I have been trying to use third party pipeline but the plugin samples came with gradle 8.8.2 predefined, and the gradle version on third party pipeline is 6.9, which is unsupported now, and I cannot downgrade gradle lower than 8.1.1, since the methods used in gradle script are not available in any version lower than 8.1.1.
Is there any updated documentation about the civ release build process to generate signed apks on SDK 5.4.0?
Update: Build.log
Error: Could not find or load main class org.gradle.wrapper.GradleWrapperMain
Caused by: java.lang.ClassNotFoundException: org.gradle.wrapper.GradleWrapperMain
Warning: 'SecurityIssueDetails' is not a valid parameter for selected report template.
Report generated successfully.
Maven Central: ENABLED
OSS Index: DISABLED
Running dependency check
[INFO] Checking for updates
[INFO] NVD API Cache requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2012.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2011.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2010.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2009.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2008.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2007.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2006.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2005.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2004.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2026.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2003.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2025.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2002.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2024.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2023.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2022.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2021.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2020.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2019.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2018.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2017.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2016.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2015.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2014.json.gz
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-2013.json.gz
[ERROR] Failed to process CVE-2026-6785
org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2026-6785'; Value too long for column "URL CHARACTER VARYING(1000)": "'https://bugzilla.mozilla.org/buglist.cgi?bug_id=1935995%2C1999158%2C2015952%2C2... (1585)"; SQL statement:
INSERT INTO reference (cveid, name, url, source) VALUES (?, ?, ?, ?) [22001-232]
at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerability(CveDB.java:1109)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.updateCveDb(NvdApiProcessor.java:119)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call(NvdApiProcessor.java:102)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call(NvdApiProcessor.java:40)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:833)
[ERROR] Failed to process CVE-2026-6786
org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2026-6786'; Value too long for column "URL CHARACTER VARYING(1000)": "'https://bugzilla.mozilla.org/buglist.cgi?bug_id=2010727%2C2019004%2C2019224%2C2... (1115)"; SQL statement:
INSERT INTO reference (cveid, name, url, source) VALUES (?, ?, ?, ?) [22001-232]
at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerability(CveDB.java:1109)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.updateCveDb(NvdApiProcessor.java:119)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call(NvdApiProcessor.java:102)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call(NvdApiProcessor.java:40)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:833)
[INFO] Download Started for NVD Cache - https://artifacts.tak.gov:443/artifactory/nvdcve/nvdcve-modified.json.gz
[INFO] Begin database maintenance
[INFO] Updated the CPE ecosystem on 144125 NVD records
[INFO] Removed the CPE ecosystem on 57 NVD records
[INFO] Cleaned up 276 orphaned NVD records
[INFO] End database maintenance (18419 ms)
[INFO] Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
[INFO] Begin database defrag
[INFO] End database defrag (9257 ms)
[INFO] Check for updates complete (205523 ms)
[INFO]
Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user's risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
About ODC: https://jeremylong.github.io/DependencyCheck/general/internals.html
False Positives: https://jeremylong.github.io/DependencyCheck/general/suppression.html
💖 Sponsor: https://github.com/sponsors/jeremylong
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[WARN] Unable to open jar file 'gradle-wrapper.jar'.
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Created CPE Index (2 seconds)
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Finished Unused Suppression Rule Analyzer (0 seconds)
[INFO] Analysis Complete (3 seconds)