theonedev/onedev · error · ClientException
Package version not specified
Error message
Package version not specified
What it means
Client-input guard in CargoPackHandler.publish: the uploaded metadata JSON lacks a 'vers' field, so the package version is unknown and the package cannot be registered; ClientException 400 is returned. Fix: include a valid version in the cargo metadata.
Source
Thrown at server-plugin/server-plugin-pack-cargo/src/main/java/io/onedev/server/plugin/pack/cargo/CargoPackHandler.java:151
private void publish(HttpServletRequest request, HttpServletResponse response, Long projectId, Long buildId) {
var upload = readPublishBody(request);
ObjectNode metadata;
try {
var metadataNode = objectMapper.readTree(upload.metadata);
if (metadataNode instanceof ObjectNode)
metadata = (ObjectNode) metadataNode;
else
throw new ClientException(SC_BAD_REQUEST, "Invalid package metadata");
} catch (IOException e) {
throw new ClientException(SC_BAD_REQUEST, "Invalid package metadata");
}
var name = metadata.path("name").asText(null);
var version = metadata.path("vers").asText(null);
if (StringUtils.isBlank(name))
throw new ClientException(SC_BAD_REQUEST, "Package name not specified");
if (StringUtils.isBlank(version))
throw new ClientException(SC_BAD_REQUEST, "Package version not specified");
if (!name.equals(name.toLowerCase()))
throw new ClientException(SC_BAD_REQUEST, "Package name should be lower case");
LockUtils.run(getLockName(projectId, name), () -> transactionService.run(() -> {
var project = checkProject(projectId, true);
var packBlobId = packBlobService.uploadBlob(projectId, upload.crateFile, null);
var packBlob = packBlobService.load(packBlobId);
var pack = packService.findByNameAndVersion(project, TYPE, name, version);
if (pack == null) {
pack = new Pack();
pack.setType(TYPE);
pack.setName(name);
pack.setVersion(version);
pack.setPrerelease(version.contains("-"));
pack.setProject(project);
}
pack.setData(new CargoData(upload.metadata, packBlob.getSha256Hash()));
Build build = null;
if (buildId != null)View on GitHub (pinned to d44925c47c)
Solutions
- Ensure the metadata includes a non-empty 'vers' value.
- Set the version properly in Cargo.toml before publishing.
Defensive patterns
Strategy: validation
When it happens
Trigger: Thrown at server-plugin/server-plugin-pack-cargo/src/main/java/io/onedev/server/plugin/pack/cargo/CargoPackHandler.java:151 when the library encounters an invalid state.
Common situations: See trigger scenarios.
AI-assisted analysis of theonedev/onedev@d44925c47c (2026-09-06).
Data as JSON: /api/errors/7b3fad2229aa87d6.
Report an issue: GitHub.