question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Cannot fetch the plugin 0.39.0 in circleci

See original GitHub issue

Description

Ytd i kept getting the following error in circleci, i cant figure it out what is xstream dependency. It works as normal before but have no idea suddenly I got this error. I haven’t changed any lib version and plugin recently. It just happen suddenly

> Could not resolve all artifacts for configuration ':classpath'.
   > Could not find com.github.ben-manes.gradle-versions-plugin:xstream:0.39.0.
     Searched in the following locations:
       - https://dl.google.com/dl/android/maven2/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
       - https://repo.maven.apache.org/maven2/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
       - https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
       - https://plugins.gradle.org/m2/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
     Required by:
         project : > com.github.ben-manes.versions:com.github.ben-manes.versions.gradle.plugin:0.39.0 > com.github.ben-manes:gradle-versions-plugin:0.39.0 > com.github.ben-manes.gradle-versions-plugin:gradle-versions-plugin:0.39.0

Does anyone have any idea about this?

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Reactions:12
  • Comments:16 (6 by maintainers)

github_iconTop GitHub Comments

5reactions
ben-manescommented, Jul 12, 2021

Hi all,

Your problem is jitpack. Somehow they have invalid metadata on their repository. See the following urls https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.39.0/ https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.39.0/gradle-versions-plugin-0.39.0.pom https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.39.0/gradle-versions-plugin-0.39.0.module

In comparison, the prior release has the correct metadata. https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.38.0/gradle-versions-plugin-0.38.0.pom

Since this is built externally and does not match our own build definition, I cannot say why or how this might have occurred. You should be weary of jitpack due to being an easier attack vector and use content filtering to restrict its usage. Please use the plugin portal for this dependency.

3reactions
harry248commented, Jul 12, 2021

Downgrading to 0.38.0 worked for us or rather App Center too. Really strange because 0.39.0 worked fine until thursday and then suddenly stopped. App Center now also shows a warning “Gradle Task failures may be related to JFrog Bintray Shutdown/Brownouts” with a link to https://blog.gradle.org/jcenter-shutdown. Maybe related?

Read more comments on GitHub >

github_iconTop Results From Across the Web

Issues fetching dependencies from Github - CircleCI Discuss
Staring today our builds stopped working due to HTTP request to github based dependency. Below is the log from yarn.
Read more >
Telegraf 1.24 release notes - InfluxData Documentation
Bug fixes. Clear error message when provided configuration is not a text file. Enable global confirmation for installing mingw . Input plugin updates....
Read more >
homebrew-core - Homebrew Formulae
a2ps 4.14 Any‑to‑PostScript filter aacgain 1.8 AAC‑supporting version of mp3gain aalib 1.4rc5 Portable ASCII art graphics library aamath 0.3 Renders mathematical expressions as ASCII art
Read more >
Getting Started - CocoaPods Guides
CocoaPods will resolve dependencies between libraries, fetch the resulting source code, then link it together in an Xcode workspace to build your project....
Read more >
rollup - UNPKG
getWatchFiles" function to plugin context to get the current set of watched ... find named plugin exports, throw when export cannot be found...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found