Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Hadoop and Dropwizard versions and exclude non-Apache compliant transitive dependencies #519

Merged
merged 1 commit into from
Dec 10, 2024

Conversation

jbonofre
Copy link
Member

No description provided.

@jbonofre
Copy link
Member Author

NB: I'm investigating why renovate is not triggering (checking in asf hooks).

@@ -41,6 +41,11 @@ dependencies {
exclude("ch.qos.reload4j", "reload4j")
exclude("log4j", "log4j")
exclude("org.apache.zookeeper", "zookeeper")
exclude("org.apache.hadoop.thirdparty", "hadoop-shaded-protobuf_3_25")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can these be removed from the LICENSE* files then?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not in the LICENSE file.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This transitive is introduced by Hadoop update.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The other three as well?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, the others dependencies are coming also from hadoop for ages. I exclude these dependencies (old jersey version) because they are GPL dependencies (not ASF compliant).

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The "old" jersey dependencies are removed from the LICENSE.bin file in the other PR.

Copy link
Member Author

@jbonofre jbonofre Dec 10, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@snazy do you prefer I just do the update in this PR and cleanup transitive dependencies in #495 ?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't mind in which PR its done, so +1

@snazy snazy merged commit 99e128a into apache:main Dec 10, 2024
5 checks passed
@snazy snazy deleted the UPDATES branch December 10, 2024 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants