<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xmlns="http://maven.apache.org/POM/4.0.0"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">

	<parent>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-parent</artifactId>
		<version>4.0.3</version>
	</parent>

	<modelVersion>4.0.0</modelVersion>
	<groupId>cl.kanopus</groupId>
	<artifactId>kanopus-boot-parent</artifactId>
	<version>4.03.0</version>
	<packaging>pom</packaging>

	<name>Kanopus Boot Parent</name>
	<description>Parent for Kanopus Spring Boot applications</description>
	<url>https://kanopus.cl/</url>

	<properties>
		<java.version>17</java.version>
		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

		<!-- SNYK Vulnerabilities -->
		<jackson-annotations.version>2.21</jackson-annotations.version>
		<jackson-core.version>2.21.1</jackson-core.version>
		<jackson-databind.version>2.21.1</jackson-databind.version>
		<spring-boot-starter-web.version>4.0.3</spring-boot-starter-web.version>

		<!-- BOM versions -->
		<jjwt.version>0.13.0</jjwt.version>
		<springdoc-openapi-starter-webmvc-ui.version>2.8.14</springdoc-openapi-starter-webmvc-ui.version>


		<!-- BOM kanopus versions -->
		<klib-common.version>4.03.0</klib-common.version>
		<klib-data-jdbc.version>4.03.0</klib-data-jdbc.version>
		<klib-deploy-sql.version>4.03.0</klib-deploy-sql.version>
		<klib-excel.version>4.03.0</klib-excel.version>
		<klib-pdf.version>4.03.0</klib-pdf.version>
		<klib-rest-template.version>4.03.0</klib-rest-template.version>
		<klib-sii.version>4.03.0</klib-sii.version>
		<klib-sii-iva.version>4.03.0</klib-sii-iva.version>

		<!-- plugins versions -->
		<central-publishing-maven-plugin.version>0.10.0</central-publishing-maven-plugin.version>
		<license-maven-plugin.version>2.7.1</license-maven-plugin.version>
		<maven-gpg-plugin.version>3.2.8</maven-gpg-plugin.version>
		<maven-compiler-plugin.version>3.15.0</maven-compiler-plugin.version>
		<maven-source-plugin.version>3.4.0</maven-source-plugin.version>
		<maven-javadoc-plugin.version>3.12.0</maven-javadoc-plugin.version>
		<maven-surfire-plugin.version>3.5.5</maven-surfire-plugin.version>
		<proguard-maven-plugin.version>2.7.0</proguard-maven-plugin.version>
		<versions-maven-plugin.version>2.20.1</versions-maven-plugin.version>
		<maven-enforcer-plugin.version>3.6.2</maven-enforcer-plugin.version>
		<maven-failsafe-plugin.version>3.5.5</maven-failsafe-plugin.version>
		<jacoco-maven-plugin.version>0.8.11</jacoco-maven-plugin.version>
		<spotless-maven-plugin.version>2.44.3</spotless-maven-plugin.version>
		<snyk-maven-plugin.version>2.2.0</snyk-maven-plugin.version>
		<sonar-maven-plugin.version>4.0.1.6619</sonar-maven-plugin.version>

		<!-- behavior configuration -->
		<maven.test.skip>false</maven.test.skip>
		<license.skip>true</license.skip>
		<proguard.skip>true</proguard.skip>
		<snyk.skip>true</snyk.skip>
		<sonar.skip>true</sonar.skip>
		<jacoco.minimum.coverage>0.80</jacoco.minimum.coverage>

		<!-- argLine for surefire and failsafe.-->
		<argLine/>

	</properties>

	<!-- BOM integrate -->
	<dependencyManagement>
		<dependencies>
			<!-- Explicitly manage patched Jackson artifacts to avoid inheriting Snyk-reported vulnerabilities. -->
			<dependency>
				<groupId>com.fasterxml.jackson.core</groupId>
				<artifactId>jackson-annotations</artifactId>
				<version>${jackson-annotations.version}</version>
			</dependency>
			<dependency>
				<groupId>com.fasterxml.jackson.core</groupId>
				<artifactId>jackson-core</artifactId>
				<version>${jackson-core.version}</version>
			</dependency>
			<dependency>
				<groupId>com.fasterxml.jackson.core</groupId>
				<artifactId>jackson-databind</artifactId>
				<version>${jackson-databind.version}</version>
			</dependency>

			<dependency>
				<groupId>io.jsonwebtoken</groupId>
				<artifactId>jjwt-api</artifactId>
				<version>${jjwt.version}</version>
			</dependency>
			<dependency>
				<groupId>io.jsonwebtoken</groupId>
				<artifactId>jjwt-impl</artifactId>
				<version>${jjwt.version}</version>
				<scope>runtime</scope>
			</dependency>
			<dependency>
				<groupId>io.jsonwebtoken</groupId>
				<artifactId>jjwt-jackson</artifactId>
				<version>${jjwt.version}</version>
				<scope>runtime</scope>
				<!-- CVE fix: SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 (CWE-770 / CVSS 8.7)
				     Exclude jjwt-jackson's bundled jackson-core and jackson-databind so that
				     Spring Boot BOM provides the patched version instead. -->
				<exclusions>
					<exclusion>
						<groupId>com.fasterxml.jackson.core</groupId>
						<artifactId>jackson-core</artifactId>
					</exclusion>
				</exclusions>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-common</artifactId>
				<version>${klib-common.version}</version>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-data-jdbc</artifactId>
				<version>${klib-data-jdbc.version}</version>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-deploy-sql</artifactId>
				<version>${klib-deploy-sql.version}</version>
				<exclusions>
					<exclusion>
						<groupId>org.apache.logging.log4j</groupId>
						<artifactId>log4j-core</artifactId>
					</exclusion>
					<exclusion>
						<groupId>org.apache.logging.log4j</groupId>
						<artifactId>log4j-slf4j2-impl</artifactId>
					</exclusion>
					<exclusion>
						<groupId>ch.qos.logback</groupId>
						<artifactId>logback-classic</artifactId>
					</exclusion>
				</exclusions>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-excel</artifactId>
				<version>${klib-excel.version}</version>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-pdf</artifactId>
				<version>${klib-pdf.version}</version>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-rest-template</artifactId>
				<version>${klib-rest-template.version}</version>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-sii-iva</artifactId>
				<version>${klib-sii-iva.version}</version>
			</dependency>

			<dependency>
				<groupId>cl.kanopus.util</groupId>
				<artifactId>klib-sii</artifactId>
				<version>${klib-sii.version}</version>
			</dependency>

			<dependency>
				<groupId>org.springdoc</groupId>
				<artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
				<version>${springdoc-openapi-starter-webmvc-ui.version}</version>
				<!-- CVE fix: SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 (CWE-770 / CVSS 8.7)
				     Exclude jjwt-jackson's bundled jackson-core and jackson-databind so that
				     Spring Boot BOM provides the patched version instead. -->
				<exclusions>
					<exclusion>
						<groupId>com.fasterxml.jackson.core</groupId>
						<artifactId>jackson-core</artifactId>
					</exclusion>
				</exclusions>

			</dependency>

			<dependency>
				<groupId>org.springframework.boot</groupId>
				<artifactId>spring-boot-starter-web</artifactId>
				<version>${spring-boot-starter-web.version}</version>
				<!-- CVE fix: SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 (CWE-770 / CVSS 8.7)
				     Exclude jjwt-jackson's bundled jackson-core and jackson-databind so that
				     Spring Boot BOM provides the patched version instead. -->
				<exclusions>
					<exclusion>
						<groupId>tools.jackson.core</groupId>
						<artifactId>jackson-core</artifactId>
					</exclusion>
				</exclusions>
			</dependency>
		</dependencies>
	</dependencyManagement>

	<licenses>
		<license>
			<name>Apache License, Version 2.0</name>
			<url>https://www.apache.org/licenses/LICENSE-2.0.txt</url>
			<distribution>repo</distribution>
			<comments>
				A permissive license that allows commercial use and modification,
				provided that proper attribution and copyright notice are retained.
			</comments>
		</license>
	</licenses>

	<developers>
		<developer>
			<id>pablo</id>
			<name>Pablo Andres Diaz Saavedra</name>
			<email>pabloandres.diazsaavedra@gmail.com</email>
			<url>https://github.com/godheaven</url>
			<organization>Kanopus</organization>
			<organizationUrl>https://kanopus.cl</organizationUrl>
			<roles>
				<role>Developer</role>
				<role>Architect</role>
			</roles>
			<timezone>-3</timezone>
		</developer>
	</developers>

	<scm>
		<connection>scm:git:https://github.com/godheaven/kanopus-boot-parent.git</connection>
		<developerConnection>scm:git:https://github.com/godheaven/kanopus-boot-parent.git</developerConnection>
		<url>https://github.com/godheaven/kanopus-boot-parent</url>
		<tag>HEAD</tag>
	</scm>

	<dependencies>
		<dependency>
			<groupId>org.projectlombok</groupId>
			<artifactId>lombok</artifactId>
			<scope>provided</scope>
		</dependency>

		<dependency>
			<groupId>org.junit.jupiter</groupId>
			<artifactId>junit-jupiter</artifactId>
			<scope>test</scope>
		</dependency>

		<dependency>
			<groupId>org.mockito</groupId>
			<artifactId>mockito-core</artifactId>
			<scope>test</scope>
		</dependency>

		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-test</artifactId>
			<scope>test</scope>
			<exclusions>
				<exclusion>
					<groupId>org.skyscreamer</groupId>
					<artifactId>jsonassert</artifactId>
				</exclusion>
			</exclusions>
		</dependency>

		<!-- SPRING DOCUMENTATION (springdoc 2.x starter para Spring Boot 3) -->
		<dependency>
			<groupId>org.springdoc</groupId>
			<artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
		</dependency>

		<!-- JSON WEB TOKEN (jjwt 0.11.5: api + impl + jackson at runtime) -->
		<dependency>
			<groupId>io.jsonwebtoken</groupId>
			<artifactId>jjwt-api</artifactId>
		</dependency>

		<dependency>
			<groupId>io.jsonwebtoken</groupId>
			<artifactId>jjwt-impl</artifactId>
		</dependency>

		<dependency>
			<groupId>io.jsonwebtoken</groupId>
			<artifactId>jjwt-jackson</artifactId>
			<scope>runtime</scope>
		</dependency>

	</dependencies>

	<profiles>
		<profile>
			<id>release</id>
			<build>
				<plugins>
					<plugin>
						<groupId>org.apache.maven.plugins</groupId>
						<artifactId>maven-source-plugin</artifactId>
					</plugin>

					<plugin>
						<groupId>org.apache.maven.plugins</groupId>
						<artifactId>maven-javadoc-plugin</artifactId>
					</plugin>

					<!-- Sign ALL artifacts, including the .pom -->
					<plugin>
						<groupId>org.apache.maven.plugins</groupId>
						<artifactId>maven-gpg-plugin</artifactId>
						<version>${maven-gpg-plugin.version}</version>
						<executions>
							<execution>
								<id>sign-artifacts</id>
								<phase>verify</phase>
								<goals>
									<goal>sign</goal>
								</goals>
							</execution>
						</executions>
					</plugin>
				</plugins>
			</build>
		</profile>
	</profiles>

	<build>
		<pluginManagement>
			<plugins>
				<plugin>
					<groupId>org.apache.maven.plugins</groupId>
					<artifactId>maven-compiler-plugin</artifactId>
					<version>${maven-compiler-plugin.version}</version>
					<configuration>
						<release>${java.version}</release>
						<excludes>
							<exclude>**/package-info.java</exclude>
						</excludes>
					</configuration>
				</plugin>

				<plugin>
					<groupId>org.apache.maven.plugins</groupId>
					<artifactId>maven-source-plugin</artifactId>
					<version>${maven-source-plugin.version}</version>
					<executions>
						<execution>
							<id>attach-sources</id>
							<goals>
								<goal>jar-no-fork</goal>
							</goals>
						</execution>
					</executions>
				</plugin>

				<plugin>
					<groupId>org.apache.maven.plugins</groupId>
					<artifactId>maven-javadoc-plugin</artifactId>
					<version>${maven-javadoc-plugin.version}</version>
					<configuration>
						<failOnError>false</failOnError>
						<doclint>none</doclint> <!-- evita doclint con Java 8+ -->
						<source>${java.version}</source>
					</configuration>
					<executions>
						<execution>
							<id>attach-javadocs</id>
							<goals>
								<goal>jar</goal>
							</goals>
						</execution>
					</executions>
				</plugin>

				<plugin>
					<groupId>org.apache.maven.plugins</groupId>
					<artifactId>maven-surefire-plugin</artifactId>
					<version>${maven-surfire-plugin.version}</version>
					<configuration>
						<skipTests>${maven.test.skip}</skipTests>
						<!-- Ensure JaCoCo agent is attached to forked test JVMs -->
						<forkCount>1</forkCount>
						<reuseForks>true</reuseForks>
						<argLine>${argLine}</argLine>
						<includes>
							<include>**/*Test.java</include>
						</includes>
						<excludes>
							<exclude>**/*IT.java</exclude>
						</excludes>
					</configuration>
				</plugin>

				<plugin>
					<groupId>org.apache.maven.plugins</groupId>
					<artifactId>maven-failsafe-plugin</artifactId>
					<version>${maven-failsafe-plugin.version}</version>
					<executions>
						<execution>
							<id>integration-tests</id>
							<goals>
								<goal>integration-test</goal>
								<goal>verify</goal>
							</goals>
						</execution>
					</executions>
					<configuration>
						<!-- Ensure JaCoCo agent is attached to integration test JVMs -->
						<forkCount>1</forkCount>
						<reuseForks>true</reuseForks>
						<argLine>${argLine}</argLine>
						<includes>
							<include>**/*IT.java</include>
						</includes>
					</configuration>
				</plugin>

				<plugin>
					<groupId>org.jacoco</groupId>
					<artifactId>jacoco-maven-plugin</artifactId>
					<version>${jacoco-maven-plugin.version}</version>
					<executions>
						<execution>
							<id>prepare-agent</id>
							<goals>
								<goal>prepare-agent</goal>
							</goals>
							<phase>initialize</phase>
							<configuration>
								<destFile>${project.build.directory}/jacoco.exec</destFile>
								<propertyName>argLine</propertyName>
							</configuration>
						</execution>
						<execution>
							<id>report</id>
							<phase>verify</phase>
							<goals>
								<goal>report</goal>
							</goals>
							<configuration>
								<dataFile>${project.build.directory}/jacoco.exec</dataFile>
								<excludes>
									<exclude>**/dto/**</exclude>
									<exclude>**/config/**</exclude>
									<exclude>**/*Dto*.class</exclude>
									<exclude>**/*Request*.class</exclude>
									<exclude>**/*Response*.class</exclude>
									<exclude>**/*VO*.class</exclude>
									<exclude>**/*Entity*.class</exclude>
									<exclude>**/*Exception*.class</exclude>
									<exclude>**/package-info.class</exclude>
								</excludes>
							</configuration>

						</execution>
						<execution>
							<id>check</id>
							<phase>verify</phase>
							<goals>
								<goal>check</goal>
							</goals>
							<configuration>
								<dataFile>${project.build.directory}/jacoco.exec</dataFile>
								<rules>
									<rule>
										<element>BUNDLE</element>
										<limits>
											<limit>
												<counter>INSTRUCTION</counter>
												<value>COVEREDRATIO</value>
												<minimum>${jacoco.minimum.coverage}</minimum>
											</limit>
										</limits>
										<excludes>
											<exclude>**/dto/**</exclude>
											<exclude>**/config/**</exclude>
											<exclude>**/*DTO*.class</exclude>
											<exclude>**/*Request*.class</exclude>
											<exclude>**/*Response*.class</exclude>
											<exclude>**/*VO*.class</exclude>
											<exclude>**/*Entity*.class</exclude>
											<exclude>**/*Exception*.class</exclude>
											<exclude>**/package-info.class</exclude>
										</excludes>
									</rule>
								</rules>
							</configuration>
						</execution>
					</executions>
				</plugin>

				<!-- It is declared here for children to inherit, but the header is controlled with 'license.skip' -->
				<plugin>
					<groupId>org.codehaus.mojo</groupId>
					<artifactId>license-maven-plugin</artifactId>
					<version>${license-maven-plugin.version}</version>
					<configuration>
						<skipUpdateLicense>${license.skip}</skipUpdateLicense>
						<includes>
							<include>**/*.java</include>
						</includes>
						<licenseName>apache_v2</licenseName>
						<organizationName>Pablo Díaz Saavedra</organizationName>
						<inceptionYear>2025</inceptionYear>
						<addJavaLicenseAfterPackage>false</addJavaLicenseAfterPackage>
						<processStartTag>!--</processStartTag>
						<processEndTag>--!</processEndTag>
						<descriptionTemplate>${user.home}/.m2/license/description.ftl</descriptionTemplate>
					</configuration>
					<executions>
						<execution>
							<id>apply-license-headers</id>
							<phase>validate</phase>
							<goals>
								<goal>update-file-header</goal>
							</goals>
						</execution>
					</executions>
				</plugin>

				<plugin>
					<groupId>com.github.wvengen</groupId>
					<artifactId>proguard-maven-plugin</artifactId>
					<version>${proguard-maven-plugin.version}</version>
					<executions>
						<execution>
							<phase>package</phase>
							<goals>
								<goal>proguard</goal>
							</goals>
						</execution>
					</executions>
					<configuration>
						<skip>${proguard.skip}</skip>
						<maxMemory>1024m</maxMemory>
						<proguardInclude>${basedir}/proguard.conf</proguardInclude>
						<libs>
							<lib>${java.home}/jmods</lib>
						</libs>
					</configuration>
				</plugin>

			</plugins>
		</pluginManagement>

		<plugins>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-surefire-plugin</artifactId>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-failsafe-plugin</artifactId>
			</plugin>
			<plugin>
				<groupId>org.jacoco</groupId>
				<artifactId>jacoco-maven-plugin</artifactId>
			</plugin>
			<plugin>
				<groupId>org.codehaus.mojo</groupId>
				<artifactId>license-maven-plugin</artifactId>
			</plugin>
			<plugin>
				<groupId>com.github.wvengen</groupId>
				<artifactId>proguard-maven-plugin</artifactId>
			</plugin>
			<plugin>
				<groupId>org.sonatype.central</groupId>
				<artifactId>central-publishing-maven-plugin</artifactId>
				<version>${central-publishing-maven-plugin.version}</version>
				<extensions>true</extensions>
				<configuration>
					<publishingServerId>central</publishingServerId>
				</configuration>
			</plugin>

			<plugin>
				<groupId>org.codehaus.mojo</groupId>
				<artifactId>versions-maven-plugin</artifactId>
				<version>${versions-maven-plugin.version}</version>
				<configuration>
					<excludes>
						<exclude>org.apache.commons:commons-collections4</exclude>
					</excludes>
				</configuration>
			</plugin>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-enforcer-plugin</artifactId>
				<version>${maven-enforcer-plugin.version}</version>
				<executions>
					<execution>
						<id>enforce-maven-min-version</id>
						<goals>
							<goal>enforce</goal>
						</goals>
						<configuration>
							<rules>
								<requireMavenVersion>
									<version>[3.6.3,)</version>
								</requireMavenVersion>
							</rules>
							<fail>true</fail>
						</configuration>
					</execution>
				</executions>
			</plugin>

			<!-- SPOTLESS FORMATTER PLUGIN -->
			<plugin>
				<groupId>com.diffplug.spotless</groupId>
				<artifactId>spotless-maven-plugin</artifactId>
				<version>${spotless-maven-plugin.version}</version>
				<configuration>
					<java>
						<googleJavaFormat>
							<style>AOSP</style> <!-- AOSP mode sets indent to 4 spaces securely under Google format -->
							<reflowLongStrings>false</reflowLongStrings>
						</googleJavaFormat>
						<!-- Note: Google Java Format strictly enforces its own limit of 100 characters for lines. -->
						<!-- Spotless does not allow altering this specifically to a custom 600 character value in GJF mode. -->
						<!-- If you want no line wrapping at all, you might need to reconsider using googleJavaFormat and instead provide an <eclipse> format definition file. -->
					</java>
				</configuration>
				<executions>
					<execution>
						<id>spotless-check</id>
						<phase>verify</phase>
						<goals>
							<goal>check</goal>
						</goals>
					</execution>
				</executions>
			</plugin>

			<!-- SNYK VALIDATION PLUGIN -->
			<plugin>
				<groupId>io.snyk</groupId>
				<artifactId>snyk-maven-plugin</artifactId>
				<version>${snyk-maven-plugin.version}</version>
				<configuration>
					<skip>${snyk.skip}</skip>
				</configuration>
				<executions>
					<execution>
						<id>snyk-test</id>
						<phase>verify</phase>
						<goals>
							<goal>test</goal>
						</goals>
					</execution>
				</executions>
			</plugin>

			<!-- SONAR VALIDATION PLUGIN -->
			<plugin>
				<groupId>org.sonarsource.scanner.maven</groupId>
				<artifactId>sonar-maven-plugin</artifactId>
				<version>${sonar-maven-plugin.version}</version>
				<configuration>
					<skip>${sonar.skip}</skip>
				</configuration>
				<executions>
					<execution>
						<id>sonar-test</id>
						<phase>verify</phase>
						<goals>
							<goal>sonar</goal>
						</goals>
					</execution>
				</executions>
			</plugin>

		</plugins>
	</build>


</project>
