GitLab Dependency Failing with 403: Forbidden

GitLab provides documentation for Gradle.
In my case, I am using the instance level maven endpoint.
I am experiencing the following error.

[DEBUG] [org.gradle.internal.operations.DefaultBuildOperationRunner] 
  Build operation 'Download https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom' started
[DEBUG] [org.gradle.internal.resource.transport.http.HttpResourceAccessor] 
  Constructing external resource: https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom
[DEBUG] [org.gradle.internal.resource.transport.http.HttpClientHelper] 
  Performing HTTP GET: https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom
[DEBUG] [org.gradle.internal.resource.transport.http.HttpClientConfigurer] 
  Using Credentials [header: Private-Token] for authenticating against 'gitlab.opengroup.us:-1' using header
[DEBUG] [org.apache.http.client.protocol.RequestAddCookies] CookieSpec selected: default
[DEBUG] [org.apache.http.client.protocol.RequestAuthCache] Auth cache not set in the context
[DEBUG] [org.apache.http.impl.conn.PoolingHttpClientConnectionManager] 
  Connection request: [route: {s}->https://gitlab.opengroup.us:443][total available: 0; route allocated: 0 of 20; total allocated: 0 of 20]
[DEBUG] [org.apache.http.impl.conn.PoolingHttpClientConnectionManager] 
  Connection leased: [id: 8][route: {s}->https://gitlab.opengroup.us:443][total available: 0; route allocated: 1 of 20; total allocated: 1 of 20]
[DEBUG] [org.apache.http.impl.execchain.MainClientExec] Opening connection {s}->https://gitlab.opengroup.us:443
[DEBUG] [org.apache.http.impl.conn.DefaultHttpClientConnectionOperator] Connecting to gitlab.opengroup.us/162.209.24.19:443
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory] Connecting socket to gitlab.opengroup.us/162.209.24.19:443 with timeout 30000
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory] Enabled protocols: [TLSv1.2, TLSv1.3]
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory] Enabled cipher suites:
[TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, 
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, 
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, 
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, 
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, 
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, 
TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, 
TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, 
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, 
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 
TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, 
TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, 
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, 
TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, 
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory] Starting handshake
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory] Secure session established
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory]  negotiated protocol: TLSv1.3
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory]  negotiated cipher suite: TLS_AES_256_GCM_SHA384
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory]  peer principal: CN=*.opengroup.us, OU=Domain Control Validated
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory]  peer alternative names: [*.opengroup.us, opengroup.us]
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory]  
  issuer principal: CN=Go Daddy Secure Certificate Authority - G2, 
                    OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
[DEBUG] [org.apache.http.impl.conn.DefaultHttpClientConnectionOperator] Connection established 10.2.118.167:23244<->162.209.24.19:443
[DEBUG] [org.apache.http.impl.conn.DefaultManagedHttpClientConnection] http-outgoing-8: set socket timeout to 30000
[DEBUG] [org.apache.http.impl.execchain.MainClientExec] Executing request 
  GET /api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom HTTP/1.1
[DEBUG] [org.apache.http.impl.execchain.MainClientExec] Target auth state: UNCHALLENGED
[DEBUG] [org.apache.http.impl.execchain.MainClientExec] Proxy auth state: UNCHALLENGED
[DEBUG] [org.apache.http.impl.execchain.MainClientExec] Connection can be kept alive indefinitely
[DEBUG] [org.apache.http.impl.conn.PoolingHttpClientConnectionManager] 
  Connection [id: 8][route: {s}->https://gitlab.opengroup.us:443] can be kept alive indefinitely
[DEBUG] [org.apache.http.impl.conn.DefaultManagedHttpClientConnection] http-outgoing-8: set socket timeout to 0
[DEBUG] [org.apache.http.impl.conn.PoolingHttpClientConnectionManager] 
  Connection released: [id: 8][route: {s}->https://gitlab.opengroup.us:443][total available: 1; route allocated: 1 of 20; total allocated: 1 of 20]
[INFO] [org.gradle.internal.resource.transport.http.HttpClientHelper] 
  Failed to get resource: GET. [HTTP HTTP/1.1 403 Forbidden: 
    https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom)]
[DEBUG] [org.gradle.internal.operations.DefaultBuildOperationRunner] 
  Completing Build operation 
  'Download https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom'

As you can see, up until …

[org.gradle.internal.resource.transport.http.HttpClientHelper] Failed to get resource: GET. [HTTP HTTP/1.1 403 Forbidden: https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom)]

… things seem to be fine.
When I use curl (or maven) to retrieve this artifact all works as expected.

curl --head --header "Private-Token: $privateToken" 'https://gitlab.opengroup.us/api/v4/projects/371/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom'

I suspect there is some issue with holding the connection open with the “Private-Token”.
I have downloaded and build Gradle, adding in some additional debugging.

How do I install or run the newly built version?

I also have a stack-trace.

Caused by: org.gradle.internal.resource.transport.http.HttpErrorStatusCodeException: 
Could not GET 
'https://gitlab.opengroup.us/api/v4/packages/maven/edu/vanderbilt/isis/bns/face-v30-DIG/2022.1.1/face-v30-DIG-2022.1.1.pom'. 
Received status code 403 from server: Forbidden
[ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] 
  at org.gradle.internal.resource.transport.http.HttpClientHelper.processResponse(HttpClientHelper.java:215)
  at org.gradle.internal.resource.transport.http.HttpClientHelper.performGet(HttpClientHelper.java:96)
  at org.gradle.internal.resource.transport.http.HttpResourceAccessor.openResource(HttpResourceAccessor.java:45)
  at org.gradle.internal.resource.transport.http.HttpResourceAccessor.openResource(HttpResourceAccessor.java:30)
  at org.gradle.internal.resource.transfer.AbstractExternalResourceAccessor.withContent(AbstractExternalResourceAccessor.java:32)
  at org.gradle.internal.resource.transfer.DefaultExternalResourceConnector.withContent(DefaultExternalResourceConnector.java:59)
  at org.gradle.internal.resource.transfer.ProgressLoggingExternalResourceAccessor$DownloadOperation.call(ProgressLoggingExternalResourceAccessor.java:122)
  at org.gradle.internal.operations.DefaultBuildOperationRunner$CallableBuildOperationWorker.execute(DefaultBuildOperationRunner.java:204)
  at org.gradle.internal.operations.DefaultBuildOperationRunner$CallableBuildOperationWorker.execute(DefaultBuildOperationRunner.java:199)
  at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:66)
  at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:59)
  at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:157)
  at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:59)
  at org.gradle.internal.operations.DefaultBuildOperationRunner.call(DefaultBuildOperationRunner.java:53)
  at org.gradle.internal.operations.DefaultBuildOperationExecutor.call(DefaultBuildOperationExecutor.java:73)
  at org.gradle.internal.resource.transfer.ProgressLoggingExternalResourceAccessor.withContent(ProgressLoggingExternalResourceAccessor.java:45)
  at org.gradle.internal.resource.transfer.AccessorBackedExternalResource.withContentIfPresent(AccessorBackedExternalResource.java:99)
  at org.gradle.internal.resource.transfer.DefaultCacheAwareExternalResourceAccessor.copyToCache(DefaultCacheAwareExternalResourceAccessor.java:191)
  at org.gradle.internal.resource.transfer.DefaultCacheAwareExternalResourceAccessor.lambda$getResource$1(DefaultCacheAwareExternalResourceAccessor.java:89)
  at org.gradle.cache.internal.ProducerGuard$AdaptiveProducerGuard.guardByKey(ProducerGuard.java:97)
  at org.gradle.internal.resource.transfer.DefaultCacheAwareExternalResourceAccessor.getResource(DefaultCacheAwareExternalResourceAccessor.java:83)
  at org.gradle.api.internal.artifacts.repositories.resolver.DefaultExternalResourceArtifactResolver.downloadByCoords(DefaultExternalResourceArtifactResolver.java:139)
  ... 216 more