@tcrawley it looks like SSH signatures are being rejected from Clojars: https://p.hagelb.org/clojars-ssh.html
you can repro by trying a non-snapshot clojars deploy from lein main
Looking now
(also kinda looks like the new aether stuff messes up newlines in output?)
is there a different file extension we should use to indicate that it's a signature?
ah, it looks like .sig is canonical from ssh-keygen and not something lein controls
.sig is what clojars expects, so I'm still trying to figure out why this is failing, as there are tests that do the same as your deploy. I'll dig a bit more.
Regarding the newlines - I think the newer aether deploys in parallel, so we end up with interleaved output. I suspect we can do something about that, either serialize the uploads, or capture the output, or something. I can take a look.
hm; we do manual locking during retrieval in l.c.classpath/get-dependencies* but that's because it's our own code doing the printing in that case.
in the deploy case we just set transfer-listener to :stdout which I think makes pomegranate do the printing for us, so it'd have to be fixed there
Oh, I think I found the issue. Clojars doesn't properly handle it if you upload ssh /and/ gpg signatures. Working on a fix now.
I can look at pomegranate also (today, I think)
https://github.com/clojars/clojars-web/pull/948 should fix it. I'll deploy that once CI passes.
Putting up a fix for pomegranate now
.sig deploys should work now. @lee is cutting a pomegranate release to fix the interleaving; I'll put up a PR against lein once that is done to bump the pomegranate version.
grand; thank you!
My pleasure!