Repository navigation
Scala Compilation is broken on master branch and recent PRs #5482
Description
Activity
- added a commit that references this issue
on Sep 21, 2026 Some more analysis after opening #5483. The build breakage comes from the recent batch of
[SECURITY]commits, and it is broader than just the Scala compile failure.Scala compile failure (fixed in #5483)
- bb26ad3 ([SECURITY] Remove hardcoded default wds.linkis.crypt.key, fail-closed on insecure values #5456) —
ServerConfiguration.scalareferencesLinkisModuleErrorCodeSummary.CRYPT_KEY_INSECURE, but that enum constant was never added →not found: value CRYPT_KEY_INSECURE - 047ebde ([SECURITY] Add source IP validation for ignore-timeout fallback in session ticket auth #5457) —
SecurityFilter.scalausesCommonVarswithout importing it →not found: value CommonVars
Because
linkis-modulefails, every downstream module is skipped, so the whole build has been red.Code format check fails on master
./mvnw spotless:check(thecheck-code-formatworkflow) fails on master independently of the compile issue. Six files have pre-existing spotless violations:linkis-common/.../TicketCipher.java([SECURITY] Upgrade session ticket cipher from DES to AES-256-GCM #5460)linkis-module/.../ServerConfiguration.scala([SECURITY] Remove hardcoded default wds.linkis.crypt.key, fail-closed on insecure values #5456)linkis-module/.../SSOUtils.scala,SecurityFilter.scala,SecurityFilterTest.scala([SECURITY] Add source IP validation for ignore-timeout fallback in session ticket auth #5457 / [SECURITY] Enforce server-side session map check in ignore-timeout fallback path #5458)linkis-eureka/.../EurekaSecurityConfig.java
None of these were run through
spotless:applybefore merge. Because spotless checks the whole reactor, every PR now fails this job regardless of what it changes.sql-check fails on master
linkis-dist/package/db/linkis_dml.sqlline 682 ('instance'row of theINSERT INTO linkis_ps_dm_datasource_type_keyat line 670) has 17 values for 16 columns →ERROR 1136 Column count doesn't match value count at row 11. Introduced by f66a492 (#5450), which added avalue_regexbut left theNULLit replaced in place. One-token fix (drop oneNULL).Unit tests fail once compilation is fixed
With #5483 applied,
ServerConfigurationTestandSecurityFilterTest.ignoreTimeoutSignalDefaultsTestthrowExceptionInInitializerError: #5456 makesServerConfigurationfail closed whenwds.linkis.crypt.keyis unset, andlinkis-module/src/test/resources/linkis.propertiesdoes not set one. There are also unrelated failures inlinkis-common(ClassUtilsTest,TicketCipherTest.v1DecryptV2Ticket).General issue
#5450, #5456, #5457, #5458 and #5460 between them broke compilation, formatting, the SQL init script and unit tests. Several are tagged
#AI COMMIT#. Given that CI has been red for months, it looks like these were merged without a green (or any) CI run. It would be worth requiring thecheck-code-format,sql-checkand build workflows to pass before merging — and running./mvnw spotless:applylocally before pushing — so that regressions like this get caught before they land.- bb26ad3 ([SECURITY] Remove hardcoded default wds.linkis.crypt.key, fail-closed on insecure values #5456) —
This appears to be an issue going back a number of months.
Example:
https://github.com/apache/linkis/actions/runs/32231570826/job/96002330745
The logs before that have warnings but I'm not sure what the issue is that makes the build bail out.
I got Claude AI to research it and it seems to indicate bb26ad3 is the issue. #5456