<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>org.zkoss.zk</groupId>
        <artifactId>zk-parent</artifactId>
        <version>9.6.7.FL.20261014-Eval</version>
        <relativePath>../../zk/zk-parent/pom.xml</relativePath>
    </parent>
    <artifactId>zkcml-parent</artifactId>
    <packaging>pom</packaging>
    <name>ZKCML Parent POM</name>
    <url>https://www.zkoss.org/</url>
    <description>ZKCML Parent POM Module</description>
    <properties>
        <zk.directory>${project.basedir}/../../zk</zk.directory><!-- zk folder -->
    </properties>
    <modules>
        <module>../zkex</module>
        <module>../zkmax</module>
        <module>../zml</module>
        <module>../zuti</module>
        <module>../za11y</module>
    </modules>
    <build>
        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>com.github.eirslett</groupId>
                    <artifactId>frontend-maven-plugin</artifactId>
                    <configuration>
                        <workingDirectory>${zk.directory}</workingDirectory>
                    </configuration>
                    <executions>
                        <execution>
                            <id>compile-less</id>
                            <configuration>
                                <skip>${maven.frontend.skip}</skip>
                                <arguments>
                                    zklessc
                                    --imports ${zk.directory}/zul/src/archive/web
                                    --source ${project.basedir}/src/archive/web
                                    --output ${project.build.outputDirectory}/web
                                    --compress
                                </arguments>
                            </configuration>
                        </execution>
                    </executions>
                </plugin>
            </plugins>
        </pluginManagement>
        <plugins>
            <plugin>
                <groupId>org.owasp</groupId>
                <artifactId>dependency-check-maven</artifactId>
                <inherited>false</inherited>
                <configuration>
                    <suppressionFile>${project.basedir}/../owasp-suppressions.xml</suppressionFile>
                </configuration>
            </plugin>
            <plugin>
                <artifactId>maven-assembly-plugin</artifactId>
                <inherited>false</inherited>
                <executions>
                    <execution>
                        <id>bundle</id>
                        <phase>package</phase>
                        <goals>
                            <goal>single</goal>
                        </goals>
                        <configuration>
                            <descriptors>
                                <descriptor>assembly/bundle.xml</descriptor>
                            </descriptors>
                        </configuration>
                    </execution>
                </executions>
            </plugin>
            <!-- SBOM (CycloneDX) for CRA compliance — EE flagship (zkmax file).
                9.x is Ant-built; job calls makeAggregateBom explicitly. Aggregate over the
                whole zkcml-parent reactor (zkex/zkmax/zml/zuti/za11y) so ALL shipping EE
                modules are covered (aligns with 10.x gradle cyclonedxBom). inherited=false:
                run once on the aggregator. -->
            <plugin>
            	<groupId>org.cyclonedx</groupId>
            	<artifactId>cyclonedx-maven-plugin</artifactId>
            	<version>2.9.2</version>
            	<inherited>false</inherited>
            	<configuration>
            		<outputFormat>json</outputFormat>
            		<schemaVersion>1.6</schemaVersion>
            		<projectType>library</projectType>
            		<includeTestScope>false</includeTestScope>
            		<outputName>zkmax-sbom-cyclonedx</outputName>
            	</configuration>
            </plugin>
        </plugins>
    </build>
</project>
