test(sprint-11): centralize JaCoCo coverage rules and add bank import + finance test coverage
Deploy to Production / test (push) Failing after 1s
Deploy to Production / deploy (push) Has been skipped

- pom.xml: introduce risk-tiered JaCoCo rules in parent POM
  - bundle: 80% line coverage
  - bankimport/finance packages: 90% (highest precision)
  - api.security: 85%
  - scheduler/notification: 70%
  - exclude entity/enums/dto/config from coverage measurement
  - add Surefire 3.5.2 plugin management
- cannamanage-service/pom.xml: remove obsolete module-local ComplianceService=100% rule
  (subsumed by parent package rules), add explicit jackson-databind dep so
  ByteBuddy can mock AuditService.METADATA_MAPPER
- Add AbstractServiceTest base class for service-layer tests
- Add FinanceServiceTest
- Add bankimport test suite:
  - Mt940ParserTest with malformed input fixtures
    (encoding, overflow, truncated, generic)
  - PaymentMatchingServiceTest with ParsedTransactionBuilder helper
  - CAMT.053 / Sparkasse MT940 sample fixtures
  - XXE attack fixtures (billion-laughs, SSRF, generic)
- docs/sprint-11/: analysis, plan, plan-review, testplan
This commit is contained in:
Patrick Plate
2026-06-15 21:37:49 +02:00
parent 6f7352124d
commit 59b785b8ed
22 changed files with 3493 additions and 53 deletions
@@ -0,0 +1,7 @@
:20:OVERFLOW
:25:50050201/0001234567
:60F:C260601EUR1000,00
:61:2606020602CR99999999999999999999999999999999,99NTRFNONREF//OVF-1
:86:Amount exceeds Long.MAX_VALUE cents
:62F:C260630EUR1000,00
-