Update to from "8.1.1" to "9.1.0" leads to "Cannot expand ZIP .... .pom"

[tchiotludo]

Expected and Results

In the previous version, everything is fine

    id "com.github.johnrengelman.shadow" version "8.1.1"

but when update to latest version

    id "com.gradleup.shadow" version "9.1.0"

the shadowJar test failed with this error:

FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':shadowJar'.
> Cannot expand ZIP '/home/ludo/.gradle/caches/modules-2/files-2.1/org.graalvm.js/js-community/24.2.2/f30ba393d9a64382fda48616af973773c906d2ec/js-community-24.2.2.pom'.

Related environment and versions

• id "com.gradleup.shadow" version "9.1.0"
• gradle version 8.13

Reproduction steps

The full reproduction is here, with a simple ./gradlew shadowJar

Anything else?

No response

[Goooler]

Can't unzip the pom from https://repo1.maven.org/maven2/org/graalvm/polyglot/js-community/24.2.2/.

Needs to add them via from.

[dan-ryan]

@Goooler Can you explain more on how to fix this error? I've read the other bug reports on this, and I'm still confused.

    implementation("org.graalvm.polyglot:polyglot:24.2.2")
    implementation("org.graalvm.polyglot:js:24.2.2")

For now, I've gone back to version 8.3.9.

[Goooler]

https://gradleup.com/shadow/configuration/dependencies/#embedding-non-jar-dependencies-into-your-shadowed-jar

[tchiotludo]

@dan-ryan here is how I make it work: kestra-io/plugin-graalvm@6973a08.

As I understand, the package from graalvm is a special metapackage like bom (that is only a pom.xml), changing to include the dependency inside this pom directly make it works

[dan-ryan]

@tchiotludo Thanks! All I needed to use was "org.graalvm.js:js-language" to get the JavaScript functionality working and avoid the "Cannot expand ZIP" error.

[Goooler]

Sorry for the reply! I missed that we'd better to use exclude for dependencies in this case:

tasks.shadowJar {
  dependencies {
    exclude(
        // Exclude the transitive dependency on js-community, which can't be unzipped by the task.
        dependency("org.graalvm.js:js-community:.*"),
    )
  }
}

• Related migration: Migrate to Shadow 9 mobile-dev-inc/Maestro#3069.
• Documented more in Document excluding non-JAR transitive dependencies #1986.