apache-tika-3.0/3.0.0-r2: cve remediation

[octo-sts]

apache-tika-3.0/3.0.0-r2: fix GHSA-qh8g-58pp-2wxh

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/apache-tika-3.0.advisories.yaml

[developer-guy]

this shouldn't be merged as it breaks application:
2024/12/29 21:41:59 WARN Exception in thread "main" java.lang.NoSuchMethodError: 'int org.eclipse.jetty.util.URIUtil.getDefaultPortForScheme(java.lang.String)' name="start server and verify endpoint"

[octo-sts]

Gen AI suggestions to solve the build error:

• Detected Error:

no suitable constructor found for PathResource(java.nio.file.Path)
constructor org.eclipse.jetty.util.resource.PathResource.PathResource(java.net.URI) is not applicable

• Error Category: Build/Compilation

• Failure Point: Maven test compilation phase in tika-grpc module

• Root Cause Analysis: The test class PipesBiDirectionalStreamingIntegrationTest is trying to use a constructor for PathResource that either doesn't exist or isn't accessible. The PathResource class from Jetty expects a URI constructor but is being passed a Path object.

• Suggested Fix:

1. Modify line 97 in PipesBiDirectionalStreamingIntegrationTest.java to convert the Path to URI before creating PathResource:

// Change from:
new PathResource(path)

// To:
new PathResource(path.toUri())

• Explanation:

• The Jetty PathResource class's public constructor accepts a URI
• Java's Path objects can be converted to URIs using the toUri() method
• This conversion maintains the file system path information while providing the correct type for the constructor

• Additional Notes:

• This appears to be a compatibility issue with Jetty's API requirements
• The error occurs in test code, not production code
• Similar issues have been seen when working with Jetty's resource handling
• The fix maintains the intended functionality while satisfying type requirements

• References:

• Eclipse Jetty PathResource API: https://www.eclipse.org/jetty/javadoc/current/org/eclipse/jetty/util/resource/PathResource.html
• Java Path API: https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/nio/file/Path.html#toUri()