HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4 due to CVE-2025-53864 #7965

rohit-kb · 2025-09-15T11:36:54Z

Description of PR

Bumping nimbus-jose-jwt to 10.4 due to CVEs
com.github.stephenc.jcip:jcip-annotations is being shaded and is no more a transitive dependency from nimbus starting from versions 9.38, so we can add it as an explicit dependency.

How was this patch tested?

For code changes:

Does the title or this PR starts with the corresponding JIRA issue id (e.g. 'HADOOP-17799. Your PR title ...')?
Object storage: have the integration tests been executed and the endpoint declared according to the connector-specific documentation?
If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?
If applicable, have you updated the LICENSE, LICENSE-binary, NOTICE-binary files?

hadoop-yetus · 2025-09-16T05:03:39Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	21m 46s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 1s		No case conflicting files found.
+0 🆗	codespell	0m 0s		codespell was not available.
+0 🆗	detsecrets	0m 0s		detect-secrets was not available.
+0 🆗	xmllint	0m 0s		xmllint was not available.
+0 🆗	shelldocs	0m 0s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	11m 51s		Maven dependency ordering for branch
+1 💚	mvninstall	46m 47s		trunk passed
+1 💚	compile	17m 52s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	compile	15m 24s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	mvnsite	23m 1s		trunk passed
+1 💚	javadoc	10m 30s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 45s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	58m 26s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 34s		Maven dependency ordering for patch
+1 💚	mvninstall	49m 55s		the patch passed
+1 💚	compile	17m 18s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javac	17m 18s		the patch passed
+1 💚	compile	15m 6s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	javac	15m 6s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	20m 19s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	10m 13s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 45s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	60m 1s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	681m 15s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	2m 0s		The patch does not generate ASF License warnings.
		1045m 32s

Subsystem	Report/Notes
Docker	ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/1/artifact/out/Dockerfile
GITHUB PR	#7965
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux 21ea3ba9b7df 5.15.0-144-generic #157-Ubuntu SMP Mon Jun 16 07:33:10 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `945e1a2`
Default Java	Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/1/testReport/
Max. process+thread count	3099 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-router hadoop-tools/hadoop-sls . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/1/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

rohit-kb · 2025-09-17T10:08:12Z

Hi @pjfanning, can we use this patch instead of the original one as I don't see any progress on that? We need this upgrade in the downstream soon.

Also, it seems like the original patch hasn't handled the shading of com.github.stephenc.jcip:jcip-annotations in later nimbus versions. Thanks

pjfanning · 2025-09-17T10:17:23Z

Could you rebase this to force a new CI run? The tests crashed in the last run.

pjfanning · 2025-09-17T10:25:25Z

Could you change the name of the PR and the git commit to use HADOOP-19632?

hadoop-yetus · 2025-09-17T23:05:53Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 34s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 1s		codespell was not available.
+0 🆗	detsecrets	0m 1s		detect-secrets was not available.
+0 🆗	xmllint	0m 1s		xmllint was not available.
+0 🆗	shelldocs	0m 1s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	9m 51s		Maven dependency ordering for branch
+1 💚	mvninstall	40m 52s		trunk passed
+1 💚	compile	15m 57s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	compile	13m 49s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	mvnsite	21m 8s		trunk passed
+1 💚	javadoc	9m 44s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 44s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	53m 6s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 36s		Maven dependency ordering for patch
+1 💚	mvninstall	40m 44s		the patch passed
+1 💚	compile	15m 21s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javac	15m 21s		the patch passed
+1 💚	compile	13m 42s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	javac	13m 42s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	19m 48s		the patch passed
+1 💚	shellcheck	0m 1s		No new issues.
+1 💚	javadoc	9m 38s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 47s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	53m 12s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	450m 48s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	1m 14s		The patch does not generate ASF License warnings.
		754m 15s

Subsystem	Report/Notes
Docker	ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/3/artifact/out/Dockerfile
GITHUB PR	#7965
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux e199fa50a2f0 5.15.0-144-generic #157-Ubuntu SMP Mon Jun 16 07:33:10 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `b51e3a0`
Default Java	Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/3/testReport/
Max. process+thread count	3299 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-router hadoop-tools/hadoop-sls . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/3/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

hadoop-yetus · 2025-09-18T00:32:37Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 53s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 1s		codespell was not available.
+0 🆗	detsecrets	0m 1s		detect-secrets was not available.
+0 🆗	xmllint	0m 1s		xmllint was not available.
+0 🆗	shelldocs	0m 1s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	9m 34s		Maven dependency ordering for branch
+1 💚	mvninstall	47m 12s		trunk passed
+1 💚	compile	17m 59s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	compile	15m 33s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	mvnsite	22m 58s		trunk passed
+1 💚	javadoc	10m 22s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 55s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	59m 12s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 36s		Maven dependency ordering for patch
+1 💚	mvninstall	49m 21s		the patch passed
+1 💚	compile	17m 52s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javac	17m 52s		the patch passed
+1 💚	compile	16m 26s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	javac	16m 26s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	19m 58s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	10m 51s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	8m 10s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	62m 23s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	503m 12s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	1m 18s		The patch does not generate ASF License warnings.
		848m 20s

Reason	Tests
Failed junit tests	hadoop.hdfs.TestReconstructStripedFileWithRandomECPolicy

Subsystem	Report/Notes
Docker	ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/2/artifact/out/Dockerfile
GITHUB PR	#7965
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux 903ae8a8a984 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `03d76d1`
Default Java	Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/2/testReport/
Max. process+thread count	3484 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-router hadoop-tools/hadoop-sls . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/2/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

rohit-kb · 2025-09-18T11:15:48Z

@pjfanning could you please take a look at this again whenever you have time? Thanks

pjfanning · 2025-09-18T11:23:47Z

the test build crashed

rohit-kb · 2025-09-18T11:47:05Z

Hi @pjfanning, could you please help understand how the test build crashed as I am a bit confused about the CI process here?

As per this execution: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/2/testReport/history/
The attempt#3 has no test failures with 19K+ passes and 300+ skips. Thanks

pjfanning · 2025-09-19T10:56:35Z

I'll let one of the Hadoop committers review this. The CI jobs can be flaky and when I want to rerun them, I rebase the PR to cause a new run.

steveloughran · 2025-09-19T14:58:23Z

@rohit-kb do a rebase and a force push to trigger a new yetus build. thanks

hadoop-yetus · 2025-09-20T03:51:09Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 34s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 1s		No case conflicting files found.
+0 🆗	codespell	0m 0s		codespell was not available.
+0 🆗	detsecrets	0m 0s		detect-secrets was not available.
+0 🆗	xmllint	0m 0s		xmllint was not available.
+0 🆗	shelldocs	0m 0s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	11m 40s		Maven dependency ordering for branch
+1 💚	mvninstall	40m 35s		trunk passed
+1 💚	compile	15m 59s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	compile	13m 42s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	mvnsite	22m 9s		trunk passed
+1 💚	javadoc	9m 44s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 56s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	52m 7s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 37s		Maven dependency ordering for patch
+1 💚	mvninstall	40m 45s		the patch passed
+1 💚	compile	15m 17s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javac	15m 17s		the patch passed
+1 💚	compile	13m 36s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	javac	13m 36s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	18m 34s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	9m 39s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 52s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	53m 51s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	460m 19s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	1m 17s		The patch does not generate ASF License warnings.
		765m 28s

Subsystem	Report/Notes
Docker	ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/4/artifact/out/Dockerfile
GITHUB PR	#7965
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux 4dc676b6b738 5.15.0-144-generic #157-Ubuntu SMP Mon Jun 16 07:33:10 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `13d0d04`
Default Java	Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/4/testReport/
Max. process+thread count	3396 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-router hadoop-tools/hadoop-sls . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/4/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

hadoop-yetus · 2025-09-22T20:31:34Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	22m 11s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 1s		codespell was not available.
+0 🆗	detsecrets	0m 1s		detect-secrets was not available.
+0 🆗	xmllint	0m 1s		xmllint was not available.
+0 🆗	shelldocs	0m 1s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	10m 27s		Maven dependency ordering for branch
+1 💚	mvninstall	47m 23s		trunk passed
+1 💚	compile	18m 8s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	compile	16m 52s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	mvnsite	22m 57s		trunk passed
+1 💚	javadoc	10m 25s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	8m 5s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	57m 45s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 36s		Maven dependency ordering for patch
+1 💚	mvninstall	47m 52s		the patch passed
+1 💚	compile	17m 35s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javac	17m 35s		the patch passed
+1 💚	compile	15m 46s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	javac	15m 46s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	19m 58s		the patch passed
+1 💚	shellcheck	0m 1s		No new issues.
+1 💚	javadoc	10m 17s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 58s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	61m 4s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	505m 36s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	1m 22s		The patch does not generate ASF License warnings.
		869m 23s

Reason	Tests
Failed junit tests	hadoop.yarn.server.nodemanager.containermanager.logaggregation.TestLogAggregationService

Subsystem	Report/Notes
Docker	ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/5/artifact/out/Dockerfile
GITHUB PR	#7965
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux 7a0cad96adcb 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `4aee820`
Default Java	Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/5/testReport/
Max. process+thread count	3598 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-router hadoop-tools/hadoop-sls . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/5/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

rohit-kb · 2025-09-23T01:08:38Z

I am able to run the crashed tests locally:
[INFO] Running org.apache.hadoop.yarn.server.resourcemanager.TestRMHAForAsyncScheduler [INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 33.61 s -- in org.apache.hadoop.yarn.server.resourcemanager.TestRMHAForAsyncScheduler [INFO] [INFO] Results: [INFO] [INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0

Not sure why the tests are crashing again and again on this PR

steveloughran · 2025-09-23T15:36:07Z

@rohit-kb - merged. will take a backport to branch-3.4

rohit-kb · 2025-09-23T15:42:23Z

Thanks @slfan1989, @steveloughran for the review and the merge! Will upload to branch-3.4 soon

hadoop-yetus · 2025-09-23T15:52:24Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 51s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 0s		codespell was not available.
+0 🆗	detsecrets	0m 0s		detect-secrets was not available.
+0 🆗	xmllint	0m 0s		xmllint was not available.
+0 🆗	shelldocs	0m 0s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	12m 33s		Maven dependency ordering for branch
+1 💚	mvninstall	46m 52s		trunk passed
+1 💚	compile	17m 56s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	compile	15m 13s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	mvnsite	23m 33s		trunk passed
+1 💚	javadoc	10m 24s		trunk passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 47s		trunk passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	59m 0s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 35s		Maven dependency ordering for patch
+1 💚	mvninstall	49m 48s		the patch passed
+1 💚	compile	18m 12s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javac	18m 12s		the patch passed
+1 💚	compile	15m 58s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	javac	15m 58s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	19m 47s		the patch passed
+1 💚	shellcheck	0m 1s		No new issues.
+1 💚	javadoc	11m 15s		the patch passed with JDK Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	9m 17s		the patch passed with JDK Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
+1 💚	shadedclient	65m 15s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	529m 32s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	1m 33s		The patch does not generate ASF License warnings.
		880m 49s

Reason	Tests
Failed junit tests	hadoop.hdfs.server.namenode.ha.TestStandbyCheckpoints

Subsystem	Report/Notes
Docker	ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/6/artifact/out/Dockerfile
GITHUB PR	#7965
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux 073c181e5730 5.15.0-144-generic #157-Ubuntu SMP Mon Jun 16 07:33:10 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `5419501`
Default Java	Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.27+6-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_452-8u452-ga~~us1-0ubuntu1~~20.04-b09
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/6/testReport/
Max. process+thread count	2509 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-router hadoop-tools/hadoop-sls . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-7965/6/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

This reverts commit 3baa288.

github-actions bot added YARN build trunk TOOLS labels Sep 15, 2025

pjfanning mentioned this pull request Sep 15, 2025

HADOOP-19632 : Upgrade nimbusds to 10.4 #7836

Closed

4 tasks

rohit-kb force-pushed the nimbus_10.4 branch from 945e1a2 to 03d76d1 Compare September 17, 2025 10:22

rohit-kb force-pushed the nimbus_10.4 branch from 03d76d1 to b51e3a0 Compare September 17, 2025 10:30

rohit-kb changed the title ~~HADOOP-19687. Upgrade nimbus-jose-jwt to 10.4 due to CVE-2025-53864~~ HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4 due to CVE-2025-53864 Sep 17, 2025

rohit-kb force-pushed the nimbus_10.4 branch from b51e3a0 to 13d0d04 Compare September 19, 2025 15:04

rohit-kb force-pushed the nimbus_10.4 branch from 13d0d04 to 4aee820 Compare September 22, 2025 06:00

HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4

5419501

rohit-kb force-pushed the nimbus_10.4 branch from 4aee820 to 5419501 Compare September 23, 2025 01:10

slfan1989 approved these changes Sep 23, 2025

View reviewed changes

steveloughran merged commit 3baa288 into apache:trunk Sep 23, 2025
1 of 2 checks passed

pjfanning mentioned this pull request Sep 23, 2025

HADOOP-19632. Upgrade to nimbus-jose-jwt 9.37.4 due to CVE-2025-53864 #7870

Closed

4 tasks

slfan1989 mentioned this pull request Sep 24, 2025

HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4 due to CVE-2025-53864 #7993

Merged

4 tasks

huangzhaobo99 added a commit to huangzhaobo99/hadoop that referenced this pull request Oct 3, 2025

Revert "HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4 (apache#7965)"

177cd4d

This reverts commit 3baa288.

HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4 due to CVE-2025-53864 #7965

HADOOP-19632. Upgrade nimbus-jose-jwt to 10.4 due to CVE-2025-53864 #7965

Uh oh!

Conversation

rohit-kb commented Sep 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description of PR

How was this patch tested?

For code changes:

Uh oh!

hadoop-yetus commented Sep 16, 2025

Uh oh!

rohit-kb commented Sep 17, 2025

Uh oh!

pjfanning commented Sep 17, 2025

Uh oh!

pjfanning commented Sep 17, 2025

Uh oh!

hadoop-yetus commented Sep 17, 2025

Uh oh!

hadoop-yetus commented Sep 18, 2025

Uh oh!

rohit-kb commented Sep 18, 2025

Uh oh!

pjfanning commented Sep 18, 2025

Uh oh!

rohit-kb commented Sep 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pjfanning commented Sep 19, 2025

Uh oh!

steveloughran commented Sep 19, 2025

Uh oh!

hadoop-yetus commented Sep 20, 2025

Uh oh!

hadoop-yetus commented Sep 22, 2025

Uh oh!

rohit-kb commented Sep 23, 2025

Uh oh!

Uh oh!

steveloughran commented Sep 23, 2025

Uh oh!

rohit-kb commented Sep 23, 2025

Uh oh!

hadoop-yetus commented Sep 23, 2025

Uh oh!

Uh oh!

rohit-kb commented Sep 15, 2025 •

edited

Loading

rohit-kb commented Sep 18, 2025 •

edited

Loading