Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handroll replacement for com.danubetech:verifiable-credentials-java #188

Open
mistermoe opened this issue Jan 13, 2024 · 4 comments · May be fixed by #249
Open

Handroll replacement for com.danubetech:verifiable-credentials-java #188

mistermoe opened this issue Jan 13, 2024 · 4 comments · May be fixed by #249
Assignees

Comments

@mistermoe
Copy link
Member

Rationale

  • Not published to maven central. consumers have to add danubetech's repository
  • introduces CVEs (though this may have been remedied in more recent versions)
  • Pulls in the entirety of bitcoinj as a dependency
@ALRubinger
Copy link
Contributor

Requesting escalation. The Danubetech repo has gone down today and is failing our builds across the suite.

From https://github.com/TBD54566975/developer.tbd.website/actions/runs/7904169542/job/21581706481:

Error:  Failed to execute goal on project kotlin-testsuite: Could not resolve dependencies for project website.tbd.developer.site:kotlin-testsuite:jar:0.1.0-SNAPSHOT: Failed to collect dependencies at xyz.block:tbdex:jar:0.10.0-beta -> xyz.block:tbdex-protocol:jar:0.10.0-beta -> xyz.block:web5:jar:0.0.11 -> xyz.block:web5-credentials:jar:0.0.11 -> com.danubetech:verifiable-credentials-java:jar:1.6.0: Failed to read artifact descriptor for com.danubetech:verifiable-credentials-java:jar:1.6.0: The following artifacts could not be resolved: com.danubetech:verifiable-credentials-java:pom:1.6.0 (absent): Could not transfer artifact com.danubetech:verifiable-credentials-java:pom:1.6.0 from/to danubetech (https://repo.danubetech.com/repository/maven-public/): status code: 500, reason phrase: Server Error (500) -> [Help 1]

Can be verified in a browser: https://repo.danubetech.com/repository/maven-public/com/danubetech/verifiable-credentials-java/1.6.0/verifiable-credentials-java-1.6.0.pom

image

@jiyoontbd is filing an issue with the maintainers, but until this comes back online - builds for all projects relying on this dep will fail.

@jiyoonie9
Copy link
Contributor

related to #228

@jiyoonie9
Copy link
Contributor

@nitro-neal i think you're currently working on this? can you please link the relevant PRs?

@jiyoonie9 jiyoonie9 linked a pull request Mar 19, 2024 that will close this issue
@nitro-neal nitro-neal self-assigned this Mar 21, 2024
@nitro-neal
Copy link
Contributor

here - #249

@nitro-neal nitro-neal moved this to In Code Review in SDK Development Mar 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: In Code Review
Development

Successfully merging a pull request may close this issue.

4 participants