This causes both Gradle and other XML parsers to reject it:
$ gradle test
[...]
[Fatal Error] openeddsa-1.1.0.pom:3:6: The processing instruction target matching "[xX][mM][lL]" is not allowed.
FAILURE: Build failed with an exception.
* What went wrong:
Execution failed for task ':webauthn-server-core-minimal:compileTestJava'.
> Could not resolve all files for configuration ':webauthn-server-core-minimal:testCompileClasspath'.
> Could not resolve org.openjsse.openeddsa:openeddsa:[1.1.0,2).
Required by:
project :webauthn-server-core-minimal
> Could not resolve org.openjsse.openeddsa:openeddsa:1.1.0.
> Could not parse POM https://repo.maven.apache.org/maven2/org/openjsse/openeddsa/openeddsa/1.1.0/openeddsa-1.1.0.pom
> The processing instruction target matching "[xX][mM][lL]" is not allowed.
[...]
Hi!
The 1.1.0 POM file published to Maven Central begins with a newline character:
This causes both Gradle and other XML parsers to reject it:
It is also rejected by both Firefox:
and Chrome:
The SHA1 checksum and PGP signature both check out, so this seems to be an issue with the original file rather than how Maven Central is serving it.