Add 404 handling by rnc · Pull Request #733 · project-ncl/dependency-analysis

rnc · 2026-07-09T10:18:01Z

Checklist:

Have you added unit tests for your change?

github-actions · 2026-07-09T10:34:48Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

try-api-1.60.1.jar [1 MEDIUM]
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- maven-scm-provider-jgit-1.13.0.jar
				|-- org.eclipse.jgit-4.5.4.201711221230-r.jar [1 HIGH, 1 MEDIUM]
			|-- maven-scm-provider-svnexe-1.13.0.jar
				|-- commons-lang-2.6.jar [1 MEDIUM]
|-- rest-client-jakarta-3.4.5.jar
	|-- common-3.4.5-jakarta.jar
		|-- opentelemetry-instrumentation-annotations-2.27.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- pnc-common-3.5.2-SNAPSHOT-jakarta.jar
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-exporter-otlp-1.60.1.jar
				|-- opentelemetry-exporter-otlp-common-1.60.1.jar
					|-- opentelemetry-exporter-common-1.60.1.jar
						|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-trace-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-logs-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-metrics-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
source-code-manager-3.0.1-SNAPSHOT.jar
|-- quarkus-quartz-3.37.0.jar
	|-- opentelemetry-instrumentation-api-2.26.1.jar
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- maven-scm-provider-jgit-1.13.0.jar
	|-- org.eclipse.jgit-4.5.4.201711221230-r.jar [1 HIGH, 1 MEDIUM]
|-- maven-scm-provider-svnexe-1.13.0.jar
	|-- commons-lang-2.6.jar [1 MEDIUM]
|-- pnc-common-3.5.2-SNAPSHOT-jakarta.jar
	|-- opentelemetry-ext-cli-java-2.1.0.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-exporter-otlp-common-1.60.1.jar
				|-- opentelemetry-exporter-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-semconv-1.29.0-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
testsuite-3.0.1-SNAPSHOT.jar
|-- application-3.0.1-SNAPSHOT.jar
	|-- quarkus-jdbc-postgresql-3.37.0.jar
		|-- quarkus-agroal-3.37.0.jar
			|-- quarkus-narayana-jta-3.37.0.jar
				|-- narayana-jta-7.3.4.Final.jar
					|-- infinispan-core-9.4.24.Final.jar [1 HIGH, 1 MEDIUM]
		|-- postgresql-42.7.11.jar [1 MEDIUM]
	|-- quarkus-micrometer-opentelemetry-3.37.0.jar
		|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
			|-- opentelemetry-instrumentation-api-2.26.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-micrometer-3.37.0.jar
			|-- micrometer-core-1.16.6.jar
				|-- HdrHistogram-2.2.2.jar [4 LOW]
				|-- LatencyUtils-2.0.3.jar
					|-- HdrHistogram-2.2.2.jar [4 LOW]
		|-- quarkus-opentelemetry-3.37.0.jar
			|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-jdbc-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
				|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-incubator-1.60.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-exporter-otlp-common-1.60.1.jar
				|-- opentelemetry-exporter-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- reports-rest-3.0.1-SNAPSHOT.jar
		|-- reports-backend-3.0.1-SNAPSHOT.jar
			|-- communication-3.0.1-SNAPSHOT.jar
				|-- galley-cache-partyline-1.22-jakarta.jar
					|-- partyline-2.4.jar
						|-- infinispan-core-9.4.24.Final.jar [1 HIGH, 1 MEDIUM]
				|-- source-code-manager-3.0.1-SNAPSHOT.jar
					|-- maven-scm-provider-jgit-1.13.0.jar
						|-- org.eclipse.jgit-4.5.4.201711221230-r.jar [1 HIGH, 1 MEDIUM]
					|-- maven-scm-provider-svnexe-1.13.0.jar
						|-- commons-lang-2.6.jar [1 MEDIUM]
|-- rest-client-jakarta-3.4.5.jar
	|-- common-3.4.5-jakarta.jar
		|-- opentelemetry-instrumentation-annotations-2.27.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- pnc-common-3.5.2-SNAPSHOT-jakarta.jar
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-exporter-otlp-1.60.1.jar
				|-- opentelemetry-sdk-logs-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-metrics-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-trace-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]


No Policy violations were detected

Project 'dependency-analysis' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=17cd357b-3d0e-43ac-a982-661505cac482
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=d38fa0abfb554c9cac571a09497e0af3f534680889b74705ab11e416b1c07dd4

Mend AI scan succeeded.

Support Token: 3d5edeb5d2ebb4ef6b47d607e391651b51783593190269

SAST scan output

*no findings*

Full logs and artifacts

michalovjan · 2026-07-09T13:29:45Z

    ObjectMapper om;

-    public static VersionResponse parseMavenMetadata(InputStream in) throws JAXBException {
+    public VersionResponse parseMavenMetadata(InputStream in) throws JAXBException {


Why does this need to be non-static?

It doesn't really ... everything was calling it as parser.parseMavenMetadata so either change the callers or change the function to silence the editor warnings.

Add 404 handling

4b7badd

rnc requested a review from michalovjan July 9, 2026 10:18

Minor code cleanup

1177fa1

rnc force-pushed the BR1 branch from 7f1c9db to 1177fa1 Compare July 9, 2026 10:24

michalovjan requested changes Jul 9, 2026

View reviewed changes

rnc closed this Jul 10, 2026

rnc deleted the BR1 branch July 10, 2026 12:19

This was referenced Jul 10, 2026

Add 404 handling #735

Open

Code cleanup for MetadatafileParser #736

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add 404 handling#733

Add 404 handling#733
rnc wants to merge 2 commits into
project-ncl:masterfrom
rnc:BR1

rnc commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

michalovjan Jul 9, 2026

Uh oh!

rnc Jul 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

rnc commented Jul 9, 2026

Checklist:

Uh oh!

github-actions Bot commented Jul 9, 2026

Mend Scan Results

Uh oh!

michalovjan Jul 9, 2026

Choose a reason for hiding this comment

Uh oh!

rnc Jul 9, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants