See 
<https://ci-builds.apache.org/job/PDFBox/job/PDFBox-Trunk-jdk25/org.apache.pdfbox$pdfbox-parent/1449/display/redirect?page=changes>

Changes:

[Tilman Hausherr] PDFBOX-5660: update bc


------------------------------------------
Established TCP socket on 35821
maven35-agent.jar already up to date
maven35-interceptor.jar already up to date
maven3-interceptor-commons.jar already up to date
<===[JENKINS REMOTING CAPACITY]===>   channel started
Executing Maven:  -B -f 
/home/jenkins/jenkins-agent/workspace/PDFBox/PDFBox-Trunk-jdk25/pom.xml clean 
install -Ppedantic -Dmaven.source.skip=true 
org.sonatype.ossindex.maven:ossindex-maven-plugin:audit
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::staticFieldBase has been called by 
com.google.inject.internal.aop.HiddenClassDefiner 
(file:/usr/local/asfpackages/maven/apache-maven-3.9.11/lib/guice-5.1.0-classes.jar)
WARNING: Please consider reporting this to the maintainers of class 
com.google.inject.internal.aop.HiddenClassDefiner
WARNING: sun.misc.Unsafe::staticFieldBase will be removed in a future release
WARNING: A restricted method in java.lang.System has been called
WARNING: java.lang.System::load has been called by 
org.fusesource.jansi.internal.JansiLoader in an unnamed module 
(file:/usr/local/asfpackages/maven/apache-maven-3.9.11/lib/jansi-2.4.2.jar)
WARNING: Use --enable-native-access=ALL-UNNAMED to avoid a warning for callers 
in this module
WARNING: Restricted methods will be blocked in a future release unless native 
access is enabled

[INFO] Scanning for projects...
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[INFO] ------------------------------------------------------------------------
[HUDSON] Collecting dependencies info
[INFO] Reactor Build Order:
[INFO] 
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[HUDSON] Collecting dependencies info
[INFO] Apache PDFBox parent                                               [pom]
[INFO] Apache PDFBox io                                                [bundle]
[INFO] Apache FontBox                                                  [bundle]
[INFO] Apache XmpBox                                                   [bundle]
[INFO] Apache PDFBox                                                   [bundle]
[INFO] Apache PDFBox Debugger                                             [jar]
[INFO] Apache PDFBox tools                                                [jar]
[INFO] Apache PDFBox application                                          [jar]
[INFO] Apache PDFBox Debugger application                                 [jar]
[INFO] Apache PDFBox examples                                             [jar]
[INFO] pdfbox-reactor                                                     [pom]
[INFO] Downloading from central: 
https://repo.maven.apache.org/maven2/org/sonatype/ossindex/maven/ossindex-maven-plugin/maven-metadata.xml
[INFO] Downloaded from central: 
https://repo.maven.apache.org/maven2/org/sonatype/ossindex/maven/ossindex-maven-plugin/maven-metadata.xml
 (572 B at 939 B/s)
[INFO] 
[INFO] ------------------< org.apache.pdfbox:pdfbox-parent >-------------------
[INFO] Building Apache PDFBox parent 4.0.0-SNAPSHOT                      [1/11]
[INFO]   from parent/pom.xml
[INFO] --------------------------------[ pom ]---------------------------------
[INFO] 
[INFO] --- clean:3.5.0:clean (default-clean) @ pdfbox-parent ---
[INFO] 
[INFO] --- enforcer:3.6.2:enforce (default) @ pdfbox-parent ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireMavenVersion 
passed
[INFO] 
[INFO] --- enforcer:3.6.2:enforce (enforce-maven-version) @ pdfbox-parent ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireMavenVersion 
passed
[INFO] 
[INFO] --- enforcer:3.6.2:enforce (enforce-java-version) @ pdfbox-parent ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireJavaVersion passed
[INFO] 
[INFO] --- checkstyle:3.6.0:check (check) @ pdfbox-parent ---
[INFO] Starting audit...
Audit done.
[INFO] You have 0 Checkstyle violations.
[INFO] 
[INFO] --- jacoco:0.8.14:prepare-agent (default) @ pdfbox-parent ---
[INFO] surefireArgLine set to 
-javaagent:/home/jenkins/.m2/repository/org/jacoco/org.jacoco.agent/0.8.14/org.jacoco.agent-0.8.14-runtime.jar=destfile=<https://ci-builds.apache.org/job/PDFBox/job/PDFBox-Trunk-jdk25/org.apache.pdfbox$pdfbox-parent/ws/target/jacoco.exec>
[INFO] 
[INFO] --- remote-resources:3.3.0:process (process-resource-bundles) @ 
pdfbox-parent ---
[INFO] Preparing remote bundle 
org.apache.apache.resources:apache-jar-resource-bundle:1.7
[INFO] Copying 3 resources from 1 bundle.
[INFO] 
[INFO] --- jacoco:0.8.14:report (report) @ pdfbox-parent ---
[INFO] Skipping JaCoCo execution due to missing execution data file.
[INFO] 
[INFO] --- source:3.4.0:jar-no-fork (attach-sources) @ pdfbox-parent ---
[INFO] Skipping source per configuration.
[INFO] 
[INFO] --- apache-rat:0.17:check (default) @ pdfbox-parent ---
[WARNING] Basedir is : 
<https://ci-builds.apache.org/job/PDFBox/job/PDFBox-Trunk-jdk25/org.apache.pdfbox$pdfbox-parent/ws/>
[INFO] Excluding patterns: release.properties, 
.github/workflows/codeql-analysis.yml
[INFO] Excluding MAVEN collection.
[INFO] Excluding ECLIPSE collection.
[INFO] Excluding IDEA collection.
[INFO] Processing exclude file from STANDARD_SCMS.
[INFO] Excluding STANDARD_SCMS collection.
[INFO] Excluding MISC collection.
[INFO] Excluding HIDDEN_DIR collection.
[INFO] RAT summary:
[INFO]   Approved:  2
[INFO]   Archives:  0
[INFO]   Binaries:  0
[INFO]   Document types:  2
[INFO]   Ignored:  1
[INFO]   License categories:  1
[INFO]   License names:  1
[INFO]   Notices:  0
[INFO]   Standards:  2
[INFO]   Unapproved:  0
[INFO]   Unknown:  0
[INFO] 
[INFO] --- dependency-check:12.2.0:check (default) @ pdfbox-parent ---
[INFO] Checking for updates
[WARNING] An NVD API Key was not provided - it is highly recommended to use an 
NVD API key as the update can take a VERY long time without an API Key
[INFO] NVD API has 51,119 records in this update
[INFO] Downloaded 10,000/51,119 (20%)
[INFO] Downloaded 20,000/51,119 (39%)
[INFO] Downloaded 30,000/51,119 (59%)
[INFO] Downloaded 40,000/51,119 (78%)
[WARNING] NVD API request failures are occurring; retrying request for the 15th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 16th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 17th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 18th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 19th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 20th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 21st 
time
[WARNING] NVD API request failures are occurring; retrying request for the 22nd 
time
[WARNING] NVD API request failures are occurring; retrying request for the 23rd 
time
[WARNING] NVD API request failures are occurring; retrying request for the 24th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 25th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 26th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 27th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 28th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 29th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 30th 
time
[WARNING] NVD API request failures are occurring; retrying request for the 31st 
time
[ERROR] Error updating the NVD Data
org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating 
the NVD Data
    at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi 
(NvdApiDataSource.java:387)
    at org.owasp.dependencycheck.data.update.NvdApiDataSource.update 
(NvdApiDataSource.java:128)
    at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:902)
    at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase 
(Engine.java:707)
    at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:634)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck 
(BaseDependencyCheckMojo.java:2069)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute 
(BaseDependencyCheckMojo.java:1267)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
(DefaultBuildPluginManager.java:126)
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 
(MojoExecutor.java:328)
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
(MojoExecutor.java:316)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:212)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:174)
    at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 
(MojoExecutor.java:75)
    at org.apache.maven.lifecycle.internal.MojoExecutor$1.run 
(MojoExecutor.java:162)
    at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute 
(DefaultMojosExecutionStrategy.java:39)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:159)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:105)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:73)
    at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:53)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:118)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
    at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main 
(Maven35Launcher.java:138)
    at jdk.internal.reflect.DirectMethodHandleAccessor.invoke 
(DirectMethodHandleAccessor.java:104)
    at java.lang.reflect.Method.invoke (Method.java:565)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:255)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:201)
    at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179)
    at jdk.internal.reflect.DirectMethodHandleAccessor.invoke 
(DirectMethodHandleAccessor.java:104)
    at java.lang.reflect.Method.invoke (Method.java:565)
    at hudson.maven.Maven3Builder.call (Maven3Builder.java:140)
    at hudson.maven.Maven3Builder.call (Maven3Builder.java:71)
    at hudson.remoting.UserRequest.perform (UserRequest.java:225)
    at hudson.remoting.UserRequest.perform (UserRequest.java:50)
    at hudson.remoting.Request$2.run (Request.java:391)
    at hudson.remoting.InterceptingExecutorService.lambda$wrap$0 
(InterceptingExecutorService.java:81)
    at java.util.concurrent.FutureTask.run (FutureTask.java:328)
    at java.util.concurrent.ThreadPoolExecutor.runWorker 
(ThreadPoolExecutor.java:1090)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run 
(ThreadPoolExecutor.java:614)
    at java.lang.Thread.run (Thread.java:1474)
Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: 
NVD Returned Status Code: 429
    at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next 
(NvdCveClient.java:445)
    at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next 
(NvdCveClient.java:356)
    at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi 
(NvdApiDataSource.java:343)
    at org.owasp.dependencycheck.data.update.NvdApiDataSource.update 
(NvdApiDataSource.java:128)
    at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:902)
    at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase 
(Engine.java:707)
    at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:634)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck 
(BaseDependencyCheckMojo.java:2069)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute 
(BaseDependencyCheckMojo.java:1267)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
(DefaultBuildPluginManager.java:126)
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 
(MojoExecutor.java:328)
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
(MojoExecutor.java:316)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:212)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:174)
    at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 
(MojoExecutor.java:75)
    at org.apache.maven.lifecycle.internal.MojoExecutor$1.run 
(MojoExecutor.java:162)
    at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute 
(DefaultMojosExecutionStrategy.java:39)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:159)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:105)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:73)
    at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:53)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:118)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
    at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main 
(Maven35Launcher.java:138)
    at jdk.internal.reflect.DirectMethodHandleAccessor.invoke 
(DirectMethodHandleAccessor.java:104)
    at java.lang.reflect.Method.invoke (Method.java:565)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:255)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:201)
    at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179)
    at jdk.internal.reflect.DirectMethodHandleAccessor.invoke 
(DirectMethodHandleAccessor.java:104)
    at java.lang.reflect.Method.invoke (Method.java:565)
    at hudson.maven.Maven3Builder.call (Maven3Builder.java:140)
    at hudson.maven.Maven3Builder.call (Maven3Builder.java:71)
    at hudson.remoting.UserRequest.perform (UserRequest.java:225)
    at hudson.remoting.UserRequest.perform (UserRequest.java:50)
    at hudson.remoting.Request$2.run (Request.java:391)
    at hudson.remoting.InterceptingExecutorService.lambda$wrap$0 
(InterceptingExecutorService.java:81)
    at java.util.concurrent.FutureTask.run (FutureTask.java:328)
    at java.util.concurrent.ThreadPoolExecutor.runWorker 
(ThreadPoolExecutor.java:1090)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run 
(ThreadPoolExecutor.java:614)
    at java.lang.Thread.run (Thread.java:1474)
[INFO] Updating CISA Known Exploited Vulnerability list: 
https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
[INFO] Begin database defrag
[INFO] End database defrag (10691 ms)
[WARNING] Unable to update 1 or more Cached Web DataSource, using local data 
instead. Results may not include recent vulnerabilities.
[ERROR] Unable to continue dependency-check analysis.
[WARNING] Attempt to (de-)serialize anonymous class 
org.jfrog.hudson.maven2.MavenDependenciesRecorder$1; see: 
https://jenkins.io/redirect/serialization-of-anonymous-classes/

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to