See <https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/211/display/redirect?page=changes>
Changes: [git] Merge pull request #1072 from apache/fix/WW-5468-modeldriven-2 [git] WW-5478 Deprecate DefaultResultFactory [git] WW-5478 Fix ActionContext equals/hashCode contract [git] WW-5480 Warn against potential templating bug [git] WW-3714 Move new Result class into result package [git] WW-5459 Move new Action class into action package [git] WW-5459 Deprecate and repackage ActionChainResult [git] WW-3714 Ensure correct delegation of new Result API [git] WW-3714 Ensure correct delegation of new Interceptor API [github] Bump github/codeql-action from 3.27.0 to 3.27.1 [Lukasz Lenart] WW-5484 Marks the DWR plugin as deprecated [Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_7_0 [Lukasz Lenart] [maven-release-plugin] prepare for next development iteration [github] Bump github/codeql-action from 3.27.1 to 3.27.4 [Sebastian.Peters] Add .gitattributes in case people don't have core.autocrlf set [Sebastian.Peters] Upgrade maven to 3.9.9 and wrapper to 3.3.2 [Lukasz Lenart] Always run Sonar scan against the master branch [Lukasz Lenart] Runs Sonar step in case of running on master or PR [Lukasz Lenart] Uses Java 21 when running Sonar check [Lukasz Lenart] Avoids running Sonar scan in forks [github] Skip Sonar scan on PRs created by Dependabot [Lukasz Lenart] Uses AND instead of OR to check Sonar prerequisites ------------------------------------------ [...truncated 6.41 KB...] [INFO] --- apache-rat:0.15:check (default) @ struts2-parent --- [INFO] Added 1 additional default licenses. [INFO] Added 1 custom approved licenses. [INFO] Will parse SCM ignores for exclusions... [INFO] Parsing exclusions from <https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/.gitignore> [INFO] Finished adding exclusions from SCM ignore files. [INFO] 89 implicit excludes. [INFO] 17 explicit excludes. [INFO] 3 resources included [INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses. [INFO] [INFO] --- site:3.20.0:attach-descriptor (attach-descriptor) @ struts2-parent --- [INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'. [INFO] [INFO] --- dependency-check:10.0.4:check (default) @ struts2-parent --- [INFO] Checking for updates [WARNING] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [INFO] NVD API has 246,769 records in this update [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=6000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [INFO] Downloaded 10,000/246,779 (4%) [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=18000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [INFO] Downloaded 20,000/246,779 (8%) [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=22000 : 2 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=24000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [INFO] Downloaded 30,000/246,779 (12%) [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [INFO] Downloaded 40,000/246,780 (16%) [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=44000 : 2 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=46000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [INFO] Downloaded 50,000/246,780 (20%) [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=50000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=58000 : 2 time [INFO] Downloaded 60,000/246,780 (24%) [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=60000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=62000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=64000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [WARNING] NVD API request failures are occurring; retrying request for the 11 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [INFO] Downloaded 70,000/246,780 (28%) [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=72000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] Retrying request /rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=76000 : 2 time [WARNING] NVD API request failures are occurring; retrying request for the 5 time [WARNING] NVD API request failures are occurring; retrying request for the 6 time [WARNING] NVD API request failures are occurring; retrying request for the 7 time [WARNING] NVD API request failures are occurring; retrying request for the 8 time [WARNING] NVD API request failures are occurring; retrying request for the 9 time [WARNING] NVD API request failures are occurring; retrying request for the 10 time [WARNING] NVD API request failures are occurring; retrying request for the 11 time [ERROR] Error updating the NVD Data org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:395) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:116) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:1967) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1150) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:903) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:280) at org.apache.maven.cli.MavenCli.main (MavenCli.java:203) at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:498) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:361) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314) Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: NVD Returned Status Code: 503 at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:412) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next (NvdCveClient.java:331) at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:352) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:116) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:1967) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1150) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:903) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:280) at org.apache.maven.cli.MavenCli.main (MavenCli.java:203) at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:498) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:361) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314) [INFO] Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json [INFO] Begin database defrag [INFO] End database defrag (10191 ms) [WARNING] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities. [ERROR] Unable to continue dependency-check analysis. [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Struts 2 6.7.1-SNAPSHOT: [INFO] [INFO] Struts 2 ........................................... FAILURE [ 03:22 h] [INFO] Struts 2 Bill of Materials ......................... SKIPPED [INFO] Struts 2 Core ...................................... SKIPPED [INFO] Struts 2 Plugins ................................... SKIPPED [INFO] Struts 2 Async Plugin .............................. SKIPPED [INFO] Struts 2 Bean Validation Plugin .................... SKIPPED [INFO] Struts 2 CDI Plugin ................................ SKIPPED [INFO] Struts 2 Spring Plugin ............................. SKIPPED [INFO] Struts 2 JUnit Plugin .............................. SKIPPED [INFO] Struts 2 Velocity Plugin ........................... SKIPPED [INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED [INFO] Struts 2 Convention Plugin ......................... SKIPPED [INFO] DEPRECATED: Struts 2 DWR Plugin - since 6.7.0 ...... SKIPPED [INFO] DEPRECATED: Struts 2 Embedded JSP Plugin, since 6.0.0 SKIPPED [INFO] DEPRECATED: Struts 2 GXP Plugin - since 6.0.0 ...... SKIPPED [INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED [INFO] Struts 2 Java Templates Plugin ..................... SKIPPED [INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED [INFO] Struts 2 JSON Plugin ............................... SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Plugin - since 6.0.0 ..... SKIPPED [INFO] DEPRECATED: Struts 2 OVal Plugin, since 6.0.0 ...... SKIPPED [INFO] DEPRECATED: Struts 2 Pell Multipart Plugin - since 6.2.0 SKIPPED [INFO] DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 ... SKIPPED [INFO] DEPRECATED: Struts 2 Portlet Mocks Plugin - since 6.0.0 SKIPPED [INFO] DEPRECATED: Struts 2 Portlet Plugin - since 6.0.0 .. SKIPPED [INFO] DEPRECATED: Struts 2 Portlet JUnit Plugin - since 6.3.0 SKIPPED [INFO] Struts 2 Tiles Plugin .............................. SKIPPED [INFO] DEPRECATED: Struts 2 Portlet Tiles Plugin - since 6.0.0 SKIPPED [INFO] Struts 2 REST Plugin ............................... SKIPPED [INFO] DEPRECATED: Struts 2 Sitemesh Plugin ............... SKIPPED [INFO] Struts 2 TestNG Plugin ............................. SKIPPED [INFO] Struts 2 XSLT Plugin ............................... SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Bundles - since 6.0.0 .... SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Admin Bundle - since 6.0.0 SKIPPED [INFO] DEPRECATED: Struts 2 OSGi Demo Bundle - since 6.0.0 SKIPPED [INFO] Struts 2 Webapps ................................... SKIPPED [INFO] Struts 2 Showcase Webapp ........................... SKIPPED [INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED [INFO] Struts 2 Assembly .................................. SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 03:22 h [INFO] Finished at: 2024-11-22T09:23:38Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:10.0.4:check (default) on project struts2-parent: Fatal exception(s) analyzing Struts 2: One or more exceptions occurred during analysis: [ERROR] UpdateException: Error updating the NVD Data [ERROR] caused by NvdApiException: NVD Returned Status Code: 503 [ERROR] NoDataException: No documents exist [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException Build step 'Execute shell' marked build as failure ERROR: No tool found matching MAVEN_3_LATEST__HOME Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3
