See <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-Trunk-jdk23/org.apache.pdfbox$pdfbox-parent/1143/display/redirect?page=changes>
Changes: [Tilman Hausherr] PDFBOX-5660: update log4j, introduce bom [Tilman Hausherr] PDFBOX-5660: update download-maven-plugin [Tilman Hausherr] PDFBOX-5660: update commons-io ------------------------------------------ Established TCP socket on 39307 maven35-agent.jar already up to date maven35-interceptor.jar already up to date maven3-interceptor-commons.jar already up to date <===[JENKINS REMOTING CAPACITY]===> channel started Executing Maven: -B -f /home/jenkins/jenkins-agent/workspace/PDFBox/PDFBox-Trunk-jdk23/pom.xml clean install -Dnet.bytebuddy.experimental=true -Ppedantic -Dmaven.source.skip=true org.sonatype.ossindex.maven:ossindex-maven-plugin:audit [INFO] Scanning for projects... [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [INFO] ------------------------------------------------------------------------ [HUDSON] Collecting dependencies info [INFO] Reactor Build Order: [INFO] [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [HUDSON] Collecting dependencies info [INFO] Apache PDFBox parent [pom] [INFO] Apache PDFBox io [bundle] [INFO] Apache FontBox [bundle] [INFO] Apache XmpBox [bundle] [INFO] Apache PDFBox [bundle] [INFO] Apache PDFBox Debugger [jar] [INFO] Apache PDFBox tools [jar] [INFO] Apache PDFBox application [jar] [INFO] Apache PDFBox Debugger application [jar] [INFO] Apache PDFBox examples [jar] [INFO] pdfbox-reactor [pom] [INFO] Downloading from central: https://repo.maven.apache.org/maven2/org/sonatype/ossindex/maven/ossindex-maven-plugin/maven-metadata.xml [INFO] Downloading from Nexus: https://repository.apache.org/snapshots/org/sonatype/ossindex/maven/ossindex-maven-plugin/maven-metadata.xml [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/sonatype/ossindex/maven/ossindex-maven-plugin/maven-metadata.xml (572 B at 1.1 kB/s) [INFO] [INFO] ------------------< org.apache.pdfbox:pdfbox-parent >------------------- [INFO] Building Apache PDFBox parent 4.0.0-SNAPSHOT [1/11] [INFO] from parent/pom.xml [INFO] --------------------------------[ pom ]--------------------------------- [INFO] [INFO] --- clean:3.3.2:clean (default-clean) @ pdfbox-parent --- [INFO] [INFO] --- enforcer:3.5.0:enforce (default) @ pdfbox-parent --- [INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireMavenVersion passed [INFO] [INFO] --- enforcer:3.5.0:enforce (enforce-maven-version) @ pdfbox-parent --- [INFO] [INFO] --- enforcer:3.5.0:enforce (enforce-java-version) @ pdfbox-parent --- [INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireJavaVersion passed [INFO] [INFO] --- checkstyle:3.6.0:check (check) @ pdfbox-parent --- [INFO] Starting audit... Audit done. [INFO] You have 0 Checkstyle violations. [INFO] [INFO] --- jacoco:0.8.12:prepare-agent (default) @ pdfbox-parent --- [INFO] surefireArgLine set to -javaagent:/home/jenkins/.m2/repository/org/jacoco/org.jacoco.agent/0.8.12/org.jacoco.agent-0.8.12-runtime.jar=destfile=<https://ci-builds.apache.org/job/PDFBox/job/PDFBox-Trunk-jdk23/org.apache.pdfbox$pdfbox-parent/ws/target/jacoco.exec> [INFO] [INFO] --- remote-resources:3.2.0:process (process-resource-bundles) @ pdfbox-parent --- [INFO] Preparing remote bundle org.apache.apache.resources:apache-jar-resource-bundle:1.5 [INFO] Copying 3 resources from 1 bundle. [INFO] [INFO] --- jacoco:0.8.12:report (report) @ pdfbox-parent --- [INFO] Skipping JaCoCo execution due to missing execution data file. [INFO] [INFO] --- source:3.3.1:jar-no-fork (attach-sources) @ pdfbox-parent --- [INFO] Skipping source per configuration. [INFO] [INFO] --- apache-rat:0.16.1:check (default) @ pdfbox-parent --- [INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 2 licenses. [INFO] [INFO] --- dependency-check:11.1.0:check (default) @ pdfbox-parent --- [WARNING] Explicitly loaded driver org.h2.Driver from classpath; if JDBCv4 service loading is supported by the driver you should remove the dbDriver configuration [INFO] Checking for updates [WARNING] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [INFO] NVD API has 246,372 records in this update [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-15T12%3A15%3A14Z&lastModEndDate=2025-03-15T12%3A15%3A14Z&resultsPerPage=2000&startIndex=4000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [WARNING] NVD API request failures are occurring; retrying request for the 11 time [ERROR] Error updating the NVD Data org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:397) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:117) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:1959) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1157) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main (Maven35Launcher.java:138) at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103) at java.lang.reflect.Method.invoke (Method.java:580) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179) at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103) at java.lang.reflect.Method.invoke (Method.java:580) at hudson.maven.Maven3Builder.call (Maven3Builder.java:140) at hudson.maven.Maven3Builder.call (Maven3Builder.java:71) at hudson.remoting.UserRequest.perform (UserRequest.java:211) at hudson.remoting.UserRequest.perform (UserRequest.java:54) at hudson.remoting.Request$2.run (Request.java:377) at hudson.remoting.InterceptingExecutorService.lambda$wrap$0 (InterceptingExecutorService.java:78) at java.util.concurrent.FutureTask.run (FutureTask.java:317) at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1144) at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:642) at java.lang.Thread.run (Thread.java:1575) Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: NVD Returned Status Code: 503 at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:412) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next (NvdCveClient.java:331) at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:353) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:117) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:1959) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1157) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main (Maven35Launcher.java:138) at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103) at java.lang.reflect.Method.invoke (Method.java:580) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179) at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103) at java.lang.reflect.Method.invoke (Method.java:580) at hudson.maven.Maven3Builder.call (Maven3Builder.java:140) at hudson.maven.Maven3Builder.call (Maven3Builder.java:71) at hudson.remoting.UserRequest.perform (UserRequest.java:211) at hudson.remoting.UserRequest.perform (UserRequest.java:54) at hudson.remoting.Request$2.run (Request.java:377) at hudson.remoting.InterceptingExecutorService.lambda$wrap$0 (InterceptingExecutorService.java:78) at java.util.concurrent.FutureTask.run (FutureTask.java:317) at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1144) at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:642) at java.lang.Thread.run (Thread.java:1575) [INFO] Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json [INFO] Begin database defrag [INFO] End database defrag (9392 ms) [WARNING] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities. [ERROR] Unable to continue dependency-check analysis. [WARNING] Attempt to (de-)serialize anonymous class org.jfrog.hudson.maven2.MavenDependenciesRecorder$1; see: https://jenkins.io/redirect/serialization-of-anonymous-classes/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org For additional commands, e-mail: dev-h...@pdfbox.apache.org