See 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/212/display/redirect?page=changes>

Changes:

[Lukasz Lenart] WW-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141

[Lukasz Lenart] IPAGE-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 remove code for "pell multipart plugin"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WW-5141 TODO:  TEMPORARY comment-out incomaptible 
commons-upload old version code

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] IPAGE-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 fix security test

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 temp IGNORE test require commons-upload upgrade

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 conversion to fileupload2

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 fix formatting problems

[Lukasz Lenart] WW-5335 Prepares for Java 17 & Struts 7.x

[Lukasz Lenart] WW-5335 Reverts adding release/struts-7-0-x branch to 
scorecards analysis

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5335 Prepares for Java 17 & Struts 7.x

[Lukasz Lenart] WW-5335 Reverts adding release/struts-7-0-x branch to 
scorecards analysis

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] [WW-5141] Removes deprecated plugins (#798)

[Lukasz Lenart] WW-5335 Prepares for Java 17 & Struts 7.x

[Lukasz Lenart] WW-5335 Reverts adding release/struts-7-0-x branch to 
scorecards analysis

[Lukasz Lenart] [WW-5141] Removes deprecated plugins (#798)

[Lukasz Lenart] Delete unused files missed in previous PR

[Lukasz Lenart] Delete remaining deprecated plugins

[Lukasz Lenart] WN-5141 fix whitespace issues

[Lukasz Lenart] Upgrades Htmlunit to version 3.6.0

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5371 Implements action based file upload

[Lukasz Lenart] WW-5371 Document how to use the new file upload logic

[Lukasz Lenart] WW-5370 Simplifies error handling logic

[Lukasz Lenart] WW-5371 Migrates modern upload change to JakartaEE

[Lukasz Lenart] WW-5371 Migrates modern upload change to JakartaEE

[Lukasz Lenart] WW-5364 fixes automatically populated OGNL allowlist

[Lukasz Lenart] WW-5339 Add option to block custom OGNL maps

[Lukasz Lenart] Adds missing import

[Lukasz Lenart] Replaces empty file upload test with simple one

[Lukasz Lenart] Upgrades Maven wrapper

[Lukasz Lenart] Fixes pipeline to properly handle transformed artifacts

[Lukasz Lenart] Moves JakartaEE related modules into dedicate subdirectory

[Lukasz Lenart] Fixes typo in pom

[Lukasz Lenart] Upgrades Mockito to ver 5.8.0

[git] Dependency manage byte-buddy

[git] Alphabetise dependency version props

[git] Upgrade Maven Surefire version

[Lukasz Lenart] Fixes wrong version in BOM

[Lukasz Lenart] Configure assembly plugin to use proper folders

[Lukasz Lenart] Cleans up assembly definitions

[Lukasz Lenart] Configures source-release assembly

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M1

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Sebastian.Peters] Upgrade maven to 3.9.6 and wrapper to 3.2.0

[Lukasz Lenart] WW-5388 Uses the latest JakartaEE FileUpload Servlet 6 package

[Lukasz Lenart] WW-5388 Updates tests to match new logic

[Lukasz Lenart] WW-5388 Simplifies code

[Lukasz Lenart] WW-5388 Avoids unconditional invocations of method in logs

[Lukasz Lenart] WW-5388 Adds tests per each Jakarta parser

[Lukasz Lenart] WW-5388 Drops unused defaultLocale

[Lukasz Lenart] WW-5388 Uses temp directory to avoid problems on Jenkins

[Lukasz Lenart] WW-5388 Test multi-files and fields

[Lukasz Lenart] WW-5388 Introduces new constant to allow control max number of 
files

[Lukasz Lenart] WW-5388 Extracts method to read charset

[Lukasz Lenart] WW-5388 Adds dedicated integration test to cover max size upload

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M2

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] WW-5390 Fixes generating assemblies during release process

[Lukasz Lenart] Ensures if temp folder is writable

[Sebastian.Peters] Update log4j2 to 2.21.1

[Sebastian.Peters] [WW-5384] Update log4j2 to 2.22.1

[Sebastian.Peters] [WW-5393] Update caffeine to 3.1.8

[Sebastian.Peters] Override version of error_prone_annotations

[Lukasz Lenart] WW-5388 Fixes a few issues in Servlet 6 file upload usage

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M3

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Greg Huber] Fix file upload to use actual file name rather than uploadxxx.tmp

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M4

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] Fixes after merge assembly issue

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M5

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] Fixes creating assembly during release process

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M6

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[git] WW-5353 Stronger security defaults for 7.0

[git] WW-5353 Test fixes

[Lukasz Lenart] WW-5423 Fixes returning null instead of empty array in case of 
non-existing param

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M7

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] WW-5430 Uses Freemarker native support for JakartaEE instead of 
manually transforming the artifacts

[git] WW-5411 Delete deprecated methods from OgnlValueStack

[git] WW-5411 Delete deprecated methods from cache factories and OgnlUtil 
constructor

[git] WW-5411 Delete deprecated methods from OgnlUtil

[git] WW-5411 Delete deprecated members from prepare filters

[git] WW-5411 Delete misc deprecated methods from 6.2.0

[git] WW-5411 Delete deprecated Velocity injection methods

[git] WW-5411 Delete misc deprecated methods from 6.4.0

[git] WW-5411 Delete deprecated Aware marker interfaces

[git] WW-5411 Delete more deprecated methods from OgnlUtil

[Lukasz Lenart] WW-5438 Fixes scope of Weld dependencies

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M8

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M9

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[git] WW-5411 Delete deprecated code part 1

[git] WW-5411 Delete deprecated code part 2

[git] WW-5411 Delete deprecated code part 3

[git] WW-5411 Delete deprecated code part 4

[git] WW-5411 Delete deprecated code part 5

[git] WW-5411 Misc code cleanup

[git] WW-5411 General code clean up using modern language features

[git] WW-5411 Delete deprecated code part 6

[git] WW-5411 Delete old comment

[git] WW-5411 Delete unsupported static field templating

[git] WW-5386 Delete deprecated FileUploadInterceptor

[git] WW-5449 Make Velocity Tools dependency optional for Velocity plugin

[git] WW-5449 Minor clean up

[git] WW-5449 Include Velocity Tools dependencies explicitly in Showcase app

[git] WW-5449 Increase coverage

[git] WW-5453 Rename VelocityManager interface and default implementation

[git] WW-5454 Log warnings on startup for disabled critical security features

[Lukasz Lenart] WW-5450 Uses existing Jakarta constants instead of free hand 
strings

[Lukasz Lenart] WW-5450 Avoids accessing parameters via a key

[Lukasz Lenart] WW-5450 Uses proper naming when defining a constant

[Lukasz Lenart] WW-5450 Simplifies boolean expression

[Lukasz Lenart] WW-5450 Drops unused import

[Lukasz Lenart] WW-5461 Extends UploadedFile with inputName field

[Lukasz Lenart] WW-5458 Replaces e.printStackTrace() with proper logger

[Lukasz Lenart] WW-5468 Fixes @StrutsParameter for ModelDriven

[git] WW-5468 Reworked fix, exempt ModelDriven Action parameters

[Lukasz Lenart] WW-5465 Renames tag parameters to attributes

[Lukasz Lenart] WW-5465 Short-circuits attributes processing if not found in 
ValueStack

[git] WW-5468 Remove unneeded annotations

[git] WW-5468 Replace tabs with spaces

[Lukasz Lenart] WW-5473 Fixes examining multiple HttpServletWrappers to find 
MultiPartRequestWrapper

[Lukasz Lenart] WW-5472 Removes Struts Sitemesh plugin

[Lukasz Lenart] WW-5209 Upgrade to Jakarta Bean Validation 3.1.0

[Lukasz Lenart] WW-5427 Upgrades Freemarker incompatible_improvements to 
version 2.3.33

[git] Fix merge errors

[git] WW-3714 Moves all classes from com.opensymphony.xwork2 into 
org.apache.struts2

[git] Replace com.opensymphony.xwork2 mentions

[git] WW-5478 Delete deprecated DefaultResultFactory

[git] WW-3714 Move new Result class into result package

[Lukasz Lenart] WW-5459 Moves Action interface into org.apache.struts2.action 
package

[Lukasz Lenart] WW-5459 Moves ActionChainResult into org.apache.struts2.result 
package

[Lukasz Lenart] Uses proper default package name

[Lukasz Lenart] WW-5459 Updates content of zipped XMLs

[Lukasz Lenart] Creates temp folder in target folder

[Lukasz Lenart] WW-5481 Moves text related classes into org.apache.struts2.text

[Lukasz Lenart] WW-5481 Extracts duplicated code

[Lukasz Lenart] WW-5482 Moves locale related code into org.apache.struts2.locale

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M10

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[github] Bump org.apache.maven.plugins:maven-project-info-reports-plugin

[Lukasz Lenart] WW-5486 Fixes exposing params added by ServletDispatcherResult

[Lukasz Lenart] WW-5486 Simplifies test to avoid using mocks

[Lukasz Lenart] WW-5486 Removes try-catches

[Lukasz Lenart] WW-5463 Exposes final location as request attribute 
FORWARD_SERVLET_PATH

[github] Bump maven-surefire-plugin.version from 3.5.1 to 3.5.2

[github] Bump jackson.version from 2.18.0 to 2.18.2

[github] Bump github/codeql-action from 3.27.4 to 3.27.5


------------------------------------------
[...truncated 43.62 KiB...]
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (4 seconds)
[INFO] Writing HTML report to: 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/jakarta/velocity-tools-view-jakarta/target/dependency-check-report.html>
[INFO] 
[INFO] --------< org.apache.struts:struts2-velocity-tools-jsp-jakarta >--------
[INFO] Building Struts 2 Jakarta EE Compatible Velocity Tools Jsp 
7.0.0-M11-SNAPSHOT [5/27]
[INFO]   from jakarta/velocity-tools-jsp-jakarta/pom.xml
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence 
passed
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce-maven-version) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce-java-version) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] 
[INFO] --- remote-resources:3.1.0:process (process-resource-bundles) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] Preparing remote bundle 
org.apache.apache.resources:apache-jar-resource-bundle:1.5
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.3.1:resources (default-resources) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] skip non existing resourceDirectory 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/jakarta/velocity-tools-jsp-jakarta/src/main/resources>
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/classes
[INFO] 
[INFO] --- compiler:3.11.0:compile (default-compile) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] No sources to compile
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] No MANIFEST.MF file found, generating manifest.
[INFO] Writing manifest: 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/jakarta/velocity-tools-jsp-jakarta/target/classes/META-INF/MANIFEST.MF>
[INFO] 
[INFO] --- resources:3.3.1:testResources (default-testResources) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] skip non existing resourceDirectory 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/jakarta/velocity-tools-jsp-jakarta/src/test/resources>
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/test-classes
[INFO] 
[INFO] --- compiler:3.11.0:testCompile (default-testCompile) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] No sources to compile
[INFO] 
[INFO] --- surefire:3.5.2:test (default-test) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] 
[INFO] --- apache-rat:0.15:check (default) @ struts2-velocity-tools-jsp-jakarta 
---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 62 implicit excludes.
[INFO] 17 explicit excludes.
[INFO] 1 resources included
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 
0, approved: 1 licenses.
[INFO] 
[INFO] --- site:3.20.0:attach-descriptor (attach-descriptor) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- transformer:0.5.0:jar (eclipse-transformer-velocity-tools-jsp-jar) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] Properties [ RULES_SELECTIONS ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-selection.properties
 ]
[INFO] Properties [ RULES_RENAMES ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ RULES_VERSIONS ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-versions.properties
 ]
[INFO] Properties [ RULES_BUNDLES ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-bundles.properties
 ]
[INFO] Properties [ RULES_DIRECT ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ RULES_MASTER_TEXT ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-text-master.properties
 ]
[INFO] Package renames are in use
[INFO] Package versions will be updated
[INFO] Bundle identities will be updated
[INFO] Properties [ Substitutions matching [ application-client.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-application-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ application-client.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ application-client.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ persistence.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-persistence-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ persistence.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ persistence.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ web.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-web-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ web.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ web.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ beans.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-beans-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ beans.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ beans.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ *.faces-config.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-faces-config-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ *.faces-config.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ *.faces-config.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ *.taglib.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ *.tld ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ *.tld ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ application.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-application-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ application.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ application.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ ra.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-ra-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ ra.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ ra.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ *.tag ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ *.tag ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ faces-config.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-faces-config-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ faces-config.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ faces-config.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ ejb-jar.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-ejb-jar-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ ejb-jar.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ ejb-jar.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ web-fragment.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-web-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ web-fragment.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ web-fragment.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Properties [ Substitutions matching [ permissions.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-permissions-xml.properties
 ]
[INFO] Properties [ Substitutions matching [ permissions.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-direct.properties
 ]
[INFO] Properties [ Substitutions matching [ permissions.xml ] ] URL [ 
jar:file:/home/jenkins/.m2/repository/org/eclipse/transformer/org.eclipse.transformer.jakarta/0.5.0/org.eclipse.transformer.jakarta-0.5.0.jar!/org/eclipse/transformer/jakarta/jakarta-renames.properties
 ]
[INFO] Text files will be updated
[INFO] Java direct string updates will be performed
[INFO] All resources will be selected
[INFO] Input  [ 
/home/jenkins/.m2/repository/org/apache/velocity/tools/velocity-tools-view-jsp/3.1/velocity-tools-view-jsp-3.1.jar
 ]
[INFO] Output [ 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/jakarta/velocity-tools-jsp-jakarta/target/struts2-velocity-tools-jsp-jakarta-7.0.0-M11-SNAPSHOT.jar>
 ]
[INFO] [  All Resources ] [     16 ] Unaccepted [      0 ]   Accepted [     16 ]
[INFO] [  All Unchanged ] [      8 ]     Failed [      0 ] Duplicated [      0 ]
[INFO] [    All Changed ] [      8 ]    Renamed [      0 ]    Content [      8 ]
[INFO] 
[INFO] --- dependency-check:10.0.4:check (default) @ 
struts2-velocity-tools-jsp-jakarta ---
[INFO] Checking for updates
[INFO] Skipping the NVD API Update as it was completed within the last 240 
minutes
[INFO] Skipping Known Exploited Vulnerabilities update check since last check 
was within 24 hours.
[INFO] Check for updates complete (413 ms)
[INFO] 

Dependency-Check is an open source tool performing a best effort analysis of 
3rd party dependencies; false positives and false negatives may exist in the 
analysis performed by the tool. Use of the tool and the reporting provided 
constitutes acceptance for use in an AS IS condition, and there are NO 
warranties, implied or otherwise, with regard to the analysis or its use. Any 
use of the tool and the reporting provided is at the user's risk. In no event 
shall the copyright holder or OWASP be held liable for any damages whatsoever 
arising out of or in connection with the use of this tool, the analysis 
performed, or the resulting report.


   About ODC: 
https://jeremylong.github.io/DependencyCheck/general/internals.html
   False Positives: 
https://jeremylong.github.io/DependencyCheck/general/suppression.html

💖 Sponsor: https://github.com/sponsors/jeremylong


[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (2 seconds)
[INFO] Finished CPE Analyzer (3 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (1 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2011-5057, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0391, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0392, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0393, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0394, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0838, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-1965, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-1966, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2115, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2134, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2135, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2014-0094, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2014-0113, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2015-5169, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-0785, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-4003, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-annotations@.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{gav=PropertyType{value=^org\.apache\.struts:struts\-tiles\:1\.3\.8.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{gav=PropertyType{value=^org\.apache\.struts:struts\-taglib\:1\.3\.8.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/dom4j/dom4j@.*$, 
regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2018-1000632, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.beanshell/bsh@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-2510, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$,
 regex=true, 
caseSensitive=false},cpe={PropertyType{value=cpe:/a:plexus-utils_project:plexus-utils,
 regex=false, 
caseSensitive=false},}cve={CVE-2022-4244,CVE-2022-4245,CVE-2017-1000487,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.codehaus\.plexus\/plexus\-container\-default@.*$,
 regex=true, 
caseSensitive=false},cpe={PropertyType{value=cpe:/a:plexus-utils_project:plexus-utils,
 regex=false, caseSensitive=false},}cve={CVE-2022-4244,CVE-2022-4245,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/com\.google\.guava/guava@.*$,
 regex=true, caseSensitive=false},cve={CVE-2018-10237,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.yaml/snakeyaml@.*$,
 regex=true, caseSensitive=false},cve={CVE-2017-18640,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:javascript/jquery@.*$, 
regex=true, caseSensitive=false},cve={CVE-2020-11022,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:javascript/jquery@.*$, 
regex=true, caseSensitive=false},cve={CVE-2020-11023,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.testng/testng@.*$,
 regex=true, caseSensitive=false},cve={CVE-2022-4065,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.springframework/spring\-.*@.*$,
 regex=true, 
caseSensitive=false},cve={CVE-2022-22965,CVE-2022-22950,CVE-2022-22968,CVE-2022-22970,}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.springframework/spring\-web@.*$,
 regex=true, caseSensitive=false},cve={CVE-2016-1000027,}}
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (5 seconds)
[INFO] Writing HTML report to: 
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/jakarta/velocity-tools-jsp-jakarta/target/dependency-check-report.html>
[WARNING] 

One or more dependencies were identified with known vulnerabilities in Struts 2 
Jakarta EE Compatible Velocity Tools Jsp:

velocity-engine-core-2.3.jar/META-INF/maven/commons-io/commons-io/pom.xml 
(pkg:maven/commons-io/commons-io@2.8.0, 
cpe:2.3:a:apache:commons_io:2.8.0:*:*:*:*:*:*:*) : CVE-2024-47554


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 7.0.0-M11-SNAPSHOT:
[INFO] 
[INFO] Struts 2 ........................................... SUCCESS [57:02 min]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.950 s]
[INFO] Struts 2 Jakarta EE Compatible modules ............. SUCCESS [  3.654 s]
[INFO] Struts 2 Jakarta EE Compatible Velocity Tools View . SUCCESS [ 12.875 s]
[INFO] Struts 2 Jakarta EE Compatible Velocity Tools Jsp .. FAILURE [  7.766 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 Velocity Plugin ........................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 XSLT Plugin ............................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  57:33 min
[INFO] Finished at: 2024-12-01T06:58:50Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:10.0.4:check 
(default) on project struts2-velocity-tools-jsp-jakarta: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have 
a CVSS score greater than or equal to '7.0': 
[ERROR] 
[ERROR] 
velocity-engine-core-2.3.jar/META-INF/maven/commons-io/commons-io/pom.xml: 
CVE-2024-47554(8.699999809265137)
[ERROR] 
[ERROR] See the dependency-check report for more details.
[ERROR] 
[ERROR] 
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e 
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please 
read the following articles:
[ERROR] [Help 1] 
http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :struts2-velocity-tools-jsp-jakarta
Build step 'Execute shell' marked build as failure
ERROR: No tool found matching MAVEN_3_LATEST__HOME
Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3

Reply via email to