See <https://ci-builds.apache.org/job/Struts/job/Struts-master-dependency-check/263/display/redirect?page=changes>
Changes: [github] WW-5668 Bound the localized-text provider caches and align request-locale resolution (#1821) [github] WW-5668 Keep the localized-text providers deserializable across a version upgrade (#1824) [github] WW-5656 docs(conversion): mark ConversionRule.COLLECTION and the Collection_ prefix as deprecated (#1825) [github] docs: add creating-version-notes skill and page template (#1826) [github] docs: refine creating-version-notes from the 7.3.0 release run (#1828) [github] docs: add creating-release-vote-mail skill (#1836) [github] docs: hand over a paste-ready body in creating-release-vote-mail (#1837) [github] docs(skills): require plain-text list mail in the two mail-producing skills (#1843) [github] docs(skills): add releasing-struts, and configure the release plugin in the pom (#1844) [github] Prepare for a new development cycle of Struts 7.4.0 (#1829) [github] build(deps): bump github/codeql-action from 4.37.3 to 4.37.6 (#1839) [github] build(deps): bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 (#1840) [github] build(ci): stop .claude-only changes from triggering full builds (#1846) [github] WW-5674 Cut the per-call allocations in SecurityMemberAccess package matching (#1830) [github] build(ci): report the required check when only .claude/ changed (#1849) [github] build(ci): baseline the Jenkins .claude/ filter on the PR target branch (#1850) [github] docs: point the releasing-struts skill at the published Release Guidelines (#1848) [github] docs(skills): send CVE advisory mails from the ASF CVE tool (#1851) [github] docs(security): re-baseline the threat model on S2-070..S2-074 (#1852) ------------------------------------------ [...truncated 674 B...] > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git > # timeout=10 Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git > git --version # timeout=10 > git --version # 'git version 2.34.1' > git fetch --tags --force --progress -- > https://gitbox.apache.org/repos/asf/struts.git > +refs/heads/*:refs/remotes/origin/* # timeout=10 > git rev-parse refs/remotes/origin/main^{commit} # timeout=10 Checking out Revision 80278c16f6c193bd4cb7eb7d1501ff69b4b76b9b (refs/remotes/origin/main) > git config core.sparsecheckout # timeout=10 > git checkout -f 80278c16f6c193bd4cb7eb7d1501ff69b4b76b9b # timeout=10 Commit message: "docs(security): re-baseline the threat model on S2-070..S2-074 (#1852)" > git rev-list --no-walk 1218c492244ea872d38aa50b6d4fcf2b81964325 # timeout=10 ERROR: No tool found matching MAVEN_3_LATEST__HOME Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3 [Struts-master-dependency-check] $ /bin/sh -xe /tmp/jenkins1934386025977238740.sh + export MAVEN_OPTS=-Xms2g -Xmx2g + /home/jenkins/tools/maven/latest3/bin/mvn verify -Pdependency-check [INFO] Scanning for projects... [INFO] ------------------------------------------------------------------------ [INFO] Reactor Build Order: [INFO] [INFO] Struts 2 [pom] [INFO] Struts BOM [pom] [INFO] Struts Parent POM [pom] [INFO] Struts 2 Jakarta EE Compatible modules [pom] [INFO] Struts 2 Jakarta EE Compatible Velocity Tools View [jar] [INFO] Struts 2 Jakarta EE Compatible Velocity Tools Jsp [jar] [INFO] Struts 2 Core [jar] [INFO] Struts 2 Plugins [pom] [INFO] Struts 2 Async Plugin [jar] [INFO] Struts 2 Bean Validation Plugin [jar] [INFO] Struts 2 CDI Plugin [jar] [INFO] Struts 2 Spring Plugin [jar] [INFO] Struts 2 JUnit Plugin [jar] [INFO] Struts 2 Velocity Plugin [jar] [INFO] Struts 2 Configuration Browser Plugin [jar] [INFO] Struts 2 Convention Plugin [jar] [INFO] Struts 2 Jasper Reports Plugin [jar] [INFO] Struts 2 Jasper Reports 7 Plugin [EXPERIMENTAL] [jar] [INFO] Struts 2 Java Templates Plugin [jar] [INFO] Struts 2 JFreeChart Plugin [jar] [INFO] Struts 2 JSON Plugin [jar] [INFO] Struts 2 REST Plugin [jar] [INFO] Struts 2 TestNG Plugin [jar] [INFO] Struts 2 Tiles Plugin [jar] [INFO] Struts 2 XSLT Plugin [jar] [INFO] Struts 2 Webapps [pom] [INFO] Struts 2 Showcase Webapp [war] [INFO] Struts 2 Rest Showcase Webapp [war] [INFO] Struts 2 Assembly [pom] [INFO] [INFO] -----------------< org.apache.struts:struts2-project >------------------ [INFO] Building Struts 2 7.4.0-SNAPSHOT [1/29] [INFO] from pom.xml [INFO] --------------------------------[ pom ]--------------------------------- Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/13.0.0/dependency-check-maven-13.0.0.pom Progress (1): 729 BProgress (1): 1.7 kBProgress (1): 5.8 kBProgress (1): 11 kB Progress (1): 13 kBProgress (1): 13 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/13.0.0/dependency-check-maven-13.0.0.pom (13 kB at 33 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-parent/13.0.0/dependency-check-parent-13.0.0.pom Progress (1): 688 BProgress (1): 1.6 kBProgress (1): 4.5 kBProgress (1): 6.3 kBProgress (1): 7.1 kBProgress (1): 13 kB Progress (1): 17 kBProgress (1): 21 kBProgress (1): 25 kBProgress (1): 31 kBProgress (1): 33 kBProgress (1): 39 kBProgress (1): 44 kBProgress (1): 48 kBProgress (1): 53 kBProgress (1): 58 kBProgress (1): 59 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-parent/13.0.0/dependency-check-parent-13.0.0.pom (59 kB at 1.6 MB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/13.0.0/dependency-check-maven-13.0.0.jar Progress (1): 0.9/128 kBProgress (1): 2.3/128 kBProgress (1): 3.6/128 kBProgress (1): 5.0/128 kBProgress (1): 6.4/128 kBProgress (1): 7.7/128 kBProgress (1): 9.1/128 kBProgress (1): 10/128 kB Progress (1): 12/128 kBProgress (1): 13/128 kBProgress (1): 15/128 kBProgress (1): 15/128 kBProgress (1): 17/128 kBProgress (1): 18/128 kBProgress (1): 20/128 kBProgress (1): 21/128 kBProgress (1): 22/128 kBProgress (1): 24/128 kBProgress (1): 25/128 kBProgress (1): 26/128 kBProgress (1): 28/128 kBProgress (1): 29/128 kBProgress (1): 31/128 kBProgress (1): 32/128 kBProgress (1): 33/128 kBProgress (1): 35/128 kBProgress (1): 36/128 kBProgress (1): 37/128 kBProgress (1): 39/128 kBProgress (1): 40/128 kBProgress (1): 44/128 kBProgress (1): 49/128 kBProgress (1): 53/128 kBProgress (1): 57/128 kBProgress (1): 61/128 kBProgress (1): 65/128 kBProgress (1): 70/128 kBProgress (1): 74/128 kBProgress (1): 78/128 kBProgress (1): 82/128 kBProgress (1): 87/128 kBProgress (1): 91/128 kBProgress (1): 95/128 kBProgress (1): 99/128 kBProgress (1): 104/128 kBProgress (1): 108/128 kBProgress (1): 112/128 kBProgress (1): 116/128 kBProgress (1): 120/128 kBProgress (1): 125/128 kBProgress (1): 128 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/13.0.0/dependency-check-maven-13.0.0.jar (128 kB at 2.0 MB/s) [INFO] [INFO] --- enforcer:3.6.3:enforce (enforce) @ struts2-project --- [INFO] Rule 0: org.apache.maven.enforcer.rules.dependency.BannedDependencies passed [INFO] [INFO] --- enforcer:3.6.3:enforce (enforce-maven-version) @ struts2-project --- [INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireMavenVersion passed [INFO] [INFO] --- enforcer:3.6.3:enforce (enforce-java-version) @ struts2-project --- [INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireJavaVersion passed [INFO] [INFO] --- dependency-check:13.0.0:check (default) @ struts2-project --- Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-core/13.0.0/dependency-check-core-13.0.0.pom Progress (1): 719 BProgress (1): 2.1 kBProgress (1): 5.8 kBProgress (1): 9.1 kBProgress (1): 14 kB Progress (1): 19 kBProgress (1): 24 kBProgress (1): 27 kBProgress (1): 28 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-core/13.0.0/dependency-check-core-13.0.0.pom (28 kB at 1.1 MB/s) Downloading from central: https://repo.maven.apache.org/maven2/io/github/jeremylong/open-vulnerability-clients/9.0.6/open-vulnerability-clients-9.0.6.pom Progress (1): 993 BProgress (1): 3.0 kB Downloaded from central: https://repo.maven.apache.org/maven2/io/github/jeremylong/open-vulnerability-clients/9.0.6/open-vulnerability-clients-9.0.6.pom (3.0 kB at 116 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/apache/httpcomponents/client5/httpclient5-cache/5.6.3/httpclient5-cache-5.6.3.pom Progress (1): 878 BProgress (1): 3.0 kBProgress (1): 4.4 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/httpcomponents/client5/httpclient5-cache/5.6.3/httpclient5-cache-5.6.3.pom (4.4 kB at 125 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-utils/13.0.0/dependency-check-utils-13.0.0.pom Progress (1): 819 BProgress (1): 3.5 kBProgress (1): 4.4 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-utils/13.0.0/dependency-check-utils-13.0.0.pom (4.4 kB at 192 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/eclipse/parsson/jakarta.json/1.1.9/jakarta.json-1.1.9.pom Progress (1): 838 BProgress (1): 2.8 kBProgress (1): 6.3 kBProgress (1): 10 kB Progress (1): 11 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/eclipse/parsson/jakarta.json/1.1.9/jakarta.json-1.1.9.pom (11 kB at 390 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/eclipse/parsson/parsson-bundles/1.1.9/parsson-bundles-1.1.9.pom Progress (1): 952 BProgress (1): 1.5 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/eclipse/parsson/parsson-bundles/1.1.9/parsson-bundles-1.1.9.pom (1.5 kB at 38 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/com/github/spotbugs/spotbugs-annotations/4.10.3/spotbugs-annotations-4.10.3.pom Progress (1): 952 BProgress (1): 3.1 kBProgress (1): 3.5 kB Downloaded from central: https://repo.maven.apache.org/maven2/com/github/spotbugs/spotbugs-annotations/4.10.3/spotbugs-annotations-4.10.3.pom (3.5 kB at 138 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-core/13.0.0/dependency-check-core-13.0.0.jar Progress (1): 0/1.1 MBProgress (1): 0/1.1 MBProgress (1): 0/1.1 MBProgress (1): 0/1.1 MBProgress (1): 0/1.1 MBProgress (1): 0/1.1 MBProgress (1): 0.1/1.1 MBProgress (1): 0.1/1.1 MBProgress (1): 0.1/1.1 MBProgress (1): 0.1/1.1 MBProgress (1): 0.1/1.1 MBProgress (1): 0.1/1.1 MBProgress (1): 0.2/1.1 MBProgress (1): 0.2/1.1 MBProgress (1): 0.2/1.1 MBProgress (1): 0.2/1.1 MBProgress (1): 0.2/1.1 MBProgress (1): 0.2/1.1 MBProgress (1): 0.3/1.1 MBProgress (1): 0.3/1.1 MBProgress (1): 0.3/1.1 MBProgress (1): 0.3/1.1 MBProgress (1): 0.3/1.1 MBProgress (1): 0.3/1.1 MBProgress (1): 0.4/1.1 MBProgress (1): 0.4/1.1 MBProgress (1): 0.4/1.1 MBProgress (1): 0.4/1.1 MBProgress (1): 0.4/1.1 MBProgress (1): 0.4/1.1 MBProgress (1): 0.5/1.1 MBProgress (1): 0.5/1.1 MBProgress (1): 0.5/1.1 MBProgress (1): 0.5/1.1 MBProgress (1): 0.5/1.1 MBProgress (1): 0.5/1.1 MBProgress (1): 0.6/1.1 MBProgress (1): 0.6/1.1 MBProgress (1): 0.6/1.1 MBProgress (1): 0.6/1.1 MBProgress (1): 0.6/1.1 MBProgress (1): 0.6/1.1 MBProgress (1): 0.7/1.1 MBProgress (1): 0.7/1.1 MBProgress (1): 0.7/1.1 MBProgress (1): 0.7/1.1 MBProgress (1): 0.7/1.1 MBProgress (1): 0.7/1.1 MBProgress (1): 0.8/1.1 MBProgress (1): 0.8/1.1 MBProgress (1): 0.8/1.1 MBProgress (1): 0.8/1.1 MBProgress (1): 0.8/1.1 MBProgress (1): 0.8/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 0.9/1.1 MBProgress (1): 1.0/1.1 MBProgress (1): 1.0/1.1 MBProgress (1): 1.0/1.1 MBProgress (1): 1.0/1.1 MBProgress (1): 1.0/1.1 MBProgress (1): 1.0/1.1 MBProgress (1): 1.1/1.1 MBProgress (1): 1.1/1.1 MBProgress (1): 1.1 MB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-core/13.0.0/dependency-check-core-13.0.0.jar (1.1 MB at 12 MB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/eclipse/parsson/jakarta.json/1.1.9/jakarta.json-1.1.9.jar Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-utils/13.0.0/dependency-check-utils-13.0.0.jar Downloading from central: https://repo.maven.apache.org/maven2/io/github/jeremylong/open-vulnerability-clients/9.0.6/open-vulnerability-clients-9.0.6.jar Downloading from central: https://repo.maven.apache.org/maven2/org/apache/httpcomponents/client5/httpclient5-cache/5.6.3/httpclient5-cache-5.6.3.jar Downloading from central: https://repo.maven.apache.org/maven2/com/github/spotbugs/spotbugs-annotations/4.10.3/spotbugs-annotations-4.10.3.jar Progress (1): 7.7/164 kBProgress (1): 16/164 kB Progress (1): 32/164 kBProgress (1): 49/164 kBProgress (1): 65/164 kBProgress (1): 81/164 kBProgress (1): 98/164 kBProgress (1): 114/164 kBProgress (1): 126/164 kBProgress (1): 142/164 kBProgress (1): 159/164 kBProgress (1): 164 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/eclipse/parsson/jakarta.json/1.1.9/jakarta.json-1.1.9.jar (164 kB at 4.4 MB/s) Progress (1): 0.9/251 kBProgress (1): 2.3/251 kBProgress (1): 3.6/251 kBProgress (1): 5.0/251 kBProgress (1): 6.4/251 kBProgress (1): 7.3/251 kBProgress (1): 8.6/251 kBProgress (1): 10.0/251 kBProgress (1): 11/251 kB Progress (1): 13/251 kBProgress (1): 14/251 kBProgress (1): 15/251 kBProgress (1): 17/251 kBProgress (1): 18/251 kBProgress (1): 20/251 kBProgress (1): 21/251 kBProgress (1): 22/251 kBProgress (1): 24/251 kBProgress (1): 25/251 kBProgress (1): 26/251 kBProgress (1): 28/251 kBProgress (1): 29/251 kBProgress (1): 31/251 kBProgress (1): 32/251 kBProgress (1): 33/251 kBProgress (2): 33/251 kB | 0.9/65 kBProgress (2): 35/251 kB | 0.9/65 kBProgress (2): 35/251 kB | 2.3/65 kBProgress (2): 36/251 kB | 2.3/65 kBProgress (2): 36/251 kB | 3.6/65 kBProgress (2): 37/251 kB | 3.6/65 kBProgress (2): 37/251 kB | 5.0/65 kBProgress (2): 39/251 kB | 5.0/65 kBProgress (2): 39/251 kB | 6.4/65 kBProgress (2): 40/251 kB | 6.4/65 kBProgress (2): 40/251 kB | 7.7/65 kBProgress (2): 40/251 kB | 8.2/65 kBProgress (2): 41/251 kB | 8.2/65 kBProgress (2): 41/251 kB | 9.6/65 kBProgress (2): 43/251 kB | 9.6/65 kBProgress (2): 43/251 kB | 11/65 kB Progress (2): 44/251 kB | 11/65 kBProgress (2): 44/251 kB | 12/65 kBProgress (2): 46/251 kB | 12/65 kBProgress (2): 46/251 kB | 14/65 kBProgress (2): 47/251 kB | 14/65 kBProgress (2): 47/251 kB | 15/65 kBProgress (2): 48/251 kB | 15/65 kBProgress (2): 48/251 kB | 16/65 kBProgress (2): 50/251 kB | 16/65 kBProgress (2): 50/251 kB | 18/65 kBProgress (2): 51/251 kB | 18/65 kBProgress (2): 51/251 kB | 19/65 kBProgress (2): 52/251 kB | 19/65 kBProgress (2): 52/251 kB | 21/65 kBProgress (2): 52/251 kB | 22/65 kBProgress (2): 54/251 kB | 22/65 kBProgress (2): 54/251 kB | 23/65 kBProgress (2): 55/251 kB | 23/65 kBProgress (2): 55/251 kB | 25/65 kBProgress (2): 55/251 kB | 26/65 kBProgress (2): 59/251 kB | 26/65 kBProgress (2): 59/251 kB | 27/65 kBProgress (2): 64/251 kB | 27/65 kBProgress (2): 64/251 kB | 29/65 kBProgress (3): 64/251 kB | 29/65 kB | 0.9/15 kBProgress (3): 65/251 kB | 29/65 kB | 0.9/15 kBProgress (4): 65/251 kB | 29/65 kB | 0.9/15 kB | 0.9/253 kBProgress (4): 65/251 kB | 30/65 kB | 0.9/15 kB | 0.9/253 kBProgress (4): 65/251 kB | 30/65 kB | 2.3/15 kB | 0.9/253 kBProgress (4): 69/251 kB | 30/65 kB | 2.3/15 kB | 0.9/253 kBProgress (4): 69/251 kB | 30/65 kB | 2.3/15 kB | 2.3/253 kBProgress (4): 69/251 kB | 31/65 kB | 2.3/15 kB | 2.3/253 kBProgress (4): 69/251 kB | 31/65 kB | 3.6/15 kB | 2.3/253 kBProgress (4): 69/251 kB | 31/65 kB | 3.6/15 kB | 3.6/253 kBProgress (4): 69/251 kB | 33/65 kB | 3.6/15 kB | 3.6/253 kBProgress (4): 73/251 kB | 33/65 kB | 3.6/15 kB | 3.6/253 kBProgress (4): 73/251 kB | 33/65 kB | 5.0/15 kB | 3.6/253 kBProgress (4): 73/251 kB | 33/65 kB | 5.0/15 kB | 5.0/253 kBProgress (4): 73/251 kB | 33/65 kB | 6.4/15 kB | 5.0/253 kBProgress (4): 73/251 kB | 34/65 kB | 6.4/15 kB | 5.0/253 kBProgress (4): 73/251 kB | 34/65 kB | 6.4/15 kB | 6.4/253 kBProgress (4): 77/251 kB | 34/65 kB | 6.4/15 kB | 6.4/253 kBProgress (4): 77/251 kB | 36/65 kB | 6.4/15 kB | 6.4/253 kBProgress (4): 77/251 kB | 36/65 kB | 7.7/15 kB | 6.4/253 kBProgress (4): 77/251 kB | 36/65 kB | 7.7/15 kB | 7.7/253 kBProgress (4): 82/251 kB | 36/65 kB | 7.7/15 kB | 7.7/253 kBProgress (4): 82/251 kB | 36/65 kB | 8.2/15 kB | 7.7/253 kBProgress (4): 82/251 kB | 36/65 kB | 8.2/15 kB | 9.1/253 kBProgress (4): 82/251 kB | 37/65 kB | 8.2/15 kB | 9.1/253 kBProgress (4): 82/251 kB | 37/65 kB | 9.6/15 kB | 9.1/253 kBProgress (4): 82/251 kB | 38/65 kB | 9.6/15 kB | 9.1/253 kBProgress (4): 82/251 kB | 38/65 kB | 9.6/15 kB | 10/253 kB Progress (4): 86/251 kB | 38/65 kB | 9.6/15 kB | 10/253 kBProgress (4): 86/251 kB | 40/65 kB | 9.6/15 kB | 10/253 kBProgress (4): 86/251 kB | 40/65 kB | 11/15 kB | 10/253 kB Progress (4): 86/251 kB | 40/65 kB | 11/15 kB | 12/253 kBProgress (4): 90/251 kB | 40/65 kB | 11/15 kB | 12/253 kBProgress (4): 90/251 kB | 40/65 kB | 12/15 kB | 12/253 kBProgress (4): 90/251 kB | 41/65 kB | 12/15 kB | 12/253 kBProgress (4): 90/251 kB | 41/65 kB | 12/15 kB | 13/253 kBProgress (4): 94/251 kB | 41/65 kB | 12/15 kB | 13/253 kBProgress (4): 94/251 kB | 41/65 kB | 14/15 kB | 13/253 kBProgress (4): 94/251 kB | 42/65 kB | 14/15 kB | 13/253 kBProgress (4): 94/251 kB | 42/65 kB | 14/15 kB | 15/253 kBProgress (4): 94/251 kB | 42/65 kB | 15 kB | 15/253 kB Progress (4): 94/251 kB | 44/65 kB | 15 kB | 15/253 kBProgress (4): 98/251 kB | 44/65 kB | 15 kB | 15/253 kBProgress (4): 98/251 kB | 44/65 kB | 15 kB | 16/253 kBProgress (4): 98/251 kB | 45/65 kB | 15 kB | 16/253 kBProgress (4): 98/251 kB | 45/65 kB | 15 kB | 17/253 kBProgress (4): 103/251 kB | 45/65 kB | 15 kB | 17/253 kBProgress (4): 103/251 kB | 46/65 kB | 15 kB | 17/253 kBProgress (4): 103/251 kB | 46/65 kB | 15 kB | 19/253 kBProgress (4): 107/251 kB | 46/65 kB | 15 kB | 19/253 kBProgress (4): 107/251 kB | 48/65 kB | 15 kB | 19/253 kBProgress (4): 107/251 kB | 48/65 kB | 15 kB | 20/253 kBProgress (4): 111/251 kB | 48/65 kB | 15 kB | 20/253 kBProgress (4): 111/251 kB | 49/65 kB | 15 kB | 20/253 kBProgress (4): 111/251 kB | 49/65 kB | 15 kB | 21/253 kBProgress (4): 111/251 kB | 51/65 kB | 15 kB | 21/253 kBProgress (4): 115/251 kB | 51/65 kB | 15 kB | 21/253 kBProgress (4): 115/251 kB | 51/65 kB | 15 kB | 23/253 kBProgress (4): 115/251 kB | 52/65 kB | 15 kB | 23/253 kBProgress (4): 115/251 kB | 52/65 kB | 15 kB | 24/253 kBProgress (4): 120/251 kB | 52/65 kB | 15 kB | 24/253 kBProgress (4): 120/251 kB | 53/65 kB | 15 kB | 24/253 kB Downloaded from central: https://repo.maven.apache.org/maven2/com/github/spotbugs/spotbugs-annotations/4.10.3/spotbugs-annotations-4.10.3.jar (15 kB at 158 kB/s) Progress (3): 120/251 kB | 53/65 kB | 26/253 kBProgress (3): 124/251 kB | 53/65 kB | 26/253 kBProgress (3): 124/251 kB | 55/65 kB | 26/253 kBProgress (3): 124/251 kB | 55/65 kB | 27/253 kBProgress (3): 124/251 kB | 59/65 kB | 27/253 kBProgress (3): 124/251 kB | 59/65 kB | 28/253 kBProgress (3): 124/251 kB | 63/65 kB | 28/253 kBProgress (3): 124/251 kB | 63/65 kB | 30/253 kBProgress (3): 128/251 kB | 63/65 kB | 30/253 kBProgress (3): 128/251 kB | 65 kB | 30/253 kB Progress (3): 128/251 kB | 65 kB | 31/253 kBProgress (3): 132/251 kB | 65 kB | 31/253 kBProgress (3): 132/251 kB | 65 kB | 32/253 kBProgress (3): 136/251 kB | 65 kB | 32/253 kBProgress (3): 136/251 kB | 65 kB | 34/253 kBProgress (3): 136/251 kB | 65 kB | 35/253 kBProgress (3): 141/251 kB | 65 kB | 35/253 kBProgress (3): 141/251 kB | 65 kB | 36/253 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-utils/13.0.0/dependency-check-utils-13.0.0.jar (65 kB at 646 kB/s) Progress (2): 141/251 kB | 38/253 kBProgress (2): 145/251 kB | 38/253 kBProgress (2): 145/251 kB | 39/253 kBProgress (2): 145/251 kB | 41/253 kBProgress (2): 149/251 kB | 41/253 kBProgress (2): 149/251 kB | 42/253 kBProgress (2): 149/251 kB | 43/253 kBProgress (2): 153/251 kB | 43/253 kBProgress (2): 153/251 kB | 45/253 kBProgress (2): 153/251 kB | 46/253 kBProgress (2): 158/251 kB | 46/253 kBProgress (2): 158/251 kB | 47/253 kBProgress (2): 162/251 kB | 47/253 kBProgress (2): 162/251 kB | 49/253 kBProgress (2): 162/251 kB | 50/253 kBProgress (2): 166/251 kB | 50/253 kBProgress (2): 166/251 kB | 52/253 kBProgress (2): 166/251 kB | 53/253 kBProgress (2): 170/251 kB | 53/253 kBProgress (2): 170/251 kB | 54/253 kBProgress (2): 170/251 kB | 56/253 kBProgress (2): 175/251 kB | 56/253 kBProgress (2): 175/251 kB | 57/253 kBProgress (2): 179/251 kB | 57/253 kBProgress (2): 179/251 kB | 61/253 kBProgress (2): 183/251 kB | 61/253 kBProgress (2): 187/251 kB | 61/253 kBProgress (2): 187/251 kB | 65/253 kBProgress (2): 191/251 kB | 65/253 kBProgress (2): 191/251 kB | 70/253 kBProgress (2): 196/251 kB | 70/253 kBProgress (2): 196/251 kB | 74/253 kBProgress (2): 200/251 kB | 74/253 kBProgress (2): 200/251 kB | 78/253 kBProgress (2): 204/251 kB | 78/253 kBProgress (2): 204/251 kB | 82/253 kBProgress (2): 208/251 kB | 82/253 kBProgress (2): 208/251 kB | 86/253 kBProgress (2): 213/251 kB | 86/253 kBProgress (2): 213/251 kB | 91/253 kBProgress (2): 217/251 kB | 91/253 kBProgress (2): 217/251 kB | 95/253 kBProgress (2): 221/251 kB | 95/253 kBProgress (2): 221/251 kB | 99/253 kBProgress (2): 221/251 kB | 103/253 kBProgress (2): 237/251 kB | 103/253 kBProgress (2): 237/251 kB | 108/253 kBProgress (2): 237/251 kB | 112/253 kBProgress (2): 251 kB | 112/253 kB Progress (2): 251 kB | 116/253 kBProgress (2): 251 kB | 120/253 kBProgress (2): 251 kB | 125/253 kB Downloaded from central: https://repo.maven.apache.org/maven2/io/github/jeremylong/open-vulnerability-clients/9.0.6/open-vulnerability-clients-9.0.6.jar (251 kB at 2.4 MB/s) Progress (1): 129/253 kBProgress (1): 133/253 kBProgress (1): 137/253 kBProgress (1): 141/253 kBProgress (1): 146/253 kBProgress (1): 150/253 kBProgress (1): 154/253 kBProgress (1): 158/253 kBProgress (1): 163/253 kBProgress (1): 167/253 kBProgress (1): 171/253 kBProgress (1): 175/253 kBProgress (1): 180/253 kBProgress (1): 184/253 kBProgress (1): 188/253 kBProgress (1): 192/253 kBProgress (1): 196/253 kBProgress (1): 201/253 kBProgress (1): 205/253 kBProgress (1): 209/253 kBProgress (1): 213/253 kBProgress (1): 218/253 kBProgress (1): 222/253 kBProgress (1): 238/253 kBProgress (1): 253 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/httpcomponents/client5/httpclient5-cache/5.6.3/httpclient5-cache-5.6.3.jar (253 kB at 2.2 MB/s) [INFO] Checking for updates [ERROR] Error updating the NVD Data org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:387) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:128) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:873) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:678) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:605) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2072) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1272) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285) at org.apache.maven.cli.MavenCli.main (MavenCli.java:207) at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:77) at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:569) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314) Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: Invalid API Key, length of 0 too short to provided a masked partial key at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:436) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next (NvdCveClient.java:356) at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:343) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:128) at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:873) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:678) at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:605) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2072) at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1272) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285) at org.apache.maven.cli.MavenCli.main (MavenCli.java:207) at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:77) at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:569) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314) [INFO] Skipping Known Exploited Vulnerabilities update check since last check was within 24 hours. [INFO] Check for updates complete (1336 ms) [WARNING] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities. [INFO] Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user's risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report. About ODC: https://dependency-check.github.io/DependencyCheck/general/internals.html False Positives: https://dependency-check.github.io/DependencyCheck/general/suppression.html [INFO] Analysis Started [INFO] Finished File Name Analyzer (0 seconds) [INFO] Finished Dependency Merging Analyzer (0 seconds) [INFO] Finished Hint Analyzer (0 seconds) [INFO] Created CPE Index (3 seconds) [INFO] Finished CPE Analyzer (3 seconds) [INFO] Finished False Positive Analyzer (0 seconds) [INFO] Finished NVD CVE Analyzer (0 seconds) [WARNING] Sonatype OSS Index Analyzer disabled due to missing credentials. Authentication with token is now required, and OSS Index is migrating to Sonatype Guide. See https://dependency-check.github.io/DependencyCheck/analyzers/oss-index-analyzer.html for more information on authentication with Sonatype Guide OSS Index. [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) [INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds) [INFO] Finished Dependency Bundling Analyzer (0 seconds) [INFO] Finished Unused Suppression Rule Analyzer (0 seconds) [INFO] Analysis Complete (4 seconds) [INFO] Writing HTML report to: <https://ci-builds.apache.org/job/Struts/job/Struts-master-dependency-check/ws/target/dependency-check-report.html> [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Struts 2 7.4.0-SNAPSHOT: [INFO] [INFO] Struts 2 ........................................... FAILURE [ 10.571 s] [INFO] Struts BOM ......................................... SKIPPED [INFO] Struts Parent POM .................................. SKIPPED [INFO] Struts 2 Jakarta EE Compatible modules ............. SKIPPED [INFO] Struts 2 Jakarta EE Compatible Velocity Tools View . SKIPPED [INFO] Struts 2 Jakarta EE Compatible Velocity Tools Jsp .. SKIPPED [INFO] Struts 2 Core ...................................... SKIPPED [INFO] Struts 2 Plugins ................................... SKIPPED [INFO] Struts 2 Async Plugin .............................. SKIPPED [INFO] Struts 2 Bean Validation Plugin .................... SKIPPED [INFO] Struts 2 CDI Plugin ................................ SKIPPED [INFO] Struts 2 Spring Plugin ............................. SKIPPED [INFO] Struts 2 JUnit Plugin .............................. SKIPPED [INFO] Struts 2 Velocity Plugin ........................... SKIPPED [INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED [INFO] Struts 2 Convention Plugin ......................... SKIPPED [INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED [INFO] Struts 2 Jasper Reports 7 Plugin [EXPERIMENTAL] .... SKIPPED [INFO] Struts 2 Java Templates Plugin ..................... SKIPPED [INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED [INFO] Struts 2 JSON Plugin ............................... SKIPPED [INFO] Struts 2 REST Plugin ............................... SKIPPED [INFO] Struts 2 TestNG Plugin ............................. SKIPPED [INFO] Struts 2 Tiles Plugin .............................. SKIPPED [INFO] Struts 2 XSLT Plugin ............................... SKIPPED [INFO] Struts 2 Webapps ................................... SKIPPED [INFO] Struts 2 Showcase Webapp ........................... SKIPPED [INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED [INFO] Struts 2 Assembly .................................. SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 12.610 s [INFO] Finished at: 2026-08-22T06:39:25Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:13.0.0:check (default) on project struts2-project: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during analysis: [ERROR] UpdateException: Error updating the NVD Data [ERROR] caused by NvdApiException: Invalid API Key, length of 0 too short to provided a masked partial key [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException Build step 'Execute shell' marked build as failure ERROR: No tool found matching MAVEN_3_LATEST__HOME Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3
