Could not determine the dependencies of task ':src:components:test'. > Checksum/PGP violations detected on resolving configuration :src:components:testRuntimeClasspath No PGP signature (.asc file) found for artifact: com.google.guava:guava:31.1-jre (pgp=[], sha512=[9233C4EC59AAC22305B97214595027C6813222D643420F32C0ABF60E86561DEF95B6981DDE2CD7B1A402537B7454D583CDFE07D5A8B4D6AF74E46DB6E7176B0F]) There might be more checksum violations, however, current configuration specifies the build to fail on the first violation. You might use the following properties: * -PchecksumIgnore temporary disables checksum-dependency-plugin (e.g. to try new dependencies) * -PchecksumUpdate updates checksum.xml and it will fail after the first violation so you can review the diff * -PchecksumUpdateAll (insecure) updates checksum.xml with all the new discovered checksums * -PchecksumFailOn=build_finish (insecure) It will postpone the failure till the build finish It will collect all the violations, however untrusted code might be executed (e.g. from a plugin) You can find updated checksum.xml file at D:\a\jmeter\jmeter\build\checksum\checksum.xml. You might add -PchecksumUpdate to update root checksum.xml file.