Dependency error on log4j and jengelman.gradle.plugins.shadow2

[Siedlerchr]

Hi,

we are getting the following gradle build error on some CI systems:

Could not find any matches for org.apache.logging.log4j:log4j-core:2.+ as no versions of org.apache.logging.log4j:log4j-core are available.
 Searched in the following locations: 
https://plugins.gradle.org/m2/org/apache/logging/log4j/log4j-core/maven-metadata.xml
Required by:
project : > gradle.plugin.de.sebastianboegl.gradle.plugins:shadow-log4j-transformer:2.1.1

> Could not find any matches for com.github.jengelman.gradle.plugins:shadow:2.+ as no versions of com.github.jengelman.gradle.plugins:shadow are available.
Searched in the following locations:
https://plugins.gradle.org/m2/com/github/jengelman/gradle/plugins/shadow/maven-metadata.xml Required by: project : 
> gradle.plugin.de.sebastianboegl.gradle.plugins:shadow-log4j-transformer:2.1.1

[TheBoegl]

Try to use this plugin as library or please provide more information or, even better, a short sample project.

[Siedlerchr]

Hi,
the above mentioned error occur from using lgtm.com analysis, here is a sample log file with the error.

we are using your plugin in Jabref in our build.gradle:
https://github.com/JabRef/jabref/blob/master/build.gradle in the following way:

plugins {
    id 'com.github.johnrengelman.shadow' version '2.0.1'
    id "de.sebastianboegl.shadow.transformer.log4j" version "2.1.1"
}
shadowJar {
    classifier 'fat'
}

dependencies{
    compile 'commons-logging:commons-logging:1.2'
    compile 'org.apache.logging.log4j:log4j-jcl:2.9.1'
    compile 'org.apache.logging.log4j:log4j-api:2.9.1'
    compile 'org.apache.logging.log4j:log4j-core:2.9.1'
}

[TheBoegl]

Does this error only occur in lgtm or somewhere else?
Except from some failing tests the JabRef master branch seems to run OK here...

[Siedlerchr]

It is only failing on LGTM, I guess it's due to some caching. Travis CI caches dependencies. Our build script first check if the dependencies are locally available, for

[Siedlerchr]

For example, it checks, if they are in a local maven repository available

[TheBoegl]

The gradle plugins portal seems to fail to retrieve dynamic versions.
As mentioned above, try to apply this as library. Add jcenter to the buildscript libraries which handles the dynamic versions correctly:

buildscript {
    repositories {
        mavenLocal()
        jcenter()
    }
    dependencies {
        classpath 'de.sebastianboegl.gradle.plugins:shadow-log4j-transformer:2.1.1'
    }
}