Hi folks, I thought it's time to release 2.7.8, however, I found that the JSON license, which is category X, is bundled in branch-2.7 and 2.8 [1][2].
To fix the license issue, we need to upgrade AWK SDK version and the upgrade requires the update of Jackson version. The Jackson upgrade is very incompatible and it caused many troubles in downstream projects [3]. However, the release must not contain any libraries licensed to category X, we need to make the incompatible change in branch-2.8. In branch-2.7, the upgrade is much more harder because we need to change the dependency from aws-sdk to aws-sdk-s3, this is also incompatible [4]. It is more than 3 years since 2.7.0 was released and the maintenance period is the longest in the history of Apache Hadoop, so I'm thinking we need to decide when to stop the maintenance work. Probably there are 3 options to handle this problem: 1) EoL 2.7.x. 2) Release 2.7.8 without AWS SDK from binary tarball. (problem about POMs open) 3) Upgrade AWS SDK version and release 2.7.8. (incompatible change) What do you think? [1]: https://www.apache.org/legal/resolved.html#json [2]: https://issues.apache.org/jira/browse/HADOOP-16055 [3]: https://issues.apache.org/jira/browse/HADOOP-12705 [4]: https://issues.apache.org/jira/browse/HADOOP-12269 P.S. Thanks Steve Loughran for your detailed information about AWS SDK and Jackson updates. --------------------------------------------------------------------- To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-dev-h...@hadoop.apache.org
