fitbit

Build log

nerves_system_rpi4

fitbit 0.0.1 · fail · run fitbit-0.0.1-1791183946974
120 of 120 lines
1Resolving Hex dependencies...2Resolution completed in 0.16s3Unchanged:4  certifi 0.3.05  circular_buffer 1.1.06  elixir_make 0.10.07  fitbit 0.0.18  hackney 1.4.10 VULNERABLE!9    EEF-CVE-2026-47076 (MEDIUM)10    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq11    SSRF allowlist bypass via percent-encoded host in hackney12    https://osv.dev/vulnerability/EEF-CVE-2026-470761314    GHSA-vq52-99r9-h5pw (LOW)15    aka: CVE-2025-121116    Server-side Request Forgery (SSRF) in hackney17    https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw1819    EEF-CVE-2026-47071 (HIGH)20    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr21    SOCKS5 TLS upgrade ignores caller timeout in hackney22    https://osv.dev/vulnerability/EEF-CVE-2026-470712324    EEF-CVE-2026-47075 (MEDIUM)25    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf26    CR/LF injection in query parameter in hackney27    https://osv.dev/vulnerability/EEF-CVE-2026-470752829    EEF-CVE-2026-47069 (LOW)30    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw231    CRLF injection in cookie domain/path options in hackney32    https://osv.dev/vulnerability/EEF-CVE-2026-470693334    GHSA-9fm9-hp7p-53mf (LOW)35    aka: CVE-2025-386436    Hackney fails to properly release HTTP connections to the pool37    https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf38  httpoison 0.8.139  idna 1.1.040  interactive_cmd 0.1.441  mimerl 1.0.242  nerves 2.0.0-pre.243  nerves_discovery 0.1.544  nerves_logging 0.2.445  nerves_runtime 0.13.1346  nerves_system_bbb 2.30.247  nerves_system_br 1.34.448  nerves_system_mangopi_mq_pro 0.17.249  nerves_system_qemu_aarch64 0.4.250  nerves_system_rpi0 2.1.251  nerves_system_rpi4 2.1.252  nerves_system_rpi5 2.1.253  nerves_system_trellis 0.5.054  nerves_system_x86_64 1.34.255  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.156  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.157  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.158  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.159  nerves_toolchain_x86_64_nerves_linux_musl 15.3.160  nerves_uevent 0.1.761  poison 1.5.262  property_table 0.3.463  ring_logger 0.11.764  ssl_verify_hostname 1.0.565  tablet 0.3.366  toolshed 0.5.067  uboot_env 1.0.268* Getting fitbit (Hex package)69* Getting nerves (Hex package)70* Getting ring_logger (Hex package)71* Getting toolshed (Hex package)72* Getting nerves_runtime (Hex package)73* Getting nerves_system_bbb (Hex package)74* Getting nerves_system_mangopi_mq_pro (Hex package)75* Getting nerves_system_qemu_aarch64 (Hex package)76* Getting nerves_system_rpi0 (Hex package)77* Getting nerves_system_rpi4 (Hex package)78* Getting nerves_system_rpi5 (Hex package)79* Getting nerves_system_trellis (Hex package)80* Getting nerves_system_x86_64 (Hex package)81* Getting nerves_system_br (Hex package)82* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)83* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)84* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)85* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)86* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)87* Getting nerves_logging (Hex package)88* Getting nerves_uevent (Hex package)89* Getting uboot_env (Hex package)90* Getting elixir_make (Hex package)91* Getting property_table (Hex package)92* Getting circular_buffer (Hex package)93* Getting interactive_cmd (Hex package)94* Getting nerves_discovery (Hex package)95* Getting tablet (Hex package)96* Getting hackney (Hex package)97* Getting httpoison (Hex package)98* Getting poison (Hex package)99* Getting certifi (Hex package)100* Getting idna (Hex package)101* Getting mimerl (Hex package)102* Getting ssl_verify_hostname (Hex package)103Found packages with security advisories, see above for details104    warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes105    │106 15 │       preferred_cli_env: ["coveralls": :test, "coveralls.detail": :test, "coveralls.post": :test]107    │                           ~108    │109    └─ /work/proj/deps_rpi4/fitbit/mix.exs:15:27110111    error: undefined variable "package"112    │113 10 │       package: package,114    │                ^^^^^^^115    │116    └─ /work/proj/deps_rpi4/fitbit/mix.exs:10:16: Fitbit.Mixfile.project/0117118Error while loading project :fitbit at /work/proj/deps_rpi4/fitbit119** (CompileError) deps_rpi4/fitbit/mix.exs: cannot compile module Fitbit.Mixfile (errors have been logged)120