[7.67.x-blue] RHPAM-3709: upgrade maven dependencies to address CVE-2021-26291

[baldimir]

Replaces #2398

[baldimir]

jenkins retest this

[mareknovotny]

could it be here some problems with transitive deps of ShrinkWrap?

java.lang.RuntimeException: Could not invoke deployment method: public static org.jboss.shrinkwrap.api.Archive org.jbpm.test.container.AbstractEJBTransactionsTest.deployEJBTest()
Caused by: java.lang.reflect.InvocationTargetException
Caused by: org.jboss.shrinkwrap.resolver.api.Invokable$InvocationException: Unable to invoke onlyOne([Ljava.lang.Class;@7f9e1534) on object org.jboss.shrinkwrap.resolver.spi.loader.ServiceRegistry with parameters [Ljava.lang.Object;@138a7441
Caused by: java.lang.reflect.InvocationTargetException
Caused by: java.lang.RuntimeException: Could not create new service instance
Caused by: java.lang.reflect.InvocationTargetException
Caused by: java.lang.NoClassDefFoundError: org/eclipse/aether/internal/impl/DefaultDependencyCollector

in https://github.com/baldimir/jbpm/blob/RHPAM-3709/jbpm-container-test/jbpm-in-container-test/jbpm-container-test-suite/pom.xml#L192-L231 ?

[elguardian]

skinwrap depends on maven resolver impl that depens on aehter. this is not included in the pom.
I don't see how you want to workaround this
@baldimir

[elguardian]

missed guava
<version.com.google.guava>20.0</version.com.google.guava>

[mareknovotny]

Jenkins retest this please

[mareknovotny]

ok, now there are only 3 failed tests in comparison to 16 failures previously.

All 3 have the same root cause:

java.lang.RuntimeException: Could not invoke deployment method: public static org.jboss.shrinkwrap.api.Archive org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService()
	at org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService(WebServiceInvokeTest.java:49)
Caused by: java.lang.reflect.InvocationTargetException
	at org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService(WebServiceInvokeTest.java:49)
Caused by: java.lang.RuntimeException: Could not create new service instance
	at org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService(WebServiceInvokeTest.java:49)
Caused by: java.lang.reflect.InvocationTargetException
	at org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService(WebServiceInvokeTest.java:49)
Caused by: com.google.inject.ProvisionException: 
Unable to provision, see the following errors:

1) Error in custom provider, com.google.inject.OutOfScopeException: Cannot access session scope outside of a scoping block
  at ClassRealm[maven, parent: ClassRealm[maven-parent, parent: null]] (via modules: org.eclipse.sisu.wire.WireModule -> org.eclipse.sisu.plexus.PlexusBindingModule -> org.apache.maven.session.scope.internal.SessionScopeModule)
  while locating org.apache.maven.execution.MavenSession

1 error
	at org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService(WebServiceInvokeTest.java:49)
Caused by: com.google.inject.OutOfScopeException: Cannot access session scope outside of a scoping block
	at org.jbpm.test.container.test.WebServiceInvokeTest.deployWebService(WebServiceInvokeTest.java:49)

[elguardian]

• some notes in here. The error is a bit random and happens if you execute all the test in the suite. In local I managed to get 2 of them.

[ERROR] Errors:
[ERROR] RestServiceInvokeTest.org.jbpm.test.container.test.RestServiceInvokeTest » Runtime
[ERROR] TransactionsTest.org.jbpm.test.container.test.TransactionsTest » Runtime Could...

seems like an error in the clean up

[elguardian]

Tested in my local seems a class loading problem
in failsafe

<reuseForks>false</reuseForks>
<forkCount>1</forkCount>
<useSystemClassLoader>false</useSystemClassLoader>

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud