<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>3.2.5</version>
        <relativePath/>
    </parent>

    <groupId>com.fzx</groupId>
    <artifactId>fzx-platform</artifactId>
    <packaging>pom</packaging>
    <version>${revision}</version>
    <name>Fzx Platform Parent</name>
    <description>风七六本地生活服务平台 - 父项目</description>

    <properties>
        <revision>1.1.1-SNAPSHOT</revision>
        <java.version>21</java.version>
        <maven.compiler.source>21</maven.compiler.source>
        <maven.compiler.target>21</maven.compiler.target>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

        <git.commit.id.plugin.version>4.0.0</git.commit.id.plugin.version>

        <spring-cloud.version>2023.0.1</spring-cloud.version>
        <spring-cloud-alibaba.version>2023.0.1.0</spring-cloud-alibaba.version>

        <java-jwt.version>4.4.0</java-jwt.version>
        <lombok.version>1.18.32</lombok.version>
        <guava.version>33.2.1-jre</guava.version>
        <bcrypt.version>0.10.2</bcrypt.version>
        <swagger.version>2.3.0</swagger.version>

        <!-- SonarQube 配置由Jenkins管理 -->
    </properties>

    <dependencyManagement>
        <dependencies>
            <!-- Checkstyle依赖版本管理，确保使用支持Java 21的版本 -->
            <dependency>
                <groupId>com.puppycrawl.tools</groupId>
                <artifactId>checkstyle</artifactId>
                <version>10.12.7</version>
            </dependency>

            <dependency>
                <groupId>org.springframework.cloud</groupId>
                <artifactId>spring-cloud-dependencies</artifactId>
                <version>${spring-cloud.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>

            <dependency>
                <groupId>com.alibaba.cloud</groupId>
                <artifactId>spring-cloud-alibaba-dependencies</artifactId>
                <version>${spring-cloud-alibaba.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>

            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>common-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>api-gateway</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>auth-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>user-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>order-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>merchant-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>platform-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>product-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>rider-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>upload-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>marketing-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>map-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>search-service</artifactId>
                <version>${revision}</version>
            </dependency>
            <dependency>
                <groupId>com.fzx</groupId>
                <artifactId>sms-service</artifactId>
                <version>${revision}</version>
            </dependency>

            <dependency>
                <groupId>com.auth0</groupId>
                <artifactId>java-jwt</artifactId>
                <version>${java-jwt.version}</version>
            </dependency>
            <dependency>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
                <version>${lombok.version}</version>
            </dependency>
            <dependency>
                <groupId>com.google.guava</groupId>
                <artifactId>guava</artifactId>
                <version>${guava.version}</version>
            </dependency>
            <dependency>
                <groupId>at.favre.lib</groupId>
                <artifactId>bcrypt</artifactId>
                <version>${bcrypt.version}</version>
            </dependency>

            <dependency>
                <groupId>org.springdoc</groupId>
                <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
                <version>${swagger.version}</version>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <modules>
        <module>services/common-service</module>
        <module>services/api-gateway</module>
        <module>services/auth-service</module>
        <module>services/user-service</module>
        <module>services/order-service</module>
        <module>services/merchant-service</module>
        <module>services/platform-service</module>
        <module>services/product-service</module>
        <module>services/rider-service</module>
        <module>services/upload-service</module>
        <module>services/marketing-service</module>
        <module>services/map-service</module>
        <module>services/search-service</module>
        <module>services/sms-service</module>
    </modules>

    <build>
        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>pl.project13.maven</groupId>
                    <artifactId>git-commit-id-plugin</artifactId>
                    <version>${git.commit.id.plugin.version}</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>revision</goal>
                            </goals>
                        </execution>
                    </executions>
                    <configuration>
                        <generateGitPropertiesFile>true</generateGitPropertiesFile>
                        <generateGitPropertiesFilename>
                            ${project.build.outputDirectory}/META-INF/git.properties
                        </generateGitPropertiesFilename>
                        <includeOnlyProperties>
                            <includeProperty>git.commit.id.abbrev</includeProperty>
                            <includeProperty>git.build.time</includeProperty>
                            <includeProperty>git.branch</includeProperty>
                            <includeProperty>git.build.user.name</includeProperty>
                        </includeOnlyProperties>
                    </configuration>
                </plugin>

                <plugin>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-maven-plugin</artifactId>
                    <executions>
                        <execution>
                            <goals>
                                <goal>repackage</goal>
                            </goals>
                        </execution>
                    </executions>
                    <configuration>
                        <layers>
                            <enabled>true</enabled>
                        </layers>
                    </configuration>
                </plugin>

                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-compiler-plugin</artifactId>
                    <version>3.8.1</version>
                    <configuration>
                        <source>${java.version}</source>
                        <target>${java.version}</target>
                    </configuration>
                </plugin>

                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-checkstyle-plugin</artifactId>
                    <version>3.2.0</version>
                    <configuration>
                        <configLocation>checkstyle/checkstyle.xml</configLocation>
                        <failOnViolation>false</failOnViolation>
                        <consoleOutput>true</consoleOutput>
                    </configuration>
                    <dependencies>
                        <dependency>
                            <groupId>com.puppycrawl.tools</groupId>
                            <artifactId>checkstyle</artifactId>
                            <version>10.12.7</version>
                        </dependency>
                    </dependencies>
                    <executions>
                        <execution>
                            <id>checkstyle-check</id>
                            <phase>validate</phase>
                            <goals>
                                <goal>check</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>

                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-pmd-plugin</artifactId>
                    <version>3.22.0</version>
                    <configuration>
                        <failOnViolation>false</failOnViolation>
                        <rulesets>
                            <ruleset>pmd/pmd.xml</ruleset>
                        </rulesets>
                        <targetJdk>21</targetJdk>
                        <skip>false</skip>
                    </configuration>
                    <executions>
                        <execution>
                            <id>pmd-check</id>
                            <phase>none</phase>
                            <goals>
                                <goal>check</goal>
                                <goal>cpd-check</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>

                <plugin>
                    <groupId>org.owasp</groupId>
                    <artifactId>dependency-check-maven</artifactId>
                    <version>7.4.4</version>
                    <configuration>
                        <!-- 默认启用依赖安全检查 -->
                        <skip>false</skip>
                        <!-- 本地漏洞库缓存目录 -->
                        <dataDirectory>${maven.user.home}/.dependency-check</dataDirectory>
                        <!-- 报告格式和输出目录 -->
                        <format>HTML</format>
                        <outputDirectory>${project.build.directory}/dependency-check-report</outputDirectory>
                        <!-- CVSS阈值设为7，高危漏洞阻断构建 -->
                        <failBuildOnCVSS>7</failBuildOnCVSS>
                        <suppressionFile>dependency-check-suppressions.xml</suppressionFile>
                        <!-- 禁用在线漏洞库检查 -->
                        <enableExperimental>false</enableExperimental>
                        <enableRetired>false</enableRetired>
                        <!-- 禁用自动更新，使用本地缓存数据，避免NVD API访问限制 -->
                        <autoUpdate>false</autoUpdate>
                        <!-- 当遇到错误（如无本地数据库）时不阻断构建 -->
                        <failOnError>false</failOnError>
                    </configuration>
                    <executions>
                        <execution>
                            <id>dependency-check</id>
                            <phase>none</phase>
                            <goals>
                                <goal>check</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>

            </plugins>
        </pluginManagement>

        <plugins>
            <plugin>
                <groupId>pl.project13.maven</groupId>
                <artifactId>git-commit-id-plugin</artifactId>
            </plugin>

            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-checkstyle-plugin</artifactId>
                <version>3.2.0</version>
                <configuration>
                </configuration>
            </plugin>

            <plugin>
                <groupId>org.sonarsource.scanner.maven</groupId>
                <artifactId>sonar-maven-plugin</artifactId>
                <version>4.0.0.4121</version>
                <configuration>
                    <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
                    <sonar.language>java</sonar.language>
                    <sonar.sourceEncoding>UTF-8</sonar.sourceEncoding>
                    <sonar.java.disableExternalRulesDownload>true</sonar.java.disableExternalRulesDownload>
                    <sonar.qualitygate.wait>true</sonar.qualitygate.wait>
                </configuration>
            </plugin>

            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-surefire-plugin</artifactId>
                <version>3.1.2</version>
                <configuration>
                    <argLine>${argLine}</argLine>
                </configuration>
            </plugin>

            <plugin>
                <groupId>org.jacoco</groupId>
                <artifactId>jacoco-maven-plugin</artifactId>
                <version>0.8.11</version>
                <executions>
                    <execution>
                        <id>jacoco-initialize</id>
                        <goals>
                            <goal>prepare-agent</goal>
                        </goals>
                        <configuration>
                            <destFile>${project.build.directory}/jacoco.exec</destFile>
                        </configuration>
                    </execution>
                    <execution>
                        <id>jacoco-report</id>
                        <phase>verify</phase>
                        <goals>
                            <goal>report</goal>
                        </goals>
                        <configuration>
                            <dataFile>${project.build.directory}/jacoco.exec</dataFile>
                            <outputDirectory>${project.build.directory}/site/jacoco</outputDirectory>
                            <formats>
                                <format>XML</format>
                                <format>HTML</format>
                            </formats>
                        </configuration>
                    </execution>
                </executions>
            </plugin>

            <plugin>
                <groupId>com.github.spotbugs</groupId>
                <artifactId>spotbugs-maven-plugin</artifactId>
                <version>4.8.0.0</version>
                <dependencies>
                    <dependency>
                        <groupId>com.github.spotbugs</groupId>
                        <artifactId>spotbugs</artifactId>
                        <version>4.8.0</version>
                    </dependency>
                </dependencies>
                <configuration>
                    <effort>Max</effort>
                    <threshold>Medium</threshold>
                    <failOnError>false</failOnError>
                    <excludeFilterFile>${project.parent.basedir}/spotbugs-exclude.xml</excludeFilterFile>
                    <skip>false</skip>
                    <plugins>
                        <plugin>
                            <groupId>com.h3xstream.findsecbugs</groupId>
                            <artifactId>findsecbugs-plugin</artifactId>
                            <version>1.14.0</version>
                        </plugin>
                    </plugins>
                </configuration>
                <executions>
                    <execution>
                        <id>spotbugs-check</id>
                        <phase>process-test-classes</phase>
                        <goals>
                            <goal>check</goal>
                        </goals>
                    </execution>
                </executions>
            </plugin>

            <!-- PMD插件 - 静态代码分析 -->
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-pmd-plugin</artifactId>
            </plugin>

            <!-- Dependency Check插件 - 依赖安全检测 -->
            <plugin>
                <groupId>org.owasp</groupId>
                <artifactId>dependency-check-maven</artifactId>
            </plugin>

            <!-- Flatten Maven Plugin - 处理CI Friendly版本号 -->
            <plugin>
                <groupId>org.codehaus.mojo</groupId>
                <artifactId>flatten-maven-plugin</artifactId>
                <version>1.5.0</version>
                <configuration>
                    <updatePomFile>true</updatePomFile>
                    <flattenMode>resolveCiFriendliesOnly</flattenMode>
                </configuration>
                <executions>
                    <execution>
                        <id>flatten</id>
                        <phase>process-resources</phase>
                        <goals>
                            <goal>flatten</goal>
                        </goals>
                    </execution>
                    <execution>
                        <id>flatten.clean</id>
                        <phase>clean</phase>
                        <goals>
                            <goal>clean</goal>
                        </goals>
                    </execution>
                </executions>
            </plugin>
        </plugins>
    </build>

    <distributionManagement>
        <repository>
            <id>nexus-releases</id>
            <name>Nexus Releases</name>
            <url>http://8.140.221.49:8091/repository/maven-releases/</url>
        </repository>
        <snapshotRepository>
            <id>nexus-snapshots</id>
            <name>Nexus Snapshots</name>
            <url>http://8.140.221.49:8091/repository/maven-snapshots/</url>
        </snapshotRepository>
    </distributionManagement>

    <profiles>
        <profile>
            <id>dev</id>
            <activation>
                <activeByDefault>true</activeByDefault>
            </activation>
            <properties>
                <revision>1.1.1-SNAPSHOT</revision>
            </properties>
        </profile>
        <profile>
            <id>release</id>
            <properties>
                <revision>1.1.1-SNAPSHOT</revision>
            </properties>
        </profile>
        <profile>
            <id>test</id>
            <properties>
                <revision>1.1.1-SNAPSHOT</revision>
            </properties>
        </profile>
    </profiles>
</project>
