Gradle依赖解析异常：为何查找POM而非ZIP包及修复方案

问题场景 #

配置片段（build.gradle） #

apply plugin: 'java'

repositories {
    maven {
        url "https://artifactory.(...)/artifactory/jcenter/"
        credentials {
            username artifactoryUsername
            password artifactoryPassword
        }
    }
    maven {
        url "https://artifactory.(...)/artifactory/libs-release-local/"
        credentials {
            username artifactoryUsername
            password artifactoryPassword
        }
    }
}

configurations {
    [amq, amqBundles, amqExtensions]
}

dependencies {
    amq(group: 'com.redhat', name: 'amq-broker', version: '7.10.0', ext: 'zip')
    amqBundles(group: "org.postgresql", name: "postgresql", version: "42.2.14", ext: "jar")
    amqExtensions(group: "biz.paluch.logging", name: "logstash-gelf", version: "1.14.1", ext: "jar")
}

(...)

task extractAmq(type: Copy) {
    from configurations.amq.files
    into "$buildDir/software/amq"
}

运行gradle help时的错误信息 #

A problem occurred evaluating root project 'installer'.
> Could not resolve all files for configuration ':amq'.
   > Could not find com.redhat:amq-broker:7.10.0.
     Searched in the following locations:
       - https://artifactory.(...)/artifactory/jcenter/com/redhat/amq-broker/7.10.0/amq-broker-7.10.0.pom
       - https://artifactory.(...)/artifactory/libs-release-local/com/redhat/amq-broker/7.10.0/amq-broker-7.10.0.pom
     Required by:
         project :

原因分析 #

Gradle的依赖解析流程默认优先获取依赖的POM元数据文件，用来验证依赖合法性、获取传递依赖信息等。即使你在依赖声明中指定了ext: 'zip'，它仍然会先尝试查找对应版本的POM文件，只有找到POM后，才会根据POM中的信息去匹配对应的zip包。如果仓库中不存在该依赖的POM文件，或者POM中未声明zip格式的artifact，就会触发找不到依赖的错误。

修复方案 #

方案一：跳过元数据查找，直接指定zip artifact #

修改依赖声明，通过artifact块明确指定要下载的zip文件，同时禁用传递依赖和元数据查找：

dependencies {
    amq(group: 'com.redhat', name: 'amq-broker', version: '7.10.0') {
        artifact {
            name = 'amq-broker'
            type = 'zip'
            extension = 'zip'
        }
        // 禁用传递依赖，避免Gradle尝试查找POM中的依赖
        transitive = false
    }
    // 其他依赖保持原有配置
    amqBundles(group: "org.postgresql", name: "postgresql", version: "42.2.14", ext: "jar")
    amqExtensions(group: "biz.paluch.logging", name: "logstash-gelf", version: "1.14.1", ext: "jar")
}

方案二：补充对应POM文件到仓库 #

如果有权限维护Artifactory仓库，可在对应路径下上传一个简单的POM文件，让Gradle能识别到该zip依赖。示例POM内容如下：

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0">
    <modelVersion>4.0.0</modelVersion>
    <groupId>com.redhat</groupId>
    <artifactId>amq-broker</artifactId>
    <version>7.10.0</version>
    <packaging>zip</packaging>
</project>

上传路径需符合Maven规范：com/redhat/amq-broker/7.10.0/amq-broker-7.10.0.pom，同时确保zip文件也在同一路径下。

额外检查 #

确认Artifactory中amq-broker-7.10.0.zip的存储路径是否严格符合Maven布局：com/redhat/amq-broker/7.10.0/amq-broker-7.10.0.zip，路径不匹配也会导致Gradle无法找到文件。

内容的提问来源于stack exchange，提问作者podehi