New year bug

Describe the bug dependency-check cli is failing without the nvd metadata file for the new year

[ERROR] Unable to download meta file: https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2020.meta; received 404 -- resource not found
org.owasp.dependencycheck.data.update.exception.UpdateException: Unable to download meta file: https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2020.meta; received 404 -- resource not found
	at org.owasp.dependencycheck.data.update.NvdCveUpdater.getMetaFile(NvdCveUpdater.java:351)
	at org.owasp.dependencycheck.data.update.NvdCveUpdater.getUpdatesNeeded(NvdCveUpdater.java:398)
	at org.owasp.dependencycheck.data.update.NvdCveUpdater.update(NvdCveUpdater.java:122)
	at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:922)
	at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase(Engine.java:723)
	at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:653)
	at org.owasp.dependencycheck.App.runScan(App.java:252)
	at org.owasp.dependencycheck.App.run(App.java:184)
	at org.owasp.dependencycheck.App.main(App.java:80)
Caused by: org.owasp.dependencycheck.utils.ResourceNotFoundException: Requested resource does not exists - received a 404
	at org.owasp.dependencycheck.utils.HttpResourceConnection.obtainConnection(HttpResourceConnection.java:204)
	at org.owasp.dependencycheck.utils.HttpResourceConnection.fetch(HttpResourceConnection.java:138)
	at org.owasp.dependencycheck.utils.Downloader.fetchContent(Downloader.java:110)
	at org.owasp.dependencycheck.data.update.NvdCveUpdater.getMetaFile(NvdCveUpdater.java:340)

** Version of dependency-check used ** The problem occurs using version 5.2.4 of the the cli (cli, gradle plugin, maven plugin, etc.)

** Log file ** When reporting errors, 99% of the time log file output is required. Please post the log file as a gist and provide a link in the new issue.

To Reproduce Steps to reproduce the behavior: Run a dependency check scan on Jan 1 of a new year.

Expected behavior Tool should continue without the metadata and cve feed for the new year.

Additional context Add any other context about the problem here.

[GFriedrich]

The files for 2020 have just been released: https://nvd.nist.gov/vuln/data-feeds#JSON_FEED That said: Everything should be working again for you. 😎

[vdotjansen]

This is open source people, stop demanding a release, a fix has been commited, a release will be made when Jeremy is ready for it. You can compile it on your own if you need it now. If I was Jeremy I would not rush to release as more changes have been made then just this small fix. If you want to have a 5.2.4 with just this patch you can take the source code from my fork (or preferably make your own) https://github.com/vdotjansen/DependencyCheck/tree/5.2.4-patched