Skip to content

Release artifact is missing on Maven Central #3978

@Donnerbart

Description

@Donnerbart

Hey folks,

I just saw that you have released a new version that bumps gRPC to 1.76.0 (which includes a security fix for a HIGH rated vulnerability).

That release should contain com.google.cloud:sdk-platform-java-config:3.54.0 which would then trigger the updates on downstream projects like Google Cloud Pub/Sub Client for Java. But the artifact is not showing up on Maven Central yet:

For all recent releases the GitHub release dates and the dates on e.g. mvnrepository.com match exactly, so I didn't expect a delay here. I also cannot find a recent release failed issue.

Could someone kindly check if the release process is blocked somewhere?

I'm sorry for the urgency, but we're on a quite tight SLA to fix the security issue, and we still need to get this version bump through the Pub/Sub Client. And looking at the actual bump PR this is nothing we can fix with a version constraint on our side.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions