You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@struts.apache.org by lu...@apache.org on 2026/06/11 05:11:35 UTC
(struts-intellij-plugin) branch ci/pin-zipsigner-version created (now 549e6bf)
This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a change to branch ci/pin-zipsigner-version
in repository https://gitbox.apache.org/repos/asf/struts-intellij-plugin.git
at 549e6bf ci: pin Marketplace ZIP Signer to 0.1.43
This branch includes the following new commits:
new 549e6bf ci: pin Marketplace ZIP Signer to 0.1.43
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(struts-intellij-plugin) 01/01: ci: pin Marketplace ZIP Signer to 0.1.43
Posted by lu...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch ci/pin-zipsigner-version
in repository https://gitbox.apache.org/repos/asf/struts-intellij-plugin.git
commit 549e6bf83c9ebc45b2d4858452d46931fac95553
Author: Lukasz Lenart <lu...@apache.org>
AuthorDate: Thu Jun 11 07:11:26 2026 +0200
ci: pin Marketplace ZIP Signer to 0.1.43
The nightly/release workflows intermittently fail at signPlugin with
"No Marketplace ZIP Signer executable found" even though zipSigner() is
declared. With no version pinned, a stale Gradle cache restored by
gradle/actions (e.g. saved by a non-signing build.yml run) can leave the
signing configuration empty. Pinning the version makes the signer
dependency deterministically resolvable.
Co-Authored-By: Claude Opus 4.8 <no...@anthropic.com>
---
CHANGELOG.md | 4 ++++
build.gradle.kts | 7 ++++++-
2 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e1db375..f40aa83 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@
## [Unreleased]
+### Fixed
+
+- Pin Marketplace ZIP Signer to `0.1.43` so `signPlugin` is deterministically resolvable and no longer fails with "No Marketplace ZIP Signer executable found" on a stale Gradle cache in the nightly/release workflows
+
## [261.19017.1] - 2026-04-28
### Added
diff --git a/build.gradle.kts b/build.gradle.kts
index b5ecaf6..7740235 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -65,7 +65,12 @@ dependencies {
bundledPlugin("com.intellij.modules.json")
pluginVerifier()
- zipSigner()
+ // Pin the Marketplace ZIP Signer version so the signing dependency is always
+ // deterministically resolvable. Without a version, a stale Gradle cache restored
+ // by gradle/actions (e.g. saved by a non-signing build.yml run) can leave the
+ // signing configuration empty, causing signPlugin to fail with
+ // "No Marketplace ZIP Signer executable found" in the nightly/release workflows.
+ zipSigner("0.1.43")
testFramework(TestFrameworkType.Platform)
testFramework(TestFrameworkType.Plugin.Java)