struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Jenkins Server <jenk...@builds.apache.org>
Subject Build failed in Jenkins: Struts-master-JDK7-dependency-check #59
Date Sun, 22 Apr 2018 23:26:49 GMT
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/59/display/redirect?page=changes>

Changes:

[burton] Added requiredValue to Checkbox Struts Tag as a parameter.  When

[burton] Change Checkbox tag parameter from requiredValue to submitUnchecked

[amashchenko] WW-4875 Add ability to use Java based configuration

[amashchenko] WW-4875 Add location information for java based configuration

[yasser.zamani] WW-4874 Introduces Servlet3 plugin by adding support for async action

[aleksandr.7m] replace String.valueOf with Objects.toString to better handle null

[aleksandr.7m] WW-4875 Add convention constant configuration

[aleksandr.7m] WW-4875 Add json constant configuration

[aleksandr.7m] Make ConventionConstantConfig inherit map of constants from

[aleksandr.7m] WW-4875 Add rest constant configuration

[yasser.zamani] WW-4874 Refactors technology name, servlet3, to asset name, async

[yasser.zamani] WW-4874 Adds unit tests

[yasser.zamani] WW-4874 Updates parent version

[aleksandr.7m] WW-4875 Add spring constant configuration

[yasserzamani] WW-4874 Renames local variable inv to invocation

[yasserzamani] define constant for timeout result

[yasserzamani] decrease log level for timeout

[yasserzamani] add async plugin to dependency management

[yasserzamani] add showcase for async plugin

[zhouyanming] Align OptGroup with Select

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (add commons-text

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace

[yasserzamani] fix java.net.JarURLConnection#parseSpecs

[yasserzamani] comment jira issue id and fix a few typos

[yasserzamani] replace sun.net.www.ParseUtil#decode

[lukaszlenart] Adds Jackson XML binding dependency

[lukaszlenart] Defines a new handler using Jackson XML

[lukaszlenart] Adds test to cover basic functionality

[lukaszlenart] Adds example how to use the handler

[lukaszlenart] Upgrades OWASP Dependency Check plugin to the latest version and reduces

[yasserzamani] fix javadoc to being consistent with WW-3915 changes

[paul.zepernick] WW-4923 Null check to avoid NPE when not passing a JDBC connection to

[lukaszlenart] Cleans up suppression file and uses full path

[lukaszlenart] Fixes suppression file

[yasserzamani] add test if connection close after result

[yasserzamani] initialize session

[lukaszlenart] Adds explanation how to use the commented configuration

[yasserzamani] make newly added methods protected to allow users to override them

[github] fix location with full path of resource

[lukaszlenart] [maven-release-plugin] prepare release STRUTS_2_5_16

[lukaszlenart] [maven-release-plugin] prepare for next development iteration

[amashchenko] WW-685 Add class to hold conversion related data

[amashchenko] WW-685 Add generic type conversion error message

[amashchenko] WW-685 Add tests

[amashchenko] WW-685 Fix getText expression

[github] fix two issues for ListUIBean

[github] convert supplied value to list when isn't iterable

[yasserzamani] fix list when not found in stack and so is null

[amashchenko] Add ognlAutoGrowthCollectionLimit constant to java config

[amashchenko] Add tests for java configuration

[amashchenko] WW-4928 Using the same default value delimiter for system properties

[burton] Change Checkbox tag parameter submitUnchecked default value to "false"

[burton] Fix broken tests due to checkbox submitUnchecked default value change

[amashchenko] WW-4865 Change submitUnchecked type to Boolean

[lukaszlenart] Uses proper parent's version

------------------------------------------
[...truncated 1.16 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO] 
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT
: Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2,
org]
[INFO] 
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin
---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin
---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO] 
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO] 
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.114 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] 
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO] 
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @
struts2-tiles-plugin >>>
[INFO] 
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @
struts2-tiles-plugin <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin
---
[INFO] 
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (249 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] 
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO] 
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin
---
[INFO] 
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>
uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>:
Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT :
Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO] 
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin
---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin
---
[INFO] No sources to compile
[INFO] 
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO] 
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO] 
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @
struts2-dwr-plugin >>>
[INFO] 
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @
struts2-dwr-plugin <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin
---
[INFO] 
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (204 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING] 

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185,
CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO] 
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.338 s]
[INFO] Struts 2 ........................................... SUCCESS [56:15 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:43 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.449 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.486 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.051 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.743 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.354 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 58:26 min
[INFO] Finished at: 2018-04-22T23:26:48Z
[INFO] Final Memory: 69M/1870M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project
struts2-dwr-plugin: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score
greater than or equal to '7.0': 
[ERROR] 
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR] 
[ERROR] See the dependency-check report for more details.
[ERROR] 
[ERROR] 
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following
articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Mime
View raw message