The GitHub Actions job "Java CI" on commons-compress.git/feat/sbom-embedded-components has failed. Run started by GitHub user ppkarwasz (triggered by ppkarwasz).
Head commit for run: cc6f264a2294770d99aeaf615cd0dfbae70cb74f / Piotr P. Karwasz <[email protected]> Upgrade CycloneDX SBOM to 1.7 and add embedded Zstandard zstd-jni bundles the native Zstandard library, which is invisible to Maven and therefore missing from the SBOM generated by cyclonedx-maven-plugin. Add a GMavenPlus step, run after the CycloneDX plugin, that: - upgrades the SBOM to CycloneDX 1.7, not yet supported by the plugin, - marks all Maven dependencies as external (`isExternal`), - nests Zstandard (pkg:github/meta/zstd, CPE facebook:zstandard) inside zstd-jni, with its concluded license, - registers itself and cyclonedx-core-java in `metadata.tools`, - validates the result against the CycloneDX 1.7 schema. Assisted-By: Claude Opus 5.5 <[email protected]> Report URL: https://github.com/apache/commons-compress/actions/runs/40767617927 With regards, GitHub Actions via GitBox
