Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #200

2024-05-31 Thread Apache Jenkins Server
See 


Changes:


--
[...truncated 695.09 KB...]
[INFO] --< org.apache.struts:struts2-spring-plugin >---
[INFO] Building Struts 2 Spring Plugin 6.5.0-SNAPSHOT[8/39]
[INFO]   from plugins/spring/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.4.1:enforce (enforce) @ struts2-spring-plugin ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence 
passed
[INFO] 
[INFO] --- enforcer:3.4.1:enforce (enforce-maven-version) @ 
struts2-spring-plugin ---
[INFO] 
[INFO] --- remote-resources:1.6.0:process (process-resource-bundles) @ 
struts2-spring-plugin ---
[INFO] Preparing remote bundle org.apache:apache-jar-resource-bundle:1.4
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.1.0:resources (default-resources) @ 
struts2-spring-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 3 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:compile (default-compile) @ struts2-spring-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 9 source files to 

[INFO] 
:
 Some input files use or override a deprecated API.
[INFO] 
:
 Recompile with -Xlint:deprecation for details.
[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-spring-plugin ---
[INFO] No MANIFEST.MF file found, generating manifest.
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.1.0:testResources (default-testResources) @ 
struts2-spring-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:testCompile (default-testCompile) @ 
struts2-spring-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 17 source files to 

[INFO] 
:
 

 uses or overrides a deprecated API.
[INFO] 
:
 Recompile with -Xlint:deprecation for details.
[INFO] 
[INFO] --- surefire:3.2.5:test (default-test) @ struts2-spring-plugin ---
[INFO] Using configured provider 
org.apache.maven.surefire.junitcore.JUnitCoreProvider
[INFO] 
[INFO] ---
[INFO]  T E S T S
[INFO] ---
[INFO] Running org.apache.struts2.spring.StrutsSpringObjectFactoryTest
06:06:54.572 [main] FATAL org.apache.struts2.spring.StrutsSpringObjectFactory - 
** FATAL ERROR STARTING UP STRUTS-SPRING INTEGRATION **
Looks like the Spring listener was not configured for your web app! 
Nothing will work until WebApplicationContextUtils returns a valid 
ApplicationContext.
You might need to add the following to web.xml: 


org.springframework.web.context.ContextLoaderListener

[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.297 s 
-- in org.apache.struts2.spring.StrutsSpringObjectFactoryTest
[INFO] Running com.

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #201

2024-06-21 Thread Apache Jenkins Server
See 


Changes:

[Lukasz Lenart] WW-5424 Fixes ClassCastException when using short var name in 
s:set tag

[Lukasz Lenart] Disables required reviewers option

[Lukasz Lenart] WW-5412 Upgrades struts-master to ver 15

[github] Bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1

[github] Bump org.freemarker:freemarker from 2.3.32 to 2.3.33

[Lukasz Lenart] WW-5400 Simplifies how CspSettings is created

[github] Removes duplication

[Lukasz Lenart] WW-5250 Addresses TODO in test and stops using Mock Objects

[github] Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.2

[github] Bump org.owasp:dependency-check-maven from 8.4.2 to 9.2.0

[Lukasz Lenart] WW-5310 Fixes broken support for Fragments in  tag

[git] WW-5429 Log parameter annotation issues at ERROR level when in DevMode

[git] WW-5429 Make DebugUtils final and remove @author JavaDoc tag


--
[...truncated 695.62 KB...]
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing HTML report to: 

[INFO] 
[INFO] --< org.apache.struts:struts2-spring-plugin >---
[INFO] Building Struts 2 Spring Plugin 6.5.0-SNAPSHOT[8/39]
[INFO]   from plugins/spring/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.4.1:enforce (enforce) @ struts2-spring-plugin ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence 
passed
[INFO] 
[INFO] --- enforcer:3.4.1:enforce (enforce-maven-version) @ 
struts2-spring-plugin ---
[INFO] 
[INFO] --- enforcer:3.4.1:enforce (enforce-java-version) @ 
struts2-spring-plugin ---
[INFO] 
[INFO] --- remote-resources:3.1.0:process (process-resource-bundles) @ 
struts2-spring-plugin ---
[INFO] Preparing remote bundle 
org.apache.apache.resources:apache-jar-resource-bundle:1.5
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.3.1:resources (default-resources) @ 
struts2-spring-plugin ---
[INFO] Copying 3 resources from src/main/resources to target/classes
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/classes
[INFO] 
[INFO] --- compiler:3.11.0:compile (default-compile) @ struts2-spring-plugin ---
[INFO] Changes detected - recompiling the module! :dependency
[INFO] Compiling 9 source files with javac [debug target 1.8] to target/classes
[WARNING] 
:[44,64]
 non-varargs call of varargs method with inexact argument type for last 
parameter;
  cast to java.lang.Object for a varargs call
  cast to java.lang.Object[] for a non-varargs call and to suppress this warning
[INFO] 
:
 Some input files use or override a deprecated API.
[INFO] 
:
 Recompile with -Xlint:deprecation for details.
[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-spring-plugin ---
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.3.1:testResources (default-testResources) @ 
struts2-spring-plugin ---
[INFO] Copying 4 resources from src/test/resources to target/test-classes
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/test-classes
[INFO] 
[INFO] --- compiler:3.11.0:testCompile (default-testCompile) @ 
struts2-spring-plugin ---
[INFO] Changes detected - recompiling the

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #204

2024-07-31 Thread Apache Jenkins Server
See 


Changes:

[github] Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0


--
Started by timer
Running as SYSTEM
[EnvInject] - Loading node environment variables.
Building remotely on builds29 (ubuntu) in workspace 

The recommended git tool is: NONE
No credentials specified
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts.git
 > git init 
 > 
 >  # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git --version # 'git version 2.34.1'
 > git fetch --tags --force --progress -- 
 > https://gitbox.apache.org/repos/asf/struts.git 
 > +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git 
 > # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # 
 > timeout=10
Avoid second fetch
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
Checking out Revision e3e854a67b6a72843a3af3476aacec7efc1c0a56 
(refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f e3e854a67b6a72843a3af3476aacec7efc1c0a56 # timeout=10
Commit message: "Merge pull request #1000 from 
apache/dependabot/maven/org.apache.commons-commons-lang3-3.15.0"
 > git rev-list --no-walk f977f0c0e5c69f8d95b897fcf012cb8ba204d938 # timeout=10
ERROR: No tool found matching MAVEN_3_LATEST__HOME
Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3
[Struts-master-JDK8-dependency-check] $ /bin/sh -xe 
/tmp/jenkins4876566699384428495.sh
+ export MAVEN_OPTS=-Xms2g -Xmx2g -XX:+CMSClassUnloadingEnabled
+ /home/jenkins/tools/maven/latest3/bin/mvn verify -Pdependency-check
[INFO] Scanning for projects...
[INFO] 
[INFO] Reactor Build Order:
[INFO] 
[INFO] Struts 2   [pom]
[INFO] Struts 2 Bill of Materials [pom]
[INFO] Struts 2 Core  [jar]
[INFO] Struts 2 Plugins   [pom]
[INFO] Struts 2 Async Plugin  [jar]
[INFO] Struts 2 Bean Validation Plugin[jar]
[INFO] Struts 2 CDI Plugin[jar]
[INFO] Struts 2 Spring Plugin [jar]
[INFO] Struts 2 JUnit Plugin  [jar]
[INFO] Struts 2 Velocity Plugin   [jar]
[INFO] Struts 2 Configuration Browser Plugin  [jar]
[INFO] Struts 2 Convention Plugin [jar]
[INFO] Struts 2 DWR Plugin[jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin, since 6.0.0  [jar]
[INFO] DEPRECATED: Struts 2 GXP Plugin - since 6.0.0  [jar]
[INFO] Struts 2 Jasper Reports Plugin [jar]
[INFO] Struts 2 Java Templates Plugin [jar]
[INFO] Struts 2 JFreeChart Plugin [jar]
[INFO] Struts 2 JSON Plugin   [jar]
[INFO] DEPRECATED: Struts 2 OSGi Plugin - since 6.0.0 [jar]
[INFO] DEPRECATED: Struts 2 OVal Plugin, since 6.0.0  [jar]
[INFO] DEPRECATED: Struts 2 Pell Multipart Plugin - since 6.2.0   [jar]
[INFO] DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0   [jar]
[INFO] DEPRECATED: Struts 2 Portlet Mocks Plugin - since 6.0.0[jar]
[INFO] DEPRECATED: Struts 2 Portlet Plugin - since 6.0.0  [jar]
[INFO] DEPRECATED: Struts 2 Portlet JUnit Plugin - since 6.3.0[jar]
[INFO] Struts 2 Tiles Plugin  [jar]
[INFO] DEPRECATED: Struts 2 Portlet Tiles Plugin - since 6.0.0[jar]
[INFO] Struts 2 REST Plugin   [jar]
[INFO] Struts 2 Sitemesh Plugin   [jar]
[INFO] Struts 2 TestNG Plugin [jar]
[INFO] Struts 2 XSLT Plugin   [jar]
[INFO] DEPRECATED: Struts 2 OSGi Bundles - since 6.0.0[pom]
[INFO] DEPRECATED: Struts 2 OSGi Admin Bundle - since 6.0.0[bundle]
[INFO] DEPRECATED: Struts 2 OSGi Demo Bundle - since 6.0.0 [bu

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #206

2024-08-31 Thread Apache Jenkins Server
See 


Changes:


--
[...truncated 699.72 KB...]
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing HTML report to: 

[INFO] 
[INFO] --< org.apache.struts:struts2-spring-plugin >---
[INFO] Building Struts 2 Spring Plugin 6.7.0-SNAPSHOT[8/39]
[INFO]   from plugins/spring/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce) @ struts2-spring-plugin ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence 
passed
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce-maven-version) @ 
struts2-spring-plugin ---
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce-java-version) @ 
struts2-spring-plugin ---
[INFO] 
[INFO] --- remote-resources:3.1.0:process (process-resource-bundles) @ 
struts2-spring-plugin ---
[INFO] Preparing remote bundle 
org.apache.apache.resources:apache-jar-resource-bundle:1.5
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.3.1:resources (default-resources) @ 
struts2-spring-plugin ---
[INFO] Copying 3 resources from src/main/resources to target/classes
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/classes
[INFO] 
[INFO] --- compiler:3.11.0:compile (default-compile) @ struts2-spring-plugin ---
[INFO] Changes detected - recompiling the module! :dependency
[INFO] Compiling 9 source files with javac [debug target 1.8] to target/classes
[WARNING] 
:[44,64]
 non-varargs call of varargs method with inexact argument type for last 
parameter;
  cast to java.lang.Object for a varargs call
  cast to java.lang.Object[] for a non-varargs call and to suppress this warning
[INFO] 
:
 Some input files use or override a deprecated API.
[INFO] 
:
 Recompile with -Xlint:deprecation for details.
[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-spring-plugin ---
[INFO] No MANIFEST.MF file found, generating manifest.
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.3.1:testResources (default-testResources) @ 
struts2-spring-plugin ---
[INFO] Copying 4 resources from src/test/resources to target/test-classes
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/test-classes
[INFO] 
[INFO] --- compiler:3.11.0:testCompile (default-testCompile) @ 
struts2-spring-plugin ---
[INFO] Changes detected - recompiling the module! :dependency
[INFO] Compiling 17 source files with javac [debug target 1.8] to 
target/test-classes
[INFO] 
[INFO] --- surefire:3.4.0:test (default-test) @ struts2-spring-plugin ---
[INFO] Using configured provider 
org.apache.maven.surefire.junitcore.JUnitCoreProvider
[INFO] 
[INFO] ---
[INFO]  T E S T S
[INFO] ---
[INFO] Running org.apache.struts2.spring.StrutsSpringObjectFactoryTest
06:04:38.134 [main] FATAL org.apache.struts2.spring.StrutsSpringObjectFactory - 
** FATAL ERROR STARTING UP STRUTS-SPRING INTEGRATION **
Looks like the Spring listener was not configured for your web app! 
Nothing will work until WebApplicationContextUtils returns a valid 
ApplicationContext.
You might need to

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #192

2023-09-21 Thread Apache Jenkins Server
See 


Changes:

[Lukasz Lenart] Reverts version to 6.3.0-SNAPSHOT

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_3_0

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] Moves all CI notifications to commits@ list

[github] Update .asf.yaml

[github] Bump actions/checkout from 3 to 4

[github] Bump actions/upload-artifact from 3.1.2 to 3.1.3

[github] Bump actions/cache from 3.3.1 to 3.3.2

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_3_0_1

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Lukasz Lenart] Always delete uploaded file

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_3_0_1

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration


--
[...truncated 824.83 KB...]
[INFO] Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.ImportAttributeModelTest
[INFO] Running org.apache.tiles.template.AddAttributeModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.AddAttributeModelTest
[INFO] Running org.apache.tiles.template.InsertAttributeModelTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.InsertAttributeModelTest
[INFO] Running org.apache.tiles.template.DefinitionModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.DefinitionModelTest
[INFO] Running org.apache.tiles.template.InsertDefinitionModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.InsertDefinitionModelTest
[INFO] Running org.apache.tiles.template.GetAsStringModelTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.GetAsStringModelTest
[INFO] Running org.apache.tiles.template.ComposeStackUtilTest
[INFO] Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.ComposeStackUtilTest
[INFO] Running 
org.apache.tiles.request.reflect.CannotInstantiateObjectExceptionTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.reflect.CannotInstantiateObjectExceptionTest
[INFO] Running org.apache.tiles.request.reflect.ClassUtilTest
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.reflect.ClassUtilTest
[INFO] Running org.apache.tiles.request.AbstractViewRequestTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.028 s 
- in org.apache.tiles.request.AbstractViewRequestTest
[INFO] Running org.apache.tiles.request.RequestExceptionTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.RequestExceptionTest
[INFO] Running org.apache.tiles.request.render.ChainedDelegateRendererTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.render.ChainedDelegateRendererTest
[INFO] Running org.apache.tiles.request.render.StringRendererTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.render.StringRendererTest
[INFO] Running org.apache.tiles.request.render.NoSuchRendererExceptionTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.render.NoSuchRendererExceptionTest
[INFO] Running org.apache.tiles.request.render.BasicRendererFactoryTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.render.BasicRendererFactoryTest
[INFO] Running org.apache.tiles.request.render.DispatchRendererTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.render.DispatchRendererTest
[INFO] Running org.apache.tiles.request.collection.MapEntryTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.collection.MapEntryTest
[INFO] Running org.apache.tiles.request.collection.HeaderValuesCollectionTest
[INFO] Tests run: 16, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.002 s 
- in org.apache.tiles.request.collection.HeaderValuesCollectionTest
[INFO] Running org.apache.tiles.request.collection.RemovableKeySetTest
[INFO] Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.collection.RemovableKeySetTest
[INFO] Running 
org.apache.tiles.request.collection.ReadOnlyEnumerationMapValuesCollectionTest
[INFO] Tests run: 16, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.003 s 
- in 
org.apache.tiles.request.collection.ReadOnlyEnumeration

Build failed in Jenkins: Struts » Struts-examples-dependency-check #101

2023-09-29 Thread Apache Jenkins Server
See 


Changes:

[github] Bump org.slf4j:slf4j-simple from 2.0.7 to 2.0.9

[Lukasz Lenart] Redirects GH notifications to commits list

[github] Bump quarkus-plugin.version from 3.3.0 to 3.3.1

[Lukasz Lenart] Fixes Quarkus build (it requires JakartaEE)

[github] Bump io.quarkus:quarkus-universe-bom from 3.3.1 to 3.3.2

[github] Bump actions/cache from 3.3.1 to 3.3.2

[github] Bump actions/checkout from 3.6.0 to 4.0.0

[github] Bump io.quarkus:quarkus-universe-bom from 3.3.2 to 3.3.3

[github] Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0

[github] Bump org.eclipse.jetty:jetty-maven-plugin

[github] Bump io.quarkus:quarkus-universe-bom from 3.3.3 to 3.4.1

[github] Bump actions/checkout from 4.0.0 to 4.1.0


--
Started by timer
Running as SYSTEM
[EnvInject] - Loading node environment variables.
Building remotely on builds30 (ubuntu) in workspace 

The recommended git tool is: NONE
No credentials specified
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts-examples.git
 > git init 
 > 
 >  # timeout=10
Fetching upstream changes from 
https://gitbox.apache.org/repos/asf/struts-examples.git
 > git --version # timeout=10
 > git --version # 'git version 2.17.1'
 > git fetch --tags --progress -- 
 > https://gitbox.apache.org/repos/asf/struts-examples.git 
 > +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git config remote.origin.url 
 > https://gitbox.apache.org/repos/asf/struts-examples.git # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # 
 > timeout=10
Avoid second fetch
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
Checking out Revision 8f4a6670635300518102d57fc76d1552573b739f 
(refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 8f4a6670635300518102d57fc76d1552573b739f # timeout=10
Commit message: "Merge pull request #268 from 
apache/dependabot/github_actions/actions/checkout-4.1.0"
 > git rev-list --no-walk e8e00592c3ea36bc67498a43776156ed552f0aba # timeout=10
ERROR: No tool found matching MAVEN_3_LATEST__HOME
[Struts-examples-dependency-check] $ /bin/sh -xe 
/tmp/jenkins14083903918943352531.sh
+ export MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m 
-XX:+CMSClassUnloadingEnabled
+ export 
PATH=:/home/jenkins/tools/java/latest11/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+ ./mvnw verify -Pdependency-check
OpenJDK 64-Bit Server VM warning: Ignoring option MaxPermSize; support was 
removed in 8.0
[INFO] Scanning for projects...
Downloading from apache-public: 
https://repository.apache.org/content/groups/public/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from apache-staging: 
https://repository.apache.org/content/groups/staging/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from apache-snapshots: 
https://repository.apache.org/content/groups/snapshots/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from oss-snapshots: 
https://oss.sonatype.org/content/repositories/snapshots/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from central: 
https://repo.maven.apache.org/maven2/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Progress (1): 1.4/898 kBProgress (1): 2.7/898 kBProgress (1): 4.1/898 
kBProgress (1): 5.5/898 kBProgress (1): 6.9/898 kBProgress (1): 8.2/898 
kBProgress (1): 9.6/898 kBProgress (1): 11/898 kB Progress (1): 12/898 
kBProgress (1): 14/898 kBProgress (1): 15/898 kBProgress (1): 16/898 kBProgress 
(1): 20/898 kBProgress (1): 24/898 kBProgress (1): 28/898 kBProgress (1): 
32/898 kBProgress (1): 36/898 kBProgress (1): 40/898 kBProgress (1): 45/898 
kBProgress (1): 49/898 kBProgress (1): 53/898 kBProgress (1): 57/898 kBProgress 
(1): 61/898 kBProgress (1): 65/898 kBProgress (1): 69/898 kBProgress (1): 
73/898 kBProgress (1): 77/898 kBProgress (1): 81/898 kBProgress (1): 85/898 
kBProgress (1): 90/898 kBProgress (1): 94/898 kBProgress (1): 98/898 kBProgress 
(1): 102/898 kBProgress (1): 106/898 kBProgress (1): 110/898 kBProgress (1): 
114/898 kBProgress (1): 118/898 kBProgress (1): 122/898 kBProgress (1): 126/898 
kBProgress (1): 131/898 kBProgress (1): 135/898 kBProgress (1): 139/898 
kBProgress (1): 143/898 kBProgress (1): 147/898 kBProgress (1): 151/898 
kBProgress (1): 155/898 kBProgress (1): 159/898 kBProgress (1): 163/898 
kBProgress (1): 167/898 kBProgress (1): 171/898 kBProgress (1): 176/898 
kBProgress (1): 180/898 kBProgress (1): 184/898 kBProgress (1): 188/898 
kBProgress (1): 192/898 kBProgress (1): 196/898 kBProgress

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #193

2023-09-30 Thread Apache Jenkins Server
See 


Changes:

[git] WW-5341 Refactor SecurityMemberAccess methods for reuse

[git] WW-5341 Clean up SecurityMemberAccess#restore

[git] WW-5341 Further refactor of OgnlUtil and SecurityMemberAccess to store 
excluded classes as Strings

[git] WW-5341 Move proxy check to be first

[git] WW-5341 Split package exclusion check

[git] WW-5341 Clean up OgnlUtilTest

[git] WW-5341 Add unit test for excluded pattern validation

[git] WW-5341 Fix default ClassLoader

[git] WW-5342 Ban use of default package

[git] WW-5341 Make validation more efficient

[git] WW-5339 Clean up OgnlValueStackTest

[git] WW-5339 Misc clean up in CompoundRootAccessor

[git] WW-5342 Implement default off option

[git] WW-5342 Optimise package exclusion check

[git] WW-5340 Refactor OgnlUtil, specifically calls to 
Ognl#getValue,setValue,parseExpression

[git] WW-5340 Remove redundant check on #setValue

[git] WW-5340 Rename functional interface

[git] WW-5340 Fix OgnlReflectionProvider bypassing OgnlUtil

[hepptho-github.sbd2s] replace BeanManager::createInjectionTarget

[hepptho-github.sbd2s] indent CdiObjectFactory with 4 spaces everywhere

[git] Split SonarCloud into separate action

[git] WW-5340 Introducing OGNL Guard

[git] WW-5340 Fix tests

[git] WW-5340 Make OgnlGuard a configurable bean

[git] WW-5340 Cache OgnlGuard result

[git] WW-5340 Add validation to excluded node configuration

[git] WW-5340 Add unit tests

[git] WW-5340 Refactor OgnlGuard to do the parsing

[git] WW-5340 Correct optimisation

[git] WW-5340 Rename DefaultOgnlGuard to StrutsOgnlGuard

[git] WW-5340 Repackage OgnlGuard

[git] WW-5340 Rename blocked by OgnlGuard string

[git] WW-5340 Make excludedNodeTypes protected for subclassing versatility

[git] WW-5348 Introduce protected #logPatternChange method


--
[...truncated 824.34 KB...]
[INFO] Running org.apache.tiles.request.reflect.ClassUtilTest
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.request.reflect.ClassUtilTest
[INFO] Running org.apache.tiles.web.jsp.taglib.UseAttributeTagTest
[INFO] Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.053 s 
- in org.apache.tiles.web.jsp.taglib.UseAttributeTagTest
[INFO] Running org.apache.tiles.web.startup.AbstractTilesListenerTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.023 s 
- in org.apache.tiles.web.startup.AbstractTilesListenerTest
[INFO] Running org.apache.tiles.template.AddListAttributeModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.AddListAttributeModelTest
[INFO] Running org.apache.tiles.template.InsertDefinitionModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.InsertDefinitionModelTest
[INFO] Running org.apache.tiles.template.AddAttributeModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.001 s 
- in org.apache.tiles.template.AddAttributeModelTest
[INFO] Running org.apache.tiles.template.PutAttributeModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.PutAttributeModelTest
[INFO] Running org.apache.tiles.template.DefinitionModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.DefinitionModelTest
[INFO] Running org.apache.tiles.template.PutListAttributeModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.PutListAttributeModelTest
[INFO] Running org.apache.tiles.template.InsertTemplateModelTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.InsertTemplateModelTest
[INFO] Running org.apache.tiles.template.SetCurrentContainerModelTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.SetCurrentContainerModelTest
[INFO] Running org.apache.tiles.template.InsertAttributeModelTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.InsertAttributeModelTest
[INFO] Running org.apache.tiles.template.ImportAttributeModelTest
[INFO] Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.ImportAttributeModelTest
[INFO] Running org.apache.tiles.template.GetAsStringModelTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.GetAsStringModelTest
[INFO] Running org.apache.tiles.template.DefaultAttributeResolverTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in 
org.apache.tiles.template.DefaultAttributeResolverTest
[INFO] Running org.apache.tiles.template.ComposeSta

Build failed in Jenkins: Struts » Struts-examples-dependency-check #102

2023-10-01 Thread Apache Jenkins Server
See 


Changes:


--
Started by timer
Running as SYSTEM
[EnvInject] - Loading node environment variables.
Building remotely on builds34 (ubuntu) in workspace 

The recommended git tool is: NONE
No credentials specified
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts-examples.git
 > git init 
 > 
 >  # timeout=10
Fetching upstream changes from 
https://gitbox.apache.org/repos/asf/struts-examples.git
 > git --version # timeout=10
 > git --version # 'git version 2.17.1'
 > git fetch --tags --progress -- 
 > https://gitbox.apache.org/repos/asf/struts-examples.git 
 > +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git config remote.origin.url 
 > https://gitbox.apache.org/repos/asf/struts-examples.git # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # 
 > timeout=10
Avoid second fetch
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
Checking out Revision 8f4a6670635300518102d57fc76d1552573b739f 
(refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 8f4a6670635300518102d57fc76d1552573b739f # timeout=10
Commit message: "Merge pull request #268 from 
apache/dependabot/github_actions/actions/checkout-4.1.0"
 > git rev-list --no-walk 8f4a6670635300518102d57fc76d1552573b739f # timeout=10
ERROR: No tool found matching MAVEN_3_LATEST__HOME
[Struts-examples-dependency-check] $ /bin/sh -xe 
/tmp/jenkins13503139824482803331.sh
+ export MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m 
-XX:+CMSClassUnloadingEnabled
+ export 
PATH=:/home/jenkins/tools/java/latest11/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+ ./mvnw verify -Pdependency-check
OpenJDK 64-Bit Server VM warning: Ignoring option MaxPermSize; support was 
removed in 8.0
[INFO] Scanning for projects...
Downloading from apache-public: 
https://repository.apache.org/content/groups/public/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from apache-staging: 
https://repository.apache.org/content/groups/staging/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from apache-snapshots: 
https://repository.apache.org/content/groups/snapshots/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from oss-snapshots: 
https://oss.sonatype.org/content/repositories/snapshots/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Downloading from central: 
https://repo.maven.apache.org/maven2/io/quarkus/quarkus-universe-bom/3.4.1/quarkus-universe-bom-3.4.1.pom
Progress (1): 1.4/898 kBProgress (1): 2.7/898 kBProgress (1): 4.1/898 
kBProgress (1): 5.5/898 kBProgress (1): 6.9/898 kBProgress (1): 8.2/898 
kBProgress (1): 9.6/898 kBProgress (1): 11/898 kB Progress (1): 12/898 
kBProgress (1): 14/898 kBProgress (1): 15/898 kBProgress (1): 16/898 kBProgress 
(1): 20/898 kBProgress (1): 24/898 kBProgress (1): 28/898 kBProgress (1): 
32/898 kBProgress (1): 36/898 kBProgress (1): 40/898 kBProgress (1): 45/898 
kBProgress (1): 49/898 kBProgress (1): 53/898 kBProgress (1): 57/898 kBProgress 
(1): 61/898 kBProgress (1): 65/898 kBProgress (1): 69/898 kBProgress (1): 
73/898 kBProgress (1): 77/898 kBProgress (1): 81/898 kBProgress (1): 85/898 
kBProgress (1): 90/898 kBProgress (1): 94/898 kBProgress (1): 98/898 kBProgress 
(1): 102/898 kBProgress (1): 106/898 kBProgress (1): 110/898 kBProgress (1): 
114/898 kBProgress (1): 118/898 kBProgress (1): 122/898 kBProgress (1): 126/898 
kBProgress (1): 131/898 kBProgress (1): 135/898 kBProgress (1): 139/898 
kBProgress (1): 143/898 kBProgress (1): 147/898 kBProgress (1): 151/898 
kBProgress (1): 155/898 kBProgress (1): 159/898 kBProgress (1): 163/898 
kBProgress (1): 167/898 kBProgress (1): 171/898 kBProgress (1): 176/898 
kBProgress (1): 180/898 kBProgress (1): 184/898 kBProgress (1): 188/898 
kBProgress (1): 192/898 kBProgress (1): 196/898 kBProgress (1): 200/898 
kBProgress (1): 204/898 kBProgress (1): 208/898 kBProgress (1): 212/898 
kBProgress (1): 217/898 kBProgress (1): 221/898 kBProgress (1): 225/898 
kBProgress (1): 229/898 kBProgress (1): 233/898 kBProgress (1): 237/898 
kBProgress (1): 241/898 kBProgress (1): 245/898 kBProgress (1): 249/898 
kBProgress (1): 253/898 kBProgress (1): 257/898 kBProgress (1): 262/898 
kBProgress (1): 266/898 kBProgress (1): 270/898 kBProgress (1): 274/898 
kBProgress (1): 278/898 kBProgress (1): 282/898 kBProgress (1): 286/898 
kBProgress (1): 290/898 kBProgress (1): 294/898 kBProgress (1): 298/898 
kBProgress (1): 303/898 kBProgress (1): 307/898 kBProgress (1): 311/898 
kBProgress (1): 315/898 kBProgress (1): 319/898 kBProgress (1): 3

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #194

2023-10-21 Thread Apache Jenkins Server
See 


Changes:

[github] Bump org.jfree:jfreechart from 1.5.1 to 1.5.4

[Lukasz Lenart] WW-5347 Upgrades to commons-digester3 ver 3.2

[Lukasz Lenart] WW-5338 Removes deprecated OgnTool

[Lukasz Lenart] WW-5338 Removes also deprecated constant in ContextUtil

[Lukasz Lenart] WW-5344 Un-deprecates Sitemesh plugin and upgrades Sitmesh to 
ver 2.5.0

[git] WW-5340 Mild refactor StrutsOgnlGuard for easier subclassing

[git] WW-5340 Add debug logging for rejected form fields

[git] WW-5340 Sanitize field names before logging

[github] Bump ossf/scorecard-action from 2.2.0 to 2.3.0

[git] WW-5349 Remove Struts core dependency on OGNL VarRefs

[git] WW-5349 Remove corresponding unit tests

[git] Add JDK 21 build

[git] Fix JDK 21 build

[git] Convert test class to JUnit4

[git] Upgrade EasyMock

[git] WW-5354 Ensure ActionSupport fields are not parameter injectable

[git] WW-5355 Use LRU cache by default

[git] WW-5355 Prevent AtomicInteger being initialised to zero

[git] WW-5355 Initial Caffeine cache implementation

[git] WW-5355 Fix eviction limit in LRU cache not being enforced

[git] WW-5355 Update JavaDoc for basic and LRU cache

[git] WW-5355 Introduce new Struts constants and their defaults

[git] WW-5355 Unify bootstrap constant declaration

[git] WW-5355 Introduce new cache type selection methods and deprecate 
problematic setter injection

[git] Upgrade Jackson and remove unnecessary transitive override

[git] Unify HtmlUnit versions

[git] Upgrade ASM and exclude conflicting artifact

[git] WW-5355 Downgrade Caffeine version

[git] WW-5355 Fix interface and unit test bug

[git] WW-5355 Address code smells

[git] WW-5355 Delegate deprecated constructor

[git] WW-5355 Extract constants into static final fields

[git] WW-5355 Declare bootstrap constants as final field instead

[git] WW-5355 Add since tags to StrutsConstants JavaDoc

[github] Bump org.codehaus.mojo:versions-maven-plugin from 2.7 to 2.16.1

[git] WW-5355 Amend Caffeine cache implementation

[git] WW-5355 Rename cache types

[git] WW-5355 Bootstrap using basic cache


--
[...truncated 768.35 KB...]
[INFO] --- resources:3.1.0:testResources (default-testResources) @ 
struts2-pell-multipart-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory 

[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:testCompile (default-testCompile) @ 
struts2-pell-multipart-plugin ---
[INFO] No sources to compile
[INFO] 
[INFO] --- surefire:3.0.0-M7:test (default-test) @ 
struts2-pell-multipart-plugin ---
[INFO] 
[INFO] --- apache-rat:0.15:check (default) @ struts2-pell-multipart-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 62 implicit excludes.
[INFO] 17 explicit excludes.
[INFO] 5 resources included
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 
0, approved: 4 licenses.
[INFO] 
[INFO] --- jar:3.2.0:jar (default-jar) @ struts2-pell-multipart-plugin ---
[INFO] Building jar: 

[INFO] 
[INFO] >>> source:3.2.1:jar (attach-sources) > generate-sources @ 
struts2-pell-multipart-plugin >>>
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce) @ struts2-pell-multipart-plugin ---
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce-maven-version) @ 
struts2-pell-multipart-plugin ---
[INFO] 
[INFO] <<< source:3.2.1:jar (attach-sources) < generate-sources @ 
struts2-pell-multipart-plugin <<<
[INFO] 
[INFO] 
[INFO] --- source:3.2.1:jar (attach-sources) @ struts2-pell-multipart-plugin ---
[INFO] Building jar: 

[INFO] 
[INFO] --- site:3.9.0:attach-descriptor (attach-descriptor) @ 
struts2-pell-multipart-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- dependency-check:7.2.0:check (default) @ 
struts2-pell-multipart-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (32 ms)
[INFO] 

Dependency-Check is an open source tool performing a best effort analysis of 
3rd party dependencies; false positives and false negatives may exist in the 
analysis performed by the tool. Use of the tool and the reporting provided 
constitutes acceptan

Build failed in Jenkins: Struts » Struts-examples-dependency-check #103

2023-10-29 Thread Apache Jenkins Server
See 


Changes:

[github] Bump net.sf.jasperreports:jasperreports from 6.20.5 to 6.20.6

[github] Bump io.quarkus:quarkus-universe-bom from 3.4.1 to 3.4.2

[github] Bump io.quarkus:quarkus-universe-bom from 3.4.2 to 3.4.3

[github] Bump log4j2.version from 2.20.0 to 2.21.0

[github] Bump actions/checkout from 4.1.0 to 4.1.1

[Lukasz Lenart] Uses JDK 17 & 21 to build

[Lukasz Lenart] Uses maven-war-plugin compatible with JDK17

[Lukasz Lenart] Upgrade Struts to ver. 6.3.0.1


--
[...truncated 508 B...]
 > git rev-parse --resolve-git-dir 
 > 
 >  # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url 
 > https://gitbox.apache.org/repos/asf/struts-examples.git # timeout=10
Fetching upstream changes from 
https://gitbox.apache.org/repos/asf/struts-examples.git
 > git --version # timeout=10
 > git --version # 'git version 2.17.1'
 > git fetch --tags --progress -- 
 > https://gitbox.apache.org/repos/asf/struts-examples.git 
 > +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
Checking out Revision cffa7975618365e06fdbe3cb904d752eb25bbe4a 
(refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f cffa7975618365e06fdbe3cb904d752eb25bbe4a # timeout=10
Commit message: "Merge pull request #277 from apache/feature/upgrade-struts"
 > git rev-list --no-walk 8f4a6670635300518102d57fc76d1552573b739f # timeout=10
ERROR: No tool found matching MAVEN_3_LATEST__HOME
[Struts-examples-dependency-check] $ /bin/sh -xe 
/tmp/jenkins8909795513911184173.sh
+ export MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m 
-XX:+CMSClassUnloadingEnabled
+ export 
PATH=:/home/jenkins/tools/java/latest11/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+ ./mvnw verify -Pdependency-check
OpenJDK 64-Bit Server VM warning: Ignoring option MaxPermSize; support was 
removed in 8.0
[INFO] Scanning for projects...
Downloading from apache-public: 
https://repository.apache.org/content/groups/public/io/quarkus/quarkus-universe-bom/3.4.3/quarkus-universe-bom-3.4.3.pom
Downloading from apache-staging: 
https://repository.apache.org/content/groups/staging/io/quarkus/quarkus-universe-bom/3.4.3/quarkus-universe-bom-3.4.3.pom
Downloading from apache-snapshots: 
https://repository.apache.org/content/groups/snapshots/io/quarkus/quarkus-universe-bom/3.4.3/quarkus-universe-bom-3.4.3.pom
Downloading from oss-snapshots: 
https://oss.sonatype.org/content/repositories/snapshots/io/quarkus/quarkus-universe-bom/3.4.3/quarkus-universe-bom-3.4.3.pom
Downloading from central: 
https://repo.maven.apache.org/maven2/io/quarkus/quarkus-universe-bom/3.4.3/quarkus-universe-bom-3.4.3.pom
Progress (1): 1.4/898 kBProgress (1): 2.8/898 kBProgress (1): 4.1/898 
kBProgress (1): 5.5/898 kBProgress (1): 6.9/898 kBProgress (1): 8.3/898 
kBProgress (1): 9.7/898 kBProgress (1): 11/898 kB Progress (1): 12/898 
kBProgress (1): 14/898 kBProgress (1): 15/898 kBProgress (1): 16/898 kBProgress 
(1): 20/898 kBProgress (1): 24/898 kBProgress (1): 28/898 kBProgress (1): 
32/898 kBProgress (1): 36/898 kBProgress (1): 40/898 kBProgress (1): 45/898 
kBProgress (1): 49/898 kBProgress (1): 53/898 kBProgress (1): 57/898 kBProgress 
(1): 61/898 kBProgress (1): 65/898 kBProgress (1): 69/898 kBProgress (1): 
73/898 kBProgress (1): 77/898 kBProgress (1): 81/898 kBProgress (1): 85/898 
kBProgress (1): 90/898 kBProgress (1): 94/898 kBProgress (1): 98/898 kBProgress 
(1): 102/898 kBProgress (1): 106/898 kBProgress (1): 110/898 kBProgress (1): 
114/898 kBProgress (1): 118/898 kBProgress (1): 122/898 kBProgress (1): 126/898 
kBProgress (1): 131/898 kBProgress (1): 135/898 kBProgress (1): 139/898 
kBProgress (1): 143/898 kBProgress (1): 147/898 kBProgress (1): 151/898 
kBProgress (1): 155/898 kBProgress (1): 159/898 kBProgress (1): 163/898 
kBProgress (1): 167/898 kBProgress (1): 171/898 kBProgress (1): 176/898 
kBProgress (1): 180/898 kBProgress (1): 184/898 kBProgress (1): 188/898 
kBProgress (1): 192/898 kBProgress (1): 196/898 kBProgress (1): 200/898 
kBProgress (1): 204/898 kBProgress (1): 208/898 kBProgress (1): 212/898 
kBProgress (1): 217/898 kBProgress (1): 221/898 kBProgress (1): 225/898 
kBProgress (1): 229/898 kBProgress (1): 233/898 kBProgress (1): 237/898 
kBProgress (1): 241/898 kBProgress (1): 245/898 kBProgress (1): 249/898 
kBProgress (1): 253/898 kBProgress (1): 257/898 kBProgress (1): 262/898 
kBProgress (1): 266/898 kBProgress (1): 270/898 kBProgress (1): 274/898 
kBProgress (1): 278/898 kBProgress (1): 282/898 kBProgress (1): 286/898 
kBProgress (1): 290/898 kBProgress (1): 294/898 kBProgress (1): 298/898 
kBProgress (1): 303/898 kBProgress (1): 307/898 kBProgress (1): 311/898 
kBProgress (1): 315/

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #195

2023-10-31 Thread Apache Jenkins Server
See 


Changes:

[github] Bump org.owasp:dependency-check-maven from 7.2.0 to 8.4.2

[tatsuo.tsuchie] Improved charset retrieval to get only once.

[github] Update core/src/main/java/org/apache/struts2/url/StrutsUrlDecoder.java

[github] Update core/src/main/java/org/apache/struts2/url/StrutsUrlDecoder.java

[git] WW-5358 Expand exclusion lists

[github] Bump ossf/scorecard-action from 2.3.0 to 2.3.1

[github] Bump junit:junit from 4.13.1 to 4.13.2

[github] Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11


--
[...truncated 587.70 KB...]
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.017 s 
- in com.opensymphony.xwork2.util.fs.DefaultFileManagerFactoryTest
[INFO] Running com.opensymphony.xwork2.util.fs.JarEntryRevisionTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.247 s 
- in com.opensymphony.xwork2.util.fs.JarEntryRevisionTest
[INFO] Running com.opensymphony.xwork2.util.ResolverUtilTest
2023-11-01 06:03:37,826 INFO  [main] util.ResolverUtil (ResolverUtil.java:370) 
- Scanning for classes in 
[
 matching criteria: is assignable to ObjectFactory
2023-11-01 06:03:37,854 INFO  [main] util.ResolverUtil (ResolverUtil.java:370) 
- Scanning for classes in 
[
 matching criteria: is assignable to ObjectFactory
2023-11-01 06:03:37,879 INFO  [main] util.ResolverUtil (ResolverUtil.java:370) 
- Scanning for classes in 
[/home/jenkins/.m2/repository/com/github/ben-manes/caffeine/caffeine/2.9.3/caffeine-2.9.3.jar]
 matching criteria: is assignable to ObjectFactory
2023-11-01 06:03:38,124 INFO  [main] util.ResolverUtil (ResolverUtil.java:370) 
- Scanning for classes in 
[/home/jenkins/.m2/repository/com/google/errorprone/error_prone_annotations/2.10.0/error_prone_annotations-2.10.0.jar]
 matching criteria: is assignable to ObjectFactory
2023-11-01 06:03:38,130 INFO  [main] util.ResolverUtil (ResolverUtil.java:370) 
- Scanning for classes in 
[/home/jenkins/.m2/repository/mockobjects/mockobjects-jdk1.3/0.09/mockobjects-jdk1.3-0.09.jar]
 matching criteria: is assignable to ObjectFactory
2023-11-01 06:03:38,152 INFO  [main] util.ResolverUtil (ResolverUtil.java:370) 
- Scanning for classes in 
[/home/jenkins/.m2/repository/mockobjects/mockobjects-jdk1.3-j2ee1.3/0.09/mockobjects-jdk1.3-j2ee1.3-0.09.jar]
 matching criteria: is assignable to ObjectFactory
2023-11-01 06:03:38,154 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockConnection.class' due to a 
java.lang.NoClassDefFoundError with message: javax/jms/Connection
2023-11-01 06:03:38,154 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockMapMessage.class' due to a 
java.lang.NoClassDefFoundError with message: javax/jms/MapMessage
2023-11-01 06:03:38,155 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockMessage.class' due to a 
java.lang.NoClassDefFoundError with message: javax/jms/Message
2023-11-01 06:03:38,156 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockMessageConsumer.class' due 
to a java.lang.NoClassDefFoundError with message: javax/jms/MessageConsumer
2023-11-01 06:03:38,156 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockMessageProducer.class' due 
to a java.lang.NoClassDefFoundError with message: javax/jms/MessageProducer
2023-11-01 06:03:38,157 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockMessagePublisher.class' due 
to a java.lang.NoClassDefFoundError with message: javax/jms/MessageProducer
2023-11-01 06:03:38,157 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockObjectMessage.class' due to 
a java.lang.NoClassDefFoundError with message: javax/jms/ObjectMessage
2023-11-01 06:03:38,158 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockQueue.class' due to a 
java.lang.NoClassDefFoundError with message: javax/jms/Queue
2023-11-01 06:03:38,158 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 'com/mockobjects/jms/MockQueueConnection.class' due 
to a java.lang.NoClassDefFoundError with message: javax/jms/QueueConnection
2023-11-01 06:03:38,159 WARN  [main] util.ResolverUtil (ResolverUtil.java:480) 
- Could not examine class 
'com/mockobjects/jms/MockQueueConnectionFactory.class' due to a 
java.lang.NoClassDefFoundError with message: javax/jms

Build failed in Jenkins: Struts » Struts-examples-dependency-check #104

2023-11-01 Thread Apache Jenkins Server
See 


Changes:

[github] Bump io.quarkus:quarkus-universe-bom from 3.4.3 to 3.5.0

[github] Bump log4j2.version from 2.21.0 to 2.21.1

[github] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.1.2 to 3.2.1


--
[...truncated 13.21 KB...]
[INFO] Building Struts 2 Examples 1.1.0  [1/47]
[INFO] [ pom ]-
Downloading from central: 
https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/7.2.1/dependency-check-maven-7.2.1.pom
Progress (1): 4.1/8.9 kBProgress (1): 8.2/8.9 kBProgress (1): 8.9 kB
Downloaded from central: 
https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/7.2.1/dependency-check-maven-7.2.1.pom
 (8.9 kB at 70 kB/s)
Downloading from central: 
https://repo.maven.apache.org/maven2/org/owasp/dependency-check-parent/7.2.1/dependency-check-parent-7.2.1.pom
Progress (1): 4.1/64 kBProgress (1): 8.2/64 kBProgress (1): 12/64 kB Progress 
(1): 16/64 kBProgress (1): 20/64 kBProgress (1): 25/64 kBProgress (1): 29/64 
kBProgress (1): 33/64 kBProgress (1): 37/64 kBProgress (1): 41/64 kBProgress 
(1): 45/64 kBProgress (1): 49/64 kBProgress (1): 53/64 kBProgress (1): 57/64 
kBProgress (1): 61/64 kBProgress (1): 64 kB  Downloaded 
from central: 
https://repo.maven.apache.org/maven2/org/owasp/dependency-check-parent/7.2.1/dependency-check-parent-7.2.1.pom
 (64 kB at 550 kB/s)
Downloading from central: 
https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/7.2.1/dependency-check-maven-7.2.1.jar
Progress (1): 4.1/103 kBProgress (1): 8.2/103 kBProgress (1): 12/103 kB 
Progress (1): 16/103 kBProgress (1): 20/103 kBProgress (1): 24/103 kBProgress 
(1): 28/103 kBProgress (1): 32/103 kBProgress (1): 36/103 kBProgress (1): 
40/103 kBProgress (1): 45/103 kBProgress (1): 49/103 kBProgress (1): 53/103 
kBProgress (1): 57/103 kBProgress (1): 61/103 kBProgress (1): 65/103 kBProgress 
(1): 69/103 kBProgress (1): 73/103 kBProgress (1): 77/103 kBProgress (1): 
81/103 kBProgress (1): 85/103 kBProgress (1): 90/103 kBProgress (1): 94/103 
kBProgress (1): 98/103 kBProgress (1): 102/103 kBProgress (1): 103 kB   
 Downloaded from central: 
https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/7.2.1/dependency-check-maven-7.2.1.jar
 (103 kB at 805 kB/s)
Downloading from apache-public: 
https://repository.apache.org/content/groups/public/org/apache/struts/struts2-core/6.3.0.1/struts2-core-6.3.0.1.pom
Progress (1): 4.1/14 kBProgress (1): 7.8/14 kBProgress (1): 8.2/14 kBProgress 
(1): 12/14 kB Progress (1): 14 kB  Downloaded from 
apache-public: 
https://repository.apache.org/content/groups/public/org/apache/struts/struts2-core/6.3.0.1/struts2-core-6.3.0.1.pom
 (14 kB at 16 kB/s)
Downloading from apache-public: 
https://repository.apache.org/content/groups/public/org/apache/struts/struts2-parent/6.3.0.1/struts2-parent-6.3.0.1.pom
Progress (1): 4.1/46 kBProgress (1): 7.8/46 kBProgress (1): 8.2/46 kBProgress 
(1): 12/46 kB Progress (1): 16/46 kBProgress (1): 20/46 kBProgress (1): 24/46 
kBProgress (1): 25/46 kBProgress (1): 29/46 kBProgress (1): 33/46 kBProgress 
(1): 37/46 kBProgress (1): 40/46 kBProgress (1): 41/46 kBProgress (1): 45/46 
kBProgress (1): 46 kB  Downloaded from apache-public: 
https://repository.apache.org/content/groups/public/org/apache/struts/struts2-parent/6.3.0.1/struts2-parent-6.3.0.1.pom
 (46 kB at 88 kB/s)
Downloading from apache-public: 
https://repository.apache.org/content/groups/public/org/apache/struts/struts2-core/6.3.0.1/struts2-core-6.3.0.1.jar
Progress (1): 0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 
0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 
MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 MBProgress 
(1): 0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 MBProgress (1): 0/1.5 
MBProgress (1): 0/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 MBProgress (1): 0.1/1.5 
MBProgress (1): 0.1/1.5 MBProgress (1): 0.2/1.5 MBProgress (1): 0.2/1.5 
MBProgress (1): 0.2/1.5 MBProgress (1): 0.2/1.5 MBProgress (

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #196

2023-11-21 Thread Apache Jenkins Server
See 


Changes:

[git] WW-5350 Refactor SecurityMemberAccess

[git] WW-5350 Fix static member test

[git] WW-5350 Fix argument validation

[git] WW-5350 Make property matching code more succinct

[git] WW-5350 See target to null in special case

[git] WW-5350 Implement OGNL Allowlist capability

[github] Bump slf4j.version from 2.0.7 to 2.0.9

[github] Bump net.sf.jasperreports:jasperreports from 6.20.5 to 6.20.6

[git] WW-5350 Fix mismatched logging

[Lukasz Lenart] WW-5333 Refactors AttributeMap

[Lukasz Lenart] Uses the new notifications@ list for all the messages form 
Github

[git] WW-5363 Velocity: read chained contexts before ValueStack

[git] WW-5363 Add test coverage

[git] WW-5363 Fix super#internalGet

[git] WW-5363 Improve code coverage

[Lukasz Lenart] Send Jenkins notifications to the notifications@ list

[git] WW-5363 Remove redundant method from VelocityManager


--
[...truncated 882.50 KB...]
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing report to: 

[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[INFO] 
[INFO] --< org.apache.struts:struts2-plexus-plugin >---
[INFO] Building DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 6.4.0-SNAPSHOT 
[23/39]
[INFO]   from plugins/plexus/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce-maven-version) @ 
struts2-plexus-plugin ---
[INFO] 
[INFO] --- remote-resources:1.6.0:process (process-resource-bundles) @ 
struts2-plexus-plugin ---
[INFO] Preparing remote bundle org.apache:apache-jar-resource-bundle:1.4
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.1.0:resources (default-resources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:compile (default-compile) @ struts2-plexus-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 5 source files to 

[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-plexus-plugin ---
[INFO] No MANIFEST.MF file found, generating manifest.
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.1.0:testResources (default-testResources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory 

[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:testCompile (default-testCompile) @ 
struts2-plexus-plugin ---
[INFO] No sources to compile
[INFO] 
[INFO] --- surefire:3.0.0-M7:test (default-test) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- apache-rat:0.15:check (default) @ struts2-

Build failed in Jenkins: Struts » Struts-examples-dependency-check #105

2023-11-29 Thread Apache Jenkins Server
See 


Changes:


--
[...truncated 75.16 KB...]
at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache. 
(IndexedDiskCache.java:183)
at 
org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache
 (IndexedDiskCacheFactory.java:60)
at 
org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache
 (IndexedDiskCacheFactory.java:33)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseAuxiliary 
(CompositeCacheConfigurator.java:506)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion 
(CompositeCacheConfigurator.java:261)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion 
(CompositeCacheConfigurator.java:161)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegions 
(CompositeCacheConfigurator.java:136)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.doConfigure 
(CompositeCacheManager.java:490)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure 
(CompositeCacheManager.java:441)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure 
(CompositeCacheManager.java:391)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure 
(CompositeCacheManager.java:373)
at org.apache.commons.jcs.JCS.getCacheManager (JCS.java:163)
at org.apache.commons.jcs.JCS.getInstance (JCS.java:205)
at org.owasp.dependencycheck.data.cache.DataCacheFactory.getPomCache 
(DataCacheFactory.java:155)
at org.owasp.dependencycheck.analyzer.CentralAnalyzer.initialize 
(CentralAnalyzer.java:124)
at org.owasp.dependencycheck.Engine.lambda$loadAnalyzers$1 (Engine.java:230)
at java.util.ArrayList.forEach (ArrayList.java:1541)
at org.owasp.dependencycheck.Engine.loadAnalyzers (Engine.java:229)
at org.owasp.dependencycheck.Engine.initializeEngine (Engine.java:196)
at org.owasp.dependencycheck.Engine. (Engine.java:185)
at org.owasp.dependencycheck.Engine. (Engine.java:160)
at org.owasp.dependencycheck.Engine. (Engine.java:150)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.initializeEngine 
(BaseDependencyCheckMojo.java:2002)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck 
(BaseDependencyCheckMojo.java:1818)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute 
(BaseDependencyCheckMojo.java:1007)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
(DefaultBuildPluginManager.java:137)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:208)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:154)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:146)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:81)
at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:956)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:290)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:194)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:289)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:229)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:415)
at org.codehaus.plexus.classworlds.launcher.Launcher.main 
(Launcher.java:356)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.apache.maven.wrapper.BootstrapMainStarter.start 
(BootstrapMainStarter.java:39)
at org.apache.maven.wrapper.WrapperExecutor.exec

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #197

2023-11-30 Thread Apache Jenkins Server
See 


Changes:

[git] WW-5343 Delete unused code and consolidate constructors

[git] WW-5343 Extract ConfigParseUtil

[git] WW-5343 Extract deprecated methods as default interface methods

[git] WW-5343 Deprecate unnecessary setter

[git] WW-5343 Make SecurityMemberAccess a prototype bean

[git] WW-5343 Refactor OgnlValueStackFactory to utilise SecurityMemberAccess 
bean

[git] WW-5343 Update OgnlUtil#createDefaultContext to utilise 
SecurityMemberAccess bean

[git] WW-5343 Move configuration injection from OgnlUtil to SecurityMemberAccess

[git] WW-5343 Fix OgnlUtilTest#testBeanMapExpressions

[git] WW-5343 Fix unit test compilation errors

[git] WW-5343 Remove unnecessary method

[git] WW-5343 Add missing license

[git] WW-5343 Revert and fix serializability

[git] WW-5343 Fix MemberAccess access blocked tests

[git] WW-5343 Remove defunct test now that constant is required

[github] Bump jackson.version from 2.15.3 to 2.16.0

[git] WW-5343 Migrate tests to SecurityMemberAccessTest

[git] WW-5343 Fix final test

[git] WW-5343 Clean up bootstrap constants

[git] WW-5343 Address SonarCloud code smells


--
[...truncated 850.65 KB...]
   False Positives: 
https://jeremylong.github.io/DependencyCheck/general/suppression.html

💖 Sponsor: https://github.com/sponsors/jeremylong


[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing report to: 

[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[INFO] 
[INFO] --< org.apache.struts:struts2-plexus-plugin >---
[INFO] Building DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 6.4.0-SNAPSHOT 
[23/39]
[INFO]   from plugins/plexus/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce-maven-version) @ 
struts2-plexus-plugin ---
[INFO] 
[INFO] --- remote-resources:1.6.0:process (process-resource-bundles) @ 
struts2-plexus-plugin ---
[INFO] Preparing remote bundle org.apache:apache-jar-resource-bundle:1.4
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.1.0:resources (default-resources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:compile (default-compile) @ struts2-plexus-plugin ---
[INFO] Nothing to compile - all classes are up to date
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-plexus-plugin ---
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.1.0:testResources (default-testResources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory 

[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:testCompile (default-testCompile) @ 
struts2-plexus-plugin ---
[INFO] No sources to compile
[INFO] 
[INFO] --- surefire:3.0.0-M7:test (default-test) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- apache-rat:0.15:check (default) @ struts2-plexus-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 62 implicit excludes.
[INFO] 17 explicit excludes.
[INFO] 9 resources included
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 
0, approved: 8 licenses.
[INFO] 
[INFO] --- jar:3.2

Build failed in Jenkins: Struts » Struts-examples-dependency-check #106

2023-12-01 Thread Apache Jenkins Server
See 


Changes:


--
[...truncated 59.08 KB...]
at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDisk.readObject 
(IndexedDisk.java:118)
at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.loadKeys 
(IndexedDiskCache.java:329)
at 
org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.initializeStoreFromPersistedData
 (IndexedDiskCache.java:285)
at 
org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.initializeKeysAndData
 (IndexedDiskCache.java:250)
at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache. 
(IndexedDiskCache.java:183)
at 
org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache
 (IndexedDiskCacheFactory.java:60)
at 
org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache
 (IndexedDiskCacheFactory.java:33)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseAuxiliary 
(CompositeCacheConfigurator.java:506)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion 
(CompositeCacheConfigurator.java:261)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion 
(CompositeCacheConfigurator.java:161)
at 
org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegions 
(CompositeCacheConfigurator.java:136)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.doConfigure 
(CompositeCacheManager.java:490)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure 
(CompositeCacheManager.java:441)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure 
(CompositeCacheManager.java:391)
at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure 
(CompositeCacheManager.java:373)
at org.apache.commons.jcs.JCS.getCacheManager (JCS.java:163)
at org.apache.commons.jcs.JCS.getInstance (JCS.java:205)
at org.owasp.dependencycheck.data.cache.DataCacheFactory.getPomCache 
(DataCacheFactory.java:155)
at org.owasp.dependencycheck.analyzer.CentralAnalyzer.initialize 
(CentralAnalyzer.java:124)
at org.owasp.dependencycheck.Engine.lambda$loadAnalyzers$1 (Engine.java:230)
at java.util.ArrayList.forEach (ArrayList.java:1541)
at org.owasp.dependencycheck.Engine.loadAnalyzers (Engine.java:229)
at org.owasp.dependencycheck.Engine.initializeEngine (Engine.java:196)
at org.owasp.dependencycheck.Engine. (Engine.java:185)
at org.owasp.dependencycheck.Engine. (Engine.java:160)
at org.owasp.dependencycheck.Engine. (Engine.java:150)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.initializeEngine 
(BaseDependencyCheckMojo.java:2002)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck 
(BaseDependencyCheckMojo.java:1818)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute 
(BaseDependencyCheckMojo.java:1007)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
(DefaultBuildPluginManager.java:137)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:208)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:154)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:146)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:81)
at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:956)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:290)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:194)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:289)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:229)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:415)
at org.codehaus.plexus.classworlds.launcher.Launcher.main 
(Launcher.java:356)
at jdk.int

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #198

2023-12-21 Thread Apache Jenkins Server
See 


Changes:

[git] WW-5364 Modify XmlDocConfigurationProvider to be able to load into 
allowlist

[git] WW-5364 Make allowlist classloader specific

[git] WW-5364 Implement provider allowlist

[git] WW-5364 Inject ProviderAllowlist into SecurityMemberAccess

[git] WW-5364 Enable allowlist for showcase

[git] WW-5364 Add Struts components to allowlist

[git] WW-5364 Don't throw ConfigurationException on unloadable action or 
interceptor classes

[git] WW-5364 Replace some allowlist classes with packages

[git] WW-5343 Collect bootstrap factories

[git] WW-5343 Add unit test coverage for ProviderAllowlist

[git] WW-5343 Move JUnit4 test case into Struts-core

[github] Bump actions/setup-java from 3 to 4 (#804)

[git] WW-5343 Add integration tests for ConfigurationProvider populating 
ProviderAllowlist

[git] WW-5343 Add missing licenses

[git] WW-5343 Make StrutsTestCase extend same package

[git] WW-5339 Make ClassResolver a bean

[git] WW-5339 Add option to block custom OGNL maps

[Lukasz Lenart] WW-5370 Makes HttpParameters case-insensitive

[Lukasz Lenart] WW-5371 Implements action based file upload

[Lukasz Lenart] WW-5371 Uses the new upload mechanism in Showcase app

[Lukasz Lenart] WW-5371 Simplifies file upload logic and extracts constants

[Lukasz Lenart] WW-5371 Document how to use the new file upload logic

[Lukasz Lenart] WW-5370 Uses TreeMap with case-insensitive comparator

[Lukasz Lenart] WW-5370 Simplifies code

[Lukasz Lenart] WW-5370 Adds proper logic to handle null

[Lukasz Lenart] WW-5370 Simplifies error handling logic

[Lukasz Lenart] WW-5328 Removes deprecated setters

[Lukasz Lenart] Builds Struts 7 as part of the main pipeline

[github] Update CspReportAction.java WW-5373

[git] WW-5364 Add missing system allowlist classes

[github] Bump github/codeql-action from 2 to 3


--
[...truncated 936.07 KB...]
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing report to: 

[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[INFO] 
[INFO] --< org.apache.struts:struts2-plexus-plugin >---
[INFO] Building DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 6.4.0-SNAPSHOT 
[23/39]
[INFO]   from plugins/plexus/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce-maven-version) @ 
struts2-plexus-plugin ---
[INFO] 
[INFO] --- remote-resources:1.6.0:process (process-resource-bundles) @ 
struts2-plexus-plugin ---
[INFO] Preparing remote bundle org.apache:apache-jar-resource-bundle:1.4
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.1.0:resources (default-resources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:compile (default-compile) @ struts2-plexus-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 5 source files to 

[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked 

Build failed in Jenkins: Struts » Struts-examples-dependency-check #107

2023-12-29 Thread Apache Jenkins Server
See 


Changes:

[github] Bump shiro.version from 1.12.0 to 1.13.0

[github] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.1 to 3.2.2

[github] Bump org.springframework:spring-web from 5.3.23 to 6.1.1

[github] Bump actions/setup-java from 3 to 4

[github] Bump io.quarkus:quarkus-universe-bom from 3.5.0 to 3.6.0

[github] Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.6.3

[github] Bump org.apache.struts:struts2-core from 6.3.0.1 to 6.3.0.2

[github] Bump io.quarkus:quarkus-universe-bom from 3.6.0 to 3.6.1

[github] Bump net.sf.jasperreports:jasperreports from 6.20.6 to 6.21.0

[github] Bump log4j2.version from 2.21.1 to 2.22.0

[aopenasus] Fix freemarker template error in `themes` example


--
[...truncated 62.95 KB...]
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:81)
at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:956)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:290)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:194)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:289)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:229)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:415)
at org.codehaus.plexus.classworlds.launcher.Launcher.main 
(Launcher.java:356)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.apache.maven.wrapper.BootstrapMainStarter.start 
(BootstrapMainStarter.java:39)
at org.apache.maven.wrapper.WrapperExecutor.execute 
(WrapperExecutor.java:122)
at org.apache.maven.wrapper.MavenWrapperMain.main (MavenWrapperMain.java:55)
[INFO] Checking for updates
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Complete for NVD CVE - 2002  (905 ms)
[INFO] Processing Started for NVD CVE - 2002
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by 
com.fasterxml.jackson.module.afterburner.util.MyClassLoader 
(file:/home/jenkins/.m2/repository/com/fasterxml/jackson/module/jackson-module-afterburner/2.13.4/jackson-module-afterburner-2.13.4.jar)
 to method java.lang.ClassLoader.findLoadedClass(java.lang.String)
WARNING: Please consider reporting this to the maintainers of 
com.fasterxml.jackson.module.afterburner.util.MyClassLoader
WARNING: Use --illegal-access=warn to enable warnings of further illegal 
reflective access operations
WARNING: All illegal access operations will be denied in a future release
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - 2004  (614 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2005  (686 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Processing Complete for NVD CVE - 2004  (7633 ms)
[INFO] Download Started for NVD CVE - 2006
[INFO] Processing Complete for NVD CVE - 2002  (13511 ms)
[INFO] Download Complete for NVD CVE - 2006  (710 ms)
[INFO] Processing Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2007  (720 ms)
[INFO] Processing Started for NVD CVE - 2007
[INFO] Processing Complete for NVD CVE - 2005  (9914 ms)
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Complete for NVD CVE - 2008  (710 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Complete for NVD CVE - 2009  (694 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Pro

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #199

2023-12-31 Thread Apache Jenkins Server
See 


Changes:


--
[...truncated 933.59 KB...]
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing report to: 

[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[INFO] 
[INFO] --< org.apache.struts:struts2-plexus-plugin >---
[INFO] Building DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 6.4.0-SNAPSHOT 
[23/39]
[INFO]   from plugins/plexus/pom.xml
[INFO] [ jar ]-
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce-maven-version) @ 
struts2-plexus-plugin ---
[INFO] 
[INFO] --- remote-resources:1.6.0:process (process-resource-bundles) @ 
struts2-plexus-plugin ---
[INFO] Preparing remote bundle org.apache:apache-jar-resource-bundle:1.4
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.1.0:resources (default-resources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:compile (default-compile) @ struts2-plexus-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 5 source files to 

[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-plexus-plugin ---
[INFO] No MANIFEST.MF file found, generating manifest.
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.1.0:testResources (default-testResources) @ 
struts2-plexus-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory 

[INFO] Copying 3 resources
[INFO] 
[INFO] --- compiler:3.8.1:testCompile (default-testCompile) @ 
struts2-plexus-plugin ---
[INFO] No sources to compile
[INFO] 
[INFO] --- surefire:3.0.0-M7:test (default-test) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- apache-rat:0.15:check (default) @ struts2-plexus-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 62 implicit excludes.
[INFO] 17 explicit excludes.
[INFO] 9 resources included
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 
0, approved: 8 licenses.
[INFO] 
[INFO] --- jar:3.2.0:jar (default-jar) @ struts2-plexus-plugin ---
[INFO] Building jar: 

[INFO] 
[INFO] >>> source:3.2.1:jar (attach-sources) > generate-sources @ 
struts2-plexus-plugin >>>
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce) @ struts2-plexus-plugin ---
[INFO] 
[INFO] --- enforcer:3.1.0:enforce (enforce-maven-vers

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #200

2024-01-21 Thread Apache Jenkins Server
See 


Changes:

[Lukasz Lenart] WW-5362 Removes type attribute out of  tag

[github] Bump actions/upload-artifact from 3.1.3 to 4.0.0

[github] Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0

[github] WW-5362 Removes language attribute

[github] WW-5362 Removes deprecated language attribute

[git] WW-5378 Assorted refactor and clean up

[git] WW-5378 Add option to disable ValueStack context fallback

[git] WW-5379 Implement alternative mechanism for Velocity directives to obtain 
ValueStack

[git] WW-5379 Add support for internal and chained contexts

[git] WW-5379 Fix not looking in chained contexts' chained contexts

[git] WW-5381 Introduce RootAccessor interface for extension point

[git] WW-5381 Introduce extension point for CompoundRootAccessor

[git] WW-5381 Introduce extension point for MethodAccessor

[git] WW-5382 Fix StrutsInternalTestCase

[git] WW-5382 Fix stale injections in Dispatcher

[git] WW-5382 Fix stale bootstrap context on ActionContext

[github] Bump org.apache.commons:commons-compress from 1.23.0 to 1.25.0

[git] WW-5382 Rework existing Dispatcher tests and base test classes

[git] WW-5382 Add test for Dispatcher reinjection

[git] WW-5382 Delete redundant code

[git] WW-5382 Rework Dispatcher injections

[git] WW-5382 Update Dispatcher#getContainer JavaDoc

[git] WW-5364 Add String.class to system allowlist

[git] WW-5379 Use ValueStackProvider marker interface for Velocity context 
implementation flexibility

[git] WW-5352 Repackage ParametersInterceptor and related classes

[git] WW-5352 Fix SonarCloud logging warnings

[git] WW-5352 Move ParameterNameAware and ParameterValueAware

[git] WW-5352 Refactor ParametersInterceptor

[git] WW-5381 Revert bean removal for backwards compatibility

[git] WW-5381 Revert bean removals for backwards compatibility

[git] WW-5352 Gut deprecated interfaces

[Lukasz Lenart] WW-5383 Updates RegEx to excludes JARs by default

[git] WW-5352 Do not use setter notation for helper methods

[git] WW-5352 Rename acceptable name/value methods

[git] WW-5381 Reimplement ability to register additional MethodAccessors

[git] WW-5381 Remove unnecessary/confusing parameters

[Lukasz Lenart] Stops cleaning nightlies to allow to coexist different versions

[Lukasz Lenart] WW-5365 Reverts changes introduced in WW-5192 to allow evaluate 
the value attribute

[github] Bump org.apache.maven.plugins:maven-release-plugin

[Lukasz Lenart] Reduces log level to debug to reduce noise in the logs

[git] WW-5352 Clean up OgnlValueStackTest

[git] WW-5352 Move method to XWorkTestCase

[github] Bump actions/upload-artifact from 4.0.0 to 4.1.0

[Lukasz Lenart] WW-5387 Fixes remove() signature

[Lukasz Lenart] WW-5374 Allows to prepend reportUri with Servlet context

[Lukasz Lenart] WW-5369 Re-define minimal library set

[Lukasz Lenart] WW-5374 Uses @code instead of 

[Lukasz Lenart] WW-5374 Adds additional test case to cover disabling prepending 
context

[Lukasz Lenart] WW-5357 Adds support for disabled attribute to anchor tag

[Lukasz Lenart] Extends sleep period to avoid breaking a build

[Sebastian.Peters] Upgrade maven to 3.9.6 and wrapper to 3.2.0

[github] Bump actions/upload-artifact from 4.1.0 to 4.2.0


--
[...truncated 925.14 KB...]
   False Positives: 
https://jeremylong.github.io/DependencyCheck/general/suppression.html

💖 Sponsor: https://github.com/sponsors/jeremylong


[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] Writing report to: 

[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[INFO] Cache event queue destroyed: {0}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[ERROR] {0}: Not alive and dispose was called, filename: {1}
[INFO] 
[INFO] --< org.apache.struts:struts2-plexus-plugin >---
[INFO] Building DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 6.4.0-SNAPSHOT 
[23/39]
[INFO]   from plugins/plexus/pom.xml
[INFO] 

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #209

2024-10-21 Thread Apache Jenkins Server
See 


Changes:

[github] Bump commons-logging:commons-logging from 1.3.3 to 1.3.4

[github] Bump log4j2.version from 2.23.1 to 2.24.1

[github] Bump org.apache.maven.plugins:maven-project-info-reports-plugin

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_6_1

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[43964333+JCgH4164838Gh792C124B5] Initial Commit:

[github] Bump github/codeql-action from 3.26.8 to 3.26.12

[github] Bump actions/upload-artifact from 4.4.0 to 4.4.3

[github] Bump jackson.version from 2.17.2 to 2.18.0

[Lukasz Lenart] WW-5471 Marks Sitemesh plugin as deprecated

[git] WW-3714 Deprecate and migrate Action, Interceptor, Result

[git] WW-3714 Deprecate and migrate ActionContext

[git] WW-3714 Deprecate and migrate ConditionalInterceptor


--
[...truncated 9.95 KB...]
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:201)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:361)
at org.codehaus.plexus.classworlds.launcher.Launcher.main 
(Launcher.java:314)
Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: 
Failed to parse NVD data
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next 
(NvdCveClient.java:363)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next 
(NvdCveClient.java:331)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi 
(NvdApiDataSource.java:352)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update 
(NvdApiDataSource.java:116)
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906)
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase 
(Engine.java:711)
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck 
(BaseDependencyCheckMojo.java:1967)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute 
(BaseDependencyCheckMojo.java:1150)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
(DefaultBuildPluginManager.java:126)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 
(MojoExecutor.java:328)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
(MojoExecutor.java:316)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:212)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:174)
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 
(MojoExecutor.java:75)
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run 
(MojoExecutor.java:162)
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute 
(DefaultMojosExecutionStrategy.java:39)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:159)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:105)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:73)
at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:53)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:118)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:903)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:280)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:203)
at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:498)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:255)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:201)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:361)
at org.codehaus.plexus.classworlds.launcher.Launcher.main 
(Launcher.java:314)
Caused by: com.fasterxml.jackson.databind.exc.ValueInstantiationException: 
Cannot construct instance of 
`io.github.jeremylong.openvulnerability.client.nvd.CvssV4Data$ExploitMaturityType`,
 problem: PROOF-OF-CONCEPT
 at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` 
disabled); line: 1, column: 8597884] (through reference chain: 
io.github.jeremylong.openvulnerability.client.nvd.CveApiJson20["v

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #210

2024-10-31 Thread Apache Jenkins Server
See 


Changes:

[git] WW-3714 Deprecate and migrate ActionInvocation

[git] WW-3714 Deprecate and migrate PreResultListener

[git] WW-3714 Update new ActionContext with new ActionInvocation

[git] WW-3714 Add factory support for new Interceptor, Result interfaces

[github] Bump github/codeql-action from 3.26.12 to 3.26.13

[github] Bump maven-surefire-plugin.version from 3.5.0 to 3.5.1

[github] Bump org.apache.maven.doxia:doxia-core from 1.12.0 to 2.0.0

[github] Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.17.0

[github] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.3.1 to 3.5.1

[git] WW-3714 Ensure ReflectionExceptionHandler, WithLazyParams, 
ParamNameAwareResult marker interfaces respected

[git] WW-3714 Deprecate and migrate ActionEventListener

[git] WW-3714 Deprecate and migrate ActionProxy

[git] WW-3714 Deprecate and migrate ValueStack

[git] WW-3714 Deprecate and migrate assorted marker interfaces

[git] WW-3714 Update new ActionContext with new ValueStack

[git] WW-3714 Shortcut adapters

[git] WW-3714 Marker interface migration follow-up

[git] WW-3714 Fix replacement ValidationAware marker not recognised

[git] WW-3714 Deprecate and migrate ActionSupport

[git] WW-3714 Deprecate and migrate AbstractInterceptor and 
MethodFilterInterceptor

[git] WW-3714 Add alternative constructors in InterceptorMapping

[git] WW-3714 Replace deprecated APIs in new ActionSupport

[git] WW-3714 Deprecate and migrate assorted Interceptors

[git] WW-3714 Update StrutsResultSupport to allow overriding new signature

[Lukasz Lenart] WW-5476 Deprecates tag's parameters as replaced with attributes

[github] Bump asm.version from 9.7 to 9.7.1

[github] Bump github/codeql-action from 3.26.13 to 3.27.0


--
[...truncated 759.50 KB...]
[INFO] 
[INFO] -< org.apache.struts:struts2-velocity-plugin >--
[INFO] Building Struts 2 Velocity Plugin 6.7.0-SNAPSHOT [10/39]
[INFO]   from plugins/velocity/pom.xml
[INFO] [ jar ]-
[WARNING] Parameter 'relativizeDecorationLinks' is unknown for plugin 
'maven-site-plugin:3.20.0:attach-descriptor (attach-descriptor)'
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce) @ struts2-velocity-plugin ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence 
passed
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce-maven-version) @ 
struts2-velocity-plugin ---
[INFO] 
[INFO] --- enforcer:3.5.0:enforce (enforce-java-version) @ 
struts2-velocity-plugin ---
[INFO] 
[INFO] --- remote-resources:3.1.0:process (process-resource-bundles) @ 
struts2-velocity-plugin ---
[INFO] Preparing remote bundle 
org.apache.apache.resources:apache-jar-resource-bundle:1.5
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- resources:3.3.1:resources (default-resources) @ 
struts2-velocity-plugin ---
[INFO] Copying 2 resources from src/main/resources to target/classes
[INFO] Copying 3 resources from target/maven-shared-archive-resources to 
target/classes
[INFO] 
[INFO] --- compiler:3.11.0:compile (default-compile) @ struts2-velocity-plugin 
---
[INFO] Changes detected - recompiling the module! :dependency
[INFO] Compiling 48 source files with javac [debug target 1.8] to target/classes
[INFO] 
:
 Some input files use or override a deprecated API.
[INFO] 
:
 Recompile with -Xlint:deprecation for details.
[INFO] 
:
 

 uses unchecked or unsafe operations.
[INFO] 
:
 Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- bundle:5.1.9:manifest (bundle-manifest) @ struts2-velocity-plugin ---
[INFO] No MANIFEST.MF file found, generating manifest.
[INFO] Writing manifest: 

[INFO] 
[INFO] --- resources:3.3.1:testResources (default-testResources) @ 
struts2-velocity-plugin ---
[INFO]

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #207

2024-09-21 Thread Apache Jenkins Server
See 


Changes:

[github] Bump slf4j.version from 2.0.13 to 2.0.16

[github] Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.1

[github] Bump actions/upload-artifact from 4.3.6 to 4.4.0

[github] Bump github/codeql-action from 3.26.2 to 3.26.6

[github] Bump spring.platformVersion from 5.3.37 to 5.3.39

[Lukasz Lenart] WW-5461 Extends UploadedFile with inputName field

[github] Bump maven-surefire-plugin.version from 3.4.0 to 3.5.0

[github] Bump org.assertj:assertj-core from 3.25.3 to 3.26.3

[github] Bump org.apache.maven.plugins:maven-dependency-plugin

[github] Bump org.jfree:jfreechart from 1.5.4 to 1.5.5

[github] Bump org.awaitility:awaitility from 4.2.1 to 4.2.2


--
[...truncated 947.46 KB...]
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0394, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0838, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-1965, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-1966, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2115, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2134, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2135, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2014-0094, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2014-0113, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2015-5169, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-0785, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-4003, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-annotations@.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{gav=PropertyType{value=^org\.apache\.struts:struts\-tiles\:1\.3\.8.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{gav=PropertyType{value=^org\.apache\.struts:struts\-taglib\:1\.3\.8.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/dom4j/dom4j@.*$, 
regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=C

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #208

2024-09-30 Thread Apache Jenkins Server
See 


Changes:

[github] Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0

[github] Bump org.owasp:dependency-check-maven from 10.0.3 to 10.0.4

[github] Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1

[github] Bump github/codeql-action from 3.26.6 to 3.26.8

[Lukasz Lenart] WW-5297 Fixes checking nonce of invalidated session


--
[...truncated 950.40 KB...]
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2012-0838, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-1965, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-1966, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2115, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2134, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2013-2135, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2014-0094, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2014-0113, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2015-5169, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-0785, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-core@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-4003, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.apache\.struts/struts\-annotations@.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{gav=PropertyType{value=^org\.apache\.struts:struts\-tiles\:1\.3\.8.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{gav=PropertyType{value=^org\.apache\.struts:struts\-taglib\:1\.3\.8.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:struts, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/dom4j/dom4j@.*$, 
regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2018-1000632, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/org\.beanshell/bsh@.*$,
 regex=true, 
caseSensitive=false},vulnerabilityName={PropertyType{value=CVE-2016-2510, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
SuppressionRule{packageUrl=PropertyType{value=^pkg:maven/net\.sf\.oval/oval@.*$,
 regex=true, caseSensitive=false},cpe={PropertyType{value=cpe:/a:apache:groovy, 
regex=false, caseSensitive=false},}}
[INFO] Suppression Rule had zero matches: 
Su

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #211

2024-11-22 Thread Apache Jenkins Server
See 


Changes:

[git] Merge pull request #1072 from apache/fix/WW-5468-modeldriven-2

[git] WW-5478 Deprecate DefaultResultFactory

[git] WW-5478 Fix ActionContext equals/hashCode contract

[git] WW-5480 Warn against potential templating bug

[git] WW-3714 Move new Result class into result package

[git] WW-5459 Move new Action class into action package

[git] WW-5459 Deprecate and repackage ActionChainResult

[git] WW-3714 Ensure correct delegation of new Result API

[git] WW-3714 Ensure correct delegation of new Interceptor API

[github] Bump github/codeql-action from 3.27.0 to 3.27.1

[Lukasz Lenart] WW-5484 Marks the DWR plugin as deprecated

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_6_7_0

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[github] Bump github/codeql-action from 3.27.1 to 3.27.4

[Sebastian.Peters] Add .gitattributes in case people don't have core.autocrlf 
set

[Sebastian.Peters] Upgrade maven to 3.9.9 and wrapper to 3.3.2

[Lukasz Lenart] Always run Sonar scan against the master branch

[Lukasz Lenart] Runs Sonar step in case of running on master or PR

[Lukasz Lenart] Uses Java 21 when running Sonar check

[Lukasz Lenart] Avoids running Sonar scan in forks

[github] Skip Sonar scan on PRs created by Dependabot

[Lukasz Lenart] Uses AND instead of OR to check Sonar prerequisites


--
[...truncated 6.41 KB...]
[INFO] --- apache-rat:0.15:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from 

[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 89 implicit excludes.
[INFO] 17 explicit excludes.
[INFO] 3 resources included
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 
0, approved: 3 licenses.
[INFO] 
[INFO] --- site:3.20.0:attach-descriptor (attach-descriptor) @ struts2-parent 
---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO] 
[INFO] --- dependency-check:10.0.4:check (default) @ struts2-parent ---
[INFO] Checking for updates
[WARNING] An NVD API Key was not provided - it is highly recommended to use an 
NVD API key as the update can take a VERY long time without an API Key
[WARNING] NVD API request failures are occurring; retrying request for the 5 
time
[WARNING] NVD API request failures are occurring; retrying request for the 6 
time
[WARNING] NVD API request failures are occurring; retrying request for the 7 
time
[WARNING] NVD API request failures are occurring; retrying request for the 8 
time
[WARNING] NVD API request failures are occurring; retrying request for the 9 
time
[WARNING] NVD API request failures are occurring; retrying request for the 10 
time
[INFO] NVD API has 246,769 records in this update
[WARNING] Retrying request 
/rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=6000
 : 2 time
[WARNING] NVD API request failures are occurring; retrying request for the 5 
time
[WARNING] NVD API request failures are occurring; retrying request for the 6 
time
[WARNING] NVD API request failures are occurring; retrying request for the 7 
time
[WARNING] NVD API request failures are occurring; retrying request for the 8 
time
[INFO] Downloaded 10,000/246,779 (4%)
[WARNING] NVD API request failures are occurring; retrying request for the 5 
time
[WARNING] NVD API request failures are occurring; retrying request for the 6 
time
[WARNING] NVD API request failures are occurring; retrying request for the 7 
time
[WARNING] NVD API request failures are occurring; retrying request for the 8 
time
[WARNING] NVD API request failures are occurring; retrying request for the 9 
time
[WARNING] Retrying request 
/rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=18000
 : 2 time
[WARNING] NVD API request failures are occurring; retrying request for the 5 
time
[INFO] Downloaded 20,000/246,779 (8%)
[WARNING] Retrying request 
/rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=22000
 : 2 time
[WARNING] Retrying request 
/rest/json/cves/2.0?lastModStartDate=2024-11-13T14%3A00%3A03Z&lastModEndDate=2025-03-13T14%3A00%3A03Z&resultsPerPage=2000&startIndex=24000
 : 2 time
[WARNING] NVD API request failures are occurring; retrying request for the 5 
time
[WARNING] NVD API request failures are occurring; retrying request for the 6 
time
[WARNING] NVD API request failures are occurring; retrying request for the 7 
time
[WARNING] NVD API request fa

Build failed in Jenkins: Struts » Struts-master-JDK8-dependency-check #212

2024-11-30 Thread Apache Jenkins Server
See 


Changes:

[Lukasz Lenart] WW-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141

[Lukasz Lenart] IPAGE-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 remove code for "pell multipart plugin"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WW-5141 TODO:  TEMPORARY comment-out incomaptible 
commons-upload old version code

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] IPAGE-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 fix security test

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 temp IGNORE test require commons-upload upgrade

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 conversion to fileupload2

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5141 fix formatting problems

[Lukasz Lenart] WW-5335 Prepares for Java 17 & Struts 7.x

[Lukasz Lenart] WW-5335 Reverts adding release/struts-7-0-x branch to 
scorecards analysis

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5335 Prepares for Java 17 & Struts 7.x

[Lukasz Lenart] WW-5335 Reverts adding release/struts-7-0-x branch to 
scorecards analysis

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] Revert "WN-5141"

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WN-5141

[Lukasz Lenart] [WW-5141] Removes deprecated plugins (#798)

[Lukasz Lenart] WW-5335 Prepares for Java 17 & Struts 7.x

[Lukasz Lenart] WW-5335 Reverts adding release/struts-7-0-x branch to 
scorecards analysis

[Lukasz Lenart] [WW-5141] Removes deprecated plugins (#798)

[Lukasz Lenart] Delete unused files missed in previous PR

[Lukasz Lenart] Delete remaining deprecated plugins

[Lukasz Lenart] WN-5141 fix whitespace issues

[Lukasz Lenart] Upgrades Htmlunit to version 3.6.0

[Lukasz Lenart] WN-5141

[Lukasz Lenart] WW-5371 Implements action based file upload

[Lukasz Lenart] WW-5371 Document how to use the new file upload logic

[Lukasz Lenart] WW-5370 Simplifies error handling logic

[Lukasz Lenart] WW-5371 Migrates modern upload change to JakartaEE

[Lukasz Lenart] WW-5371 Migrates modern upload change to JakartaEE

[Lukasz Lenart] WW-5364 fixes automatically populated OGNL allowlist

[Lukasz Lenart] WW-5339 Add option to block custom OGNL maps

[Lukasz Lenart] Adds missing import

[Lukasz Lenart] Replaces empty file upload test with simple one

[Lukasz Lenart] Upgrades Maven wrapper

[Lukasz Lenart] Fixes pipeline to properly handle transformed artifacts

[Lukasz Lenart] Moves JakartaEE related modules into dedicate subdirectory

[Lukasz Lenart] Fixes typo in pom

[Lukasz Lenart] Upgrades Mockito to ver 5.8.0

[git] Dependency manage byte-buddy

[git] Alphabetise dependency version props

[git] Upgrade Maven Surefire version

[Lukasz Lenart] Fixes wrong version in BOM

[Lukasz Lenart] Configure assembly plugin to use proper folders

[Lukasz Lenart] Cleans up assembly definitions

[Lukasz Lenart] Configures source-release assembly

[Lukasz Lenart] [maven-release-plugin] prepare release STRUTS_7_0_0_M1

[Lukasz Lenart] [maven-release-plugin] prepare for next development iteration

[Sebastian.Peters] Upgrade maven to 3.9.6 and wrapper to 3.2.0

[Lukasz Lenart] WW-5388 Uses the latest JakartaEE FileUpload Servlet 6 package

[Lukasz Lenart] WW-5388 Updates tests to match new logic

[Lukasz Lenart] WW-5388 Simplifies code

[Lukasz Lenart] WW-5388 Avoids unconditional invocations of method