Could not determine the dependencies of task ':src:dist:javadocAggregate'. > Could not resolve all dependencies for configuration ':src:protocol:jdbc:compileClasspath'. > Checksum/PGP violations detected on resolving configuration :src:protocol:jdbc:runtimeClasspath No trusted PGP keys are configured for group jakarta.transaction: jakarta.transaction:jakarta.transaction-api:1.3.3 (pgp=[47ef0ec60c210bc6dfaa5819b7ae15c15c321c44], sha512=[computation skipped]) There might be more checksum violations, however, current configuration specifies the build to fail on the first violation. You might use the following properties: * -PchecksumIgnore temporary disables checksum-dependency-plugin (e.g. to try new dependencies) * -PchecksumUpdate updates checksum.xml and it will fail after the first violation so you can review the diff * -PchecksumUpdateAll (insecure) updates checksum.xml with all the new discovered checksums * -PchecksumFailOn=build_finish (insecure) It will postpone the failure till the build finish It will collect all the violations, however untrusted code might be executed (e.g. from a plugin) You can find updated checksum.xml file at /Users/runner/work/jmeter/jmeter/build/checksum/checksum.xml. You might add -PchecksumUpdate to update root checksum.xml file.