[
https://issues.apache.org/jira/browse/KAFKA-21299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dejan Stojadinović updated KAFKA-21299:
---------------------------------------
Description:
*TLDR: *wrapperJarUrl* in *wrapper.gradle* file can't be used to fetch Gradle
9.8.1. wrapper jar because Gradle change something on their side (v9.8.0 and
v9.8.1 chesksums are identical):
{code}
dejan@home:~$ date
Sat 17 Oct 09:17:07 CEST 2026
dejan@home:~$ curl -sL
https://raw.githubusercontent.com/gradle/gradle/v9.7.1/gradle/wrapper/gradle-wrapper.jar
| shasum -a 256
7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d -
dejan@home:~$ curl -sL
https://raw.githubusercontent.com/gradle/gradle/v9.8.0/gradle/wrapper/gradle-wrapper.jar
| shasum -a 256
238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5 -
dejan@home:~$ curl -sL
https://raw.githubusercontent.com/gradle/gradle/v9.8.1/gradle/wrapper/gradle-wrapper.jar
| shasum -a 256
238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5 -
dejan@home:~$ date
Sat 17 Oct 09:17:51 CEST 2026
dejan@home:~$
{code}
*Note: this is not a bug on a Gradle side*; both
https://gradle.org/release-checksums and/or
https://services.gradle.org/distributions are showing proper SHA sums:
* 9.7.1: 7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d
* 9.8.0: 238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5
* 9.8.1: 3b8a25775a69158b5ad2b1d17a80a88dc7b40a352a73eb27d06c612a7ce68e98
Related Gradle issue:
https://github.com/gradle/gradle/issues/39471#issuecomment-6189156726
How to reproduce this on Kafka side:
* try to upgrade Gradle version from 9.7.1 to 9.8.1 (follow manual in
kafka/gradle/wrapper/README.md)
* try to execute Gradle command, for example: *./gradlew clean* and error
appears
was:
*TLDR: *wrapperJarUrl* in *wrapper.gradle* file can't be used to fetch Gradle
9.8.1. wrapper jar because Gradle change something on their side (v9.8.0 and
v9.8.1 chesksums are identical):
{code}
dejan@home:~$ date
Sat 17 Oct 09:17:07 CEST 2026
dejan@home:~$ curl -sL
https://raw.githubusercontent.com/gradle/gradle/v9.7.1/gradle/wrapper/gradle-wrapper.jar
| shasum -a 256
7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d -
dejan@home:~$ curl -sL
https://raw.githubusercontent.com/gradle/gradle/v9.8.0/gradle/wrapper/gradle-wrapper.jar
| shasum -a 256
238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5 -
dejan@home:~$ curl -sL
https://raw.githubusercontent.com/gradle/gradle/v9.8.1/gradle/wrapper/gradle-wrapper.jar
| shasum -a 256
238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5 -
dejan@home:~$ date
Sat 17 Oct 09:17:51 CEST 2026
dejan@home:~$
{code}
*Note: this is not a bug on a Gradle side*; both
https://gradle.org/release-checksums and/or
https://services.gradle.org/distributions are showing proper SHA sums:
* 9.7.1: 7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d
* 9.8.0: 238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5
* 9.8.1: 3b8a25775a69158b5ad2b1d17a80a88dc7b40a352a73eb27d06c612a7ce68e98
Related Gradle issue:
https://github.com/gradle/gradle/issues/39471#issuecomment-6189156726
> Fix wrapper jar checksum validation in Gradle 9.8.1
> ---------------------------------------------------
>
> Key: KAFKA-21299
> URL: https://issues.apache.org/jira/browse/KAFKA-21299
> Project: Kafka
> Issue Type: Bug
> Components: build
> Reporter: Dejan Stojadinović
> Assignee: Dejan Stojadinović
> Priority: Major
> Labels: Gradle, checksum, gradle
>
> *TLDR: *wrapperJarUrl* in *wrapper.gradle* file can't be used to fetch Gradle
> 9.8.1. wrapper jar because Gradle change something on their side (v9.8.0 and
> v9.8.1 chesksums are identical):
> {code}
> dejan@home:~$ date
> Sat 17 Oct 09:17:07 CEST 2026
> dejan@home:~$ curl -sL
> https://raw.githubusercontent.com/gradle/gradle/v9.7.1/gradle/wrapper/gradle-wrapper.jar
> | shasum -a 256
> 7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d -
> dejan@home:~$ curl -sL
> https://raw.githubusercontent.com/gradle/gradle/v9.8.0/gradle/wrapper/gradle-wrapper.jar
> | shasum -a 256
> 238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5 -
> dejan@home:~$ curl -sL
> https://raw.githubusercontent.com/gradle/gradle/v9.8.1/gradle/wrapper/gradle-wrapper.jar
> | shasum -a 256
> 238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5 -
> dejan@home:~$ date
> Sat 17 Oct 09:17:51 CEST 2026
> dejan@home:~$
> {code}
>
> *Note: this is not a bug on a Gradle side*; both
> https://gradle.org/release-checksums and/or
> https://services.gradle.org/distributions are showing proper SHA sums:
> * 9.7.1: 7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d
> * 9.8.0: 238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5
> * 9.8.1: 3b8a25775a69158b5ad2b1d17a80a88dc7b40a352a73eb27d06c612a7ce68e98
> Related Gradle issue:
> https://github.com/gradle/gradle/issues/39471#issuecomment-6189156726
> How to reproduce this on Kafka side:
> * try to upgrade Gradle version from 9.7.1 to 9.8.1 (follow manual in
> kafka/gradle/wrapper/README.md)
> * try to execute Gradle command, for example: *./gradlew clean* and error
> appears
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
