UI5 / cli / 41125848713

94%

Build Type

push

github

Committed by RandomByte

Commit Message

fix(project): Require HTTPS for Maven snapshot requests

Maven snapshot requests accepted non-HTTPS endpoints and redirects,
allowing metadata and artifacts to be fetched over plain HTTP.

Validate endpoints from configuration, environment variables, resolver
options, and Maven settings.xml. Validate each redirect target before
requesting it and keep TLS certificate verification enabled. Cap redirects
at 5, which stays generous for a Maven repository that redirects to
artifact storage or a CDN.

Redact URL credentials from prompts and logs while keeping the endpoint
URL visible, and report transport failures with the redacted URL and the
network error code. Remove staging output after download or extraction
failures and close archive handles so failed attempts release resources.

Add regression coverage for endpoint validation, redirects, credential
redaction, and failed-download cleanup with a successful retry.

Coverage Stats

7907 of 8707 branches covered (90.81%)

Branch coverage included in aggregate %.

66 of 68 new or added lines in 4 files covered. (97.06%)

3 existing lines in 1 file now uncovered.

15043 of 15654 relevant lines covered (96.1%)

5209.65 hits per line