Unfortunately, 5.4.30.Final appears to be the last version of this dependency which is available in Maven Central with a signature. Later versions (including two more patches in the 5.4 series, and all of the 5.5 and 6.0 series) are available in Maven Central with no signatures. I had thought this was no longer permitted by Maven Central, but apparently I was wrong.
For now, we will sit on the most recent signed version awaiting resolution of the upstream signature issue. has submitted an issue to Sonatype to inquire about this:
Notwithstanding https://shibboleth.atlassian.net/browse/OSJ-342 we would like the version of
hibernatewe ship to be as recent as possible.Unfortunately, 5.4.30.Final appears to be the last version of this dependency which is available in Maven Central with a signature. Later versions (including two more patches in the 5.4 series, and all of the 5.5 and 6.0 series) are available in Maven Central with no signatures. I had thought this was no longer permitted by Maven Central, but apparently I was wrong.
For now, we will sit on the most recent signed version awaiting resolution of the upstream signature issue. has submitted an issue to Sonatype to inquire about this:
https://issues.sonatype.org/browse/MVNCENTRAL-7304
Note that this is not a public issue (I think that is probably the initial default for all MVNCENTRAL issues, but we don’t know this for sure).