Skip to content
This repository was archived by the owner on May 14, 2026. It is now read-only.
This repository was archived by the owner on May 14, 2026. It is now read-only.

Release artifact is missing on Maven Central #3978

Description

@Donnerbart

Hey folks,

I just saw that you have released a new version that bumps gRPC to 1.76.0 (which includes a security fix for a HIGH rated vulnerability).

That release should contain com.google.cloud:sdk-platform-java-config:3.54.0 which would then trigger the updates on downstream projects like Google Cloud Pub/Sub Client for Java. But the artifact is not showing up on Maven Central yet:

For all recent releases the GitHub release dates and the dates on e.g. mvnrepository.com match exactly, so I didn't expect a delay here. I also cannot find a recent release failed issue.

Could someone kindly check if the release process is blocked somewhere?

I'm sorry for the urgency, but we're on a quite tight SLA to fix the security issue, and we still need to get this version bump through the Pub/Sub Client. And looking at the actual bump PR this is nothing we can fix with a version constraint on our side.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions