stoty commented on PR #8074: URL: https://github.com/apache/hadoop/pull/8074#issuecomment-3516593140
> If some hadoop module says I depend on jackson-bom 2.18 and so we get 2.18 jackson-core that way, it is coming in transitively, one two levels down the tree. I don't think replacing the explicit dependency management entries with the imported BOM has any effect on downstream projects. The BOM itself does not get added as a parent of the jackson artifacts. AFAIU importing the bom is equivalent to copying its dependencyManagement entries the dependencyManagement section, the hadoop artifacts will still have the same dependencies at the same level as before. I have run dependency:tree on trunk and with this patch. The only difference is that the transitive **com.fasterxml.jackson.datatype:jackson-datatype-jsr310** and **com.fasterxml.jackson.dataformat:jackson-dataformat-smile** dependencies were previously not dependency managed, and with the patch they are. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
