[Builder] Build failed in Jenkins: products » product-microgateway #863
cbuilder at wso2.org
cbuilder at wso2.org
Sun Aug 7 23:10:59 PDT 2022
See <https://wso2.org/jenkins/job/products/job/product-microgateway/863/display/redirect?page=changes>
Changes:
[viraj] [Improvement] [CORS] Allow origins with wildcard subdomains. example *.foo.com
[viraj] Integration tests for CORS with wildcard subdomain origins
------------------------------------------
[...truncated 1.03 MB...]
[WARNING] geronimo-activation_1.1_spec-1.0.2.jar, jakarta.activation-api-1.2.1.jar define 17 overlapping classes:
[WARNING] - javax.activation.ActivationDataFlavor
[WARNING] - javax.activation.CommandInfo
[WARNING] - javax.activation.CommandMap
[WARNING] - javax.activation.CommandObject
[WARNING] - javax.activation.DataContentHandler
[WARNING] - javax.activation.DataContentHandlerFactory
[WARNING] - javax.activation.DataHandler
[WARNING] - javax.activation.DataSource
[WARNING] - javax.activation.FileDataSource
[WARNING] - javax.activation.FileTypeMap
[WARNING] - 7 more...
[WARNING] woodstox-core-6.2.3.jar, wstx-asl-3.2.9.jar define 173 overlapping classes and resources:
[WARNING] - META-INF/services/javax.xml.stream.XMLEventFactory
[WARNING] - META-INF/services/javax.xml.stream.XMLInputFactory
[WARNING] - META-INF/services/javax.xml.stream.XMLOutputFactory
[WARNING] - META-INF/services/org.codehaus.stax2.validation.XMLValidationSchemaFactory.dtd
[WARNING] - META-INF/services/org.codehaus.stax2.validation.XMLValidationSchemaFactory.relaxng
[WARNING] - com.ctc.wstx.api.CommonConfig
[WARNING] - com.ctc.wstx.api.ReaderConfig
[WARNING] - com.ctc.wstx.api.ValidatorConfig
[WARNING] - com.ctc.wstx.api.WriterConfig
[WARNING] - com.ctc.wstx.api.WstxInputProperties
[WARNING] - 163 more...
[WARNING] stax2-api-4.2.1.jar, wstx-asl-3.2.9.jar define 40 overlapping classes:
[WARNING] - org.codehaus.stax2.AttributeInfo
[WARNING] - org.codehaus.stax2.DTDInfo
[WARNING] - org.codehaus.stax2.LocationInfo
[WARNING] - org.codehaus.stax2.XMLEventReader2
[WARNING] - org.codehaus.stax2.XMLInputFactory2
[WARNING] - org.codehaus.stax2.XMLOutputFactory2
[WARNING] - org.codehaus.stax2.XMLStreamLocation2
[WARNING] - org.codehaus.stax2.XMLStreamProperties
[WARNING] - org.codehaus.stax2.XMLStreamReader2
[WARNING] - org.codehaus.stax2.XMLStreamWriter2
[WARNING] - 30 more...
[WARNING] applicationinsights-core-2.6.3.jar, wstx-asl-3.2.9.jar define 2 overlapping resources:
[WARNING] - LICENSE
[WARNING] - NOTICE
[WARNING] geronimo-jms_1.1_spec-1.1.1.wso2v1.jar, javax.jms-api-2.0.1.jar define 58 overlapping classes:
[WARNING] - javax.jms.BytesMessage
[WARNING] - javax.jms.Connection
[WARNING] - javax.jms.ConnectionConsumer
[WARNING] - javax.jms.ConnectionFactory
[WARNING] - javax.jms.ConnectionMetaData
[WARNING] - javax.jms.DeliveryMode
[WARNING] - javax.jms.Destination
[WARNING] - javax.jms.ExceptionListener
[WARNING] - javax.jms.IllegalStateException
[WARNING] - javax.jms.InvalidClientIDException
[WARNING] - 48 more...
[WARNING] commons-pool-1.5.6.jar, commons-pool-1.5.6.wso2v1.jar define 55 overlapping classes:
[WARNING] - org.apache.commons.pool.BaseKeyedObjectPool
[WARNING] - org.apache.commons.pool.BaseKeyedPoolableObjectFactory
[WARNING] - org.apache.commons.pool.BaseObjectPool
[WARNING] - org.apache.commons.pool.BasePoolableObjectFactory
[WARNING] - org.apache.commons.pool.KeyedObjectPool
[WARNING] - org.apache.commons.pool.KeyedObjectPoolFactory
[WARNING] - org.apache.commons.pool.KeyedPoolableObjectFactory
[WARNING] - org.apache.commons.pool.ObjectPool
[WARNING] - org.apache.commons.pool.ObjectPoolFactory
[WARNING] - org.apache.commons.pool.PoolUtils
[WARNING] - 45 more...
[WARNING] graphQL-17.3.wso2v1.jar, graphql-java-17.3.jar define 1765 overlapping classes:
[WARNING] - graphql.Assert
[WARNING] - graphql.AssertException
[WARNING] - graphql.Directives
[WARNING] - graphql.DirectivesUtil
[WARNING] - graphql.DirectivesUtil$DirectivesHolder
[WARNING] - graphql.ErrorClassification
[WARNING] - graphql.ErrorType
[WARNING] - graphql.ExceptionWhileDataFetching
[WARNING] - graphql.ExecutionInput
[WARNING] - graphql.ExecutionInput$1
[WARNING] - 1755 more...
[WARNING] graphQL-17.3.wso2v1.jar, java-dataloader-3.1.0.jar define 47 overlapping classes:
[WARNING] - org.dataloader.BatchLoader
[WARNING] - org.dataloader.BatchLoaderContextProvider
[WARNING] - org.dataloader.BatchLoaderEnvironment
[WARNING] - org.dataloader.BatchLoaderEnvironment$1
[WARNING] - org.dataloader.BatchLoaderEnvironment$Builder
[WARNING] - org.dataloader.BatchLoaderEnvironmentProvider
[WARNING] - org.dataloader.BatchLoaderWithContext
[WARNING] - org.dataloader.CacheKey
[WARNING] - org.dataloader.CacheMap
[WARNING] - org.dataloader.DataLoader
[WARNING] - 37 more...
[WARNING] graphQL-17.3.wso2v1.jar, reactive-streams-1.0.2.jar define 4 overlapping classes:
[WARNING] - org.reactivestreams.Processor
[WARNING] - org.reactivestreams.Publisher
[WARNING] - org.reactivestreams.Subscriber
[WARNING] - org.reactivestreams.Subscription
[WARNING] XmlSchema-1.4.7.jar, XmlSchema-1.4.7.wso2v6.jar define 108 overlapping classes:
[WARNING] - org.apache.ws.commons.schema.DocumentFragmentNodeList
[WARNING] - org.apache.ws.commons.schema.SchemaBuilder
[WARNING] - org.apache.ws.commons.schema.SchemaBuilder$1
[WARNING] - org.apache.ws.commons.schema.SchemaBuilder$2
[WARNING] - org.apache.ws.commons.schema.TypeReceiver
[WARNING] - org.apache.ws.commons.schema.ValidationEvent
[WARNING] - org.apache.ws.commons.schema.ValidationEventHandler
[WARNING] - org.apache.ws.commons.schema.XmlSchema
[WARNING] - org.apache.ws.commons.schema.XmlSchemaAll
[WARNING] - org.apache.ws.commons.schema.XmlSchemaAnnotated
[WARNING] - 98 more...
[WARNING] woden-api-1.0M9.jar, woden-impl-commons-1.0M9.jar, woden-impl-dom-1.0M9.jar define 1 overlapping resource:
[WARNING] - META-INF/README
[WARNING] jackson-datatype-jsr310-2.12.1.jar, jackson-module-jaxb-annotations-2.12.1.jar define 1 overlapping resource:
[WARNING] - META-INF/services/com.fasterxml.jackson.databind.Module
[WARNING] jackson-core-2.13.2.jar, jackson-dataformat-xml-2.12.1.jar define 1 overlapping resource:
[WARNING] - META-INF/services/com.fasterxml.jackson.core.JsonFactory
[WARNING] jackson-databind-2.13.2.1.jar, jackson-dataformat-xml-2.12.1.jar define 1 overlapping resource:
[WARNING] - META-INF/services/com.fasterxml.jackson.core.ObjectCodec
[WARNING] jakarta.activation-api-1.2.1.jar, jakarta.xml.bind-api-2.3.2.jar define 2 overlapping resources:
[WARNING] - META-INF/LICENSE.md
[WARNING] - META-INF/NOTICE.md
[WARNING] applicationinsights-core-2.6.3.jar, httpclient-4.5.13.jar define 1 overlapping resource:
[WARNING] - mozilla/public-suffix-list.txt
[WARNING] jackson-core-2.13.2.jar, jackson-databind-2.13.2.1.jar define 1 overlapping classes:
[WARNING] - META-INF.versions.9.module-info
[WARNING] maven-shade-plugin has detected that some class files are
[WARNING] present in two or more JARs. When this happens, only one
[WARNING] single version of the class is copied to the uber jar.
[WARNING] Usually this is not harmful and you can skip these warnings,
[WARNING] otherwise try to manually exclude artifacts based on
[WARNING] mvn dependency:tree -Ddetail=true and the above output.
[WARNING] See http://maven.apache.org/plugins/maven-shade-plugin/
[INFO] Replacing original artifact with shaded artifact.
[INFO] Replacing <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.jar> with <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT-shaded.jar>
[INFO] Dependency-reduced POM written at: <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/dependency-reduced-pom.xml>
[INFO] Downloading from wso2.releases: https://maven.wso2.org/nexus/content/repositories/releases/org/slf4j/slf4j-api/1.7.25/slf4j-api-1.7.25.jar
[INFO] Downloading from wso2-nexus: https://maven.wso2.org/nexus/content/groups/wso2-public/org/slf4j/slf4j-api/1.7.25/slf4j-api-1.7.25.jar
[INFO] Downloaded from wso2-nexus: https://maven.wso2.org/nexus/content/groups/wso2-public/org/slf4j/slf4j-api/1.7.25/slf4j-api-1.7.25.jar (41 kB at 24 kB/s)
[INFO]
[INFO] --- docker-maven-plugin:0.34.1:build (docker-build) @ org.wso2.choreo.connect.enforcer ---
[INFO] Reading assembly descriptor: <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/src/main/assembly/assembly.xml>
[WARNING] The assembly descriptor contains a filesystem-root relative reference, which is not cross platform compatible /
[WARNING] The assembly descriptor contains a filesystem-root relative reference, which is not cross platform compatible /
[INFO] Copying files to <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/docker/wso2/choreo-connect-enforcer/1.2.0-m1-SNAPSHOT/build/maven>
[INFO] Building tar: <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/docker/wso2/choreo-connect-enforcer/1.2.0-m1-SNAPSHOT/tmp/docker-build.tar>
[INFO] DOCKER> [wso2/choreo-connect-enforcer:1.2.0-m1-SNAPSHOT] "choreo-connect-enforcer": Created docker-build.tar in 982 milliseconds
[INFO] DOCKER> [wso2/choreo-connect-enforcer:1.2.0-m1-SNAPSHOT] "choreo-connect-enforcer": Built image sha256:f3f15
[INFO] DOCKER> [wso2/choreo-connect-enforcer:1.2.0-m1-SNAPSHOT] "choreo-connect-enforcer": Removed old image sha256:b1359
[INFO]
[INFO] --- maven-install-plugin:2.5.2:install (default-install) @ org.wso2.choreo.connect.enforcer ---
[INFO] Installing <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.jar> to <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/.repository/org/wso2/choreo/connect/org.wso2.choreo.connect.enforcer/1.2.0-m1-SNAPSHOT/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.jar>
[INFO] Installing <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/dependency-reduced-pom.xml> to <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/.repository/org/wso2/choreo/connect/org.wso2.choreo.connect.enforcer/1.2.0-m1-SNAPSHOT/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.pom>
[INFO]
[INFO] --- dependency-check-maven:7.1.0:check (default-cli) @ org.wso2.choreo.connect.enforcer ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (17 ms)
[INFO]
Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
About ODC: https://jeremylong.github.io/DependencyCheck/general/internals.html
False Positives: https://jeremylong.github.io/DependencyCheck/general/suppression.html
💖 Sponsor: https://github.com/sponsors/jeremylong
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (2 seconds)
[INFO] Finished CPE Analyzer (5 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (7 seconds)
[INFO] Writing report to: <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/dependency-check-report.html>
[WARNING]
One or more dependencies were identified with known vulnerabilities in Choreo Connect - Enforcer:
tomcat-embed-core-10.0.21.jar (pkg:maven/org.apache.tomcat.embed/tomcat-embed-core at 10.0.21, cpe:2.3:a:apache:tomcat:10.0.21:*:*:*:*:*:*:*, cpe:2.3:a:apache_tomcat:apache_tomcat:10.0.21:*:*:*:*:*:*:*) : CVE-2022-34305
See the dependency-check report for more details.
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Choreo Connect - Parent 1.2.0-m1-SNAPSHOT:
[INFO]
[INFO] Choreo Connect - Parent ............................ SUCCESS [09:35 min]
[INFO] Choreo Connect - Router ............................ SUCCESS [09:59 min]
[INFO] Choreo Connect - Adapter ........................... SUCCESS [02:26 min]
[INFO] Choreo Connect - Enforcer Parent ................... SUCCESS [ 2.678 s]
[INFO] Choreo Connect - Enforcer Commons .................. SUCCESS [07:47 min]
[INFO] Choreo Connect - Enforcer .......................... FAILURE [19:24 min]
[INFO] Choreo Connect - Distribution ...................... SKIPPED
[INFO] Choreo Connect - Integration ....................... SKIPPED
[INFO] Choreo Connect - Mock-Backend-Server ............... SKIPPED
[INFO] Choreo Connect - Test-Integration .................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 51:40 min
[INFO] Finished at: 2022-08-08T06:05:42Z
[INFO] ------------------------------------------------------------------------
Waiting for Jenkins to finish collecting data
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.1.0:check (default-cli) on project org.wso2.choreo.connect.enforcer:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '4.0':
[ERROR]
[ERROR] tomcat-embed-core-10.0.21.jar: CVE-2022-34305(6.1)
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR] mvn <goals> -rf :org.wso2.choreo.connect.enforcer
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/commons/pom.xml> to org.wso2.choreo.connect/org.wso2.choreo.connect.enforcer.commons/1.2.0-m1-SNAPSHOT/org.wso2.choreo.connect.enforcer.commons-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/commons/target/org.wso2.choreo.connect.enforcer.commons-1.2.0-m1-SNAPSHOT.jar> to org.wso2.choreo.connect/org.wso2.choreo.connect.enforcer.commons/1.2.0-m1-SNAPSHOT/org.wso2.choreo.connect.enforcer.commons-1.2.0-m1-SNAPSHOT.jar
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/integration/mock-backend-server/pom.xml> to org.wso2.choreo.connect/mock-backend-server/1.2.0-m1-SNAPSHOT/mock-backend-server-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/adapter/pom.xml> to org.wso2.choreo.connect/adapter/1.2.0-m1-SNAPSHOT/adapter-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/distribution/pom.xml> to org.wso2.choreo.connect/choreo-connect/1.2.0-m1-SNAPSHOT/choreo-connect-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/pom.xml> to org.wso2.choreo.connect/choreo-connect-parent/1.2.0-m1-SNAPSHOT/choreo-connect-parent-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/integration/test-integration/pom.xml> to org.wso2.choreo.connect/test-integration/1.2.0-m1-SNAPSHOT/test-integration-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/integration/pom.xml> to org.wso2.choreo.connect/integration/1.2.0-m1-SNAPSHOT/integration-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/pom.xml> to org.wso2.choreo.connect/enforcer-parent/1.2.0-m1-SNAPSHOT/enforcer-parent-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/router/pom.xml> to org.wso2.choreo.connect/router/1.2.0-m1-SNAPSHOT/router-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/dependency-reduced-pom.xml> to org.wso2.choreo.connect/org.wso2.choreo.connect.enforcer/1.2.0-m1-SNAPSHOT/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.pom
[JENKINS] Archiving <https://wso2.org/jenkins/job/products/job/product-microgateway/ws/enforcer-parent/enforcer/target/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.jar> to org.wso2.choreo.connect/org.wso2.choreo.connect.enforcer/1.2.0-m1-SNAPSHOT/org.wso2.choreo.connect.enforcer-1.2.0-m1-SNAPSHOT.jar
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Enforcer Commons #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Mock-Backend-Server #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Adapter #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Distribution #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Parent #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Test-Integration #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Integration #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Enforcer Parent #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
No mail will be sent out, as 'products » product-microgateway » Choreo Connect - Router #863' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts.
Sending e-mails to: builder at wso2.org pubudug at wso2.com virajg at wso2.com amalim at wso2.com renuka at wso2.com lahirud at wso2.com
channel stopped
Archiving artifacts
More information about the Builder
mailing list