See <https://ci-builds.apache.org/job/Struts/job/Struts-master-dependency-check/221/display/redirect?page=changes>
Changes: [git] Merge pull request #1072 from apache/fix/WW-5468-modeldriven-2 [git] WW-5478 Deprecate DefaultResultFactory [git] WW-5478 Fix ActionContext equals/hashCode contract [git] WW-5480 Warn against potential templating bug [git] WW-3714 Move new Result class into result package [git] WW-5459 Move new Action class into action package [git] WW-5459 Deprecate and repackage ActionChainResult [git] WW-3714 Ensure correct delegation of new Result API [git] WW-3714 Ensure correct delegation of new Interceptor API [github] Bump github/codeql-action from 3.27.0 to 3.27.1 [Lukasz Lenart] WW-5484 Marks the DWR plugin as deprecated [Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_7_0 [Lukasz Lenart] [maven-release-plugin] prepare for next development iteration [github] Bump github/codeql-action from 3.27.1 to 3.27.4 [Sebastian.Peters] Add .gitattributes in case people don't have core.autocrlf set [Sebastian.Peters] Upgrade maven to 3.9.9 and wrapper to 3.3.2 [Lukasz Lenart] Always run Sonar scan against the master branch [Lukasz Lenart] Runs Sonar step in case of running on master or PR [Lukasz Lenart] Uses Java 21 when running Sonar check [Lukasz Lenart] Avoids running Sonar scan in forks [github] Skip Sonar scan on PRs created by Dependabot [Lukasz Lenart] Uses AND instead of OR to check Sonar prerequisites ------------------------------------------ [...truncated 3.42 KB...] [INFO] DEPRECATED: Struts 2 OVal Plugin, since 6.0.0 [jar] [INFO] DEPRECATED: Struts 2 Pell Multipart Plugin - since 6.2.0 [jar] [INFO] DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 [jar] [INFO] DEPRECATED: Struts 2 Portlet Mocks Plugin - since 6.0.0 [jar] [INFO] DEPRECATED: Struts 2 Portlet Plugin - since 6.0.0 [jar] [INFO] DEPRECATED: Struts 2 Portlet JUnit Plugin - since 6.3.0 [jar] [INFO] Struts 2 Tiles Plugin [jar] [INFO] DEPRECATED: Struts 2 Portlet Tiles Plugin - since 6.0.0 [jar] [INFO] Struts 2 REST Plugin [jar] [INFO] DEPRECATED: Struts 2 Sitemesh Plugin [jar] [INFO] Struts 2 TestNG Plugin [jar] [INFO] Struts 2 XSLT Plugin [jar] [INFO] DEPRECATED: Struts 2 OSGi Bundles - since 6.0.0 [pom] [INFO] DEPRECATED: Struts 2 OSGi Admin Bundle - since 6.0.0 [bundle] [INFO] DEPRECATED: Struts 2 OSGi Demo Bundle - since 6.0.0 [bundle] [INFO] Struts 2 Webapps [pom] [INFO] Struts 2 Showcase Webapp [war] [INFO] Struts 2 Rest Showcase Webapp [war] [INFO] Struts 2 Assembly [pom] [INFO] [INFO] ------------------< org.apache.struts:struts2-parent >------------------ [INFO] Building Struts 2 6.7.1-SNAPSHOT [1/39] [INFO] from pom.xml [INFO] --------------------------------[ pom ]--------------------------------- [WARNING] Parameter 'relativizeDecorationLinks' is unknown for plugin 'maven-site-plugin:3.20.0:attach-descriptor (attach-descriptor)' [INFO] [INFO] --- enforcer:3.5.0:enforce (enforce) @ struts2-parent --- [INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence passed [INFO] [INFO] --- enforcer:3.5.0:enforce (enforce-maven-version) @ struts2-parent --- [INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireMavenVersion passed [INFO] [INFO] --- enforcer:3.5.0:enforce (enforce-java-version) @ struts2-parent --- [INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireJavaVersion passed [INFO] [INFO] --- remote-resources:3.1.0:process (process-resource-bundles) @ struts2-parent --- [INFO] Preparing remote bundle org.apache.apache.resources:apache-jar-resource-bundle:1.5 [INFO] Copying 3 resources from 1 bundle. [INFO] [INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-parent --- [WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle] [INFO] [INFO] --- apache-rat:0.15:check (default) @ struts2-parent --- [INFO] Added 1 additional default licenses. [INFO] Added 1 custom approved licenses. [INFO] Will parse SCM ignores for exclusions... [INFO] Parsing exclusions from <https://ci-builds.apache.org/job/Struts/job/Struts-master-dependency-check/ws/.gitignore> [INFO] Finished adding exclusions from SCM ignore files. [INFO] 89 implicit excludes. [INFO] 17 explicit excludes. [INFO] 3 resources included [INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses. [INFO] [INFO] --- site:3.20.0:attach-descriptor (attach-descriptor) @ struts2-parent --- [INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'. [INFO] [INFO] --- dependency-check:10.0.4:check (default) @ struts2-parent --- [INFO] Checking for updates [WARNING] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [INFO] NVD API has 244,995 records in this update [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-20T21%3A15%3A08Z&lastModEndDate=2025-03-20T21%3A15%3A08Z&resultsPerPage=2000&startIndex=2000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-20T21%3A15%3A08Z&lastModEndDate=2025-03-20T21%3A15%3A08Z&resultsPerPage=2000&startIndex=8000 : 2 time [INFO] Downloaded 10,000/244,995 (4%) [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [INFO] Downloaded 20,000/244,996 (8%) [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-20T21%3A15%3A08Z&lastModEndDate=2025-03-20T21%3A15%3A08Z&resultsPerPage=2000&startIndex=28000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [INFO] Downloaded 30,000/244,996 (12%) [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [WARNING] NVD API request failures are occurring; retrying request for the 11 time [INFO] Downloaded 40,000/244,996 (16%) [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-20T21%3A15%3A08Z&lastModEndDate=2025-03-20T21%3A15%3A08Z&resultsPerPage=2000&startIndex=40000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [WARNING] NVD API request failures are occurring; retrying request for the 11 time [ERROR] Error updating the NVD Data org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:395) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:116) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:1967) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1150) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:906) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:283) at org.apache.maven.cli.MavenCli.main (MavenCli.java:206) at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:498) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:361) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314) Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: NVD Returned Status Code: 503 at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:412) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next (NvdCveClient.java:331) at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:352) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:116) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:1967) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1150) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:906) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:283) at org.apache.maven.cli.MavenCli.main (MavenCli.java:206) at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:498) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:361) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314) [INFO] Skipping Known Exploited Vulnerabilities update check since last check was within 24 hours. [WARNING] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities. [ERROR] Unable to continue dependency-check analysis. [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Struts 2 6.7.1-SNAPSHOT: [INFO] [INFO] Struts 2 ........................................... FAILURE [ 01:44 h] [INFO] Struts 2 Bill of Materials ......................... SKIPPED [INFO] Struts 2 Core ...................................... SKIPPED [INFO] Struts 2 Plugins ................................... SKIPPED [INFO] Struts 2 Async Plugin .............................. SKIPPED [INFO] Struts 2 Bean Validation Plugin .................... SKIPPED [INFO] Struts 2 CDI Plugin ................................ SKIPPED [INFO] Struts 2 Spring Plugin ............................. SKIPPED [INFO] Struts 2 JUnit Plugin .............................. SKIPPED [INFO] Struts 2 Velocity Plugin ........................... SKIPPED [INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED [INFO] Struts 2 Convention Plugin ......................... SKIPPED [INFO] DEPRECATED: Struts 2 DWR Plugin - since 6.7.0 ...... SKIPPED [INFO] DEPRECATED: Struts 2 Embedded JSP Plugin, since 6.0.0 SKIPPED [INFO] DEPRECATED: Struts 2 GXP Plugin - since 6.0.0 ...... SKIPPED [INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED [INFO] Struts 2 Java Templates Plugin ..................... SKIPPED [INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED [INFO] Struts 2 JSON Plugin ............................... SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Plugin - since 6.0.0 ..... SKIPPED [INFO] DEPRECATED: Struts 2 OVal Plugin, since 6.0.0 ...... SKIPPED [INFO] DEPRECATED: Struts 2 Pell Multipart Plugin - since 6.2.0 SKIPPED [INFO] DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 ... SKIPPED [INFO] DEPRECATED: Struts 2 Portlet Mocks Plugin - since 6.0.0 SKIPPED [INFO] DEPRECATED: Struts 2 Portlet Plugin - since 6.0.0 .. SKIPPED [INFO] DEPRECATED: Struts 2 Portlet JUnit Plugin - since 6.3.0 SKIPPED [INFO] Struts 2 Tiles Plugin .............................. SKIPPED [INFO] DEPRECATED: Struts 2 Portlet Tiles Plugin - since 6.0.0 SKIPPED [INFO] Struts 2 REST Plugin ............................... SKIPPED [INFO] DEPRECATED: Struts 2 Sitemesh Plugin ............... SKIPPED [INFO] Struts 2 TestNG Plugin ............................. SKIPPED [INFO] Struts 2 XSLT Plugin ............................... SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Bundles - since 6.0.0 .... SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Admin Bundle - since 6.0.0 SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Demo Bundle - since 6.0.0 SKIPPED [INFO] Struts 2 Webapps ................................... SKIPPED [INFO] Struts 2 Showcase Webapp ........................... SKIPPED [INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED [INFO] Struts 2 Assembly .................................. SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 01:44 h [INFO] Finished at: 2024-11-22T08:23:52Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:10.0.4:check (default) on project struts2-parent: Fatal exception(s) analyzing Struts 2: One or more exceptions occurred during analysis: [ERROR] UpdateException: Error updating the NVD Data [ERROR] caused by NvdApiException: NVD Returned Status Code: 503 [ERROR] NoDataException: No documents exist [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException Build step 'Execute shell' marked build as failure ERROR: No tool found matching MAVEN_3_LATEST__HOME Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3
