Xamarin.Google.Android.Play.App.Update: jarsigner: unable to sign jar: java.util.zip.ZipException: attempt to write past end of STORED entry

[freezersharp]

Android framework version

net10.0-android

Affected platform version

VS2026

Description

When you update the Xamarin.Google.Android.Play.App.Update package to 2.1.0.18, you cannot sign the AAB file because this exception is throwed:
jarsigner: unable to sign jar: java.util.zip.ZipException: attempt to write past end of STORED entry

If you downgrade the package to the 2.1.0.16 version, the AAB file is correctly signed.

Steps to Reproduce

1. Update the Xamarin.Google.Android.Play.App.Update package to 2.1.0.18 version.
2. Compile the MAUI app.
3. Publish it.
4. Distribute
5. Select some certificate.
6. type the certificate's password.
7. Exception is throwed.

Did you find any workaround?

Downgrade the package to the 2.1.0.16 version (I haven't tested with 2.1.0.17 version), the AAB file is correctly signed.

Relevant log output

I have these references in the csproj file:

<ItemGroup Condition="'$(TargetFramework)' == 'net10.0-android36.0'">
	<PackageReference Include="Xamarin.Firebase.Analytics">
		<Version>123.0.0.3</Version>
	</PackageReference>
	<PackageReference Include="Xamarin.Firebase.Crashlytics">
		<Version>120.0.4.1</Version>
	</PackageReference>
	<PackageReference Include="Xamarin.GooglePlayServices.Base">
		<Version>118.10.0.1</Version>
	</PackageReference>
	<PackageReference Include="Xamarin.GooglePlayServices.Location">
		<Version>121.3.0.9</Version>
	</PackageReference>
	<PackageReference Include="Xamarin.Google.Android.Play.App.Update">
		<Version>2.1.0.18</Version> <!-- 2.1.0.16 version works fine -->
	</PackageReference>
</ItemGroup>


Additionally, I'm using another references:

<ItemGroup>
	<PackageReference Include="Acr.UserDialogs" Version="9.2.2" />
	<PackageReference Include="CommunityToolkit.Maui" Version="14.0.1" />
	<PackageReference Include="CsvHelper" Version="33.1.0" />
	<PackageReference Include="Microsoft.Maui.Controls" Version="10.0.50" />
	<PackageReference Include="Microsoft.Maui.Controls.Compatibility" Version="10.0.50" />
	<PackageReference Include="DevExpress.Maui.Pdf" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.Controls" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.Core" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.Charts" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.CollectionView" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.Editors" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.DataGrid" Version="25.2.5" />
	<PackageReference Include="DevExpress.Maui.Scheduler" Version="25.2.5" />
	<PackageReference Include="DevExpress.Data" Version="25.2.5" />

	<PackageReference Include="Microsoft.Maui.Controls.Maps" Version="10.0.50" />
	<PackageReference Include="Microsoft.Maui.Maps" Version="10.0.50" />
	<PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
	<PackageReference Include="Plugin.Maui.Audio" Version="4.0.0" />
	<PackageReference Include="PropertyChanged.Fody" Version="4.1.0" />
	<PackageReference Include="Sentry.Maui" Version="6.2.0" />
	<PackageReference Include="SkiaSharp.Extended.UI.Maui" Version="3.0.0" />
	<PackageReference Include="SkiaSharp.Views.Maui.Controls" Version="3.119.2" />
	<PackageReference Include="sqlite-net-pcl" Version="1.10.196-beta" />
	<PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.2" />
	<PackageReference Include="Xam.Plugin.Media" Version="6.0.2" />
	<PackageReference Include="Xamarin.Build.Download" Version="0.11.4" />
	<PackageReference Include="ZXing.Net.Maui.Controls" Version="0.7.4" />
	<PackageReference Include="Oscore.Maui.Android.InAppUpdates" Version="1.5.1" />
	<ProjectReference Include="..\Common\Common.csproj" />
</ItemGroup>


I tested with a new project with these references and the signing fails.

[freezersharp]

Edit: I have to downgrade all MAUI packages to this:

and

123.0.0.1 120.0.3 118.9.0 121.3.0.7 2.1.0.16

With these changes (downgrade), the AAB file is signed correctly. I guess that the lastest versions are not optimized and stable between them.