<?xml version="1.0" encoding="UTF-8"?>

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">

<modelVersion>4.0.0</modelVersion>

<parent>

<groupId>org.apache</groupId>

<artifactId>apache</artifactId>

<version>31</version>

</parent>

<groupId>org.apache.iotdb</groupId>

<artifactId>iotdb-extras-parent</artifactId>

<version>2.0.4-SNAPSHOT</version>

<packaging>pom</packaging>

<name>Apache IoTDB Project Extras Parent POM</name>

<description>This is the secondary repository that builds the examples and integration modules for IoTDB.</description>

<modules>

<module>connectors</module>

<module>distributions</module>

<module>iotdb-collector</module>

<module>metric-scrape</module>

<module>mybatis-generator</module>

<module>mybatis-support</module>

</modules>

<properties>

<!-- Explicitly set a variable used by all dependencies to the IoTDB dependencies, as the

<airlift-units.version>1.7</airlift-units.version>

<airlift.version>206</airlift.version>

<!--airlift-stats.version>235</airlift-stats.version-->

<airline.version>0.9</airline.version>

<antlr4.version>4.13.2</antlr4.version>

<!-- By default, the argLine is empty-->

<argLine/>

<awaitility.version>4.2.0</awaitility.version>

<boost.include.dir/>

<caffeine.version>2.9.3</caffeine.version>

<cglib.version>3.3.0</cglib.version>

<checker-qual.version>3.38.0</checker-qual.version>

<cmake.build.type>Release</cmake.build.type>

<commons-cli.version>1.5.0</commons-cli.version>

<commons-codec.version>1.16.1</commons-codec.version>

<commons-csv.version>1.10.0</commons-csv.version>

<commons-io.version>2.14.0</commons-io.version>

<commons-jexl3.version>3.3</commons-jexl3.version>

<commons-lang3.version>3.18.0</commons-lang3.version>

<commons-math3.version>3.6.1</commons-math3.version>

<commons-pool2.version>2.11.1</commons-pool2.version>

<commons.collections4.version>4.4</commons.collections4.version>

<ctest.skip.tests>false</ctest.skip.tests>

<disruptor.version>3.4.4</disruptor.version>

<drill.freemarker.maven.plugin.version>1.21.1</drill.freemarker.maven.plugin.version>

<dropqizard.metrics.version>4.2.19</dropqizard.metrics.version>

<eclipse-collections.version>11.1.0</eclipse-collections.version>

<!-- disable enforcer by default-->

<enforcer.skip>true</enforcer.skip>

<felix.version>5.1.9</felix.version>

<findbugs.jsr305.version>3.0.2</findbugs.jsr305.version>

<flink-shaded-zookeeper-3.version>3.8.1-17.0</flink-shaded-zookeeper-3.version>

<flink.version>1.17.1</flink.version>

<fusesource-mqtt-client.version>1.16</fusesource-mqtt-client.version>

<google.java.format.version>1.28.0</google.java.format.version>

<gson.version>2.13.1</gson.version>

<guava.version>32.1.2-jre</guava.version>

<hadoop.version>3.3.6</hadoop.version>

<hive.version>3.1.3</hive.version>

<httpclient.version>4.5.14</httpclient.version>

<httpcore.version>4.4.16</httpcore.version>

<!--

<iotdb-tools-thrift.version>0.23.0.0</iotdb-tools-thrift.version>

<iotdb.version>2.0.11</iotdb.version>

<jackson.version>2.18.6</jackson.version>

<!-- This is the last version to support the javax namespace -->

<jakarta.servlet-api.version>4.0.4</jakarta.servlet-api.version>

<!-- This is the last version to support the javax namespace -->

<jakarta.validation-api.version>2.0.2</jakarta.validation-api.version>

<!-- This is the last version to support the javax namespace -->

<jakarta.ws.rs-api.version>2.1.6</jakarta.ws.rs-api.version>

<java-websocket.version>1.5.4</java-websocket.version>

<jcip-annotations.version>1.0-1</jcip-annotations.version>

<!-- This is the last version to support the javax namespace -->

<jersey.version>2.40</jersey.version>

<jetty.version>9.4.57.v20241219</jetty.version>

<jjwt.version>0.11.5</jjwt.version>

<jline.version>3.26.2</jline.version>

<jna.version>5.14.0</jna.version>

<json-smart.version>2.5.0</json-smart.version>

<jtransforms.version>3.1</jtransforms.version>

<junit.version>4.13.2</junit.version>

<kafka.version>2.8.2</kafka.version>

<logback.version>1.5.34</logback.version>

<lz4-java.version>1.10.1</lz4-java.version>

<maven.assembly.version>3.6.0</maven.assembly.version>

<maven.compiler.source>17</maven.compiler.source>

<maven.compiler.target>17</maven.compiler.target>

<maven.compiler.release>17</maven.compiler.release>

<micrometer.version>1.11.4</micrometer.version>

<milo.version>0.6.14</milo.version>

<!-- It seems that powermock is having issues with the newest mockito versions -->

<mockito.version>2.23.4</mockito.version>

<!--mockito.version>4.11.0</mockito.version-->

<moquette.version>0.18.0</moquette.version>

<netty.version>4.1.134.Final</netty.version>

<nimbus-jose-jwt.version>9.37.2</nimbus-jose-jwt.version>

<oauth2-oidc-sdk.version>10.15</oauth2-oidc-sdk.version>

<openapi.generator.version>7.10.0</openapi.generator.version>

<orc-core.version>1.9.1</orc-core.version>

<osgi.version>7.0.0</osgi.version>

<pax-jdbc-common.version>1.5.6</pax-jdbc-common.version>

<powermock.version>2.0.9</powermock.version>

<ratis-thirdparty-misc.version>1.1.0</ratis-thirdparty-misc.version>

<ratis.version>3.3.0</ratis.version>

<reactive-streams.version>1.0.4</reactive-streams.version>

<reactor-netty.version>1.2.9</reactor-netty.version>

<reactor.version>3.7.9</reactor.version>

<reflections.version>0.10.2</reflections.version>

<rocketmq-client.version>5.1.3</rocketmq-client.version>

<scala.library.version>2.12.19</scala.library.version>

<scala.version>2.12</scala.version>

<!-- Newer version requires refactoring of testsuite -->

<scalatest.version>3.0.9</scalatest.version>

<slf4j.version>2.0.9</slf4j.version>

<snappy-java.version>1.1.10.5</snappy-java.version>

<sonar.coverage.jacoco.xmlReportPaths>target/jacoco-merged-reports/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>

<!-- Exclude all generated code -->

<sonar.exclusions>**/generated-sources</sonar.exclusions>

<!-- URL of the ASF SonarQube server -->

<sonar.host.url>https://sonarcloud.io</sonar.host.url>

<sonar.java.checkstyle.reportPaths>target/checkstyle-report.xml</sonar.java.checkstyle.reportPaths>

<sonar.junit.reportPaths>target/surefire-reports,target/failsafe-reports</sonar.junit.reportPaths>

<sonar.organization>apache</sonar.organization>

<spark-scala.2.11.version>2.4.8</spark-scala.2.11.version>

<spark-scala.2.12.version>3.5.0</spark-scala.2.12.version>

<!-- Override this to `true`, if you want to disable spotless -->

<spotless.skip>false</spotless.skip>

<spotless.version>2.44.5</spotless.version>

<!-- Legacy Grafana WAR uses Spring Boot 2 / javax; the starter overrides these. -->

<spring-boot.version>2.7.18</spring-boot.version>

<!-- This is the last version to support the javax namespace -->

<spring.version>5.3.39</spring.version>

<sqlite.version>3.49.1.0</sqlite.version>

<swagger.version>1.6.14</swagger.version>

<thrift.exec-cmd.executable>chmod</thrift.exec-cmd.executable>

<thrift.exec.absolute.path/>

<!-- Match the runtime to the generated IoTDB 2.0.11 Thrift classes. -->

<thrift.version>0.23.0</thrift.version>

<tomcat.version>9.0.86</tomcat.version>

<tsfile.version>2.4.0</tsfile.version>

<xz.version>1.9</xz.version>

<zeppelin.version>0.11.1</zeppelin.version>

<zstd-jni.version>1.5.6-3</zstd-jni.version>

</properties>

<!--

<dependencyManagement>

<dependencies>

<!-- Match the released IoTDB v2.0.11 dependency baseline. -->

<dependency>

<groupId>io.netty</groupId>

<artifactId>netty-bom</artifactId>

<version>${netty.version}</version>

<type>pom</type>

<scope>import</scope>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson</groupId>

<artifactId>jackson-bom</artifactId>

<version>${jackson.version}</version>

<type>pom</type>

<scope>import</scope>

</dependency>

<dependency>

<groupId>at.yawk.lz4</groupId>

<artifactId>lz4-java</artifactId>

<version>${lz4-java.version}</version>

</dependency>

<dependency>

<groupId>org.xerial.snappy</groupId>

<artifactId>snappy-java</artifactId>

<version>${snappy-java.version}</version>

</dependency>

<dependency>

<groupId>org.apache.iotdb</groupId>

<artifactId>iotdb-jdbc</artifactId>

<version>${iotdb.version}</version>

</dependency>

<dependency>

<groupId>org.apache.iotdb</groupId>

<artifactId>iotdb-subscription</artifactId>

<version>${iotdb.version}</version>

</dependency>

<dependency>

<groupId>org.apache.iotdb</groupId>

<artifactId>isession</artifactId>

<version>${iotdb.version}</version>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot</artifactId>

<version>${spring-boot.version}</version>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-autoconfigure</artifactId>

<version>${spring-boot.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-tx</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-beans</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-web</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-context</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-webmvc</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-jdbc</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-test</artifactId>

<version>${spring.version}</version>

</dependency>

<dependency>

<groupId>org.slf4j</groupId>

<artifactId>slf4j-api</artifactId>

<version>${slf4j.version}</version>

</dependency>

<dependency>

<groupId>org.apache.thrift</groupId>

<artifactId>libthrift</artifactId>

<version>${thrift.version}</version>

<exclusions>

<!-- We don't use thrift HTTP client or servlet transports. -->

<exclusion>

<groupId>org.apache.httpcomponents.client5</groupId>

<artifactId>httpclient5</artifactId>

</exclusion>

<exclusion>

<groupId>org.apache.httpcomponents.core5</groupId>

<artifactId>httpcore5</artifactId>

</exclusion>

<exclusion>

<groupId>org.apache.httpcomponents.core5</groupId>

<artifactId>httpcore5-h2</artifactId>

</exclusion>

<exclusion>

<groupId>jakarta.servlet</groupId>

<artifactId>jakarta.servlet-api</artifactId>

</exclusion>

<!--

<exclusion>

<groupId>jakarta.annotation</groupId>

<artifactId>jakarta.annotation-api</artifactId>

</exclusion>

<!--

<exclusion>

<groupId>org.apache.commons</groupId>

<artifactId>commons-lang3</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.commons</groupId>

<artifactId>commons-lang3</artifactId>

<version>${commons-lang3.version}</version>

</dependency>

<dependency>

<groupId>junit</groupId>

<artifactId>junit</artifactId>

<version>${junit.version}</version>

</dependency>

<dependency>

<groupId>org.mockito</groupId>

<artifactId>mockito-core</artifactId>

<version>${mockito.version}</version>

</dependency>

<dependency>

<groupId>org.osgi</groupId>

<artifactId>osgi.cmpn</artifactId>

<version>${osgi.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-clients</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-core</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-hadoop-fs</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-java</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-streaming-java</artifactId>

<version>${flink.version}</version>

<exclusions>

<!-- This dependency pulls in loads of duplicate versions of all sorts of libraries -->

<exclusion>

<groupId>org.apache.flink</groupId>

<artifactId>flink-shaded-zookeeper-3</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-table-api-java-bridge</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-table-common</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-table-test-utils</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-shaded-zookeeper-3</artifactId>

<version>${flink-shaded-zookeeper-3.version}</version>

</dependency>

<dependency>

<groupId>org.apache.flink</groupId>

<artifactId>flink-table-api-java</artifactId>

<version>${flink.version}</version>

</dependency>

<dependency>

<groupId>com.google.guava</groupId>

<artifactId>guava</artifactId>

<version>${guava.version}</version>

</dependency>

<dependency>

<groupId>org.java-websocket</groupId>

<artifactId>Java-WebSocket</artifactId>

<version>${java-websocket.version}</version>

</dependency>

<dependency>

<groupId>com.google.code.findbugs</groupId>

<artifactId>jsr305</artifactId>

<version>${findbugs.jsr305.version}</version>

</dependency>

<dependency>

<groupId>org.apache.hadoop</groupId>

<artifactId>hadoop-client</artifactId>

<version>${hadoop.version}</version>

<exclusions>

<exclusion>

<groupId>javax.xml.bind</groupId>

<artifactId>jaxb-api</artifactId>

</exclusion>

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>jcl-over-slf4j</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.hadoop</groupId>

<artifactId>hadoop-common</artifactId>

<version>${hadoop.version}</version>

<exclusions>

<!-- This is a fork of log4j 1, and it duplicates all sorts of classes -->

<exclusion>

<groupId>ch.qos.reload4j</groupId>

<artifactId>reload4j</artifactId>

</exclusion>

<!-- This is a fork of log4j 1, and it duplicates all sorts of classes -->

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>slf4j-reload4j</artifactId>

</exclusion>

<!-- Multiple CVEs reported for this, however we are not using Log4j -->

<exclusion>

<groupId>log4j</groupId>

<artifactId>log4j</artifactId>

</exclusion>

<exclusion>

<groupId>javax.xml.bind</groupId>

<artifactId>jaxb-api</artifactId>

</exclusion>

<exclusion>

<groupId>javax.ws.rs</groupId>

<artifactId>jsr311-api</artifactId>

</exclusion>

<exclusion>

<groupId>com.sun.jersey</groupId>

<artifactId>jersey-server</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.hadoop</groupId>

<artifactId>hadoop-client-runtime</artifactId>

<version>${hadoop.version}</version>

<exclusions>

<!-- This is a fork of log4j 1, and it duplicates all sorts of classes -->

<exclusion>

<groupId>ch.qos.reload4j</groupId>

<artifactId>reload4j</artifactId>

</exclusion>

<!-- This is a fork of log4j 1, and it duplicates all sorts of classes -->

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>slf4j-reload4j</artifactId>

</exclusion>

<!-- Multiple CVEs reported for this, however we are not using Log4j -->

<exclusion>

<groupId>log4j</groupId>

<artifactId>log4j</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.hadoop</groupId>

<artifactId>hadoop-mapreduce-client-core</artifactId>

<version>${hadoop.version}</version>

<exclusions>

<!-- This is a fork of log4j 1, and it duplicates all sorts of classes -->

<exclusion>

<groupId>ch.qos.reload4j</groupId>

<artifactId>reload4j</artifactId>

</exclusion>

<!-- This is a fork of log4j 1, and it duplicates all sorts of classes -->

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>slf4j-reload4j</artifactId>

</exclusion>

<exclusion>

<groupId>javax.xml.bind</groupId>

<artifactId>jaxb-api</artifactId>

</exclusion>

<exclusion>

<groupId>com.sun.jersey</groupId>

<artifactId>jersey-server</artifactId>

</exclusion>

<!-- Multiple CVEs are reported for this version, but we're using a newer version -->

<exclusion>

<groupId>io.netty</groupId>

<artifactId>netty</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>com.google.code.gson</groupId>

<artifactId>gson</artifactId>

<version>${gson.version}</version>

</dependency>

<dependency>

<groupId>jakarta.servlet</groupId>

<artifactId>jakarta.servlet-api</artifactId>

<version>${jakarta.servlet-api.version}</version>

</dependency>

<dependency>

<groupId>org.apache.hive</groupId>

<artifactId>hive-exec</artifactId>

<version>${hive.version}</version>

<!-- Using the default adds a shaded version with loads of duplicate classes -->

<classifier>core</classifier>

<exclusions>

<!-- This seems to only be available in a version with included protobuf and slf4j -->

<exclusion>

<groupId>org.apache.calcite.avatica</groupId>

<artifactId>avatica</artifactId>

</exclusion>

<exclusion>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-1.2-api</artifactId>

</exclusion>

<exclusion>

<groupId>javax.xml.bind</groupId>

<artifactId>jaxb-api</artifactId>

</exclusion>

<!-- There is no way on earth that I can imagine that ivy is really needed (CVEs reported) -->

<exclusion>

<groupId>org.apache.ivy</groupId>

<artifactId>ivy</artifactId>

</exclusion>

<!-- There is no way on earth that I can imagine that ivy is really needed (CVEs reported) -->

<exclusion>

<groupId>org.apache.ant</groupId>

<artifactId>ant</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>org.bouncycastle</groupId>

<artifactId>bcprov-jdk15on</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>org.bouncycastle</groupId>

<artifactId>bcpkix-jdk15on</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>log4j</groupId>

<artifactId>log4j</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>com.cedarsoftware</groupId>

<artifactId>json-io</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>org.apache.calcite</groupId>

<artifactId>calcite-core</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.hive</groupId>

<artifactId>hive-serde</artifactId>

<version>${hive.version}</version>

<exclusions>

<exclusion>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-slf4j-impl</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.hive</groupId>

<artifactId>hive-common</artifactId>

<version>${hive.version}</version>

<exclusions>

<exclusion>

<groupId>org.javolution</groupId>

<artifactId>javolution</artifactId>

</exclusion>

<exclusion>

<groupId>javax.xml.bind</groupId>

<artifactId>jaxb-api</artifactId>

</exclusion>

<exclusion>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-1.2-api</artifactId>

</exclusion>

<exclusion>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-slf4j-impl</artifactId>

</exclusion>

<!-- There is no way on earth that I can imagine that ivy is really needed (CVEs reported) -->

<exclusion>

<groupId>org.apache.ant</groupId>

<artifactId>ant</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-core_2.11</artifactId>

<version>${spark-scala.2.11.version}</version>

<exclusions>

<exclusion>

<groupId>ch.qos.reload4j</groupId>

<artifactId>reload4j</artifactId>

</exclusion>

<exclusion>

<groupId>javax.activation</groupId>

<artifactId>activation</artifactId>

</exclusion>

<exclusion>

<groupId>javax.ws.rs</groupId>

<artifactId>javax.ws.rs-api</artifactId>

</exclusion>

<exclusion>

<groupId>org.glassfish.hk2.external</groupId>

<artifactId>javax.inject</artifactId>

</exclusion>

<exclusion>

<groupId>org.glassfish.hk2.external</groupId>

<artifactId>aopalliance-repackaged</artifactId>

</exclusion>

<exclusion>

<groupId>org.glassfish.hk2.external</groupId>

<artifactId>jakarta.inject</artifactId>

</exclusion>

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>slf4j-reload4j</artifactId>

</exclusion>

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>jcl-over-slf4j</artifactId>

</exclusion>

<exclusion>

<groupId>org.spark-project.spark</groupId>

<artifactId>unused</artifactId>

</exclusion>

<!-- There is no way on earth that I can imagine that ivy is really needed (CVEs reported) -->

<exclusion>

<groupId>org.apache.ivy</groupId>

<artifactId>ivy</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>log4j</groupId>

<artifactId>log4j</artifactId>

</exclusion>

<!-- Multiple CVEs are reported for this version, but we're using a newer version -->

<exclusion>

<groupId>io.netty</groupId>

<artifactId>netty</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-sql_2.11</artifactId>

<version>${spark-scala.2.11.version}</version>

<exclusions>

<exclusion>

<groupId>org.spark-project.spark</groupId>

<artifactId>unused</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-catalyst_2.11</artifactId>

<version>${spark-scala.2.11.version}</version>

<exclusions>

<exclusion>

<groupId>org.spark-project.spark</groupId>

<artifactId>unused</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-core_2.12</artifactId>

<version>${spark-scala.2.12.version}</version>

<exclusions>

<!-- There is no way on earth that I can imagine that ivy is really needed (CVEs reported) -->

<exclusion>

<groupId>org.apache.ivy</groupId>

<artifactId>ivy</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-common-utils_2.12</artifactId>

<version>${spark-scala.2.12.version}</version>

<exclusions>

<!-- We don't want this in the classpath as we're using logback as provider -->

<exclusion>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-slf4j2-impl</artifactId>

</exclusion>

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>jcl-over-slf4j</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-sql_2.12</artifactId>

<version>${spark-scala.2.12.version}</version>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-catalyst_2.12</artifactId>

<version>${spark-scala.2.12.version}</version>

</dependency>

<dependency>

<groupId>org.apache.spark</groupId>

<artifactId>spark-sql-api_2.12</artifactId>

<version>${spark-scala.2.12.version}</version>

</dependency>

<dependency>

<groupId>org.scala-lang</groupId>

<artifactId>scala-library</artifactId>

<version>${scala.library.version}</version>

</dependency>

<dependency>

<groupId>org.scalatest</groupId>

<artifactId>scalatest_2.11</artifactId>

<version>${scalatest.version}</version>

</dependency>

<dependency>

<groupId>org.scalatest</groupId>

<artifactId>scalatest_2.12</artifactId>

<version>${scalatest.version}</version>

</dependency>

<dependency>

<groupId>org.scalactic</groupId>

<artifactId>scalactic_2.12</artifactId>

<version>3.0.9</version>

</dependency>

<dependency>

<groupId>org.scalactic</groupId>

<artifactId>scalactic_2.11</artifactId>

<version>${scalatest.version}</version>

</dependency>

<dependency>

<groupId>org.apache.zeppelin</groupId>

<artifactId>zeppelin-interpreter</artifactId>

<version>${zeppelin.version}</version>

<exclusions>

<exclusion>

<groupId>org.slf4j</groupId>

<artifactId>jcl-over-slf4j</artifactId>

</exclusion>

<!-- CVEs reported, but most probably not needed -->

<exclusion>

<groupId>log4j</groupId>

<artifactId>log4j</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.eclipse.milo</groupId>

<artifactId>stack-core</artifactId>

<version>${milo.version}</version>

<exclusions>

<exclusion>

<groupId>com.sun.activation</groupId>

<artifactId>jakarta.activation</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.eclipse.milo</groupId>

<artifactId>sdk-core</artifactId>

<version>${milo.version}</version>

<exclusions>

<exclusion>

<groupId>com.sun.activation</groupId>

<artifactId>jakarta.activation</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.eclipse.milo</groupId>

<artifactId>stack-server</artifactId>

<version>${milo.version}</version>

</dependency>

<dependency>

<groupId>org.eclipse.milo</groupId>

<artifactId>sdk-server</artifactId>

<version>${milo.version}</version>

<exclusions>

<exclusion>

<groupId>com.sun.activation</groupId>

<artifactId>jakarta.activation</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.apache.httpcomponents</groupId>

<artifactId>httpclient</artifactId>

<version>${httpclient.version}</version>

</dependency>

<dependency>

<groupId>org.apache.rocketmq</groupId>

<artifactId>rocketmq-client</artifactId>

<version>${rocketmq-client.version}</version>

</dependency>

<dependency>

<groupId>org.fusesource.mqtt-client</groupId>

<artifactId>mqtt-client</artifactId>

<version>${fusesource-mqtt-client.version}</version>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-databind</artifactId>

<version>${jackson.version}</version>

</dependency>

<dependency>

<groupId>ch.qos.logback</groupId>

<artifactId>logback-classic</artifactId>

<version>${logback.version}</version>

</dependency>

<dependency>

<groupId>ch.qos.logback</groupId>

<artifactId>logback-core</artifactId>

<version>${logback.version}</version>

</dependency>

<dependency>

<groupId>com.rabbitmq</groupId>

<artifactId>amqp-client</artifactId>

<version>5.18.0</version>

</dependency>

<dependency>

<groupId>io.swagger</groupId>

<artifactId>swagger-annotations</artifactId>

<version>${swagger.version}</version>

</dependency>

<dependency>

<groupId>io.swagger</groupId>

<artifactId>swagger-models</artifactId>

<version>${swagger.version}</version>

</dependency>

<dependency>

<groupId>io.swagger</groupId>

<artifactId>swagger-jaxrs</artifactId>

<version>${swagger.version}</version>

<exclusions>

<exclusion>

<groupId>javax.validation</groupId>

<artifactId>validation-api</artifactId>

</exclusion>

<exclusion>

<groupId>javax.ws.rs</groupId>

<artifactId>jsr311-api</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-annotations</artifactId>

<version>${jackson.version}</version>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.jaxrs</groupId>

<artifactId>jackson-jaxrs-json-provider</artifactId>

<version>${jackson.version}</version>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.datatype</groupId>

<artifactId>jackson-datatype-jsr310</artifactId>

<version>${jackson.version}</version>

</dependency>

<dependency>

<groupId>jakarta.validation</groupId>

<artifactId>jakarta.validation-api</artifactId>

<version>${jakarta.validation-api.version}</version>

</dependency>

<dependency>

<groupId>jakarta.ws.rs</groupId>

<artifactId>jakarta.ws.rs-api</artifactId>

<version>${jakarta.ws.rs-api.version}</version>

</dependency>

<dependency>

<groupId>org.glassfish.jersey.media</groupId>

<artifactId>jersey-media-multipart</artifactId>

<version>${jersey.version}</version>

</dependency>

<dependency>

<groupId>org.eclipse.jetty</groupId>

<artifactId>jetty-server</artifactId>

<version>${jetty.version}</version>

<exclusions>

<exclusion>

<groupId>javax.servlet</groupId>

<artifactId>javax.servlet-api</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>org.eclipse.jetty</groupId>

<artifactId>jetty-servlet</artifactId>

<version>${jetty.version}</version>

</dependency>

<dependency>

<groupId>org.eclipse.jetty</groupId>

<artifactId>jetty-http</artifactId>

<version>${jetty.version}</version>

</dependency>

<dependency>

<groupId>org.eclipse.jetty</groupId>

<artifactId>jetty-util</artifactId>

<version>${jetty.version}</version>

</dependency>

<dependency>

<groupId>org.glassfish.jersey.containers</groupId>

<artifactId>jersey-container-servlet-core</artifactId>

<version>${jersey.version}</version>

</dependency>

<dependency>

<groupId>org.glassfish.jersey.inject</groupId>

<artifactId>jersey-hk2</artifactId>

<version>${jersey.version}</version>

</dependency>

<dependency>

<groupId>com.lmax</groupId>

<artifactId>disruptor</artifactId>

<version>${disruptor.version}</version>

</dependency>

<dependency>

<groupId>org.xerial</groupId>

<artifactId>sqlite-jdbc</artifactId>

<version>${sqlite.version}</version>

</dependency>

<dependency>

<groupId>org.apache.commons</groupId>

<artifactId>commons-collections4</artifactId>

<version>${commons.collections4.version}</version>

</dependency>

<dependency>

<groupId>org.apache.commons</groupId>

<artifactId>commons-pool2</artifactId>

<version>${commons-pool2.version}</version>

</dependency>

<dependency>

<groupId>org.apache.tsfile</groupId>

<artifactId>tsfile</artifactId>

<version>${tsfile.version}</version>

</dependency>

<dependency>

<groupId>org.apache.tsfile</groupId>

<artifactId>common</artifactId>

<version>${tsfile.version}</version>

</dependency>

<dependency>

<groupId>net.java.dev.jna</groupId>

<artifactId>jna</artifactId>

<version>${jna.version}</version>

</dependency>

<dependency>

<groupId>net.java.dev.jna</groupId>

<artifactId>jna-platform</artifactId>

<version>${jna.version}</version>

</dependency>

<dependency>

<groupId>commons-io</groupId>

<artifactId>commons-io</artifactId>

<version>${commons-io.version}</version>

</dependency>

<dependency>

<groupId>com.github.luben</groupId>

<artifactId>zstd-jni</artifactId>

<version>${zstd-jni.version}</version>

</dependency>

<dependency>

<groupId>com.github.ben-manes.caffeine</groupId>

<artifactId>caffeine</artifactId>

<version>${caffeine.version}</version>

</dependency>

<dependency>

<groupId>io.moquette</groupId>

<artifactId>moquette-broker</artifactId>

<version>${moquette.version}</version>

</dependency>

<dependency>

<groupId>commons-codec</groupId>

<artifactId>commons-codec</artifactId>