Justin Bertram 2e3c69c9c8 ARTEMIS-3612 update Hawtio and strip Log4j from console web app
Move to the latest release of Hawtio 2.14.x.

Also, remove the Log4j archives from the web console application. It's
not necessary to include Log4j archives because Hawtio itself uses SLF4J
and the logging implementation will be provided by the broker runtime.
We already do this for SLF4J.

While not strictly necessary, removing Log4j will ease concerns about
security issues such as the recently announced CVE-2021-44228.
2021-12-16 21:25:48 -05:00

93 lines
3.6 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to You under the Apache License, Version 2.0
(the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.apache.activemq</groupId>
<artifactId>artemis-pom</artifactId>
<version>2.21.0-SNAPSHOT</version>
</parent>
<artifactId>artemis-hawtio-pom</artifactId>
<name>ActiveMQ Artemis Cons</name>
<!-- hawtio plugins are almost always war files -->
<packaging>pom</packaging>
<properties>
<activemq.basedir>${project.basedir}/..</activemq.basedir>
<hawtio.version>2.14.2</hawtio.version>
<jline.version>3.2.0</jline.version>
<junit-version>4.11</junit-version>
<log4j-version>1.2.17</log4j-version>
<maven-version>3.0.4</maven-version>
<maven-antrun-plugin-version>1.7</maven-antrun-plugin-version>
<maven-bundle-plugin-version>3.0.1</maven-bundle-plugin-version>
<maven-plugin-version>3.3</maven-plugin-version>
<maven-source-plugin-version>2.1.2</maven-source-plugin-version>
<maven-resources-plugin-version>2.6</maven-resources-plugin-version>
<geronimo.servlet.3.0.spec.version>1.0</geronimo.servlet.3.0.spec.version>
<!-- use slf4j-api 1.6.x to be easy compatible with older Karaf/Camel releases -->
<slf4j-api-version>1.6.6</slf4j-api-version>
<slf4j-version>1.7.21</slf4j-version>
</properties>
<dependencyManagement>
<dependencies>
<!-- we only need to embed this dependency in the war, this contains
a nice helper class that our plugin can use to export it's plugin
mbean -->
<dependency>
<groupId>io.hawt</groupId>
<artifactId>hawtio-plugin-mbean</artifactId>
<version>${hawtio.version}</version>
</dependency>
<!-- servlet API is provided by the container -->
<dependency>
<groupId>org.apache.geronimo.specs</groupId>
<artifactId>geronimo-servlet_3.0_spec</artifactId>
<version>${geronimo.servlet.3.0.spec.version}</version>
<scope>provided</scope>
</dependency>
<!-- logging -->
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
<version>${slf4j-version}</version>
<scope>provided</scope>
</dependency>
</dependencies>
</dependencyManagement>
<modules>
<module>activemq-branding</module>
<module>artemis-plugin</module>
<module>artemis-console</module>
</modules>
</project>