sbt download link not functioning

[JoeHegarty]

steps

Attempt to download SBT from the official website: http://www.scala-sbt.org/download.html

For example:

$ wget https://dl.bintray.com/sbt/native-packages/sbt/0.13.15/sbt-0.13.15.tgz

problem

Returns 403 Forbidden. This is also true of the zip package

$ wget https://dl.bintray.com/sbt/native-packages/sbt/0.13.15/sbt-0.13.15.tgz
--2017-04-16 12:25:58--  https://dl.bintray.com/sbt/native-packages/sbt/0.13.15/sbt-0.13.15.tgz
Resolving dl.bintray.com... 108.168.243.150
Connecting to dl.bintray.com|108.168.243.150|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2017-04-16 12:25:58 ERROR 403: Forbidden.

expectation

Download link should function as expected

notes

I've confirmed this is happening when I request from various ISPs so it doesn't seem specific to me.

[olafurpg]

I'm getting 403 errors too when resolving other bintray-hosted sbt plugins, for example sbt-site 1.2.0 https://dl.bintray.com/sbt/sbt-plugin-releases/com.typesafe.sbt/sbt-site/scala_2.10/sbt_0.13/1.2.0/ivys/ivy.xml ( cc/ scalameta/tutorial#11). I thought bintray might be down, but http://status.bintray.com/ says it's not.

[eed3si9n]

Bintray has put on rate-limit on sbt organization. I'm guessing that we have gone over some OSS allowance.

[jvican]

I'm getting the same error too when resolving sbt-pgp.

[emaxedon]

Phew, ok it's not just me. xD

[bitsnaps]

I'm getting the same error from binary, is there any way to build sbt from source?

[jvican]

@eed3si9n Have you contacted Bintray to solve this issue?

My CI is blocked on this: https://platform-ci.scala-lang.org/scalacenter/sbt-release-early/32. I cannot push local commits and release versions of my plugin until CI is green.

[eed3si9n]

Yes. The rate-limiting has been lifted.

[jvican]

Thank you. I confirm it's gone.

[eed3si9n]

Bintray is putting rate-limit on again..

[evictor]

Long term solution planned for this?

EDIT (to not cause further notifs): This is happening for me right now while building out a new CI.

[levismiller]

I'm getting the 503 again now as well

[kpmeen]

Only noticed this because I updated to the latest versions of some plugins. It's possible to continue working locally with old versions, but CI breaks.

[evictor]

It would be nice if there were binaries available at mirrors instead of the one bintray source that keeps 403ing. I Googled a little bit but I can't find mirrors.

[eed3si9n]

Here are the installers for 0.13.15:

https://downloads.typesafe.com/sbt/0.13.15/sbt-0.13.15.tgz
https://downloads.typesafe.com/sbt/0.13.15/sbt-0.13.15.zip
https://downloads.typesafe.com/sbt/0.13.15/sbt-0.13.15.msi

[ScottTRogers]

It is currently working again.

[eed3si9n]

Our Bintray repositories are operational again. This was apparently caused by our transfer usage quadrupling recently. We will figure out the long term plan going forward.

[minnsoe]

Bintray is 403ing again. The brew formula for sbt pulls from bintray and brew install sbt is failing as a result.

[eed3si9n]

Homebrew is now switched to use GitHub Releases.

[John-Steidley]

@eed3si9n "This was apparently caused by our transfer usage quadrupling recently."

This is probably related to the massive change in package size. sbt-0.13.13.deb is 1 MB, sbt-0.13.15.deb is 66.9MB.

[outime]

It's happening again.

[asdreno]

Getting a 403 when trying to access: https://dl.bintray.com/sbt/sbt-plugin-releases/com.typesafe.play/sbt-plugin/scala_2.10/sbt_0.13/2.5.14/ivys/ivy.xml

[omervk]

+1. Trying to get https://dl.bintray.com/sbt/native-packages/sbt/0.13.13/sbt-0.13.13.zip 403's.

[jhoffma]

Hey guys! Pls do something with it. Can't download https://dl.bintray.com/sbt/sbt-plugin-releases/com.github.gseitz/sbt-release/scala_2.10/sbt_0.13/1.0.3/jars/sbt-release.jar. My CI is failing...

[kpmeen]

this is starting to become really troublesome :-(

[omervk]

Looks like it's working at the moment

[syndbg]

Rate limit issues with bintray again.

[OutToLearn]

Not able to download the SBT from the website all of this week. :(

[onelogindavidkayal]

I had to comment out the repo to make things on my system happy for now:

root@DavidMint ~ # grep -R dl.bintray.com /etc/apt /etc/apt/sources.list.d/nekomit-originals.list:#deb https://dl.bintray.com/nekomit/deb-originals xenial main

When can I re-enable this repo?

[eed3si9n]

@OutToLearn @onelogindavidkayal

I am not aware of any Bintray issues as of today. Which repository or URLs are you guys having problem?

[roman3017]

When running apt update on xenial:

E: The repository 'https://dl.bintray.com/sbt/debian  Release' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[eed3si9n]

I just recalculated the signature.

[roman3017]

@eed3si9n: It works now, thank you very much.

[kdbeall]

@eed3si9n Having the same issue as @roman3017

[eed3si9n]

Let me recalculate the signature.

[kdbeall]

@eed3si9n Can this process be automated?

[eed3si9n]

Well it's supposed to be automated, but Bintray seems to be messing it up.

[Iro2412]

Please the same problem is happening again :
W: The repository 'https://dl.bintray.com/sbt/debian Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Help ! Thank you

[ghost]

We have massive problems with bintray, too (routing / availability) and our CI is failing too. Is it possible to host the important sbt artifacts on another repository where this stupid restrictions don't apply? (maybe maven central?)

[ErunamoJAZZ]

I am getting the same error in debian.

[jarrodu]

And again. 😢

[vvviiimmm]

And again...

[eed3si9n]

I'll resign again. I don't know how it's losing the signature.
Given that this issue reports various other issues, in the future let's use #3883 for "E: The repository 'https://dl.bintray.com/sbt/debian Release' is not signed." issue.