pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">

    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>4.1.1</version>
    </parent>
    <groupId>com.gitb</groupId>
    <artifactId>GITB</artifactId>
    <version>1.30.1</version>
    <name>GITB</name>
    <packaging>pom</packaging>

    <properties>
        <!-- General properties -->
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <maven.build.timestamp.format>yyyy-MM-dd HH:mm:ss</maven.build.timestamp.format>
        <ossIndexUsername>ossIndexUsername</ossIndexUsername>
        <ossIndexPassword>ossIndexPassword</ossIndexPassword>
        <!--
             Library versions. Check for updates using:
             mvn versions:display-dependency-updates -N -N
        -->
        <!-- Plugin versions -->
        <version.plugin.dependencyCheckMaven>12.2.2</version.plugin.dependencyCheckMaven>
        <version.plugin.mavenDeployPlugin>3.1.4</version.plugin.mavenDeployPlugin>
        <version.plugin.mavenCompilerPlugin>3.15.0</version.plugin.mavenCompilerPlugin>
        <version.plugin.jaxb2MavenPlugin>4.1.0</version.plugin.jaxb2MavenPlugin>
        <version.plugin.licenseMavenPlugin>2.7.1</version.plugin.licenseMavenPlugin>
        <version.plugin.antrunPlugin>3.2.0</version.plugin.antrunPlugin>
        <version.plugin.versionsMavenPlugin>2.21.0</version.plugin.versionsMavenPlugin>
        <version.plugin.mavenSitePlugin>3.22.0</version.plugin.mavenSitePlugin>
        <version.plugin.projectInfoReports>3.9.0</version.plugin.projectInfoReports>
        <version.plugin.cycloneDxPlugin>2.9.3</version.plugin.cycloneDxPlugin>
        <!-- Dependency versions -->
        <version.gitbTypes>1.30.1</version.gitbTypes>
        <version.springBoot>4.1.1</version.springBoot> <!-- When upgrading adapt Tomcat version (below) as needed. -->
        <tomcat.version>11.0.26</tomcat.version>
        <version.bouncycastle>1.86</version.bouncycastle>
        <version.helgerSchematron>9.2.0</version.helgerSchematron>
        <version.metaInfServices>1.9</version.metaInfServices>
        <version.cxf>4.2.3</version.cxf>  <!-- When upgrading ensure that the neethi and xmlschema-core versions are up to date. -->
        <version.neethi>3.2.4</version.neethi>
        <version.xmlSchemaCore>2.3.3</version.xmlSchemaCore>
        <version.commonsCodec>1.22.1</version.commonsCodec>
        <version.reflections>0.10.2</version.reflections>
        <version.commonsIo>2.22.0</version.commonsIo>
        <version.commonsLang3>3.20.0</version.commonsLang3>
        <version.tika>3.3.2</version.tika>
        <!--
            Xerces versions to support the XML Schema v1.1 distribution (not published on Maven
            The version in the following sections must remain consistent with the latest Xerces
            binary distribution (see https://xerces.apache.org/mirrors.cgi#binary).
            The dependencies using version.xercesBuild are manually installed in the necessary
            downstream project(s). Section START.
        -->
        <version.xercesBuild>2.12.2-xsd11</version.xercesBuild>
        <version.xmlResolver>1.2</version.xmlResolver>
        <version.serializer>2.7.3</version.serializer>
        <version.xmlApis>2.0.2</version.xmlApis>
        <!-- Section END. -->
        <version.jaxb>4.0.8</version.jaxb>
        <version.saxon>12.10</version.saxon>
        <version.jaxwsApi>4.0.3</version.jaxwsApi>
        <version.jwsApi>3.0.0</version.jwsApi>
        <version.activation>2.1.2</version.activation>
        <version.commonsConfiguration>2.15.1</version.commonsConfiguration>
        <version.commonsText>1.15.0</version.commonsText>
        <version.pekko>1.7.1</version.pekko>
        <version.rgxgen>3.1</version.rgxgen>
        <version.saajImpl>3.0.6</version.saajImpl>
        <version.helgerCommons>12.3.2</version.helgerCommons>
        <version.dnsJava>3.6.5</version.dnsJava>
        <version.commonsFileUpload>1.6.0</version.commonsFileUpload>
        <version.commonsCollections>4.6.0</version.commonsCollections>
        <version.xmlUnit>2.13.0</version.xmlUnit>
        <version.jerseyClient>1.19.4</version.jerseyClient>
        <version.freeMarker>2.3.35</version.freeMarker>
        <version.openhtmltopdf>1.1.86</version.openhtmltopdf>
        <version.org.jsoup>1.23.2</version.org.jsoup>
        <version.jena>6.1.0</version.jena>
        <!-- Ensure the libthrift version matches the one used within Jena. -->
        <version.libthrift>0.24.0</version.libthrift>
        <version.topbraid>1.5.0</version.topbraid>
        <version.json-schema-validator>3.0.7</version.json-schema-validator>
        <version.jayway>3.0.0</version.jayway>
        <version.jackson>3.2.3</version.jackson>
        <version.jackson2>2.22.3</version.jackson2> <!-- Used for libraries that have not upgraded to Jackson 3 (the package is different so no conflicts) -->
        <version.jacksonAnnotations>2.22</version.jacksonAnnotations>
        <version.pdfbox>3.0.8</version.pdfbox>
        <version.verapdf>1.30.2</version.verapdf>
        <!--
            veraPDF's profile loading (org.verapdf.pdfa.validation.profiles.Profiles) unmarshals its
            bundled PDF/A and PDF/UA profile XMLs using the legacy javax.xml.bind (JAXB 2) API, for
            which it depends on com.sun.xml.bind:jaxb-impl. Spring Boot's own dependency management
            pins that same groupId/artifactId to a much newer version that has been repurposed as a
            jakarta.xml.bind-based bridge (it no longer contains the javax.xml.bind.v2.ContextFactory
            provider class veraPDF needs) - so it must be pinned back here to the last release still
            built against the javax.xml.bind.v2 API. Nothing else in this project depends on
            com.sun.xml.bind:jaxb-impl (it is unrelated to, and does not affect, the jakarta.xml.bind
            stack used elsewhere, e.g. by CXF).
        -->
        <version.jaxbImplLegacy>2.3.9</version.jaxbImplLegacy>
        <version.swaggerUi>5.32.15</version.swaggerUi> <!-- When upgrading, also update the version in class SwaggerConfig -->
        <version.owaspHtmlSanitizer>20260313.1</version.owaspHtmlSanitizer>
        <!-- Properties used for filtering replacements -->
        <timestamp>${maven.build.timestamp}</timestamp>
        <engineVersion>${project.version}</engineVersion>
    </properties>

    <licenses>
        <license>
            <name>European Union Public Licence (EUPL) Version 1.2</name>
            <url>https://interoperable-europe.ec.europa.eu/collection/eupl/eupl-text-eupl-12</url>
        </license>
    </licenses>

    <organization>
        <name>European Commission, DIGIT, Interoperable Europe Unit</name>
        <url>https://interoperable-europe.ec.europa.eu/</url>
    </organization>

    <developers>
        <developer>
            <name>European Commission, DIGIT, Interoperable Europe Unit</name>
            <email>DIGIT-ITB@ec.europa.eu</email>
            <organization>European Commission</organization>
            <organizationUrl>https://interoperable-europe.ec.europa.eu/</organizationUrl>
        </developer>
    </developers>

    <issueManagement>
        <system>GitHub</system>
        <url>https://github.com/ISAITB/gitb/issues</url>
    </issueManagement>

    <repositories>
        <repository>
            <id>central</id>
            <url>https://repo1.maven.org/maven2/</url>
        </repository>
        <repository>
            <id>itbRepoRead</id>
            <!-- Property set in profile settings that is used in development. Not needed if gitb-types-* dependencies are non-snapshot or if these are installed locally. -->
            <url>${itbRepoReadUrl}</url>
        </repository>
    </repositories>

    <distributionManagement>
        <site>
            <id>local-staging</id>
            <url>file://${maven.multiModuleProjectDirectory}/target/staging</url>
        </site>
        <repository>
            <id>itbRepoWrite</id>
            <!-- Property set in profile settings that is used in development. Not needed if gitb-types-* dependencies are non-snapshot or if these are installed locally. -->
            <url>${itbRepoWriteUrl}</url>
        </repository>
        <snapshotRepository>
            <id>itbRepoWrite</id>
            <!-- Property set in profile settings that is used in development. Not needed if gitb-types-* dependencies are non-snapshot or if these are installed locally. -->
            <url>${itbRepoWriteUrl}</url>
        </snapshotRepository>
    </distributionManagement>

    <build>
        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-compiler-plugin</artifactId>
                    <version>${version.plugin.mavenCompilerPlugin}</version>
                    <configuration>
                        <release>21</release>
                        <forceLegacyJavacApi>true</forceLegacyJavacApi>
                    </configuration>
                </plugin>
                <plugin>
                    <groupId>org.owasp</groupId>
                    <artifactId>dependency-check-maven</artifactId>
                    <version>${version.plugin.dependencyCheckMaven}</version>
                    <configuration>
                        <nvdApiServerId>nvdApi</nvdApiServerId>
                        <ossIndexUsername>${ossIndexUsername}</ossIndexUsername>
                        <ossIndexPassword>${ossIndexPassword}</ossIndexPassword>
                        <failBuildOnCVSS>0</failBuildOnCVSS>
                        <ossIndexWarnOnlyOnRemoteErrors>true</ossIndexWarnOnlyOnRemoteErrors>
                        <suppressionFile>etc/owasp-suppressions.xml</suppressionFile>
                        <excludes>
                            <exclude>eu.europa.ec.itb.*:*</exclude>
                        </excludes>
                    </configuration>
                    <executions>
                        <execution>
                            <phase>none</phase>
                            <!-- Run manually with mvn dependency-check:aggregate -->
                        </execution>
                    </executions>
                </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-deploy-plugin</artifactId>
                    <version>${version.plugin.mavenDeployPlugin}</version>
                </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-site-plugin</artifactId>
                    <version>${version.plugin.mavenSitePlugin}</version>
                </plugin>                
                <plugin>
                    <groupId>org.codehaus.mojo</groupId>
                    <artifactId>jaxb2-maven-plugin</artifactId>
                    <version>${version.plugin.jaxb2MavenPlugin}</version>
                </plugin>
                <plugin>
                    <groupId>org.codehaus.mojo</groupId>
                    <artifactId>license-maven-plugin</artifactId>
                    <version>${version.plugin.licenseMavenPlugin}</version>
                    <configuration>
                        <fileTemplate>${project.basedir}/etc/licence/third-party-licence-template.ftl</fileTemplate>
                        <outputDirectory>${project.build.directory}/generated-sources/license/temp</outputDirectory>
                        <thirdPartyFilename>THIRD_PARTY_LICENCES-gitb-srv.md</thirdPartyFilename>
                        <excludedGroups>com.gitb</excludedGroups>
                        <excludedScopes>test</excludedScopes>
                        <failOnMissing>true</failOnMissing>
                        <failOnBlacklist>true</failOnBlacklist>
                        <overrideFile>${project.basedir}/etc/licence/overrides.txt</overrideFile>
                        <licenseMerges>
                            <licenseMerge>Apache License, Version 2.0|The Apache Software License, Version 2.0|Apache-2.0|Apache License 2.0|Apache 2|The Apache License, Version 2.0|Apache License|Apache License version 2.0|Apache 2.0|Apache License v2.0|Apache License Version 2.0</licenseMerge>
                            <licenseMerge>MIT License|The MIT License|MIT</licenseMerge>
                            <licenseMerge>Eclipse Distribution License - v1.0|EDL 1.0|Eclipse Distribution License - v 1.0</licenseMerge>
                            <licenseMerge>Eclipse Public License - v1.0|Eclipse Public License - v 1.0</licenseMerge>
                            <licenseMerge>Eclipse Public License - v2.0|EPL 2.0|EPL-2.0|Eclipse Public License 2.0</licenseMerge>
                            <licenseMerge>GNU General Public License (GPL), Version 2 (with Classpath Exception)|GPL2 w/ CPE|GNU General Public License, version 2 with the GNU Classpath Exception|CDDL/GPLv2+CE</licenseMerge>
                            <licenseMerge>GNU Lesser General Public License (LGPL), Version 2.1|LGPL-2.1-only|GNU Lesser General Public License (LGPL), version 2.1 or later|LGPL 2.1|GNU Lesser General Public License</licenseMerge>
                            <licenseMerge>The 3-Clause BSD License|BSD-3-Clause|BSD 3-Clause License</licenseMerge>
                            <licenseMerge>The 2-Clause BSD License|The BSD 2-Clause License</licenseMerge>
                            <licenseMerge>The 0-Clause BSD License|BSD</licenseMerge>
                            <licenseMerge>Common Public License 1.0|CPL</licenseMerge>
                            <licenseMerge>Mozilla Public License Version 1.1|MPL 1.1</licenseMerge>
                            <licenseMerge>Mozilla Public License Version 2.0|Mozilla Public License, Version 2.0|Mozilla Public License 2.0 (MPL-2.0)|</licenseMerge>
                            <licenseMerge>European Union Public Licence (EUPL) Version 1.2</licenseMerge>
                        </licenseMerges>
                        <includedLicenses>
                            <includedLicense>Apache License, Version 2.0</includedLicense>
                            <includedLicense>MIT License</includedLicense>
                            <includedLicense>Eclipse Distribution License - v1.0</includedLicense>
                            <includedLicense>Eclipse Public License - v1.0</includedLicense>
                            <includedLicense>Eclipse Public License - v2.0</includedLicense>
                            <includedLicense>GNU General Public License (GPL), Version 2 (with Classpath Exception)</includedLicense>
                            <includedLicense>GNU Lesser General Public License (LGPL), Version 2.1</includedLicense>
                            <includedLicense>European Union Public Licence (EUPL) Version 1.2</includedLicense>
                            <includedLicense>The 3-Clause BSD License</includedLicense>
                            <includedLicense>The 2-Clause BSD License</includedLicense>
                            <includedLicense>The 0-Clause BSD License</includedLicense>
                            <includedLicense>Mozilla Public License Version 2.0</includedLicense>
                            <includedLicense>Common Public License 1.0</includedLicense>
                            <includedLicense>CUP Parser Generator Copyright Notice, License, and Disclaimer</includedLicense>
                            <includedLicense>ICU License - ICU 1.8.1 and later</includedLicense>
                        </includedLicenses>
                    </configuration>
                    <!--
                        To check and generate the third party licence report for gitb-srv issue: `mvn license:aggregate-add-third-party`
                        To generate the aggregate third party licence report for all modules issue: `mvn antrun:run@licence-report -pl .`

                        In case specific licences and attributions need to be included, these need to be added to etc/licence/third-party-licence-template.ftl
                        Once added, repeat the report generation command (see above).
                    -->
                </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-antrun-plugin</artifactId>
                    <version>${version.plugin.antrunPlugin}</version>
                    <executions>
                        <execution>
                            <!-- Generate licence report -->
                            <id>licence-report</id>
                            <goals>
                                <goal>run</goal>
                            </goals>
                            <configuration>
                                <target>
                                    <ant antfile="etc/build.xml" dir=".">
                                        <target name="licence-report"/>
                                    </ant>
                                </target>
                            </configuration>
                        </execution>
                        <execution>
                            <!-- Generate the aggregate SBOM (builds and aggregates all components) -->
                            <id>sbom</id>
                            <goals>
                                <goal>run</goal>
                            </goals>
                            <configuration>
                                <target>
                                    <ant antfile="etc/build.xml" dir=".">
                                        <target name="sbom"/>
                                    </ant>
                                </target>
                            </configuration>
                        </execution>
                        <execution>
                            <!--
                                Aggregate the SBOM assuming all components have already been built and their
                                individual SBOMs already generated separately (e.g. by independent per-module
                                builds/CI jobs) - only copies them into place and merges them.
                            -->
                            <id>sbom-aggregate</id>
                            <goals>
                                <goal>run</goal>
                            </goals>
                            <configuration>
                                <target>
                                    <ant antfile="etc/build.xml" dir=".">
                                        <target name="sbom-aggregate"/>
                                    </ant>
                                </target>
                            </configuration>
                        </execution>
                        <execution>
                            <!-- Check and conditionally install Xerces JARs -->
                            <id>check-and-install-xerces-jars</id>
                            <phase>validate</phase>
                            <goals>
                                <goal>run</goal>
                            </goals>
                            <configuration>
                                <target>
                                    <ant antfile="etc/build.xml" dir=".">
                                        <target name="check-and-install-xerces-jars"/>
                                    </ant>
                                </target>
                            </configuration>
                            <inherited>false</inherited>
                        </execution>
                    </executions>
                </plugin>
                <plugin>
                    <groupId>org.codehaus.mojo</groupId>
                    <artifactId>versions-maven-plugin</artifactId>
                    <version>${version.plugin.versionsMavenPlugin}</version>
                    <configuration>
                        <generateBackupPoms>false</generateBackupPoms>
                    </configuration>
                    <executions>
                        <execution>
                            <phase>none</phase>
                            <!--
                                Run manually with `mvn versions:set -DnewVersion=1.30.1`
                                For a new development cycle run `mvn versions:set -DnewVersion=1.30.1-SNAPSHOT`
                                The version number should be aligned with the gitb-types-jakarta dependency.
                            -->
                        </execution>
                    </executions>
                </plugin>
                <plugin>
                    <groupId>org.cyclonedx</groupId>
                    <artifactId>cyclonedx-maven-plugin</artifactId>
                    <version>${version.plugin.cycloneDxPlugin}</version>
                    <configuration>
                        <projectType>application</projectType>
                        <schemaVersion>1.6</schemaVersion>
                        <outputFormat>json</outputFormat>
                        <includeBomSerialNumber>false</includeBomSerialNumber>
                        <includeTestScope>false</includeTestScope>
                        <includeProvidedScope>true</includeProvidedScope>
                        <!--
                            Most gitb-srv modules intentionally skip `mvn deploy` (maven-deploy-plugin
                            <skip>true</skip>, since they're only ever consumed via the reactor/local
                            repo, never published). The plugin's default skipNotDeployed=true would
                            otherwise silently drop those modules (and their dependencies, e.g. Spring
                            Boot, CXF) from the aggregate BOM.
                        -->
                        <skipNotDeployed>false</skipNotDeployed>
                    </configuration>
                    <executions>
                        <execution>
                            <phase>none</phase>
                            <!--
                                Run manually with `mvn cyclonedx:makeAggregateBom` to generate the gitb-srv SBOM alone.
                                To build and aggregate the SBOM for all ITB components issue: `mvn antrun:run@sbom -pl .`
                                If gitb-srv, gitb-ui and the gitb-ui frontend have already been built separately and
                                their individual SBOMs already generated, only the final aggregation/publishing step
                                can be run instead with: `mvn antrun:run@sbom-aggregate -pl .`
                                Both require the CycloneDX CLI (cyclonedx-cli) to be available on the PATH to merge the
                                per-component SBOMs (gitb-srv, gitb-ui, gitb-ui frontend) into a single ITB SBOM.
                            -->
                        </execution>
                    </executions>
                </plugin>
            </plugins>
        </pluginManagement>
        <plugins>
            <plugin>
                <groupId>org.owasp</groupId>
                <artifactId>dependency-check-maven</artifactId>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-antrun-plugin</artifactId>
            </plugin>
            <plugin>
                <groupId>org.cyclonedx</groupId>
                <artifactId>cyclonedx-maven-plugin</artifactId>
            </plugin>
        </plugins>
    </build>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>eu.europa.ec.itb</groupId>
                <artifactId>gitb-types-jakarta</artifactId>
                <version>${version.gitbTypes}</version>
            </dependency>
            <dependency>
                <groupId>eu.europa.ec.itb</groupId>
                <artifactId>gitb-types-model</artifactId>
                <version>${version.gitbTypes}</version>
            </dependency>
            <dependency>
                <groupId>eu.europa.ec.itb</groupId>
                <artifactId>gitb-types-specs</artifactId>
                <version>${version.gitbTypes}</version>
            </dependency>
            <dependency>
                <groupId>com.gitb</groupId>
                <artifactId>gitb-common</artifactId>
                <version>${project.version}</version>
            </dependency>
            <dependency>
                <groupId>com.gitb</groupId>
                <artifactId>gitb-core</artifactId>
                <version>${project.version}</version>
            </dependency>
            <dependency>
                <groupId>com.gitb</groupId>
                <artifactId>gitb-remote</artifactId>
                <version>${project.version}</version>
            </dependency>
            <dependency>
                <groupId>com.gitb</groupId>
                <artifactId>gitb-lib</artifactId>
                <version>${project.version}</version>
            </dependency>
            <dependency>
                <groupId>com.gitb</groupId>
                <artifactId>gitb-engine</artifactId>
                <version>${project.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-spring-boot-starter-jaxws</artifactId>
                <version>${version.cxf}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.neethi</groupId>
                <artifactId>neethi</artifactId>
                <version>${version.neethi}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.ws.xmlschema</groupId>
                <artifactId>xmlschema-core</artifactId>
                <version>${version.xmlSchemaCore}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter</artifactId>
                <version>${version.springBoot}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-logging</artifactId>
                <version>${version.springBoot}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-validation</artifactId>
                <version>${version.springBoot}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-test</artifactId>
                <version>${version.springBoot}</version>
                <scope>test</scope>
            </dependency>
            <dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-rt-transports-http</artifactId>
                <version>${version.cxf}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-rt-frontend-jaxws</artifactId>
                <version>${version.cxf}</version>
            </dependency>
            <dependency>
                <groupId>commons-codec</groupId>
                <artifactId>commons-codec</artifactId>
                <version>${version.commonsCodec}</version>
            </dependency>
            <dependency>
                <groupId>org.reflections</groupId>
                <artifactId>reflections</artifactId>
                <version>${version.reflections}</version>
            </dependency>
            <dependency>
                <groupId>commons-io</groupId>
                <artifactId>commons-io</artifactId>
                <version>${version.commonsIo}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-text</artifactId>
                <version>${version.commonsText}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-lang3</artifactId>
                <version>${version.commonsLang3}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.tika</groupId>
                <artifactId>tika-core</artifactId>
                <version>${version.tika}</version>
            </dependency>
            <!--
                Dependencies for Xerces with XML Schema 1.1 support - Section START.
            -->
            <dependency>
                <groupId>eu.europa.ec.itb.xerces</groupId>
                <artifactId>xercesImpl</artifactId>
                <version>${version.xercesBuild}</version>
            </dependency>
            <dependency>
                <groupId>eu.europa.ec.itb.xerces</groupId>
                <artifactId>org.eclipse.wst.xml.xpath2.processor_1.2.1</artifactId>
                <version>${version.xercesBuild}</version>
            </dependency>
            <dependency>
                <groupId>eu.europa.ec.itb.xerces</groupId>
                <artifactId>cupv10k-runtime</artifactId>
                <version>${version.xercesBuild}</version>
            </dependency>
            <dependency>
                <groupId>eu.europa.ec.itb.xerces</groupId>
                <artifactId>icu4j</artifactId>
                <version>${version.xercesBuild}</version>
            </dependency>
            <dependency>
                <groupId>xml-resolver</groupId>
                <artifactId>xml-resolver</artifactId>
                <version>${version.xmlResolver}</version>
            </dependency>
            <dependency>
                <groupId>xalan</groupId>
                <artifactId>serializer</artifactId>
                <version>${version.serializer}</version>
            </dependency>
            <dependency>
                <groupId>xml-apis</groupId>
                <artifactId>xml-apis</artifactId>
                <version>${version.xmlApis}</version>
            </dependency>
            <!--
                Section END.
            -->
            <dependency>
                <groupId>net.sf.saxon</groupId>
                <artifactId>Saxon-HE</artifactId>
                <version>${version.saxon}</version>
            </dependency>
            <dependency>
                <groupId>jakarta.xml.ws</groupId>
                <artifactId>jakarta.xml.ws-api</artifactId>
                <version>${version.jaxwsApi}</version>
            </dependency>
            <dependency>
                <groupId>jakarta.jws</groupId>
                <artifactId>jakarta.jws-api</artifactId>
                <version>${version.jwsApi}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-configuration2</artifactId>
                <version>${version.commonsConfiguration}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.pekko</groupId>
                <artifactId>pekko-actor_3</artifactId>
                <version>${version.pekko}</version>
            </dependency>
            <dependency>
                <groupId>com.github.curious-odd-man</groupId>
                <artifactId>rgxgen</artifactId>
                <version>${version.rgxgen}</version>
            </dependency>
            <dependency>
                <groupId>com.sun.xml.messaging.saaj</groupId>
                <artifactId>saaj-impl</artifactId>
                <version>${version.saajImpl}</version>
            </dependency>
            <dependency>
                <groupId>dnsjava</groupId>
                <artifactId>dnsjava</artifactId>
                <version>${version.dnsJava}</version>
            </dependency>
            <dependency>
                <groupId>commons-fileupload</groupId>
                <artifactId>commons-fileupload</artifactId>
                <version>${version.commonsFileUpload}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-collections4</artifactId>
                <version>${version.commonsCollections}</version>
            </dependency>
            <dependency>
                <groupId>org.bouncycastle</groupId>
                <artifactId>bcprov-jdk18on</artifactId>
                <version>${version.bouncycastle}</version>
            </dependency>
            <dependency>
                <groupId>org.bouncycastle</groupId>
                <artifactId>bcmail-jdk18on</artifactId>
                <version>${version.bouncycastle}</version>
            </dependency>
            <dependency>
                <groupId>org.bouncycastle</groupId>
                <artifactId>bcpkix-jdk18on</artifactId>
                <version>${version.bouncycastle}</version>
            </dependency>
            <dependency>
                <groupId>com.helger.schematron</groupId>
                <artifactId>ph-schematron-api</artifactId>
                <version>${version.helgerSchematron}</version>
            </dependency>
            <dependency>
                <groupId>com.helger.schematron</groupId>
                <artifactId>ph-schematron-xslt</artifactId>
                <version>${version.helgerSchematron}</version>
            </dependency>
            <dependency>
                <groupId>com.helger.schematron</groupId>
                <artifactId>ph-schematron-pure</artifactId>
                <version>${version.helgerSchematron}</version>
            </dependency>
            <dependency>
                <groupId>com.helger.commons</groupId>
                <artifactId>ph-commons</artifactId>
                <version>${version.helgerCommons}</version>
            </dependency>
            <dependency>
                <groupId>com.helger.commons</groupId>
                <artifactId>ph-jaxb</artifactId>
                <version>${version.helgerCommons}</version>
            </dependency>
            <dependency>
                <groupId>com.helger.commons</groupId>
                <artifactId>ph-cache</artifactId>
                <version>${version.helgerCommons}</version>
            </dependency>
            <dependency>
                <groupId>org.xmlunit</groupId>
                <artifactId>xmlunit-core</artifactId>
                <version>${version.xmlUnit}</version>
            </dependency>
            <dependency>
                <groupId>io.github.openhtmltopdf</groupId>
                <artifactId>openhtmltopdf-core</artifactId>
                <version>${version.openhtmltopdf}</version>
            </dependency>
            <dependency>
                <groupId>io.github.openhtmltopdf</groupId>
                <artifactId>openhtmltopdf-pdfbox</artifactId>
                <version>${version.openhtmltopdf}</version>
            </dependency>
            <dependency>
                <groupId>io.github.openhtmltopdf</groupId>
                <artifactId>openhtmltopdf-slf4j</artifactId>
                <version>${version.openhtmltopdf}</version>
            </dependency>
            <dependency>
                <groupId>io.github.openhtmltopdf</groupId>
                <artifactId>openhtmltopdf-svg-support</artifactId>
                <version>${version.openhtmltopdf}</version>
            </dependency>
            <dependency>
                <groupId>org.jsoup</groupId>
                <artifactId>jsoup</artifactId>
                <version>${version.org.jsoup}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.jena</groupId>
                <artifactId>jena-arq</artifactId>
                <version>${version.jena}</version>
            </dependency>
            <dependency>
                <groupId>org.topbraid</groupId>
                <artifactId>shacl</artifactId>
                <version>${version.topbraid}</version>
            </dependency>
            <dependency>
                <groupId>com.networknt</groupId>
                <artifactId>json-schema-validator</artifactId>
                <version>${version.json-schema-validator}</version>
            </dependency>
            <dependency>
                <groupId>com.jayway.jsonpath</groupId>
                <artifactId>json-path</artifactId>
                <version>${version.jayway}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-annotations</artifactId>
                <version>${version.jacksonAnnotations}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-databind</artifactId>
                <version>${version.jackson2}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-core</artifactId>
                <version>${version.jackson2}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.datatype</groupId>
                <artifactId>jackson-datatype-jsr310</artifactId>
                <version>${version.jackson2}</version>
            </dependency>
            <dependency>
                <groupId>tools.jackson.core</groupId>
                <artifactId>jackson-databind</artifactId>
                <version>${version.jackson}</version>
            </dependency>
            <dependency>
                <groupId>tools.jackson.core</groupId>
                <artifactId>jackson-core</artifactId>
                <version>${version.jackson}</version>
            </dependency>
            <dependency>
                <groupId>tools.jackson.dataformat</groupId>
                <artifactId>jackson-dataformat-yaml</artifactId>
                <version>${version.jackson}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.pdfbox</groupId>
                <artifactId>pdfbox</artifactId>
                <version>${version.pdfbox}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.pdfbox</groupId>
                <artifactId>xmpbox</artifactId>
                <version>${version.pdfbox}</version>
            </dependency>
            <dependency>
                <groupId>org.verapdf</groupId>
                <artifactId>validation-model</artifactId>
                <version>${version.verapdf}</version>
            </dependency>
            <dependency>
                <groupId>com.sun.xml.bind</groupId>
                <artifactId>jaxb-impl</artifactId>
                <version>${version.jaxbImplLegacy}</version>
            </dependency>
            <dependency>
                <groupId>org.freemarker</groupId>
                <artifactId>freemarker</artifactId>
                <version>${version.freeMarker}</version>
            </dependency>
            <dependency>
                <groupId>org.webjars</groupId>
                <artifactId>swagger-ui</artifactId>
                <version>${version.swaggerUi}</version>
            </dependency>
            <dependency>
                <groupId>com.googlecode.owasp-java-html-sanitizer</groupId>
                <artifactId>owasp-java-html-sanitizer</artifactId>
                <version>${version.owaspHtmlSanitizer}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.thrift</groupId>
                <artifactId>libthrift</artifactId>
                <version>${version.libthrift}</version>
            </dependency>
            <!-- JAXB BOM to align JAXB-related APIs and implementations. -->
            <dependency>
                <groupId>org.glassfish.jaxb</groupId>
                <artifactId>jaxb-bom</artifactId>
                <version>${version.jaxb}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <reporting>
        <plugins>
            <!--
                Generate project reports with `mvn install site site:stage`.
            -->
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-project-info-reports-plugin</artifactId>
                <version>${version.plugin.projectInfoReports}</version>
                <reportSets>
                    <reportSet>
                        <reports>
                            <!-- index only = suppress all default reports -->
                            <report>index</report>
                        </reports>
                    </reportSet>
                </reportSets>
            </plugin>
            <plugin>
                <groupId>org.codehaus.mojo</groupId>
                <artifactId>versions-maven-plugin</artifactId>
                <version>${version.plugin.versionsMavenPlugin}</version>
                <reportSets>
                    <!-- Aggregate report: root only -->
                    <reportSet>
                        <id>aggregate</id>
                        <inherited>false</inherited>
                        <configuration>
                            <onlyProjectDependencies>true</onlyProjectDependencies>
                            <processDependencyManagement>true</processDependencyManagement>
                        </configuration>
                        <reports>
                            <report>dependency-updates-aggregate-report</report>
                            <report>plugin-updates-report</report>
                        </reports>
                    </reportSet>
                    <!-- Per-module reports: run in each module -->
                    <reportSet>
                        <id>modules</id>
                        <configuration>
                            <onlyProjectDependencies>true</onlyProjectDependencies>
                            <processDependencyManagement>true</processDependencyManagement>
                        </configuration>
                        <reports>
                            <report>dependency-updates-report</report>
                        </reports>
                    </reportSet>
                </reportSets>
            </plugin>
        </plugins>
    </reporting>

    <modules>
        <module>gitb-common</module>
        <module>gitb-core</module>
        <module>gitb-remote</module>
        <module>gitb-engine</module>
        <module>gitb-lib</module>
        <module>gitb-testbed-service</module>
        <module>gitb-reports</module>
        <module>gitb-validator-tdl</module>
        <module>gitb-xml-resources</module>
    </modules>

</project>