jenkins bumping cdmlib.version to 5.28.0-SNAPSHOT
[cdm-vaadin.git] / pom.xml
diff --git a/pom.xml b/pom.xml
index 3a02149ba0e5a660f61ffbed60805b417eeed54d..1470195945a9f726602596d0f7ec94761069bff2 100755 (executable)
--- a/pom.xml
+++ b/pom.xml
@@ -4,15 +4,16 @@
   <groupId>eu.etaxonomy</groupId>
   <artifactId>cdm-vaadin</artifactId>
   <packaging>war</packaging>
-  <version>5.16.0-SNAPSHOT</version>
+  <version>5.28.0-SNAPSHOT</version>
   <name>Vaadin Web Application</name>
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-    <vaadin.version>7.7.13</vaadin.version>
+    <vaadin.version>7.7.17</vaadin.version>
+    <!-- LAST PUBLIC OPEN-SOURCE VERSION OF THE VAADIN 7 FRAMEWORK !!!   -->
     <vaadin-spring.version>1.2.0</vaadin-spring.version>
     <vaadin.plugin.version>${vaadin.version}</vaadin.plugin.version>
     <vaadin-spring-addon-eventbus.version>2.0.0.RELEASE</vaadin-spring-addon-eventbus.version>
-    <cdmlib.version>5.16.0-SNAPSHOT</cdmlib.version>
+    <cdmlib.version>5.28.0-SNAPSHOT</cdmlib.version>
     <unitils.version>3.4.2</unitils.version>
     <spring-boot.version>1.3.1.RELEASE</spring-boot.version>
     <!-- has spring 4.2.4-RELEASE as dependency --> 
       </dependency>
     
     
+        <!-- 
+      <dependency>
+            updating to same version as in vaadin-server 7.7.28 due to https://vaadin.com/security/2021-10-27 
+            is not possible due to code incompatibility
+        <groupId>org.jsoup</groupId>
+        <artifactId>jsoup</artifactId>
+        <version>1.14.3</version>
+      </dependency>
+        -->
       <!-- 
       <dependency>
         < ! - - FIXME move to cdmlib-test - - >
               <fail>false</fail>
               <skip>false</skip>
               <rules>
-                <dependencyConvergence />
+                <dependencyConvergence/>
                 <requireMavenVersion>
                   <version>[3.6.0,)</version>
                 </requireMavenVersion>
             <goals>
               <goal>enforce</goal>
             
+            
               <!-- Binds by default to the lifecycle phase: validate -->
             </goals>
           </execution>
                     </goals>
                   </pluginExecutionFilter>
                   <action>
-                    <ignore />
+                    <ignore/>
                   </action>
                 </pluginExecution>
               </pluginExecutions>
     <dependency>
       <groupId>com.vaadin</groupId>
       <artifactId>vaadin-server</artifactId>
+    
+    
+      <!-- 
+        vaadin-server dependency jsoup upgraded due to https://vaadin.com/security/2021-10-27
+        further updating of vaadin 7 is no longer possible without purchasing the pro license 
+       -->
     </dependency>
     <dependency>
       <groupId>com.vaadin</groupId>