diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..9b6f90e --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,78 @@ +# Change log + +## Release in-progress +* Add quick-build profile that skips tests and QA checks #63 +* Change OWASP checker to fail on Critical (Level 9-10) issues and check for updates every 12 hours #60 +* Update dependencies and plugin versions. +* Update bt-checkstyle.xml to include latest checks from checkstyle's sun_check.xml. +* Plugin configuration is only done via user properties which is easier for projects to override #59 + +## 1.0.15 +* Refactor README #52 +* Update plugin versions #54 + +## 1.0.14 +* Update README. +* Latest checkstyle and pmd. + +## 1.0.13 +* Remove redundant ${bt.plugin.xxxx} properties. Use plugin user properties instead. +* Update QA override details in README. +* Update bt-checkstyle.xml to include the latest checkstyle sun-check.xml changes. +* Delete bt-spotbugs-exclude-filter.xml as projects should handle their own excludes. +* Introduce ${bt.version} properties for dependency versions. +* Introduce maven version checker to display updates for project dependencies. +* Move enforce dependency convergence to qa-parent + +## 1.0.12 +* Updated plugin versions. +* Enhance vulnerability checking. +* Minor fixes to README. + +## 1.0.11 +* Update OWASP properties. + +## 1.0.10 +* Include dependency convergence check in the maven enforcer plugin. + +## 1.0.9 +* Fix Jacoco Coverage Report. + +## 1.0.8 +* Latest rules and versions of checkstyle, pmd and spotbugs (formerly findbugs). +* Removed wc.qa.skip property to only use bt.qa.skip. +* Removed surefire.version property as use plugin inheritance for version. +* Upgrade to junit 5. + +## 1.0.7 +* Update version of dependency-check-maven and change default config. +* Remove site generation. + +## 1.0.6 +* Added properties to manage non-java analysers in the dependency check plugin (see wiki). +* Turned off the following analysers (in default configuration): + * nsp analyzer; + * nuspec analyzer; + * swift package manager analyzer; and + * assembly analyzer. +* Incremented version of dependency-check-maven to 3.3.2. + +## 1.0.5 +* Added support for OWASP dependency checker using dependency-check-maven. + +## 1.0.4 +* Update README. +* Added bt.qa.skip property. +* Fix badger version. + +## 1.0.3 +* Added qa-parent. + +## 1.0.2 +* Generate javadoc and sources in release. + +## 1.0.1 +* Surefire version property. + +## 1.0.0 +* Initial version diff --git a/build-tools/src/main/resources/bordertech/bt-checkstyle.xml b/build-tools/src/main/resources/bordertech/bt-checkstyle.xml index aa20502..25f4fe0 100644 --- a/build-tools/src/main/resources/bordertech/bt-checkstyle.xml +++ b/build-tools/src/main/resources/bordertech/bt-checkstyle.xml @@ -1,9 +1,9 @@ + "-//Checkstyle//DTD Checkstyle Configuration 1.3//EN" + "https://checkstyle.org/dtds/configuration_1_3.dtd"> - + @@ -28,12 +29,13 @@ https://checkstyle.org/5.x/config.html#Checker --> + - - + + - @@ -44,36 +46,45 @@ + + + + + + - + - - - - - + + - + - + + + + + + + + + - - - + + + @@ -81,41 +92,50 @@ - + - + + + + - + - + + - + + - + + + + + - - + + @@ -123,39 +143,36 @@ - + - + - + - - - - - - + + + - + - + @@ -166,19 +183,21 @@ - + + - + + @@ -186,24 +205,32 @@ - - + + - - + + + + + + - + + + + + + + @@ -211,8 +238,8 @@ - - + @@ -221,16 +248,24 @@ - + + + + + + + + diff --git a/build-tools/src/main/resources/bordertech/bt-pmd-rules.xml b/build-tools/src/main/resources/bordertech/bt-pmd-rules.xml index db09050..b6e0547 100644 --- a/build-tools/src/main/resources/bordertech/bt-pmd-rules.xml +++ b/build-tools/src/main/resources/bordertech/bt-pmd-rules.xml @@ -11,6 +11,7 @@ + @@ -48,12 +49,10 @@ 3 - \ No newline at end of file diff --git a/pom.xml b/pom.xml index 8b32327..486ab3b 100755 --- a/pom.xml +++ b/pom.xml @@ -157,7 +157,7 @@ org.apache.maven.plugins maven-javadoc-plugin - 3.1.1 + 3.2.0 @@ -186,7 +186,7 @@ org.apache.maven.plugins maven-enforcer-plugin - 3.0.0-M2 + 3.0.0-M3 enforcer @@ -236,7 +236,7 @@ org.apache.maven.plugins maven-source-plugin - 3.1.0 + 3.2.1 diff --git a/qa-parent/pom.xml b/qa-parent/pom.xml index 61b8756..e648899 100644 --- a/qa-parent/pom.xml +++ b/qa-parent/pom.xml @@ -30,10 +30,15 @@ bordertech/bt-checkstyle.xml + true 2 + + true bordertech/bt-pmd-rules.xml + + false @@ -43,27 +48,35 @@ 14 - + 12 - 4 + 9 + + + false + + false + + false + false - 5.5.0 - 0.8.4 + 5.6.1 + 0.8.5 2.22.2 - 3.0.0 - 8.22 - 3.12.0 - 6.16.0 - 3.1.11 - 7.4.5 - 3.1.12 - 1.9.0 - 5.0.0-M3 + 3.1.1 + 8.30 + 3.13.0 + 6.22.0 + 4.0.0 + 7.4.7 + 4.0.1 + 1.10.1 + 5.2.4 @@ -73,6 +86,31 @@ configuration from bordertech-parent. + + + + quick-build + + + true + true + + true + + true + true + true + true + + true + + true + + true + + + + @@ -130,11 +168,6 @@ org.apache.maven.plugins maven-checkstyle-plugin ${bt.checkstyle.plugin.version} - - true - false - true - @@ -169,9 +202,6 @@ ${bt.pmd.rules.file} - true - false - true @@ -215,9 +245,6 @@ checkCpd verify - - false - cpd-check @@ -276,12 +303,6 @@ org.owasp dependency-check-maven ${bt.owasp.plugin.version} - - false - false - false - false - checkDependencies