struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Jenkins Server <jenk...@builds.apache.org>
Subject Build failed in Jenkins: Struts-master-JDK7-dependency-check #124
Date Thu, 06 Dec 2018 22:34:45 GMT
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/124/display/redirect?page=changes>

Changes:

[yasserzamani] upgrade to DWR 3 with a showcase

[amashchenko] WW-4987 Add listCssClass to optgroup tag

[amashchenko] WW-4987 Add test for listCssClass in optgroup tag

[amashchenko] Add listCssStyle to optgroup tag

[amashchenko] Add listTitle to optgroup tag

[amashchenko] Improve optgroup template

[amashchenko] Improve optgroup list attributes test

[lukaszlenart] Fixes ActionMapper javadocs and references

------------------------------------------
[...truncated 1.39 MB...]
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 10 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved:
9 licenses.
[INFO] 
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-cdi-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/cdi/target/struts2-cdi-plugin-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @
struts2-cdi-plugin >>>
[INFO] 
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-cdi-plugin
---
[INFO] 
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @
struts2-cdi-plugin <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-cdi-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/cdi/target/struts2-cdi-plugin-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-cdi-plugin
---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- dependency-check-maven:3.3.4:check (default) @ struts2-cdi-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (12 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO] 
[INFO] ------------< org.apache.struts:struts2-embeddedjsp-plugin >------------
[INFO] Building Struts 2 Embedded JSP Plugin 2.6-SNAPSHOT               [20/36]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] 
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-embeddedjsp-plugin
---
[INFO] 
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-embeddedjsp-plugin
---
[INFO] 
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-embeddedjsp-plugin
---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 10 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-embeddedjsp-plugin
---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 177 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/main/java/org/apache/struts2/jasper/el/VariableResolverImpl.java>:
Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/main/java/org/apache/struts2/jasper/el/VariableResolverImpl.java>:
Recompile with -Xlint:deprecation for details.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/main/java/org/apache/struts2/el/lang/ELSupport.java>:
Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/main/java/org/apache/struts2/el/lang/ELSupport.java>:
Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-embeddedjsp-plugin
---
[INFO] 
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-embeddedjsp-plugin
---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 15 resources
[INFO] Copying 3 resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-embeddedjsp-plugin
---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 2 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/test/java/org/apache/struts2/EmbeddedJSPResultTest.java>:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/test/java/org/apache/struts2/EmbeddedJSPResultTest.java>
uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/src/test/java/org/apache/struts2/EmbeddedJSPResultTest.java>:
Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-embeddedjsp-plugin ---
[INFO] 
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.EmbeddedJSPResultTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to
the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 18, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 4.391 s - in org.apache.struts2.EmbeddedJSPResultTest
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 18, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] 
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-embeddedjsp-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 207 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved:
206 licenses.
[INFO] 
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-embeddedjsp-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/target/struts2-embeddedjsp-plugin-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @
struts2-embeddedjsp-plugin >>>
[INFO] 
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-embeddedjsp-plugin
---
[INFO] 
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @
struts2-embeddedjsp-plugin <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-embeddedjsp-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/embeddedjsp/target/struts2-embeddedjsp-plugin-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-embeddedjsp-plugin
---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- dependency-check-maven:3.3.4:check (default) @ struts2-embeddedjsp-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (7 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING] 

One or more dependencies were identified with known vulnerabilities in Struts 2 Embedded JSP
Plugin:

juli-6.0.53.jar (cpe:/a:apache:tomcat:6.0.53, cpe:/a:apache_software_foundation:tomcat:6.0.53,
org.apache.tomcat:juli:6.0.53, cpe:/a:apache_tomcat:apache_tomcat:6.0.53) : CVE-2017-6056,
CVE-2013-4444, CVE-2012-5568, CVE-2013-2185, CVE-2016-5425, CVE-2016-6325


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO] 
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.028 s]
[INFO] Struts 2 2.6-SNAPSHOT .............................. SUCCESS [02:06 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:17 min]
[INFO] Struts Plugins ..................................... SUCCESS [  3.333 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.091 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.830 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  5.025 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  3.624 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  5.705 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 14.733 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [  9.332 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 11.846 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  6.933 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  3.969 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  3.115 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [  9.688 s]
[INFO] Struts 2 REST Plugin ............................... SUCCESS [  7.441 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SUCCESS [  4.553 s]
[INFO] Struts 2 CDI Plugin ................................ SUCCESS [  7.206 s]
[INFO] Struts 2 Embedded JSP Plugin ....................... FAILURE [ 10.971 s]
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly 2.6-SNAPSHOT ..................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 06:23 min
[INFO] Finished at: 2018-12-06T22:34:44Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.3.4:check (default) on project
struts2-embeddedjsp-plugin: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score
greater than or equal to '7.0': 
[ERROR] 
[ERROR] juli-6.0.53.jar: CVE-2013-2185, CVE-2016-5425, CVE-2016-6325
[ERROR] 
[ERROR] See the dependency-check report for more details.
[ERROR] 
[ERROR] 
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following
articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-embeddedjsp-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Mime
View raw message