Build log
nerves_system_trellis
spawn_sdk 2.0.0-RC9 · fail · run spawn_sdk-2.0.0-RC9-1791107789864
353 of 353 lines
1Resolving Hex dependencies...2Resolution completed in 0.567s3Unchanged:4 acceptor_pool 1.0.15 broadway 1.3.06 castore 1.0.217 chacha20 1.0.48 circular_buffer 1.1.09 connection 1.1.010 cowboy 2.19.011 cowlib 2.20.0 VULNERABLE!12 EEF-CVE-2026-43966 (MEDIUM)13 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c14 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/215 https://osv.dev/vulnerability/EEF-CVE-2026-439661617 EEF-CVE-2026-43969 (LOW)18 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5619 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/120 https://osv.dev/vulnerability/EEF-CVE-2026-4396921 ctx 0.6.022 curve25519 1.0.623 decimal 2.4.1 VULNERABLE!24 EEF-CVE-2026-32686 (MEDIUM)25 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v26 Unbounded exponent in decimal enables unauthenticated DoS27 https://osv.dev/vulnerability/EEF-CVE-2026-3268628 decorator 1.4.029 delta_crdt 0.6.530 ed25519 1.5.231 elixir_make 0.10.032 equivalex 1.0.333 finch 0.24.034 flame 0.5.435 flame_k8s_backend 0.7.036 flow 1.2.437 gen_stage 1.3.238 gnat 1.18.039 googleapis 0.1.040 gproc 1.2.041 grpc 0.11.5 VULNERABLE!42 EEF-CVE-2026-53430 (HIGH)43 aka: CVE-2026-53430, GHSA-6ccx-9c9f-327w44 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/145 https://osv.dev/vulnerability/EEF-CVE-2026-534304647 EEF-CVE-2026-48854 (HIGH)48 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj49 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc50 https://osv.dev/vulnerability/EEF-CVE-2026-488545152 EEF-CVE-2026-48853 (CRITICAL)53 aka: CVE-2026-48853, GHSA-grp7-v8xh-rj7h54 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc55 https://osv.dev/vulnerability/EEF-CVE-2026-488535657 EEF-CVE-2026-48599 (HIGH)58 aka: CVE-2026-48599, GHSA-mwr4-5g34-j5cq59 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding60 https://osv.dev/vulnerability/EEF-CVE-2026-4859961 grpcbox 0.18.062 gun 2.6.0 VULNERABLE!63 GHSA-w4f7-4cxr-rv3c (MEDIUM)64 aka: CVE-2026-43966, EEF-CVE-2026-4396665 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability66 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c67 highlander 0.2.168 horde 0.10.069 hpack_erl 0.3.070 hpax 0.1.2 VULNERABLE!71 EEF-CVE-2026-58226 (HIGH)72 aka: CVE-2026-58226, GHSA-jj2p-32j7-whj273 Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax74 https://osv.dev/vulnerability/EEF-CVE-2026-5822675 interactive_cmd 0.1.476 iter 0.1.377 jason 1.4.578 jetstream 0.0.9 RETIRED!79 (renamed) Merged into the main nats.ex (gnat) library. Use Gnat.Jetstream from the :gnat package instead.80 k8s 2.8.081 k8s_webhoox 0.2.082 kcl 1.5.283 libcluster 3.5.084 libring 1.7.085 merkle_map 0.2.286 mime 2.0.787 mint 1.10.288 mint_web_socket 1.0.689 nebulex 2.6.690 nerves 2.0.0-pre.291 nerves_discovery 0.1.592 nerves_logging 0.2.493 nerves_runtime 0.13.1394 nerves_system_bbb 2.30.295 nerves_system_br 1.34.496 nerves_system_mangopi_mq_pro 0.17.297 nerves_system_qemu_aarch64 0.4.298 nerves_system_rpi0 2.1.299 nerves_system_rpi4 2.1.2100 nerves_system_rpi5 2.1.2101 nerves_system_trellis 0.5.0102 nerves_system_x86_64 1.34.2103 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1104 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1105 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1106 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1107 nerves_toolchain_x86_64_nerves_linux_musl 15.3.1108 nerves_uevent 0.1.7109 nimble_options 1.1.1110 nimble_parsec 1.4.2111 nimble_pool 1.1.0112 nkeys 0.3.1113 opentelemetry 1.7.0114 opentelemetry_api 1.5.0115 opentelemetry_ecto 1.2.0116 opentelemetry_exporter 1.11.0117 opentelemetry_process_propagator 0.3.0118 phoenix_pubsub 2.3.0119 phoenix_pubsub_nats 0.2.3120 plug 1.20.3121 plug_crypto 2.2.0122 pluggable 1.1.0123 poly1305 1.0.4124 poolboy 1.5.2125 property_table 0.3.4126 protobuf 0.17.0127 protobuf_generate 0.2.1128 ranch 2.3.0129 retry 0.19.0130 ring_logger 0.11.7131 salsa20 1.0.4132 shards 1.1.1133 spawn 2.0.0-RC9134 spawn_sdk 2.0.0-RC9135 ssl_verify_fun 1.1.7136 tablet 0.3.3137 telemetry 1.4.2138 telemetry_metrics 1.2.0139 telemetry_metrics_prometheus_core 1.2.1140 telemetry_poller 1.3.0141 tls_certificate_check 1.35.0142 toolshed 0.5.0143 ts_chatterbox 0.16.0144 uboot_env 1.0.2145 uuid 1.1.8146 x509 0.8.10147 yamerl 0.10.0148 yaml_elixir 2.12.2149* Getting spawn_sdk (Hex package)150* Getting nerves (Hex package)151* Getting ring_logger (Hex package)152* Getting toolshed (Hex package)153* Getting nerves_runtime (Hex package)154* Getting nerves_system_bbb (Hex package)155* Getting nerves_system_mangopi_mq_pro (Hex package)156* Getting nerves_system_qemu_aarch64 (Hex package)157* Getting nerves_system_rpi0 (Hex package)158* Getting nerves_system_rpi4 (Hex package)159* Getting nerves_system_rpi5 (Hex package)160* Getting nerves_system_trellis (Hex package)161* Getting nerves_system_x86_64 (Hex package)162* Getting nerves_system_br (Hex package)163* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)164* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)165* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)166* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)167* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)168* Getting nerves_logging (Hex package)169* Getting nerves_uevent (Hex package)170* Getting uboot_env (Hex package)171* Getting elixir_make (Hex package)172* Getting property_table (Hex package)173* Getting circular_buffer (Hex package)174* Getting interactive_cmd (Hex package)175* Getting nerves_discovery (Hex package)176* Getting tablet (Hex package)177* Getting spawn (Hex package)178* Getting broadway (Hex package)179* Getting castore (Hex package)180* Getting decimal (Hex package)181* Getting decorator (Hex package)182* Getting finch (Hex package)183* Getting flame_k8s_backend (Hex package)184* Getting flow (Hex package)185* Getting gnat (Hex package)186* Getting grpc (Hex package)187* Getting highlander (Hex package)188* Getting horde (Hex package)189* Getting hpax (Hex package)190* Getting iter (Hex package)191* Getting jason (Hex package)192* Getting jetstream (Hex package)193* Getting k8s (Hex package)194* Getting k8s_webhoox (Hex package)195* Getting libcluster (Hex package)196* Getting nebulex (Hex package)197* Getting opentelemetry (Hex package)198* Getting opentelemetry_api (Hex package)199* Getting opentelemetry_ecto (Hex package)200* Getting opentelemetry_exporter (Hex package)201* Getting phoenix_pubsub (Hex package)202* Getting phoenix_pubsub_nats (Hex package)203* Getting pluggable (Hex package)204* Getting protobuf (Hex package)205* Getting protobuf_generate (Hex package)206* Getting retry (Hex package)207* Getting shards (Hex package)208* Getting telemetry (Hex package)209* Getting telemetry_metrics (Hex package)210* Getting telemetry_metrics_prometheus_core (Hex package)211* Getting telemetry_poller (Hex package)212* Getting uuid (Hex package)213* Getting grpcbox (Hex package)214* Getting tls_certificate_check (Hex package)215* Getting ssl_verify_fun (Hex package)216* Getting acceptor_pool (Hex package)217* Getting chatterbox (Hex package)218* Getting ctx (Hex package)219* Getting gproc (Hex package)220* Getting hpack (Hex package)221* Getting opentelemetry_process_propagator (Hex package)222* Getting plug (Hex package)223* Getting x509 (Hex package)224* Getting yaml_elixir (Hex package)225* Getting yamerl (Hex package)226* Getting mime (Hex package)227* Getting plug_crypto (Hex package)228* Getting mint (Hex package)229* Getting mint_web_socket (Hex package)230* Getting poolboy (Hex package)231* Getting connection (Hex package)232* Getting delta_crdt (Hex package)233* Getting libring (Hex package)234* Getting merkle_map (Hex package)235* Getting cowboy (Hex package)236* Getting cowlib (Hex package)237* Getting googleapis (Hex package)238* Getting gun (Hex package)239* Getting ranch (Hex package)240* Getting nimble_parsec (Hex package)241* Getting nkeys (Hex package)242* Getting ed25519 (Hex package)243* Getting kcl (Hex package)244* Getting curve25519 (Hex package)245* Getting poly1305 (Hex package)246* Getting salsa20 (Hex package)247* Getting chacha20 (Hex package)248* Getting equivalex (Hex package)249* Getting gen_stage (Hex package)250* Getting flame (Hex package)251* Getting nimble_options (Hex package)252* Getting nimble_pool (Hex package)253Found retired packages, see above for details254Found packages with security advisories, see above for details255You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more256==> nerves_system_br257Generated nerves_system_br app258==> connection259Compiling 1 file (.ex)260 warning: using single-quoted strings to represent charlists is deprecated.261 Use ~c"" if you indeed want a charlist or use "" instead.262 You may run "mix format --migrate" to change all single-quoted263 strings to use the ~c sigil and fix this warning.264 │265 553 │ [{:data, [{'State', mod_state}]}]266 │ ~267 │268 └─ lib/connection.ex:553:20269270 warning: using single-quoted strings to represent charlists is deprecated.271 Use ~c"" if you indeed want a charlist or use "" instead.272 You may run "mix format --migrate" to change all single-quoted273 strings to use the ~c sigil and fix this warning.274 │275 680 │ format = '** Generic server ~p terminating \n' ++276 │ ~277 │278 └─ lib/connection.ex:680:14279280 warning: using single-quoted strings to represent charlists is deprecated.281 Use ~c"" if you indeed want a charlist or use "" instead.282 You may run "mix format --migrate" to change all single-quoted283 strings to use the ~c sigil and fix this warning.284 │285 681 │ '** Last message in was ~p~n' ++ ## No last message286 │ ~287 │288 └─ lib/connection.ex:681:7289290 warning: using single-quoted strings to represent charlists is deprecated.291 Use ~c"" if you indeed want a charlist or use "" instead.292 You may run "mix format --migrate" to change all single-quoted293 strings to use the ~c sigil and fix this warning.294 │295 682 │ '** When Server state == ~p~n' ++296 │ ~297 │298 └─ lib/connection.ex:682:7299300 warning: using single-quoted strings to represent charlists is deprecated.301 Use ~c"" if you indeed want a charlist or use "" instead.302 You may run "mix format --migrate" to change all single-quoted303 strings to use the ~c sigil and fix this warning.304 │305 683 │ '** Reason for termination == ~n** ~p~n'306 │ ~307 │308 └─ lib/connection.ex:683:7309310Generated connection app311==> pluggable312Compiling 4 files (.ex)313Generated pluggable app314==> gen_stage315Compiling 10 files (.ex)316 warning: unused require Logger317 │318 103 │ require Logger319 │ ~320 │321 └─ lib/gen_stage/dispatchers/partition_dispatcher.ex:103:3322323Generated gen_stage app324==> salsa20325Compiling 1 file (.ex)326Generated salsa20 app327==> ed25519328Compiling 2 files (.ex)329Generated ed25519 app330==> mime331Compiling 1 file (.ex)332Generated mime app333==> libring334Compiling 5 files (.ex)335Generated libring app336warning: "xref: [exclude: ...]" in your mix.exs file is deprecated, instead use: "elixirc_options: [no_warn_undefined: ...]"337 (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:243: Mix.Tasks.Compile.Elixir.xref_exclude_opts/2338 (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:142: Mix.Tasks.Compile.Elixir.run/1339 (mix 1.20.3) lib/mix/task.ex:502: anonymous fn/3 in Mix.Task.run_task/5340 (mix 1.20.3) lib/mix/task.compiler.ex:299: Mix.Task.Compiler.run_compiler/2341 (mix 1.20.3) lib/mix/task.compiler.ex:287: Mix.Task.Compiler.run/4342 (mix 1.20.3) lib/mix/tasks/compile.all.ex:75: Mix.Tasks.Compile.All.do_run/2343344==> x509345Compiling 24 files (.ex)346347== Compilation error in file lib/x509/asn1.ex ==348** (ArgumentError) no record AttributePKCS-10 found at /usr/local/lib/erlang/lib/public_key-1.21.6/include/PKCS-FRAME.hrl. Or the record does not exist or its entry is malformed or depends on other include files349 (elixir 1.20.3) lib/record/extractor.ex:60: Record.Extractor.extract_record/2350 lib/x509/asn1.ex:73: anonymous fn/1 in :elixir_compiler_112.__MODULE__/1351 (elixir 1.20.3) lib/enum.ex:983: Enum."-each/2-lists^foreach/1-0-"/2352 lib/x509/asn1.ex:57: (module)353could not compile dependency :x509, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile x509 --force", update it with "mix deps.update x509" or clean it with "mix deps.clean x509"