Status 401 on mvn package, only against latest version

[merenze]

Select Topic Area

Question

Body

I have set up a workflow on GitHub to continuously publish my package to GitHub packages, so that I can build against it with a dummy application for testing.

name: Publish to GitHub Packages
run-name: ${{ github.actor }} is publishing to GitHub packages
on: [ push ]
jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Setup Java
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Publish
        run: mvn -B deploy
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

I'm having this peculiar issue where the credentials I provide in my settings.xml are sufficient to download one version of a package, but not another.

<?xml version="1.0" encoding="UTF-8"?>
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd">
		<servers>
			<server>
				<id>github</id>
				<username>jellyrekt-robot</username>
				<password>PAT_WITH_PACKAGE_READ</password>
			</server>
		</servers>

</settings>

Here is the POM for my package:

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
		 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		 xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
	<modelVersion>4.0.0</modelVersion>

	<groupId>com.jellyrekt</groupId>
	<artifactId>command-registrar</artifactId>
	<version>1.0-SNAPSHOT-2</version>

	<distributionManagement>
		<repository>
			<id>github</id>
			<name>GitHub JellyRekt Apache Maven Packages</name>
			<url>https://maven.pkg.github.com/jellyrekt/CommandRegistrar</url>
		</repository>
	</distributionManagement>


	<properties>
		<maven.compiler.source>17</maven.compiler.source>
		<maven.compiler.target>17</maven.compiler.target>
	</properties>

	<dependencies>
		<dependency>
			<groupId>io.papermc.paper</groupId>
			<artifactId>paper-api</artifactId>
			<version>1.20.1-R0.1-SNAPSHOT</version>
			<scope>provided</scope>
		</dependency>
	</dependencies>

	<repositories>
		<repository>
			<id>papermc</id>
			<url>https://repo.papermc.io/repository/maven-public/</url>
		</repository>
	</repositories>

</project>

The POM of my dummy project:

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
		 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		 xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
	<modelVersion>4.0.0</modelVersion>

	<groupId>org.example</groupId>
	<artifactId>Test</artifactId>
	<version>DEV</version>

	<properties>
		<maven.compiler.source>17</maven.compiler.source>
		<maven.compiler.target>17</maven.compiler.target>
	</properties>

	<build>
		<plugins>
			<plugin>
				<groupId>org.apache.maven.plugins</groupId>
				<artifactId>maven-shade-plugin</artifactId>
				<version>3.5.0</version>
				<configuration>
					<createDependencyReducedPom>false</createDependencyReducedPom>
				</configuration>
				<executions>
					<execution>
						<phase>package</phase>
						<goals>
							<goal>shade</goal>
						</goals>
					</execution>
				</executions>
			</plugin>
		</plugins>
	</build>

	<dependencies>
		<dependency>
			<groupId>com.jellyrekt</groupId>
			<artifactId>command-registrar</artifactId>
			<version>1.0-SNAPSHOT-2</version>
		</dependency>
		<dependency>
			<groupId>io.papermc.paper</groupId>
			<artifactId>paper-api</artifactId>
			<version>1.20.1-R0.1-SNAPSHOT</version>
			<scope>provided</scope>
		</dependency>
	</dependencies>

	<repositories>
		<repository>
			<id>github</id>
			<url>https://maven.pkg.github.com/jellyrekt/CommandRegistrar</url>
		</repository>

		<repository>
			<id>papermc</id>
			<url>https://repo.papermc.io/repository/maven-public/</url>
		</repository>
	</repositories>
</project>

With this POM, the result of mvn clean package:

[INFO] Scanning for projects...
[INFO]
[INFO] -----------------< com.jellyrekt:TestCommandRegistrar >-----------------
[INFO] Building TestCommandRegistrar 1.0-SNAPSHOT
[INFO] --------------------------------[ jar ]---------------------------------
Downloading from github: https://maven.pkg.github.com/jellyrekt/CommandRegistrar/com/jellyrekt/command-registrar/1.0-SNAPSHOT-2/command-registrar-1.0-SNAPSHOT-2.pom
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  1.144 s
[INFO] Finished at: 2023-09-06T19:53:51-05:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal on project TestCommandRegistrar: Could not resolve dependencies for project com.jellyrekt:TestCommandRegistrar:jar:1.0-SNAPSHOT: Failed to collect dependencies at com.jellyrekt:command-registrar:jar:1.
0-SNAPSHOT-2: Failed to read artifact descriptor for com.jellyrekt:command-registrar:jar:1.0-SNAPSHOT-2: Could not transfer artifact com.jellyrekt:command-registrar:pom:1.0-SNAPSHOT-2 from/to github (https://maven.pkg.github.com/jel
lyrekt/CommandRegistrar): authentication failed for https://maven.pkg.github.com/jellyrekt/CommandRegistrar/com/jellyrekt/command-registrar/1.0-SNAPSHOT-2/command-registrar-1.0-SNAPSHOT-2.pom, status: 401 Unauthorized -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException

However, when I replace the version of the dependency with the previous version 1.0-SNAPSHOT-1, the build succeeds.

Here is my project's GitHub Packages page.

[NordengenT]

I have the exact same problem, any resolution to this yet?

[merenze]

Unfortunately not. I gave up on this problem and just installed the package to my local repository.

…

On Fri, Sep 29, 2023, 1:53 AM Thomas Nordengen ***@***.***> wrote: I have the exact same problem, any resolution to this yet? — Reply to this email directly, view it on GitHub <#66262 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADVOSZQNKLTAJXRVI2AWXBLX4ZV77ANCNFSM6AAAAAA4OH7H3E> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬