[HBASE-27634] Builds emit errors related to SBOM parsing

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha-4
• Fix Version/s: 2.6.0, 3.0.0-alpha-4, 2.5.5, 2.4.18
• Component/s: build
• Hadoop Flags: Reviewed
• Assignee: Shuhei Yamasaki
• Reporter: Nick Dimiduk
• Created: 10/Feb/23 11:53
• Updated: 22/May/23 19:38
• Resolved: 21/May/23 12:24

Description

My build is littered with noise of the form of,

[INFO] CycloneDX: Resolving Dependencies                                                                                                                                                                    
[ERROR] An error occurred attempting to read POM                                                                                                                                                            
org.codehaus.plexus.util.xml.pull.XmlPullParserException: UTF-8 BOM plus xml decl of ISO-8859-1 is incompatible (position: START_DOCUMENT seen <?xml version="1.0" encoding="ISO-8859-1"... @1:42)          
    at org.codehaus.plexus.util.xml.pull.MXParser.parseXmlDeclWithVersion (MXParser.java:3423)                                                                                                              
    at org.codehaus.plexus.util.xml.pull.MXParser.parseXmlDecl (MXParser.java:3345)                                                                                                                         
    at org.codehaus.plexus.util.xml.pull.MXParser.parsePI (MXParser.java:3197)                                                                                                                              
    at org.codehaus.plexus.util.xml.pull.MXParser.parseProlog (MXParser.java:1828)                                                                                                                          
    at org.codehaus.plexus.util.xml.pull.MXParser.nextImpl (MXParser.java:1757)                                                                                                                             
    at org.codehaus.plexus.util.xml.pull.MXParser.next (MXParser.java:1375)                                                                                                                                 
    at org.apache.maven.model.io.xpp3.MavenXpp3Reader.read (MavenXpp3Reader.java:3940)                                                                                                                          at org.apache.maven.model.io.xpp3.MavenXpp3Reader.read (MavenXpp3Reader.java:612)                                                                                                                       
    at org.apache.maven.model.io.xpp3.MavenXpp3Reader.read (MavenXpp3Reader.java:627)                                                                                                                       
    at org.cyclonedx.maven.BaseCycloneDxMojo.readPom (BaseCycloneDxMojo.java:759)                     
    at org.cyclonedx.maven.BaseCycloneDxMojo.readPom (BaseCycloneDxMojo.java:746)                                                                                                                           
    at org.cyclonedx.maven.BaseCycloneDxMojo.retrieveParentProject (BaseCycloneDxMojo.java:694)                                                                                                             
    at org.cyclonedx.maven.BaseCycloneDxMojo.getClosestMetadata (BaseCycloneDxMojo.java:524)                                                                                                                
    at org.cyclonedx.maven.BaseCycloneDxMojo.convert (BaseCycloneDxMojo.java:481)                                                                                                                           
    at org.cyclonedx.maven.CycloneDxMojo.execute (CycloneDxMojo.java:70)                                                                                                                                    
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)                                                                                                   
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:342)                                                                                                                  
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:330)                                                                                                                   
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:213)               
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:175)                                                                                                                     
    at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:76)                                                                                                                   
    at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:163)                                                                                                                       
    at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:160)                                                                                                                     
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)                                                                                            
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call (MultiThreadedBuilder.java:193)                                                                                
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call (MultiThreadedBuilder.java:180)                                                                                
    at java.util.concurrent.FutureTask.run (FutureTask.java:264)                                                                                                                                            
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:515)                                                                                                                             
    at java.util.concurrent.FutureTask.run (FutureTask.java:264)                                                                                                                                            
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1128)                                                                                                                     
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:628)               
    at java.lang.Thread.run (Thread.java:829)

The couple bom.xml files that I checked look wholesome, at least according to emacs.

My build command is,

$ mvn -T1.0C spotless:apply clean install -DskipTests

$ mvn -version
Apache Maven 3.9.0 (9b58d2bad23a66be161c4664ef21ce219c2c8584)
Maven home: /usr/local/Cellar/maven/3.9.0/libexec
Java version: 11.0.11, vendor: AdoptOpenJDK, runtime: /Library/Java/JavaVirtualMachines/adoptopenjdk-11.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "11.5", arch: "x86_64", family: "mac"

Issue Links

• relates to: HBASE-27562 Publish SBOM artifacts
• links to: GitHub Pull Request #5246