lili 819522d752 fix(release): close dogfood security blockers
Make the dogfood security foundation self-contained, reject external runtime RPC writes, and bind publish state transitions with database concurrency controls.
2026-07-22 22:12:45 -07:00

288 lines
12 KiB
XML
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<parent>
<groupId>com.wanxiang</groupId>
<artifactId>huijing</artifactId>
<version>${revision}</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<artifactId>huijing-server</artifactId>
<packaging>jar</packaging>
<name>${project.artifactId}</name>
<description>
后端 Server 的主项目,通过引入需要 huijing-module-xxx 的依赖,
从而实现提供 RESTful API 给 huijing-ui-admin、huijing-ui-user 等前端项目。
本质上来说,它就是个空壳(容器)!
</description>
<url>https://github.com/YunaiV/ruoyi-vue-pro</url>
<dependencies>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>huijing-module-system-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>huijing-module-infra-server</artifactId>
<version>${revision}</version>
</dependency>
<!-- 绘境 game 业务模块(黄金模板先行,聚合进单体) -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-project-server</artifactId>
<version>${revision}</version>
</dependency>
<!-- Wave1 闭环脊柱 4 模块(聚合进单体;全局扫描已覆盖 com.wanxiang.huijing.game.module无需改 Application/yaml -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-aigc-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-runtime-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-feed-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-telemetry-server</artifactId>
<version>${revision}</version>
</dependency>
<!-- Wave2 变现域 2 模块ad 广告引擎 / trade 分账·结算·提现;聚合进单体,全局扫描已覆盖 com.wanxiang.huijing.game.module -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-ad-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-trade-server</artifactId>
<version>${revision}</version>
</dependency>
<!-- Wave3 模块compliance 锁风门 Gate / studio 创作主链路编排;聚合进单体,全局扫描已覆盖 com.wanxiang.huijing.game.module -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-compliance-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-studio-server</artifactId>
<version>${revision}</version>
</dependency>
<!-- Wave4 模块community 通知底座 / biz B端定制 lead form聚合进单体全局扫描已覆盖 com.wanxiang.huijing.game.module -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-community-server</artifactId>
<version>${revision}</version>
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>game-module-biz-server</artifactId>
<version>${revision}</version>
</dependency>
<!-- Flyway 数据库迁移(版本由 spring-boot-dependencies 管理 = 11.xMySQL 需 flyway-mysql -->
<dependency>
<groupId>org.flywaydb</groupId>
<artifactId>flyway-core</artifactId>
</dependency>
<dependency>
<groupId>org.flywaydb</groupId>
<artifactId>flyway-mysql</artifactId>
</dependency>
<!-- 会员中心。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-member-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- 数据报表。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-report-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- 工作流。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-bpm-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- 支付服务。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-pay-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- 微信公众号模块。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-mp-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- 商城相关模块。默认注释,保证编译速度-->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-product-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-promotion-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-trade-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-statistics-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- CRM 相关模块。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-crm-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- ERP 相关模块。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-erp-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- AI 大模型相关模块。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-ai-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- IoT 物联网相关模块。默认注释,保证编译速度 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-iot-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- MES 制造执行系统相关模块 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-mes-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- WMS 仓库管理模块 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-wms-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- IM 即时通讯模块 -->
<!-- <dependency>-->
<!-- <groupId>com.wanxiang</groupId>-->
<!-- <artifactId>huijing-module-im-server</artifactId>-->
<!-- <version>${revision}</version>-->
<!-- </dependency>-->
<!-- spring boot 配置所需依赖 -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-configuration-processor</artifactId>
<optional>true</optional>
</dependency>
<!-- 观测接入(阶段四观测 波② · T2-2激活 monitor starter 里「在席但残缺」的指标能力。
huijing-spring-boot-starter-monitor 经 system-server / infra-server 两模块传递进本单体,但它未声明
spring-boot-starter-actuator、且把 micrometer-registry-prometheus 标成 optional=true 不随传递装入,导致三处哑火:
① /actuator/prometheus 端点不成立(无 PrometheusMeterRegistry
② HuijingMetricsAutoConfiguration 的 @ConditionalOnClass(MeterRegistryCustomizer) 因缺 actuator-autoconfigure 不激活;
③ aigc 的 SAA 图节点 ObservationRegistry 退化为 NOOP、产不出节点 span。
在单体聚合层(部署件)显式引入二者即 wire 通,不改 yudao 框架层 starter 的 optional 默认(框架层保持零副作用)。
版本由 spring-boot-dependencies BOM(3.5.14) 统一管理,无需声明。 -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-actuator</artifactId>
</dependency>
<dependency>
<groupId>io.micrometer</groupId>
<artifactId>micrometer-registry-prometheus</artifactId>
</dependency>
<!-- 服务保障相关 -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>huijing-spring-boot-starter-protection</artifactId>
</dependency>
<!-- Registry 注册中心相关 -->
<dependency>
<groupId>com.alibaba.cloud</groupId>
<artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
</dependency>
<!-- Config 配置中心相关 -->
<dependency>
<groupId>com.alibaba.cloud</groupId>
<artifactId>spring-cloud-starter-alibaba-nacos-config</artifactId>
</dependency>
<!-- RPC 远程调用相关 -->
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>huijing-spring-boot-starter-rpc</artifactId>
<!-- staging 单体启动修法:撤销对 openfeign 的排除,让 spring-cloud-starter-openfeign 进入 classpath。
framework 自带 @EnableFeignClients(HuijingSecurityRpcAutoConfiguration 等)需 openfeign 在 classpath本地 @Primary *ApiImpl 同进程覆盖远程调用。
nacos discovery/config 仍 enabled=false不做真实注册发现。 -->
</dependency>
<dependency>
<groupId>com.wanxiang</groupId>
<artifactId>huijing-spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
</dependencies>
<build>
<!-- 设置构建的 jar 包名 -->
<finalName>${project.artifactId}</finalName>
<plugins>
<!-- 打包 -->
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
<version>${spring.boot.version}</version>
<executions>
<execution>
<goals>
<goal>repackage</goal> <!-- 将引入的 jar 打入其中 -->
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</project>