Skip to content

[fix][build] Upgrade dependency-check-maven plugin to fix broken OWASP check - #19170

Merged
lhotari merged 5 commits into
apache:masterfrom
lhotari:lh-upgrade-dependency-check-maven-plugin
Jan 10, 2023
Merged

[fix][build] Upgrade dependency-check-maven plugin to fix broken OWASP check#19170
lhotari merged 5 commits into
apache:masterfrom
lhotari:lh-upgrade-dependency-check-maven-plugin

Conversation

@lhotari

@lhotari lhotari commented Jan 10, 2023

Copy link
Copy Markdown
Member

Motivation

Error: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569' org.owasp.dependencycheck.data.update.exception.UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569' ...
Caused by: org.h2.jdbc.JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement:

Modifications

Upgrade dependency-check maven plugin to 7.4.4 version.

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Matching PR in forked repository

PR in forked repository: lhotari#127

…P check

- 7.4.4 includes fix for issue
  jeremylong/DependencyCheck#5220

Error:  org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'
org.owasp.dependencycheck.data.update.exception.UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'
...
Caused by: org.h2.jdbc.JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement:
@lhotari

lhotari commented Jan 10, 2023

Copy link
Copy Markdown
Member Author

/pulsarbot rerun-failure-checks

@codecov-commenter

codecov-commenter commented Jan 10, 2023

Copy link
Copy Markdown

Codecov Report

Merging #19170 (f992c2a) into master (9ef54fd) will decrease coverage by 5.50%.
The diff coverage is 43.85%.

Impacted file tree graph

@@             Coverage Diff              @@
##             master   #19170      +/-   ##
============================================
- Coverage     47.22%   41.72%   -5.51%     
+ Complexity    10713     2428    -8285     
============================================
  Files           713      235     -478     
  Lines         69697    16701   -52996     
  Branches       7485     1822    -5663     
============================================
- Hits          32914     6968   -25946     
+ Misses        33096     8976   -24120     
+ Partials       3687      757    -2930     
Flag Coverage Δ
unittests 41.72% <43.85%> (-5.51%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
...rg/apache/pulsar/proxy/server/ProxyConnection.java 55.77% <34.78%> (-0.57%) ⬇️
...apache/pulsar/proxy/server/LookupProxyHandler.java 57.02% <39.13%> (+0.55%) ⬆️
...apache/pulsar/proxy/server/DirectProxyHandler.java 63.79% <72.72%> (+0.15%) ⬆️
...java/org/apache/pulsar/proxy/stats/TopicStats.java 58.82% <0.00%> (-41.18%) ⬇️
...a/org/apache/pulsar/proxy/server/ProxyService.java 80.00% <0.00%> (-0.94%) ⬇️
...pulsar/broker/service/PulsarCommandSenderImpl.java
...va/org/apache/pulsar/broker/service/ServerCnx.java
...ulsar/broker/namespace/NamespaceEphemeralData.java
... and 478 more

@lhotari
lhotari merged commit 82b1357 into apache:master Jan 10, 2023
nicoloboschi pushed a commit that referenced this pull request Jan 27, 2023
nicoloboschi pushed a commit that referenced this pull request Jan 27, 2023
nicoloboschi pushed a commit that referenced this pull request Feb 23, 2023
…P check (#19170)

(cherry picked from commit 82b1357)
(cherry picked from commit 9c29cdb)
@coderzc coderzc added the cherry-picked/branch-2.9 Archived: 2.9 is end of life label Mar 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants