gradle: 7.3.1 -> 7.3.2

[lorenzleutgeb]

This is part of the Log4j aftermath, see

• https://github.com/gradle/gradle/releases/tag/v7.3.2
• https://docs.gradle.org/7.3.2/release-notes.html

Related to CVE-2021-44228, CVE-2021-45046

[lorenzleutgeb]

/marvin opt-in
/status needs_reviewer

[marvin-mk2]

Hi! I'm an experimental bot. My goal is to guide this PR through its stages, hopefully ending with a merge. You can read up on the usage here.

[kevincox]

Result of nixpkgs-review pr 150866 run on x86_64-linux 1

1 package marked as broken and skipped:

• impressive

6 packages failed to build:

• apkleaks
• diffoscope
• gscan2pdf
• jadx
• pdfchain
• pdftk

3 packages built:

• gradle (gradle_7)
• kotlin-language-server
• scenic-view

[kevincox]

Those were all already broken.

[trofi]

Bisect says gradle: 7.3.1 -> 7.3.2 5fed9ba broke pdftk on master (a diffoscope dependency):

$ nix build -f. pdftk -L
...
pdftk> FAILURE: Build failed with an exception.
pdftk> * What went wrong:
pdftk> A problem occurred configuring root project 'pdftk'.
pdftk> > Could not resolve all files for configuration ':classpath'.
pdftk>    > Could not find org.apache.logging.log4j:log4j-core:2.16.0.
pdftk>      Searched in the following locations:
...

https://hydra.nixos.org/log/1bpzawlbqs0jv09axavb8zg1ym74b3ig-pdftk-3.2.1.drv

[lorenzleutgeb]

Starting point to fix pdftk is:

A problem occurred configuring root project 'pdftk'.
> Could not resolve all files for configuration ':classpath'.
   > Could not find org.apache.logging.log4j:log4j-core:2.16.0.
     Searched in the following locations:
       - file:/nix/store/q8bqws0qadicb1w14vhf2c2rigknw8l8-pdftk-deps-3.2.1/org/apache/logging/log4j/log4j-core/2.16.0/log4j-core-2.16.0.pom
     If the artifact you are trying to retrieve can be found in the repository but without metadata in 'Maven POM' format, you need to adjust the 'metadataSources { ... }' of the repository declaration.
     Required by:
         project :
   > Could not find org.apache.logging.log4j:log4j-core:2.16.0.
     Searched in the following locations:
       - file:/nix/store/q8bqws0qadicb1w14vhf2c2rigknw8l8-pdftk-deps-3.2.1/org/apache/logging/log4j/log4j-core/2.16.0/log4j-core-2.16.0.pom
     If the artifact you are trying to retrieve can be found in the repository but without metadata in 'Maven POM' format, you need to adjust the 'metadataSources { ... }' of the repository declaration.
     Required by:
         project : > com.github.johnrengelman.shadow:com.github.johnrengelman.shadow.gradle.plugin:5.2.0 > com.github.jengelman.gradle.plugins:shadow:5.2.0

I can work on this tomorrow afternoon CET. If that's too late, consider reverting.

[lorenzleutgeb]

Got a PR accepted upstream, see https://gitlab.com/pdftk-java/pdftk/-/merge_requests/25 which is related. But TBH I don't think it will fix the build failure above. Will investigate tomorrow.

[lorenzleutgeb]

@trofi see #151188, which got merged. Please verify and report back if you have trouble building diffoscope. It builds fine for me on e1f9e75. Sorry for the inconvenience caused.

[trofi]

diffoscope builds successfully on master now. Thank you!