Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50633

JEP-200 - org.apache.maven.model.Model might be dangerous, so rejecting

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • pipeline-utility-steps-plugin
    • Jenkins 2.114, Maven Integration plugin 3.1.2, Pipeline Utility Steps 2.0.2

      Errors after update to latest Jenkins version:

      WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Dependency in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Build in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.DeploymentRepository in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Exclusion in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Parent in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.codehaus.plexus.util.xml.Xpp3Dom in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/plexus-utils-3.0.24.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Resource in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/

      WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Exclusion in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.Parent in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/

        1. plugins-list.txt
          4 kB

          [JENKINS-50633] JEP-200 - org.apache.maven.model.Model might be dangerous, so rejecting

          SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          src/main/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStep.java
          src/test/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStepTest.java
          http://jenkins-ci.org/commit/pipeline-utility-steps-plugin/0f038583a0b5e4cbde2dd9ca79b80c1816e4b608
          Log:
          JENKINS-50633 - Remove the non-CPS requirement

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/main/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStep.java src/test/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStepTest.java http://jenkins-ci.org/commit/pipeline-utility-steps-plugin/0f038583a0b5e4cbde2dd9ca79b80c1816e4b608 Log: JENKINS-50633 - Remove the non-CPS requirement

          SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          Jenkinsfile
          http://jenkins-ci.org/commit/pipeline-utility-steps-plugin/641fae05694224c823be10e91828d6952128c1b5
          Log:
          JENKINS-50633 - Jenkinsfile should use 2.107.2 with security fixes

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: Jenkinsfile http://jenkins-ci.org/commit/pipeline-utility-steps-plugin/641fae05694224c823be10e91828d6952128c1b5 Log: JENKINS-50633 - Jenkinsfile should use 2.107.2 with security fixes

          SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Robert Sandell
          Path:
          Jenkinsfile
          pom.xml
          src/main/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStep.java
          src/test/java/org/jenkinsci/plugins/pipeline/utility/steps/conf/mf/ReadManifestStepTest.java
          src/test/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStepTest.java
          http://jenkins-ci.org/commit/pipeline-utility-steps-plugin/777fd44d9976dc0615dec4150db579dff87c07d7
          Log:
          Merge pull request #46 from oleg-nenashev/jep-200/JENKINS-50633

          JENKINS-50633 - Update Pipeline: CPS requirement to 2.48 and run tests against core with JEP-200

          Compare: https://github.com/jenkinsci/pipeline-utility-steps-plugin/compare/bd1bcf86cf76...777fd44d9976
          *NOTE:* This service been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

          Functionality will be removed from GitHub.com on January 31st, 2019.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Robert Sandell Path: Jenkinsfile pom.xml src/main/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStep.java src/test/java/org/jenkinsci/plugins/pipeline/utility/steps/conf/mf/ReadManifestStepTest.java src/test/java/org/jenkinsci/plugins/pipeline/utility/steps/maven/WriteMavenPomStepTest.java http://jenkins-ci.org/commit/pipeline-utility-steps-plugin/777fd44d9976dc0615dec4150db579dff87c07d7 Log: Merge pull request #46 from oleg-nenashev/jep-200/ JENKINS-50633 JENKINS-50633 - Update Pipeline: CPS requirement to 2.48 and run tests against core with JEP-200 Compare: https://github.com/jenkinsci/pipeline-utility-steps-plugin/compare/bd1bcf86cf76...777fd44d9976 * NOTE: * This service been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/ Functionality will be removed from GitHub.com on January 31st, 2019.

          Oleg Nenashev added a comment -

          Fix released in 2.1.0

          Oleg Nenashev added a comment - Fix released in 2.1.0

          Valéry FREBOURG added a comment -

          Hello, 

          still a problem ?

          I have on startup log:

          juin 05, 2018 11:04:45 AM jenkins.security.ClassFilterImpl lambda$isBlacklisted$1
          WARNING: org.apache.maven.artifact.versioning.DefaultArtifactVersion in file:/XXX/jenkins2/plugins/maven-plugin/WEB-INF/lib/*+maven-artifact-3.1.0.jar+* might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/

           

          Jenkins version : (LTS) 2.107.3

          pipeline utility steps version : 2.1

          pipeline maven integration plugin : 3.5.7

          (all others plugin up-to-date)

           

          Regards,

           

           

          Valéry FREBOURG added a comment - Hello,  still a problem ? I have on startup log: juin 05, 2018 11:04:45 AM jenkins.security.ClassFilterImpl lambda$isBlacklisted$1 WARNING: org.apache.maven.artifact.versioning.DefaultArtifactVersion in file:/XXX/jenkins2/plugins/maven-plugin/WEB-INF/lib/*+maven-artifact-3.1.0.jar+* might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/   Jenkins version : (LTS) 2.107.3 pipeline utility steps version : 2.1 pipeline maven integration plugin : 3.5.7 (all others plugin up-to-date)   Regards,    

          Oleg Nenashev added a comment - - edited

          Maybe another plugin? Please provide a full stacktrace in a new ticket

          Oleg Nenashev added a comment - - edited Maybe another plugin? Please provide a full stacktrace in a new ticket

          Jesse Glick added a comment -

          Best to treat the readMavenPom and writeMavenPom steps as deprecated. Do not use. There are command-line mvn equivalents.

          Jesse Glick added a comment - Best to treat the readMavenPom and writeMavenPom steps as deprecated. Do not use. There are command-line mvn equivalents.

          Robin Smith added a comment -

          jglick if these methods are to be treated as deprecated, could this be marked as such in the Pipeline Utility Steps plugin documentation? And/or in the code on GitHub?

          Robin Smith added a comment - jglick if these methods are to be treated as deprecated, could this be marked as such in the Pipeline Utility Steps plugin documentation ? And/or in the code on GitHub?

          Jesse Glick added a comment -

          robin_smith trying. https://github.com/jenkinsci/pipeline-utility-steps-plugin/pull/47

          Jesse Glick added a comment - robin_smith trying. https://github.com/jenkinsci/pipeline-utility-steps-plugin/pull/47

          Robin Smith added a comment -

          Thanks jglick. It would be great to have that in the docs too - I suppose that will happen after the PR is merged.

          Robin Smith added a comment - Thanks jglick . It would be great to have that in the docs too - I suppose that will happen after the PR is merged.

            oleg_nenashev Oleg Nenashev
            testuser7 Test User
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: