Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing dependency in mavenCentral file-specs-java 1.0.0 #522

Closed
haata opened this issue Jun 29, 2021 · 9 comments · Fixed by jfrog/file-specs-java#7 or #523
Closed

Missing dependency in mavenCentral file-specs-java 1.0.0 #522

haata opened this issue Jun 29, 2021 · 9 comments · Fixed by jfrog/file-specs-java#7 or #523
Assignees
Labels
question Further information is requested

Comments

@haata
Copy link

haata commented Jun 29, 2021

> Could not resolve all artifacts for configuration ':classpath'.
   > Could not find org.jfrog.filespecs:file-specs-java:1.0.0.
     Searched in the following locations:
       - https://artifactory.****.com/artifactory/maven/org/jfrog/filespecs/file-specs-java/1.0.0/file-specs-java-1.0.0.pom
       - https://artifactory.****.com/artifactory/maven/org/jfrog/filespecs/file-specs-java/1.0.0/file-specs-java-1.0.0.jar
     Required by:
         project : > org.jfrog.buildinfo:build-info-extractor-gradle:4.24.8 > org.jfrog.buildinfo:build-info-extractor:2.28.2

* Try:
Run with --stacktrace option to get the stack trace. Run with --info or --debug option to get more log output. Run with --scan to get full insights.

* Get more help at https://help.gradle.org

BUILD FAILED in 13s

FAILURE: Build failed with an exception.

It seems like the most recent release of build-info-extractor is pulling in a dependency that is not published in mavenCentral.

The only place I can find file-specs-java is from oss.jfrog.org (https://oss.jfrog.org/ui/packages/gav:%2F%2Forg.jfrog.filespecs:file-specs-java?name=file-specs-java&type=packages). Was this an oversight as this indicates the documentation here (https://www.jfrog.com/confluence/display/JFROG/Gradle+Artifactory+Plugin) is no longer correct (cannot used the latest.release for build-info-extractor-gradle).

@haata haata added the question Further information is requested label Jun 29, 2021
@haata
Copy link
Author

haata commented Jun 29, 2021

https://search.maven.org/artifact/org.jfrog.filespecs/file-specs-java

Why does mavenCentral even allow this?
(as of posting this, there are no entries here, even though mavenCentral has identified it as a package).

@spartanhooah
Copy link

This is breaking our builds. Going to have to pin an earlier version of build-info-extractor-gradle

@DanielJRutledge
Copy link

Everything's broken for us as well; was this dependency supposed to make into mavenCentral?

@prudnitskiy
Copy link

Any solution for it? We have this issue also

@spartanhooah
Copy link

I was able to specify classpath "org.jfrog.buildinfo:build-info-extractor-gradle:4.24.5" and my build worked.

@haata
Copy link
Author

haata commented Jun 29, 2021

@yahavi
Copy link
Member

yahavi commented Jun 29, 2021

@haata @prudnitskiy @DanielJRutledge @spartanhooah
Thanks for reporting this issue.
The build-info uses https://releases.jfrog.io/artifactory/oss-releases repository to resolve the new file-spec-java library. Unfortunately, Gradle plugins are not allowed to download dependencies from this repository. Therefore the solution is, as @haata said, to publish file-spec-java to Maven Central.

We are working on publishing this library to Maven Central. Here is the PR which should resolve this issue: jfrog/file-specs-java#7.

As a workaround, you can downgrade to Gradle Artifactory plugin 4.24.5:

buildscript {
  repositories {
    mavenCentral()
  }
  dependencies {
    classpath "org.jfrog.buildinfo:build-info-extractor-gradle:4.24.5"
  }
}
apply plugin: "com.jfrog.artifactory"

We're terribly sorry for this coincidence.

@yahavi
Copy link
Member

yahavi commented Jun 30, 2021

@haata @prudnitskiy @DanielJRutledge @spartanhooah
Gradle Artifactory plugin 2.28.3 is released. This version includes a fix for this issue.
We'd appreciate your feedback on that.

@DanielJRutledge
Copy link

The new one seems to work; though we had to introduce a new exception for the file-specs-java artifacts, as the licenses are not picked up for a couple days by Xray. It would be helpful to know whether you guys plan to introduce more artifact types.

We have an issue open with Jfrog support about the licenses for these artifacts not being picked up locally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
5 participants