In the case I found last week it wasn’t a jar that we were even directly referencing; it was a library that was never mentioned anywhere in the repo. It’s just that some of the libraries we did depend on transitively depended on either

1.1

or

1.1.1

. So depending on which (seemingly unrelated) targets we compiled together, we got different transitive jar resolution