JLyrics icon indicating copy to clipboard operation
JLyrics copied to clipboard

Maven artifact on jitpack.io has checksum mismatch

Open eomanis opened this issue 3 years ago • 1 comments

When building JMusicBot 0.3.6 Maven emits a warning about a failed checksum validation for artifact jagrosh/JLyrics:

Downloading from jitpack.io: https://jitpack.io/com/github/jagrosh/JLyrics/-0f9ac5df83-1/JLyrics--0f9ac5df83-1.jar
[WARNING] Checksum validation failed, expected f4807c97939a3ca3f328bc81f359babcac9f0ff1 but is 21deacfbc2447cb9581229be15e12ec7296ff15e from jitpack.io for https://jitpack.io/com/github/jagrosh/JLyrics/-0f9ac5df83-1/JLyrics--0f9ac5df83-1.jar
[WARNING] Could not validate integrity of download from https://jitpack.io/com/github/jagrosh/JLyrics/-0f9ac5df83-1/JLyrics--0f9ac5df83-1.jar
org.eclipse.aether.transfer.ChecksumFailureException: Checksum validation failed, expected f4807c97939a3ca3f328bc81f359babcac9f0ff1 but is 21deacfbc2447cb9581229be15e12ec7296ff15e
    at org.eclipse.aether.connector.basic.ChecksumValidator.validateExternalChecksums (ChecksumValidator.java:174)
    at org.eclipse.aether.connector.basic.ChecksumValidator.validate (ChecksumValidator.java:103)
    at org.eclipse.aether.connector.basic.BasicRepositoryConnector$GetTaskRunner.runTask (BasicRepositoryConnector.java:460)
    at org.eclipse.aether.connector.basic.BasicRepositoryConnector$TaskRunner.run (BasicRepositoryConnector.java:364)
    at org.eclipse.aether.util.concurrency.RunnableErrorForwarder$1.run (RunnableErrorForwarder.java:75)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1128)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:628)
    at java.lang.Thread.run (Thread.java:829)
[WARNING] Checksum validation failed, expected f4807c97939a3ca3f328bc81f359babcac9f0ff1 but is 21deacfbc2447cb9581229be15e12ec7296ff15e from jitpack.io for https://jitpack.io/com/github/jagrosh/JLyrics/-0f9ac5df83-1/JLyrics--0f9ac5df83-1.jar
Downloaded from jitpack.io: https://jitpack.io/com/github/jagrosh/JLyrics/-0f9ac5df83-1/JLyrics--0f9ac5df83-1.jar (6.8 kB at 6.7 kB/s)

The JMusicBot 0.3.6 release pulls a -SNAPSHOT of JLyrics, I do not know if this error is expected for snapshots on jitpack.io.

<!-- jitpack for now, we need to version this correctly later -->
<dependency>
    <groupId>com.github.jagrosh</groupId>
    <artifactId>JLyrics</artifactId>
    <version>-SNAPSHOT</version>
</dependency>

eomanis avatar Nov 20 '21 00:11 eomanis

It looks like there are two different builds for the commit hash 0f9ac5df83 on jitpack. I'm not sure what caused this, but my assumption is that this issue will resolve itself naturally in future builds.

jagrosh avatar Mar 29 '22 17:03 jagrosh