Skip to content

fix(comscore): remove defunct Bintray Maven repository - #495

Merged
tvanlaerhoven merged 1 commit into
mainfrom
bugfix/comscore-remove-bintray
Oct 20, 2026
Merged

tvanlaerhoven merged 1 commit into
mainfrom
bugfix/comscore-remove-bintray

Conversation

@tvanlaerhoven

@tvanlaerhoven tvanlaerhoven commented Oct 20, 2026 •

Copy link
Copy Markdown
Member

Summary

Android apps using the Comscore connector fail to build with recent Gradle releases (e.g. 8.14.6):

Could not resolve com.theoplayer.theoplayer-sdk-android:core:[10.0.0, 12.0.0).
  Required by: project :theoplayer_react-native-analytics-comscore
  > Repository maven9 is disabled due to earlier error below:

The connector still declared https://comscore.bintray.com/Analytics. Bintray was shut down in 2021; the host now serves a *.jfrog.io certificate, so the SSL handshake fails. Older Gradle versions skipped the failing repository; Gradle 8.14.6 (GHSA-j5m7-59rp-24f5) disables it, and because the connector uses dynamic versions ([10.0.0, 12.0.0), 6.15.+) every repository is queried and resolution fails.

  • Remove the Bintray repository. The Comscore SDK (com.comscore:android-analytics) is published to Maven Central, which is already declared, so nothing needs to replace it.
  • Changeset: patch for @theoplayer/react-native-analytics-comscore.

Found while upgrading react-native-theoplayer's e2e app to Gradle 8.14.6 (THEOplayer/react-native-theoplayer#988).

Test plan

  • Standalone Gradle 8.14.6 project with the connector's repository list resolving com.theoplayer.theoplayer-sdk-android:core:[10.0.0, 12.0.0) and com.comscore:android-analytics:6.15.+:
    • with the Bintray repository: Could not resolve ... Repository maven2 is disabled due to earlier error
    • without it: resolves core:11.13.0-0 and android-analytics:6.15.0
  • CI pr_android.yml builds the e2e app
  • Gradle-only change: package npm test / npm run typescript not affected.

Generated with Devin


Devin Review

Bintray was shut down in 2021 and comscore.bintray.com now fails the SSL
handshake. Recent Gradle releases (e.g. 8.14.6) disable a repository after
such a failure instead of skipping it, so resolving the dynamic THEOplayer
SDK and Comscore versions fails. The Comscore SDK is published to Maven
Central, which is already declared.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@changeset-bot

changeset-bot Bot commented Oct 20, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 718cf29

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@theoplayer/react-native-analytics-comscore Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Devin Review

@tvanlaerhoven
tvanlaerhoven merged commit 7af23e6 into main Oct 20, 2026
6 checks passed
@tvanlaerhoven
tvanlaerhoven deleted the bugfix/comscore-remove-bintray branch October 20, 2026 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant