alfresco-transform-core/pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.alfresco</groupId>
    <artifactId>alfresco-transform-core</artifactId>
    <version>5.4.5-A.2-SNAPSHOT</version>
    <name>Alfresco Transform Core</name>
    <packaging>pom</packaging>

    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>4.1.1</version>
    </parent>

    <properties>
        <java.version>17</java.version>
        <maven.compiler.source>17</maven.compiler.source>
        <maven.compiler.target>17</maven.compiler.target>

        <acs-compatible.java.version>11</acs-compatible.java.version>
        <image.tag>latest</image.tag>
        <image.registry>quay.io</image.registry>
        <dependency.pdfbox.version>3.0.8</dependency.pdfbox.version>
        <dependency.alfresco-jodconverter-core.version>3.0.1.20</dependency.alfresco-jodconverter-core.version>
        <env.project_version>${project.version}</env.project_version>
        <dependency.jackson2.version>2.22.2</dependency.jackson2.version>
        <dependency.jackson.annotations.version>2.22</dependency.jackson.annotations.version>
        <dependency.jackson.version>3.2.2</dependency.jackson.version>
        <dependency.tika.version>4.0.0</dependency.tika.version>
        <dependency.poi.version>5.5.1</dependency.poi.version>
        <dependency.bcprov.version>1.85</dependency.bcprov.version>
        <dependency.commons-io.version>2.22.0</dependency.commons-io.version>
        <dependency.imaging.version>1.0.0-alpha6</dependency.imaging.version>
        <dependency.snakeyaml.version>2.7</dependency.snakeyaml.version>
        <dependency.tomcat.embed.version>11.0.25</dependency.tomcat.embed.version>
        <dependency.activemq-client.version>6.3.2</dependency.activemq-client.version>

        <spotless-plugin.version>3.10.2</spotless-plugin.version>

        <parent.core.deploy.skip>false</parent.core.deploy.skip>
        <commons-lang3.version>3.20.0</commons-lang3.version>
        <spring-retry.version>2.0.13</spring-retry.version>
        <log4j2.version>2.26.1</log4j2.version> <!-- security fix CVE-2026-49844, can be removed once Spring Boot manages log4j2 >= 2.26.1 -->
        <dependency.jsoup.version>1.23.2</dependency.jsoup.version> <!-- security fix CVE-2026-71497, can be removed once tika-parser-code-module manages jsoup >= 1.23.1 -->
        <httpclient5.version>5.6.4</httpclient5.version> <!-- security fix CVE-2026-64607, can be removed once Spring Boot BOM manages httpclient5 >= 5.6.3 -->
        <httpcore5.version>5.4.3</httpcore5.version> <!-- security fix CVE-2026-54399, can be removed once Spring Boot BOM manages httpcore5 >= 5.4.3 -->
    </properties>

    <profiles>
        <profile>
            <id>full-build</id>
            <activation>
                <activeByDefault>true</activeByDefault>
            </activation>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/imagemagick</module>
                <module>engines/libreoffice</module>
                <module>engines/misc</module>
                <module>engines/pdfrenderer</module>
                <module>engines/tika</module>
                <module>engines/aio</module>
                <module>engines/example</module>
                <module>deprecated/alfresco-transformer-base</module>
            </modules>
        </profile>
        <profile>
            <id>base</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/example</module>
                <module>deprecated/alfresco-transformer-base</module>
            </modules>
        </profile>
        <profile>
            <id>imagemagick</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/imagemagick</module>
            </modules>
        </profile>
        <profile>
            <id>libreoffice</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/libreoffice</module>
            </modules>
        </profile>
        <profile>
            <id>misc</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/misc</module>
            </modules>
        </profile>
        <profile>
            <id>pdf-renderer</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/pdfrenderer</module>
            </modules>
        </profile>
        <profile>
            <id>tika</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/tika</module>
            </modules>
        </profile>
        <profile>
            <!-- Should only be run after all other snapshot images have been build  -->
            <id>aio-test</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/aio</module>
            </modules>
        </profile>
        <profile>
            <id>example</id>
            <modules>
                <module>model</module>
                <module>engines/base</module>
                <module>engines/example</module>
            </modules>
        </profile>
    </profiles>

    <scm>
        <connection>scm:git:https://github.com/Alfresco/alfresco-transform-core.git</connection>
        <developerConnection>scm:git:https://github.com/Alfresco/alfresco-transform-core.git</developerConnection>
        <url>https://github.com/Alfresco/alfresco-transform-core</url>
        <tag>HEAD</tag>
    </scm>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>commons-io</groupId>
                <artifactId>commons-io</artifactId>
                <version>${dependency.commons-io.version}</version>
            </dependency>
            <dependency>
                <groupId>org.dom4j</groupId>
                <artifactId>dom4j</artifactId>
                <version>2.2.0</version>
            </dependency>
            <dependency>
                <groupId>org.alfresco</groupId>
                <artifactId>alfresco-jodconverter-core</artifactId>
                <version>${dependency.alfresco-jodconverter-core.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.activemq</groupId>
                <artifactId>activemq-client</artifactId>
                <version>${dependency.activemq-client.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.pdfbox</groupId>
                <artifactId>pdfbox</artifactId>
                <version>${dependency.pdfbox.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.pdfbox</groupId>
                <artifactId>pdfbox-tools</artifactId>
                <version>${dependency.pdfbox.version}</version>
            </dependency>
            <!-- https://mvnrepository.com/artifact/org.apache.commons/commons-imaging -->
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-imaging</artifactId>
                <version>${dependency.imaging.version}</version>
            </dependency>
            <!-- Jackson -->
            <dependency>
                <groupId>tools.jackson</groupId>
                <artifactId>jackson-bom</artifactId>
                <version>${dependency.jackson.version}</version>
                <scope>import</scope>
                <type>pom</type>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson</groupId>
                <artifactId>jackson-bom</artifactId>
                <version>${dependency.jackson2.version}</version>
                <scope>import</scope>
                <type>pom</type>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-annotations</artifactId>
                <version>${dependency.jackson.annotations.version}</version>
            </dependency>
            <!-- Google Guava -->
            <dependency>
                <groupId>com.google.guava</groupId>
                <artifactId>guava</artifactId>
                <version>33.7.1-jre</version>
            </dependency>
            <!-- Junrar & compression -->
            <dependency>
                <groupId>com.github.junrar</groupId>
                <artifactId>junrar</artifactId>
                <version>8.1.1</version>
            </dependency>
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-compress</artifactId>
                <version>1.28.0</version>
            </dependency>

            <dependency>
                <groupId>commons-codec</groupId>
                <artifactId>commons-codec</artifactId>
                <version>1.22.1</version>
            </dependency>
            <!-- temporary security fix CVE-2026-5598 / CVE-2026-0636 / CVE-2026-5588 -->
            <dependency>
                <groupId>org.bouncycastle</groupId>
                <artifactId>bcprov-jdk18on</artifactId>
                <version>${dependency.bcprov.version}</version>
            </dependency>
            <dependency>
                <groupId>org.bouncycastle</groupId>
                <artifactId>bcpkix-jdk18on</artifactId>
                <version>${dependency.bcprov.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.tomcat.embed</groupId>
                <artifactId>tomcat-embed-core</artifactId>
                <version>${dependency.tomcat.embed.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.tomcat.embed</groupId>
                <artifactId>tomcat-embed-el</artifactId>
                <version>${dependency.tomcat.embed.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.tomcat.embed</groupId>
                <artifactId>tomcat-embed-websocket</artifactId>
                <version>${dependency.tomcat.embed.version}</version>
            </dependency>
            <dependency>
                <groupId>org.yaml</groupId>
                <artifactId>snakeyaml</artifactId>
                <version>${dependency.snakeyaml.version}</version>
            </dependency>
            <dependency>
                <groupId>org.testcontainers</groupId>
                <artifactId>testcontainers</artifactId>
                <version>2.0.5</version>
            </dependency>
            <!-- Added as part of fixing vulnerability (PRODSEC-10503), Please remove it if no more needed -->
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-lang3</artifactId>
                <version>${commons-lang3.version}</version>
            </dependency>

            <!-- temporary security fix AAE-43877 -->
            <dependency>
                <groupId>org.codehaus.plexus</groupId>
                <artifactId>plexus-utils</artifactId>
                <version>4.1.0</version>
            </dependency>
            <!-- temporary security fix AAE-36687 -->
            <!-- security fix CVE-2026-71497 (GHSA-pmhh-3w7g-xqp8), transitive via tika-parser-code-module -->
            <dependency>
                <groupId>org.jsoup</groupId>
                <artifactId>jsoup</artifactId>
                <version>${dependency.jsoup.version}</version>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <distributionManagement>
        <snapshotRepository>
            <id>alfresco-public-snapshots</id>
            <url>https://artifacts.alfresco.com/nexus/content/repositories/snapshots</url>
        </snapshotRepository>
        <repository>
            <id>alfresco-public</id>
            <url>https://artifacts.alfresco.com/nexus/content/repositories/releases</url>
        </repository>
    </distributionManagement>

    <build>
        <plugins>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-javadoc-plugin</artifactId>
                <configuration>
                    <doclint>none</doclint>
                </configuration>
                <executions>
                    <execution>
                        <id>attach-javadocs</id>
                        <goals>
                            <goal>jar</goal>
                        </goals>
                    </execution>
                </executions>
            </plugin>
            <plugin>
                <inherited>false</inherited>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-deploy-plugin</artifactId>
                <configuration>
                  <skip>${parent.core.deploy.skip}</skip>
                </configuration>
            </plugin>
        </plugins>

        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>org.codehaus.mojo</groupId>
                    <artifactId>license-maven-plugin</artifactId>
                    <version>2.7.1</version>
                    <configuration>
                        <inceptionYear>2005</inceptionYear>
                        <organizationName>Alfresco Software Limited</organizationName>
                        <projectName>Alfresco Transform Core</projectName>
                    </configuration>
                    <executions>
                        <execution>
                            <id>third-party-licenses</id>
                            <goals>
                                <goal>add-third-party</goal>
                                <goal>download-licenses</goal>
                            </goals>
                            <phase>generate-resources</phase>
                            <configuration>
                                <failOnMissing>true</failOnMissing>
                                <excludedScopes>provided,test</excludedScopes>
                                <excludedGroups>org.alfresco</excludedGroups>
                                <failIfWarning>true</failIfWarning>
                                <includedLicenses>https://raw.githubusercontent.com/Alfresco/third-party-license-overrides/master/includedLicenses.txt</includedLicenses>
                                <licenseMergesUrl>https://raw.githubusercontent.com/Alfresco/third-party-license-overrides/master/licenseMerges.txt</licenseMergesUrl>
                                <overrideUrl>https://raw.githubusercontent.com/Alfresco/third-party-license-overrides/master/override-THIRD-PARTY.properties</overrideUrl>
                                <licenseUrlReplacements>
                                    <!-- www.gnu.org is unreachable over IPv6 (GitHub Actions) and blocked over IPv4 on some networks.
                                         Remap all GNU license URLs to stable GitHub mirrors. Classpath/license.html is pinned to an OpenJDK commit SHA.
                                         All other GNU URLs use the SPDX license-list-data mirror. -->
                                    <licenseUrlReplacement>
                                        <regexp>https?://www\.gnu\.org/licenses/old-licenses/lgpl-2\.1\.html</regexp>
                                        <replacement>https://raw.githubusercontent.com/spdx/license-list-data/main/text/LGPL-2.1-only.txt</replacement>
                                    </licenseUrlReplacement>
                                    <licenseUrlReplacement>
                                        <regexp>https?://www\.gnu\.org/software/classpath/license\.html</regexp>
                                        <replacement>https://raw.githubusercontent.com/openjdk/jdk/d3f2498ed72089301a49ddf0bc7bd2df54368033/LICENSE</replacement>
                                    </licenseUrlReplacement>
                                    <licenseUrlReplacement>
                                        <regexp>https?://www\.gnu\.org/licenses/lgpl\.txt</regexp>
                                        <replacement>https://raw.githubusercontent.com/spdx/license-list-data/main/text/LGPL-3.0-only.txt</replacement>
                                    </licenseUrlReplacement>
                                    <licenseUrlReplacement>
                                        <regexp>https?://www\.gnu\.org/licenses/gpl\.txt</regexp>
                                        <replacement>https://raw.githubusercontent.com/spdx/license-list-data/main/text/GPL-3.0-only.txt</replacement>
                                    </licenseUrlReplacement>
                                </licenseUrlReplacements>
                            </configuration>
                        </execution>
                        <execution>
                            <id>project-license</id>
                            <goals>
                                <goal>check-file-header</goal>
                            </goals>
                            <phase>process-sources</phase>
                            <configuration>
                                <addJavaLicenseAfterPackage>false</addJavaLicenseAfterPackage>
                                <canUpdateCopyright>true</canUpdateCopyright>
                                <canUpdateDescription>true</canUpdateDescription>
                                <excludes>
                                    <exclude>**/package-info.java</exclude>
                                    <exclude>**/*.properties</exclude>
                                    <exclude>**/*.css</exclude>
                                    <exclude>**/*.xml</exclude>
                                    <exclude>**/*.json</exclude>
                                    <exclude>**/*.txt</exclude>
                                    <exclude>**/*.html</exclude>
                                </excludes>
                                <failOnMissingHeader>true</failOnMissingHeader>
                                <licenseName>community</licenseName>
                                <licenseResolver>file:${project.parent.basedir}/license</licenseResolver>
                            </configuration>
                        </execution>
                    </executions>
                </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-surefire-plugin</artifactId>
                    <configuration>
                        <forkCount>1</forkCount>
                        <reuseForks>true</reuseForks>
                        <systemPropertyVariables>
                            <IMAGEMAGICK_EXE>/usr/bin/convert</IMAGEMAGICK_EXE>
                            <IMAGEMAGICK_DYN>/usr/lib64/ImageMagick-7.0.10/lib</IMAGEMAGICK_DYN>
                            <IMAGEMAGICK_ROOT>/usr/lib64/ImageMagick-7.0.10</IMAGEMAGICK_ROOT>
                            <LIBREOFFICE_HOME>/opt/libreoffice7.2</LIBREOFFICE_HOME>
                            <LIBREOFFICE_MAX_TASKS_PER_PROCESS>200</LIBREOFFICE_MAX_TASKS_PER_PROCESS>
                            <LIBREOFFICE_TIMEOUT>1200000</LIBREOFFICE_TIMEOUT>
                            <LIBREOFFICE_PORT_NUMBERS>8100</LIBREOFFICE_PORT_NUMBERS>
                            <LIBREOFFICE_TEMPLATE_PROFILE_DIR />
                            <LIBREOFFICE_IS_ENABLED>true</LIBREOFFICE_IS_ENABLED>
                            <PDF_RENDERER_EXE>/usr/bin/alfresco-pdf-renderer</PDF_RENDERER_EXE>
                            <SERVER_PORT>8090</SERVER_PORT>
                            <buildDirectory>${project.build.directory}</buildDirectory>
                        </systemPropertyVariables>
                    </configuration>
                </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-failsafe-plugin</artifactId>
                    <configuration>
                        <forkCount>1</forkCount>
                        <reuseForks>true</reuseForks>
                    </configuration>
                </plugin>
                <plugin>
                    <groupId>io.fabric8</groupId>
                    <artifactId>docker-maven-plugin</artifactId>
                    <version>0.49.0</version>
                 </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-source-plugin</artifactId>
                    <executions>
                        <execution>
                            <goals>
                                <goal>jar-no-fork</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>
                <plugin>
                    <groupId>com.diffplug.spotless</groupId>
                    <artifactId>spotless-maven-plugin</artifactId>
                    <version>${spotless-plugin.version}</version>
                    <configuration>
                        <java>
                            <eclipse>
                                <file>https://raw.githubusercontent.com/Alfresco/alfresco-community-repo/refs/heads/master/alfresco-formatter.xml</file>
                            </eclipse>
                            <importOrder>
                                <order>\#java|\#javax|\#jakarta,\#,\#org.alfresco,java|javax|jakarta,,org.alfresco</order>
                            </importOrder>
                            <removeUnusedImports />
                            <formatAnnotations />
                        </java>
                    </configuration>
                </plugin>
            </plugins>
        </pluginManagement>
    </build>
</project>