFormat>yyyyMMdd</dateFormat>
</configuration>
</plugin>
<build> <plugin>
<finalName>${project.artifactId}-${project.version}-${maven.build.timestamp}</finalName> <groupId>org.apache.maven.plugins</groupId>
<plugins> <artifactId>maven-surefire-plugin</artifactId>
<plugin> <version>2.22.2</version>
<groupId>org.springframework.boot</groupId> <configuration>
<artifactId>spring-boot-maven-plugin</artifactId> <skipTests>true</skipTests>
<version>2.7.2</version> </configuration>
<configuration> </plugin>
<includeSystemScope>true</includeSystemScope> </plugins>
</configuration> <resources>
</plugin> <resource>
<plugin> <directory>src/main/resources</directory>
<groupId>org.apache.maven.plugins</groupId> </resource>
<artifactId>maven-compiler-plugin</artifactId> <resource>
<version>3.8.1</version> <directory>src/main/java</directory>
<configuration> <includes>
<source>1.8</source> <include>**/*.xml</include>
<target>1.8</target> </includes>
</configuration> </resource>
</plugin> </resources>
</build>
<plugin>
<groupId>pl.project13.maven</groupId>
<artifactId>git-commit-id-plugin</artifactId>
<version>3.0.1</version>
<configuration>
<offline>true</offline>
<failOnNoGitDirectory>false</failOnNoGitDirectory>
<dateFormat>yyyyMMdd</dateFormat>
</configuration>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>2.22.2</version>
<configuration>
<skipTests>true</skipTests>
</configuration>
</plugin>
</plugins>
<resources>
<resource>
<directory>src/main/resources</directory>
</resource>
<resource>
<directory>src/main/java</directory>
<includes>
<include>**/*.xml</include>
</includes>
</resource>
</resources>
</build>
</project> </project>