如何从 Gradle 中的依赖项中排除内部 package（不是 maven 依赖项）

Question

我的项目是 spring 启动项目，它有一个依赖dexkiller ，但是 dexkiller 依赖于内部使用 slf4j soot-infoflow-cmd-jar-with-dependencies而我的 spring 启动项目也使用 slf4j。
因此，当我运行我的项目时会出现以下错误。
错误是：

SLF4J: Class path contains multiple SLF4J bindings.
SLF4J: Found binding in [jar:file:/Users/user/.gradle/caches/modules-2/files-2.1/de.tud.sse/soot-infoflow-cmd-jar-with-dependencies/1.0/75ee1aee22aee20d41153e43b16b874caa927d2c/soot-infoflow-cmd-jar-with-dependencies-1.0.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: Found binding in [jar:file:/Users/user/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-classic/1.2.3/7c4f3c474fb2c041d8028740440937705ebb473a/logback-classic-1.2.3.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
SLF4J: Actual binding is of type [org.slf4j.impl.SimpleLoggerFactory]
Exception in thread "main" java.lang.IllegalArgumentException: LoggerFactory is not a Logback LoggerContext but Logback is on the classpath. Either remove Logback or the competing implementation (class org.slf4j.impl.SimpleLoggerFactory loaded from file:/Users/user/.gradle/caches/modules-2/files-2.1/de.tud.sse/soot-infoflow-cmd-jar-with-dependencies/1.0/75ee1aee22aee20d41153e43b16b874caa927d2c/soot-infoflow-cmd-jar-with-dependencies-1.0.jar). If you are using WebLogic you will need to add 'org.slf4j' to prefer-application-packages in WEB-INF/weblogic.xml: org.slf4j.impl.SimpleLoggerFactory
    at org.springframework.util.Assert.instanceCheckFailed(Assert.java:655)
    at org.springframework.util.Assert.isInstanceOf(Assert.java:555)
    at org.springframework.boot.logging.logback.LogbackLoggingSystem.getLoggerContext(LogbackLoggingSystem.java:280)
    at org.springframework.boot.logging.logback.LogbackLoggingSystem.beforeInitialize(LogbackLoggingSystem.java:104)
    at org.springframework.boot.context.logging.LoggingApplicationListener.onApplicationStartingEvent(LoggingApplicationListener.java:219)
    at org.springframework.boot.context.logging.LoggingApplicationListener.onApplicationEvent(LoggingApplicationListener.java:200)
    at org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener(SimpleApplicationEventMulticaster.java:172)
    at org.springframework.context.event.SimpleApplicationEventMulticaster.invokeListener(SimpleApplicationEventMulticaster.java:165)
    at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:139)
    at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:127)
    at org.springframework.boot.context.event.EventPublishingRunListener.starting(EventPublishingRunListener.java:70)
    at org.springframework.boot.SpringApplicationRunListeners.starting(SpringApplicationRunListeners.java:47)
    at org.springframework.boot.SpringApplication.run(SpringApplication.java:302)

依赖关系树如下（soot* jars from my nexus repo）：

+--- com.mywork:dexkiller:1.3.1-SNAPSHOT
|    +--- commons-collections:commons-collections:3.2
|    +--- cde.tud.sse:soot-infoflow-cmd-jar-with-dependencies:2.7
|    \--- cde.tud.sse:soot-infoflow-summaries-classes:2.7

从 soot-infoflow-cmd-jar-with-dependencies.jar 中提取的文件

我试图从 dexkiller 中排除 slf4j，但不起作用。

dependencies {
    compile ('com.mywork:dexkiller:1.3.1-SNAPSHOT'){
            // tried both them and each of them, neither work
            exclude group:'org.slf4j'
            exclude group:'org.apache.logging.log4j', module:'log4j-slf4j-impl'
    }
}

也是这样

configurations.all {
    // tried both them and each of them, neither work
    exclude group: 'org.slf4j', module: 'dexkiller'
    exclude group:'org.apache.logging.log4j', module:'log4j-slf4j-impl'
}

有人告诉我试试

configurations {
    compile.exclude module: 'spring-boot-starter-logging'
}

它只是避免了多个 SLF4J 绑定冲突，但我想使用我的 slf4j 而不是来自 soot jars 的 slf4j。

Answer 1

一个jar-with-dependencies不应用作依赖项。 如果你对此有任何影响，请纠正它。 否则，您可能会尝试使用依赖项排除整个 jar 并再次逐一添加包含的依赖项，直到您的项目正常工作。