This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/main by this push:
     new 1da7aef1c TIKA-4161 (#1461)
1da7aef1c is described below

commit 1da7aef1cb2bbadad08336c5baa0eb9f7b2188e6
Author: Tim Allison <talli...@apache.org>
AuthorDate: Mon Nov 20 11:32:32 2023 -0500

    TIKA-4161 (#1461)
    
    * TIKA-4161 -- move dependency versions to properties
---
 tika-bundles/tika-bundle-standard/pom.xml |  10 --
 tika-eval/tika-eval-core/pom.xml          |   3 -
 tika-example/pom.xml                      |   1 -
 tika-parent/pom.xml                       | 217 +++++++++++++++++++-----------
 4 files changed, 139 insertions(+), 92 deletions(-)

diff --git a/tika-bundles/tika-bundle-standard/pom.xml 
b/tika-bundles/tika-bundle-standard/pom.xml
index b30b0129a..6f53e881f 100644
--- a/tika-bundles/tika-bundle-standard/pom.xml
+++ b/tika-bundles/tika-bundle-standard/pom.xml
@@ -61,10 +61,6 @@
       <artifactId>tika-handler-boilerpipe</artifactId>
       <version>${project.version}</version>
     </dependency>
-    <dependency>
-      <groupId>org.apache.logging.log4j</groupId>
-      <artifactId>log4j-api</artifactId>
-    </dependency>
 
     <!-- Test dependencies -->
     <dependency>
@@ -172,8 +168,6 @@
               poi-scratchpad|
               poi-ooxml|
               poi-ooxml-lite|
-              log4j-core|
-              log4j-api|
               commons-math3|
               curvesapi|
               xmlbeans|
@@ -303,10 +297,6 @@
               org.apache.batik.svggen;resolution:=optional,
               org.apache.batik.util;resolution:=optional,
               org.apache.jcp.xml.dsig.internal.dom;resolution:=optional,
-              org.apache.logging.log4j;resolution:=optional,
-              org.apache.logging.log4j.util;resolution:=optional,
-              org.apache.logging.log4j.util.internal;resolution:=optional,
-              org.apache.logging.log4j.spi;resolution:=optional,
               org.apache.maven.model;resolution:=optional,
               org.apache.maven.plugin;resolution:=optional,
               org.apache.maven.plugin.logging;resolution:=optional,
diff --git a/tika-eval/tika-eval-core/pom.xml b/tika-eval/tika-eval-core/pom.xml
index c619a1501..7f19cee09 100644
--- a/tika-eval/tika-eval-core/pom.xml
+++ b/tika-eval/tika-eval-core/pom.xml
@@ -60,17 +60,14 @@
     <dependency>
       <groupId>org.apache.lucene</groupId>
       <artifactId>lucene-core</artifactId>
-      <version>${lucene.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.lucene</groupId>
       <artifactId>lucene-analysis-common</artifactId>
-      <version>${lucene.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.lucene</groupId>
       <artifactId>lucene-analysis-icu</artifactId>
-      <version>${lucene.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
diff --git a/tika-example/pom.xml b/tika-example/pom.xml
index ddfc544b7..4a35fea93 100644
--- a/tika-example/pom.xml
+++ b/tika-example/pom.xml
@@ -103,7 +103,6 @@
     <dependency>
       <groupId>org.apache.lucene</groupId>
       <artifactId>lucene-core</artifactId>
-      <version>${lucene.version}</version>
     </dependency>
     <dependency>
       <groupId>org.springframework</groupId>
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 330dd110b..06f297824 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -305,65 +305,130 @@
     <scm.version>2.0.1</scm.version>
 
     <!-- dependency versions -->
-    <google.cloud.version>2.28.0</google.cloud.version>
+    <asm.version>9.6</asm.version>
     <aws.version>1.12.592</aws.version>
     <!-- WARNING: when you upgrade asm make sure that you update the
         OpCode in the initializer in 
org.apache.tika.parser.asm.XHTMLClassVisitor
         See TIKA-2992.
     -->
-    <asm.version>9.6</asm.version>
+    <azure.core.version>1.45.0</azure.core.version>
+    <azure.core.http.netty.version>1.13.10</azure.core.http.netty.version>
+    <azure.storage.blob.version>12.25.0</azure.storage.blob.version>
+    <biz.aqute.version>6.4.1</biz.aqute.version>
     <boilerpipe.version>1.1.0</boilerpipe.version>
     <!--  used by POI, PDFBox and Jackcess encrypt ...try to sync -->
     <bouncycastle.version>1.77</bouncycastle.version>
     <!-- NOTE: sync brotli version with commons-compress-->
     <brotli.version>0.1.2</brotli.version>
+    <c3p0.version>0.9.5.5</c3p0.version>
+    <commons.cli.version>1.6.0</commons.cli.version>
+    <commons.codec.version>1.16.0</commons.codec.version>
+    <commons.collections4.version>4.4</commons.collections4.version>
+    <commons.compress.version>1.25.0</commons.compress.version>
+    <commons.csv.version>1.10.0</commons.csv.version>
+    <commons.exec.version>1.3</commons.exec.version>
+    <commons.fileupload.version>1.5</commons.fileupload.version>
+    <commons.io.version>2.15.0</commons.io.version>
+    <commons.lang3.version>3.13.0</commons.lang3.version>
+    <commons.logging.version>1.2</commons.logging.version>
+    <commons.math3.version>3.6.1</commons.math3.version>
     <commons.net.version>3.10.0</commons.net.version>
     <ctakes.version>4.0.0.1</ctakes.version>
+    <cxf.version>4.0.3</cxf.version>
     <ddplist.version>1.27</ddplist.version>
     <dl4j.version>1.0.0-M2.1</dl4j.version>
     <fakeload.version>0.7.0</fakeload.version>
+    <fastutil.version>8.5.12</fastutil.version>
+    <felix.scr.version>1.12.0</felix.scr.version>
+    <freemarker.version>2.3.32</freemarker.version>
+    <geoapi.version>3.0.2</geoapi.version>
+    <google.cloud.version>2.29.1</google.cloud.version>
+    <gson.version>2.10.1</gson.version>
+    <guava.version>32.1.3-jre</guava.version>
     <h2.version>2.2.224</h2.version>
     <httpcomponents.version>4.5.14</httpcomponents.version>
+    <httpcore.version>4.4.16</httpcore.version>
+    <icu4j.version>74.1</icu4j.version>
     <imageio.version>1.4.0</imageio.version>
     <jackrabbit.version>2.21.20</jackrabbit.version>
     <jackson.version>2.16.0</jackson.version>
+    <jackcess.version>4.0.5</jackcess.version>
+    <jackcess.encrypt.version>4.0.2</jackcess.encrypt.version>
+    <jai.imageio.core.version>1.4.0</jai.imageio.core.version>
+    <jakarta.activation.version>2.1.2</jakarta.activation.version>
+    <jakarta.annotation.version>3.0.0-M1</jakarta.annotation.version>
+    <jakarta.ws.rs.version>3.1.0</jakarta.ws.rs.version>
+    <jakarta.xml.bind.version>4.0.1</jakarta.xml.bind.version>
+    <jakarta.xml.soap.version>3.0.1</jakarta.xml.soap.version>
     <javax.annotation.version>1.3.2</javax.annotation.version>
     <javax.jcr.version>2.0</javax.jcr.version>
+    <jaxb.runtime.version>4.0.4</jaxb.runtime.version>
     <jbig2.version>3.0.4</jbig2.version>
+    <jcommander.version>1.82</jcommander.version>
+    <jdom2.version>2.0.6.1</jdom2.version>
     <jempbox.version>1.8.17</jempbox.version>
+    <jetty.version>11.0.18</jetty.version>
     <jhighlight.version>1.1.0</jhighlight.version>
+    <jna.version>5.13.0</jna.version>
+    <json.simple.version>1.1.1</json.simple.version>
+    <jsoup.version>1.16.2</jsoup.version>
+    <jsr305.version>3.0.2</jsr305.version>
+    <junit4.version>4.13.2</junit4.version>
     <junit5.version>5.10.1</junit5.version>
+    <juniversalchardet.version>2.4.0</juniversalchardet.version>
     <junrar.version>7.5.5</junrar.version>
+    <jwarc.version>0.28.3</jwarc.version>
     <kafka.version>3.6.0</kafka.version>
     <libpst.version>0.9.3</libpst.version>
+    <log4j2.version>2.21.1</log4j2.version>
     <lucene.version>9.8.0</lucene.version>
+    <maven.plugin.annotations.version>3.10.2</maven.plugin.annotations.version>
+    <mchange.version>0.2.20</mchange.version>
+    <metadata.extractor.version>2.18.0</metadata.extractor.version>
     <microsoft.translator.version>0.6.2</microsoft.translator.version>
     <mime4j.version>0.8.9</mime4j.version>
+    <mockito.version>5.7.0</mockito.version>
     <netcdf-java.version>4.5.5</netcdf-java.version>
     <netty.version>4.1.101.Final</netty.version>
+    <oak.jackrabbit.version>1.58.0</oak.jackrabbit.version>
     <openjson.version>1.0.13</openjson.version>
+    <opennlp.version>2.2.0</opennlp.version>
     <ops4j.version>1.5.1</ops4j.version>
     <optimaize.version>0.6</optimaize.version>
+    <osgi.compendium.version>5.0.0</osgi.compendium.version>
+    <osgi.core.version>6.0.0</osgi.core.version>
+    <osgi.util.version>1.2.0</osgi.util.version>
     <parso.version>2.0.14</parso.version>
     <pax.exam.version>4.13.5</pax.exam.version>
     <pdfbox.version>2.0.30</pdfbox.version>
+    <plexus.version>5.0.0</plexus.version>
     <!-- NOTE: sync tukaani version with commons-compress in tika-parsers -->
     <poi.version>5.2.4</poi.version>
+    <protobuf.version>3.25.1</protobuf.version>
     <quartz.version>2.3.2</quartz.version>
+    <reactor.core.version>3.6.0</reactor.core.version>
     <reactor.netty.version>1.1.13</reactor.netty.version>
     <rome.version>2.1.0</rome.version>
     <scm.version>2.0.1</scm.version>
     <slf4j.version>2.0.9</slf4j.version>
     <sis.version>1.4</sis.version>
+    <snappy.version>1.1.10.5</snappy.version>
     <solrj.version>8.11.2</solrj.version>
     <!-- NOTE: Spring 6 requires jdk17  -->
     <spring.version>5.3.31</spring.version>
     <sqlite.version>3.44.0.0</sqlite.version>
+    <stax.ex.version>2.1.0</stax.ex.version>
     <tagsoup.version>1.2.1</tagsoup.version>
+    <testcontainers.version>1.19.2</testcontainers.version>
     <!-- NOTE: sync tukaani version with commons-compress in tika-parent -->
     <tukaani.version>1.9</tukaani.version>
     <twelvemonkeys.version>3.10.1</twelvemonkeys.version>
+    <!-- Apache UIMA v3.5.0 and later requires Java version 17 or later. -->
+    <uimafit.version>3.4.0</uimafit.version>
+    <uimaj.core.version>3.4.1</uimaj.core.version>
+    <unit.api.version>2.1</unit.api.version>
     <vorbis.version>0.8</vorbis.version>
+    <woodstox.core.version>6.5.1</woodstox.core.version>
     <xmpcore.version>6.1.11</xmpcore.version>
     <!-- This has to be < 3.9 to work with Solr 8's integration tests -->
     <zookeeper.version>3.8.3</zookeeper.version>
@@ -390,14 +455,14 @@
       <dependency>
         <groupId>org.apache.cxf</groupId>
         <artifactId>cxf-bom</artifactId>
-        <version>4.0.3</version>
+        <version>${cxf.version}</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-bom</artifactId>
-        <version>2.20.0</version>
+        <version>${log4j2.version}</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -420,14 +485,14 @@
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-bom</artifactId>
         <!-- 12.x requires Java 17 -->
-        <version>11.0.18</version>
+        <version>${jetty.version}</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
       <dependency>
         <groupId>org.jsoup</groupId>
         <artifactId>jsoup</artifactId>
-        <version>1.16.2</version>
+        <version>${jsoup.version}</version>
       </dependency>
       <dependency>
         <groupId>org.junit</groupId>
@@ -439,14 +504,14 @@
       <dependency>
         <groupId>org.slf4j</groupId>
         <artifactId>slf4j-bom</artifactId>
-        <version>2.0.9</version>
+        <version>${slf4j.version}</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
       <dependency>
         <groupId>org.testcontainers</groupId>
         <artifactId>testcontainers-bom</artifactId>
-        <version>1.19.2</version>
+        <version>${testcontainers.version}</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -455,7 +520,7 @@
         <groupId>biz.aQute.bnd</groupId>
         <artifactId>biz.aQute.bndlib</artifactId>
         <!-- can't update to 7.0.0: "class file has wrong version 61.0, should 
be 55.0" -->
-        <version>6.4.1</version>
+        <version>${biz.aqute.version}</version>
       </dependency>
       <dependency>
         <groupId>com.amazonaws</groupId>
@@ -465,17 +530,17 @@
       <dependency>
         <groupId>com.azure</groupId>
         <artifactId>azure-storage-blob</artifactId>
-        <version>12.25.0</version>
+        <version>${azure.storage.blob.version}</version>
       </dependency>
       <dependency>
         <groupId>com.azure</groupId>
         <artifactId>azure-core</artifactId>
-        <version>1.45.0</version>
+        <version>${azure.core.version}</version>
       </dependency>
       <dependency>
         <groupId>com.azure</groupId>
         <artifactId>azure-core-http-netty</artifactId>
-        <version>1.13.10</version>
+        <version>${azure.core.http.netty.version}</version>
         <exclusions>
           <exclusion>
             <groupId>io.netty</groupId>
@@ -486,63 +551,63 @@
       <dependency>
         <groupId>com.drewnoakes</groupId>
         <artifactId>metadata-extractor</artifactId>
-        <version>2.18.0</version>
+        <version>${metadata.extractor.version}</version>
       </dependency>
       <dependency>
         <groupId>com.google.cloud</groupId>
         <artifactId>google-cloud-storage</artifactId>
-        <version>2.29.1</version>
+        <version>${google.cloud.version}</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
-        <version>6.5.1</version>
+        <version>${woodstox.core.version}</version>
       </dependency>
       <dependency>
         <groupId>com.mchange</groupId>
         <artifactId>c3p0</artifactId>
-        <version>0.9.5.5</version>
+        <version>${c3p0.version}</version>
       </dependency>
       <dependency>
         <groupId>com.mchange</groupId>
         <artifactId>mchange-commons-java</artifactId>
-        <version>0.2.20</version>
+        <version>${mchange.version}</version>
       </dependency>
       <dependency>
         <groupId>com.beust</groupId>
         <artifactId>jcommander</artifactId>
-        <version>1.82</version>
+        <version>${jcommander.version}</version>
       </dependency>
       <dependency>
         <groupId>com.github.albfernandez</groupId>
         <artifactId>juniversalchardet</artifactId>
-        <version>2.4.0</version>
+        <version>${juniversalchardet.version}</version>
       </dependency>
       <!-- jai-imageio-core is allowed since LEGAL-304 -->
       <dependency>
         <groupId>com.github.jai-imageio</groupId>
         <artifactId>jai-imageio-core</artifactId>
-        <version>1.4.0</version>
+        <version>${jai.imageio.core.version}</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.findbugs</groupId>
         <artifactId>jsr305</artifactId>
-        <version>3.0.2</version>
+        <version>${jsr305.version}</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.gson</groupId>
         <artifactId>gson</artifactId>
-        <version>2.10.1</version>
+        <version>${gson.version}</version>
       </dependency>
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>32.1.3-jre</version>
+        <version>${guava.version}</version>
       </dependency>
       <dependency>
         <groupId>com.googlecode.json-simple</groupId>
         <artifactId>json-simple</artifactId>
-        <version>1.1.1</version>
+        <version>${json.simple.version}</version>
         <exclusions>
           <exclusion>
             <groupId>junit</groupId>
@@ -553,7 +618,7 @@
       <dependency>
         <groupId>com.google.protobuf</groupId>
         <artifactId>protobuf-java</artifactId>
-        <version>3.25.1</version>
+        <version>${protobuf.version}</version>
       </dependency>
       <dependency>
         <groupId>com.h2database</groupId>
@@ -563,12 +628,12 @@
       <dependency>
         <groupId>com.healthmarketscience.jackcess</groupId>
         <artifactId>jackcess</artifactId>
-        <version>4.0.5</version>
+        <version>${jackcess.version}</version>
       </dependency>
       <dependency>
         <groupId>com.healthmarketscience.jackcess</groupId>
         <artifactId>jackcess-encrypt</artifactId>
-        <version>4.0.2</version>
+        <version>${jackcess.encrypt.version}</version>
         <exclusions>
           <!-- to avoid maven-enforcer convergence error,
             let's make this explicit -->
@@ -585,7 +650,7 @@
       <dependency>
         <groupId>com.ibm.icu</groupId>
         <artifactId>icu4j</artifactId>
-        <version>74.1</version>
+        <version>${icu4j.version}</version>
       </dependency>
       <dependency>
         <groupId>com.twelvemonkeys.common</groupId>
@@ -615,27 +680,27 @@
       <dependency>
         <groupId>commons-cli</groupId>
         <artifactId>commons-cli</artifactId>
-        <version>1.6.0</version>
+        <version>${commons.cli.version}</version>
       </dependency>
       <dependency>
         <groupId>commons-codec</groupId>
         <artifactId>commons-codec</artifactId>
-        <version>1.16.0</version>
+        <version>${commons.codec.version}</version>
       </dependency>
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.15.0</version>
+        <version>${commons.io.version}</version>
       </dependency>
       <dependency>
         <groupId>commons-logging</groupId>
         <artifactId>commons-logging</artifactId>
-        <version>1.2</version>
+        <version>${commons.logging.version}</version>
       </dependency>
       <dependency>
         <groupId>io.projectreactor</groupId>
         <artifactId>reactor-core</artifactId>
-        <version>3.6.0</version>
+        <version>${reactor.core.version}</version>
       </dependency>
       <dependency>
         <groupId>io.projectreactor.netty</groupId>
@@ -650,43 +715,43 @@
       <dependency>
         <groupId>it.unimi.dsi</groupId>
         <artifactId>fastutil</artifactId>
-        <version>8.5.12</version>
+        <version>${fastutil.version}</version>
       </dependency>
       <dependency>
         <groupId>jakarta.activation</groupId>
         <artifactId>jakarta.activation-api</artifactId>
-        <version>2.1.2</version>
+        <version>${jakarta.activation.version}</version>
       </dependency>
       <dependency>
         <groupId>jakarta.annotation</groupId>
         <artifactId>jakarta.annotation-api</artifactId>
-        <version>2.1.1</version>
+        <version>${jakarta.annotation.version}</version>
       </dependency>
       <!-- can't upgrade higher until geoapi does because of changes in 
classes after 2.1 -->
       <dependency>
         <groupId>javax.measure</groupId>
         <artifactId>unit-api</artifactId>
-        <version>2.1</version>
+        <version>${unit.api.version}</version>
       </dependency>
       <dependency>
         <groupId>jakarta.ws.rs</groupId>
         <artifactId>jakarta.ws.rs-api</artifactId>
-        <version>3.1.0</version>
+        <version>${jakarta.ws.rs.version}</version>
       </dependency>
       <dependency>
         <groupId>jakarta.xml.bind</groupId>
         <artifactId>jakarta.xml.bind-api</artifactId>
-        <version>4.0.1</version>
+        <version>${jakarta.xml.bind.version}</version>
       </dependency>
       <dependency>
         <groupId>jakarta.xml.soap</groupId>
         <artifactId>jakarta.xml.soap-api</artifactId>
-        <version>3.0.1</version>
+        <version>${jakarta.xml.soap}</version>
       </dependency>
       <dependency>
         <groupId>junit</groupId>
         <artifactId>junit</artifactId>
-        <version>4.13.2</version>
+        <version>${junit4.version}</version>
       </dependency>
       <dependency>
         <groupId>org.junit.jupiter</groupId>
@@ -701,42 +766,42 @@
       <dependency>
         <groupId>net.java.dev.jna</groupId>
         <artifactId>jna</artifactId>
-        <version>5.13.0</version>
+        <version>${jna.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-collections4</artifactId>
-        <version>4.4</version>
+        <version>${commons.collections4.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-compress</artifactId>
-        <version>1.25.0</version>
+        <version>${commons.compress.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-csv</artifactId>
-        <version>1.10.0</version>
+        <version>${commons.csv.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-exec</artifactId>
-        <version>1.3</version>
+        <version>${commons.exec.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
-        <version>3.13.0</version>
+        <version>${commons.lang3.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-math3</artifactId>
-        <version>3.6.1</version>
+        <version>${commons.math3.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.felix</groupId>
         <artifactId>org.apache.felix.scr.annotations</artifactId>
-        <version>1.12.0</version>
+        <version>${felix.scr.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.httpcomponents</groupId>
@@ -746,7 +811,7 @@
       <dependency>
         <groupId>org.apache.httpcomponents</groupId>
         <artifactId>httpcore</artifactId>
-        <version>4.4.16</version>
+        <version>${httpcore.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.httpcomponents</groupId>
@@ -756,12 +821,12 @@
       <dependency>
         <groupId>org.apache.jackrabbit</groupId>
         <artifactId>oak-jackrabbit-api</artifactId>
-        <version>1.58.0</version>
+        <version>${oak.jackrabbit.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-core</artifactId>
-        <version>2.20.0</version>
+        <version>${log4j2.version}</version>
         <exclusions>
         <!-- weak dependency on org.osgi.core 4.3.1 -->
           <exclusion>
@@ -789,7 +854,7 @@
         <groupId>org.apache.opennlp</groupId>
         <artifactId>opennlp-tools</artifactId>
         <!-- 2.3.0 requires java 17 -->
-        <version>2.2.0</version>
+        <version>${opennlp.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.poi</groupId>
@@ -824,47 +889,47 @@
       <dependency>
         <groupId>org.ccil.cowan.tagsoup</groupId>
         <artifactId>tagsoup</artifactId>
-        <version>1.2.1</version>
+        <version>${tagsoup.version}</version>
       </dependency>
       <dependency>
         <groupId>org.codehaus.plexus</groupId>
         <artifactId>plexus-utils</artifactId>
-        <version>4.0.0</version>
+        <version>${plexus.version}</version>
       </dependency>
       <dependency>
         <groupId>org.freemarker</groupId>
         <artifactId>freemarker</artifactId>
-        <version>2.3.32</version>
+        <version>${freemarker.version}</version>
       </dependency>
       <dependency>
         <groupId>org.glassfish.jaxb</groupId>
         <artifactId>jaxb-runtime</artifactId>
-        <version>4.0.4</version>
+        <version>${jaxb.runtime.version}</version>
       </dependency>
       <dependency>
         <groupId>org.jdom</groupId>
         <artifactId>jdom2</artifactId>
-        <version>2.0.6.1</version>
+        <version>${jdom2.version}</version>
       </dependency>
       <dependency>
         <groupId>org.jvnet.staxex</groupId>
         <artifactId>stax-ex</artifactId>
-        <version>2.1.0</version>
+        <version>{$stax.ex.version}</version>
       </dependency>
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-core</artifactId>
-        <version>5.7.0</version>
+        <version>${mockito.version}</version>
       </dependency>
       <dependency>
         <groupId>org.netpreserve</groupId>
         <artifactId>jwarc</artifactId>
-        <version>0.28.3</version>
+        <version>${jwarc.version}</version>
       </dependency>
       <dependency>
         <groupId>org.opengis</groupId>
         <artifactId>geoapi</artifactId>
-        <version>3.0.2</version>
+        <version>${geoapi.version}</version>
       </dependency>
       <dependency>
         <groupId>org.ops4j.base</groupId>
@@ -879,54 +944,53 @@
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.compendium</artifactId>
-        <version>5.0.0</version>
+        <version>${osgi.compendium.version}</version>
       </dependency>
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.core</artifactId>
-        <version>6.0.0</version>
+        <version>${osgi.core.version}</version>
       </dependency>
       <!-- for bndlib -->
       <dependency>
         <groupId>org.osgi</groupId>
         <artifactId>org.osgi.util.function</artifactId>
-        <version>1.2.0</version>
+        <version>${osgi.util.version}</version>
       </dependency>
       <dependency>
         <groupId>org.quartz-scheduler</groupId>
         <artifactId>quartz</artifactId>
-        <version>2.3.2</version>
+        <version>${quartz.version}</version>
       </dependency>
       <!-- need to specify this to avoid
       version clash within ctakes-core 4.0.0 -->
       <dependency>
         <groupId>org.apache.uima</groupId>
         <artifactId>uimafit-core</artifactId>
-        <version>3.4.0</version>
+        <version>${uimafit.version}</version>
         <scope>provided</scope>
       </dependency>
-      <!-- Apache UIMA v3.5.0 and later requires Java version 17 or later. -->
       <dependency>
         <groupId>org.apache.uima</groupId>
         <artifactId>uimaj-core</artifactId>
-        <version>3.4.1</version>
+        <version>${uimaj.core.version}</version>
         <scope>provided</scope>
       </dependency>
       <dependency>
         <groupId>org.xerial.snappy</groupId>
         <artifactId>snappy-java</artifactId>
-        <version>1.1.10.5</version>
+        <version>${snappy.version}</version>
       </dependency>
       <dependency>
         <groupId>commons-fileupload</groupId>
         <artifactId>commons-fileupload</artifactId>
-        <version>1.5</version>
+        <version>${commons.fileupload.version}</version>
       </dependency>
       <!-- this one only to keep version plugin output smaller -->
       <dependency>
         <groupId>org.apache.maven.plugin-tools</groupId>
         <artifactId>maven-plugin-annotations</artifactId>
-        <version>3.10.2</version>
+        <version>${maven.plugin.annotations.version}</version>
       </dependency>
     </dependencies>
   </dependencyManagement>
@@ -955,6 +1019,9 @@
         </configuration>
       </plugin>
       <!--
+        mvn versions:display-property-updates -nsu
+        where -nsu stands for \-\-no-snapshot-updates
+        Or if you want too much output to deal with:
         mvn versions:display-plugin-updates
         mvn versions:display-dependency-updates
       -->
@@ -974,12 +1041,6 @@
         <version>3.2.0</version>
         <configuration>
           <excludeCoordinates>
-            <!-- the link from ossindex "divide by zero" points to fixes that 
were made in 2.18.0 -->
-            <coordinate>
-              <groupId>com.drewnoakes</groupId>
-              <artifactId>metadata-extractor</artifactId>
-              <version>2.18.0</version>
-            </coordinate>
             <!-- sonatype 
https://ossindex.sonatype.org/vulnerability/sonatype-2021-0818
             false positive? related bug 
https://github.com/grpc/grpc-java/issues/8311
             has been fixed -->

Reply via email to