The latest published snapshots do not have the sources or javadoc jar present. This appears to be the case for 6.0.0-SNAPSHOT, 5.6.1-SNAPSHOT and 5.7.0-SNAPSHOT.

Comment From: rwinch

This appears to be an issue with Artifactory and we are working with them on resolving it.

Comment From: rwinch

In the meantime a workaround is to publish to a local repository location by running the following command:

./gradlew publishMavenJavaPublicationToLocalRepository

A maven repository will be published locally at build/publications/repos/ and contains accurate binary, source, and javadoc. NOTE: You'd need to use JDK 16 for Security 6 (on main) and JDK 11 (this is to support optional OpenSaml4 support which is JDK 11) for Security 5.7 and 5.6

You can then point your build to a Maven repository with a file URL. Something like file:///home/rwinch/code/spring-projects/spring-security/build/publications/repos/

Comment From: trevormarshall

https://github.com/jfrog/build-info/issues/625