gradle-versions-plugin: Cannot fetch the plugin 0.39.0 in circleci

Description

Ytd i kept getting the following error in circleci, i cant figure it out what is xstream dependency. It works as normal before but have no idea suddenly I got this error. I haven’t changed any lib version and plugin recently. It just happen suddenly

> Could not resolve all artifacts for configuration ':classpath'.
   > Could not find com.github.ben-manes.gradle-versions-plugin:xstream:0.39.0.
     Searched in the following locations:
       - https://dl.google.com/dl/android/maven2/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
       - https://repo.maven.apache.org/maven2/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
       - https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
       - https://plugins.gradle.org/m2/com/github/ben-manes/gradle-versions-plugin/xstream/0.39.0/xstream-0.39.0.pom
     Required by:
         project : > com.github.ben-manes.versions:com.github.ben-manes.versions.gradle.plugin:0.39.0 > com.github.ben-manes:gradle-versions-plugin:0.39.0 > com.github.ben-manes.gradle-versions-plugin:gradle-versions-plugin:0.39.0

Does anyone have any idea about this?

About this issue

Original URL
State: closed
Created 3 years ago
Reactions: 12
Comments: 16 (6 by maintainers)

Commits related to this issue

Fix build See https://github.com/ben-manes/gradle-versions-plugin/issues/541 and https://github.com/jitpack/jitpack.io/issues/4636 In general it's better to use jitpack only when necessary and maven... — committed to transportapi/es-kotlin-client by yassenb 3 years ago

Most upvoted comments

Hi all,

Your problem is jitpack. Somehow they have invalid metadata on their repository. See the following urls https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.39.0/ https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.39.0/gradle-versions-plugin-0.39.0.pom https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.39.0/gradle-versions-plugin-0.39.0.module

In comparison, the prior release has the correct metadata. https://jitpack.io/com/github/ben-manes/gradle-versions-plugin/gradle-versions-plugin/0.38.0/gradle-versions-plugin-0.38.0.pom

Since this is built externally and does not match our own build definition, I cannot say why or how this might have occurred. You should be weary of jitpack due to being an easier attack vector and use content filtering to restrict its usage. Please use the plugin portal for this dependency.

ben-manes on Jul 12, 2021

Downgrading to 0.38.0 worked for us or rather App Center too. Really strange because 0.39.0 worked fine until thursday and then suddenly stopped. App Center now also shows a warning “Gradle Task failures may be related to JFrog Bintray Shutdown/Brownouts” with a link to https://blog.gradle.org/jcenter-shutdown. Maybe related?

harry248 on Jul 12, 2021

I have exactly the same issue with 0.39.0. Reverting to 0.38.0 works perfectly. Gradle version 7.1.1.

acarlsen on Jul 10, 2021