See
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/112/display/redirect?page=changes>
Changes:
[burton] Added requiredValue to Checkbox Struts Tag as a parameter. When
[burton] Change Checkbox tag parameter from requiredValue to submitUnchecked
[amashchenko] WW-4875 Add ability to use Java based configuration
[amashchenko] WW-4875 Add location information for java based configuration
[yasser.zamani] WW-4874 Introduces Servlet3 plugin by adding support for async
action
[lukaszlenart] Uses OGNL without #context magical key
[lukaszlenart] Adjusts OGNL usage to avoid modify immutable context
[lukaszlenart] Uses OGNL 3.2.2 which always requires MemberAccess
[lukaszlenart] Reuses existing context instead of creating a new MemberAccess
each time
[lukaszlenart] Reformats code
[lukaszlenart] Adds empty line
[lukaszlenart] Upgrades to the latest OGNL 3.2.4 version
[aleksandr.7m] replace String.valueOf with Objects.toString to better handle
null
[aleksandr.7m] WW-4875 Add convention constant configuration
[aleksandr.7m] WW-4875 Add json constant configuration
[aleksandr.7m] Make ConventionConstantConfig inherit map of constants from
[aleksandr.7m] WW-4875 Add rest constant configuration
[yasser.zamani] WW-4874 Refactors technology name, servlet3, to asset name,
async
[yasser.zamani] WW-4874 Adds unit tests
[yasser.zamani] WW-4874 Updates parent version
[aleksandr.7m] WW-4875 Add spring constant configuration
[yasserzamani] WW-4874 Renames local variable inv to invocation
[yasserzamani] define constant for timeout result
[yasserzamani] decrease log level for timeout
[yasserzamani] add async plugin to dependency management
[yasserzamani] add showcase for async plugin
[zhouyanming] Align OptGroup with Select
[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (add commons-text
[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace
[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace
[yasserzamani] fix java.net.JarURLConnection#parseSpecs
[yasserzamani] comment jira issue id and fix a few typos
[yasserzamani] replace sun.net.www.ParseUtil#decode
[lukaszlenart] Adds Jackson XML binding dependency
[lukaszlenart] Defines a new handler using Jackson XML
[lukaszlenart] Adds test to cover basic functionality
[lukaszlenart] Adds example how to use the handler
[lukaszlenart] Upgrades OWASP Dependency Check plugin to the latest version and
reduces
[yasserzamani] fix javadoc to being consistent with WW-3915 changes
[paul.zepernick] WW-4923 Null check to avoid NPE when not passing a JDBC
connection to
[lukaszlenart] Cleans up suppression file and uses full path
[lukaszlenart] Fixes suppression file
[yasserzamani] add test if connection close after result
[yasserzamani] initialize session
[lukaszlenart] Adds explanation how to use the commented configuration
[yasserzamani] make newly added methods protected to allow users to override
them
[github] fix location with full path of resource
[lukaszlenart] [maven-release-plugin] prepare release STRUTS_2_5_16
[lukaszlenart] [maven-release-plugin] prepare for next development iteration
[amashchenko] WW-685 Add class to hold conversion related data
[amashchenko] WW-685 Add generic type conversion error message
[amashchenko] WW-685 Add tests
[amashchenko] WW-685 Fix getText expression
[github] fix two issues for ListUIBean
[github] convert supplied value to list when isn't iterable
[yasserzamani] fix list when not found in stack and so is null
[amashchenko] Add ognlAutoGrowthCollectionLimit constant to java config
[amashchenko] Add tests for java configuration
[lukaszlenart] Upgrades to OGNL 3.2.5
[lukaszlenart] Upgrades dependencies to Servlet API 2.5 and JSP API 2.1
[lukaszlenart] Uses proper headers in web.xml
[lukaszlenart] Implements missing method
[lukaszlenart] Adds missing JavaDoc
[lukaszlenart] Adds a test to cover missing access to #context
[amashchenko] WW-4928 Using the same default value delimiter for system
properties
[lukaszlenart] Drops unused TypeConverter
[lukaszlenart] Removes unused imports
[lukaszlenart] Cleans up code a bit
[burton] Change Checkbox tag parameter submitUnchecked default value to "false"
[burton] Fix broken tests due to checkbox submitUnchecked default value change
[lukaszlenart] Moves tests to proper package and adds one more test case
[amashchenko] WW-4865 Change submitUnchecked type to Boolean
[lukaszlenart] Uses proper parent's version
[lukaszlenart] Reverts the previous access state of the method
[loomchild] Adds sorted and navigable set support JSON plugin
[loomchild] Adds deque and queue support JSON plugin
[yasserzamani] upgrade Tiles to 3.0.8
[yasserzamani] honor .properties file before the generic parametrics
[stefaan.dutry] drop searchValueStack attribute from the s:text tag
[stefaan.dutry] drop deprecated logging layer
[stefaan.dutry] remove TimerInterceptor
[stefaan.dutry] remove ObjectProfiler
[stefaan.dutry] remove UtilTimerStack
[stefaan.dutry] fix RestActionInvocation
[stefaan.dutry] remove ProfilingTimerBean
[stefaan.dutry] further clean up after rmoving profiling layer
[stefaan.dutry] update commons-beanutils dependency to version 1.9.3
[stefaan.dutry] remove deprecated XWork constants
[stefaan.dutry] fix broken tests.
[stefaan.dutry] fix constant used for addition accepted patterns
[stefaan.dutry] fix order, and therefore value, of the builder constants
[stefaan.dutry] fix test by fixing config constant name
[stefaan.dutry] fix tests by fixing constantnames
[stefaan.dutry] update Apache FreeMarker to version 2.3.28
[stefaan.dutry] drop convertIfExist method
[yasserzamani] delete unused local variable timerKey
[amashchenko] Remove deprecated exceptions
[ssullivan] add 'sun.misc.' to struts.excludedPackageNames
[ssullivan] WW-4769 add unit tests to verify immutable collections
[ssullivan] add unit test for Dispatcher init()
[ssullivan] Jackson 2.9.6
[ssullivan] add 'com.opensymphony.xwork2.ognl.' to excludedPackageNames
[shell_layer-github] fix typos in README
[shell_layer-github] fix more typos in README
[lukaszlenart] Adds Maven wrapper to allow use the latest Maven version
[lukaszlenart] Avoids parsing namespace when using existing namespace
[lukaszlenart] Increases scope when location parsing is avoided
[lukaszlenart] Upgrades Jackson libs to version 2.9.5
[lukaszlenart] Makes OgnlUtil more immutable
[lukaszlenart] Adds proper handling of primitive types
[lukaszlenart] Adds more general exclusion
[lukaszlenart] Validates action, namespace and method in the same way
[lukaszlenart] delete redundant code for performance
[lukaszlenart] Fixes how dependencies are injected into constructor
[lukaszlenart] add an extra unit test
[lukaszlenart] Fixes conflicts after cherry-picked changes from 2.5.x branch
[lukaszlenart] WW-4955 Upgrades OGNL to version 3.2.6
[lukaszlenart] Adds additional test to check is ArrayList.size() is accessible
[github] Fix logging messages
[lukaszlenart] WW-4954 Adds a test case to cover accessing ArrayList
[amashchenko] Better logging message (for WW-4954)
[amashchenko] Improve log messages in SecurityMemberAccess
[amashchenko] WW-4956 Upgrade to Log4j2 2.11.1
[lukaszlenart] Adds missing header with license
[lukaszlenart] WW-4954 Moves XWorkList out of util package
[github] Fixed grammar
[yasserzamani] delete temp files on close instead of on JVM exists
[yasserzamani] monitor file only if needed
[lukaszlenart] WW-4951 Upgrades to the latest struts master to support
SHA256/512
[lukaszlenart] WW-4963 Implements new SessionAware interface that uses
withSession
[lukaszlenart] WW-4963 Implements new ServletRequestAware interface that uses
[lukaszlenart] WW-4963 Implements new ServletResponseAware interface that uses
[lukaszlenart] WW-4963 Implements new ApplicationAware interface that uses
[thinkshihang] Fix typo in a local vairalbe naming
[lukaszlenart] WW-4963 Implements new PrincipalAware interface that uses
[lukaszlenart] WW-4963 Implements new BundleContextAware interface that uses
[lukaszlenart] WW-4963 Implements new CookiesAware interface that uses
withCookies
[lukaszlenart] WW-4963 Implements new PortletContextAware interface that uses
[lukaszlenart] WW-4963 Implements new PortletPreferencesAware interface that
uses
[lukaszlenart] WW-4963 Implements new PortletRequestAware interface that uses
[lukaszlenart] WW-4963 Implements new PortletResponseAware interface with a
test that
[lukaszlenart] WW-4963 Implements new ParametersAware interface that uses
[lukaszlenart] WW-4963 Implements new ServiceAware interface that uses
withServices
[lukaszlenart] WW-4963 Implements new ServletContextAware interface and fixes
actions
[yasserzamani] fix false positive test pass
[lukaszlenart] Fixes problem with building on Java 8 after upgrading to the
latest
[lukaszlenart] Drops irrelevant profile
[lukaszlenart] WW-4952 Uses struts parent 13 to fix issue with wrong release
profile
[yasserzamani] increase test coverage
[lukaszlenart] WW-4965 Upgrades OGNL to version 3.2.7
[43964333+JCgH4164838Gh792C124B5] Minor config fixes for the Showcase
Application: 1) Token examples.
------------------------------------------
[...truncated 1.58 MB...]
at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.run(SuiteRunner.java:223)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
[testng-5.14.10.jar:?]
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
[testng-5.14.10.jar:?]
at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
[testng-5.14.10.jar:?]
at org.testng.TestNG.run(TestNG.java:900) [testng-5.14.10.jar:?]
at
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373)
[surefire-booter-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334)
[surefire-booter-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119)
[surefire-booter-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407)
[surefire-booter-2.20.1.jar:2.20.1]
2018-10-25 22:42:52,417 WARN [main] dispatcher.Dispatcher
(Dispatcher.java:641) - Could not find action or result: /foo.action
com.opensymphony.xwork2.config.ConfigurationException: There is no Action
mapped for namespace [/] and action name [foo] associated with context path [].
at
com.opensymphony.xwork2.DefaultActionProxy.prepare(DefaultActionProxy.java:187)
~[classes/:?]
at
org.apache.struts2.factory.StrutsActionProxy.prepare(StrutsActionProxy.java:57)
~[classes/:?]
at
org.apache.struts2.factory.StrutsActionProxyFactory.createActionProxy(StrutsActionProxyFactory.java:32)
~[classes/:?]
at
com.opensymphony.xwork2.DefaultActionProxyFactory.createActionProxy(DefaultActionProxyFactory.java:60)
~[classes/:?]
at
org.apache.struts2.dispatcher.Dispatcher.serviceAction(Dispatcher.java:593)
[classes/:?]
at
org.apache.struts2.dispatcher.ExecuteOperations.executeAction(ExecuteOperations.java:79)
[classes/:?]
at
org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter.doFilter(StrutsPrepareAndExecuteFilter.java:140)
[classes/:?]
at
org.apache.struts2.dispatcher.StrutsPrepareAndExecuteFilterIntegrationTest.test404(StrutsPrepareAndExecuteFilterIntegrationTest.java:58)
[test-classes/:?]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.7.0_80]
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[?:1.7.0_80]
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.7.0_80]
at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_80]
at junit.framework.TestCase.runTest(TestCase.java:176)
[junit-4.12.jar:4.12]
at junit.framework.TestCase.runBare(TestCase.java:141)
[junit-4.12.jar:4.12]
at junit.framework.TestResult$1.protect(TestResult.java:122)
[junit-4.12.jar:4.12]
at junit.framework.TestResult.runProtected(TestResult.java:142)
[junit-4.12.jar:4.12]
at junit.framework.TestResult.run(TestResult.java:125)
[junit-4.12.jar:4.12]
at junit.framework.TestCase.run(TestCase.java:129) [junit-4.12.jar:4.12]
at junit.framework.TestSuite.runTest(TestSuite.java:252)
[junit-4.12.jar:4.12]
at junit.framework.TestSuite.run(TestSuite.java:247)
[junit-4.12.jar:4.12]
at org.testng.junit.JUnitTestRunner.doRun(JUnitTestRunner.java:250)
[testng-5.14.10.jar:?]
at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:223)
[testng-5.14.10.jar:?]
at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211)
[testng-5.14.10.jar:?]
at org.testng.TestRunner$1.run(TestRunner.java:659)
[testng-5.14.10.jar:?]
at org.testng.TestRunner.runWorkers(TestRunner.java:1147)
[testng-5.14.10.jar:?]
at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690)
[testng-5.14.10.jar:?]
at org.testng.TestRunner.run(TestRunner.java:597) [testng-5.14.10.jar:?]
at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.run(SuiteRunner.java:223)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
[testng-5.14.10.jar:?]
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
[testng-5.14.10.jar:?]
at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
[testng-5.14.10.jar:?]
at org.testng.TestNG.run(TestNG.java:900) [testng-5.14.10.jar:?]
at
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146)
[surefire-testng-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373)
[surefire-booter-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334)
[surefire-booter-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119)
[surefire-booter-2.20.1.jar:2.20.1]
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407)
[surefire-booter-2.20.1.jar:2.20.1]
org.testng.TestNGException:
Failure in JUnit mode for class
org.apache.struts2.config.entities.ConstantConfigTest: could not create/run
JUnit test suite:
Cannot find JUnit method class junit.framework.TestSuite$1.warning
at org.testng.junit.JUnitTestRunner.runFailed(JUnitTestRunner.java:237)
at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:230)
at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211)
at org.testng.TestRunner$1.run(TestRunner.java:659)
at org.testng.TestRunner.runWorkers(TestRunner.java:1147)
at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690)
at org.testng.TestRunner.run(TestRunner.java:597)
at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
at org.testng.SuiteRunner.run(SuiteRunner.java:223)
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
at org.testng.TestNG.run(TestNG.java:900)
at
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135)
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198)
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94)
at
org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146)
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373)
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334)
at
org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119)
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407)
[TestNG] Running:
Command line suite
===============================================
Command line suite
Total tests run: 1, Failures: 0, Skips: 0
===============================================
2018-10-25 22:42:54,160 WARN [main] components.ServletUrlRenderer
(ServletUrlRenderer.java:264) - Unknown value for includeParams parameter to
URL tag: unknown
2018-10-25 22:42:54,162 WARN [main] components.ServletUrlRenderer
(ServletUrlRenderer.java:264) - Unknown value for includeParams parameter to
URL tag: unknown
[INFO] Tests run: 1811, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
105.187 s - in TestSuite
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1811, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-core ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1580 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated:
0, approved: 1573 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @
struts2-core >>>
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @
struts2-core ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @
struts2-core <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-core ---
[INFO] Building jar:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @
struts2-core ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-core ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (196 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (3 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (6 seconds)
[WARNING]
One or more dependencies were identified with known vulnerabilities in Struts 2
Core:
spring-core-4.3.13.RELEASE.jar
(cpe:/a:pivotal_software:spring_framework:4.3.13,
cpe:/a:pivotal:spring_framework:4.3.13,
org.springframework:spring-core:4.3.13.RELEASE) : CVE-2018-1270, CVE-2018-1271,
CVE-2018-1199, CVE-2018-1272, CVE-2018-11039, CVE-2018-1257, CVE-2018-11040,
CVE-2018-1275
bsh-2.0b4.jar (org.beanshell:bsh:2.0b4,
cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510
See the dependency-check report for more details.
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [ 2.799 s]
[INFO] Struts 2 2.6-SNAPSHOT .............................. SUCCESS [11:56 min]
[INFO] Struts 2 Core ...................................... FAILURE [02:38 min]
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly 2.6-SNAPSHOT ..................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 14:41 min
[INFO] Finished at: 2018-10-25T22:43:10Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check
(default) on project struts2-core:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have
a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] spring-core-4.3.13.RELEASE.jar: CVE-2018-1270, CVE-2018-1275
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR] mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
