Owen, I added a JIRA  to track this and put up a PR . I had to skip checkstyle and couldn't skip rat, but it appears to build ok. You should probably verify on your end before pulling it in.
Also, I'm new to this list and unfamiliar with your roadmap, but do you have a time frame in mind for a 1.3.0 release? -Jeff  https://issues.apache.org/jira/browse/GIRAPH-1172  https://github.com/apache/giraph/pull/61 On Fri, Feb 16, 2018 at 1:24 PM, Owen O'Malley <owen.omal...@gmail.com> wrote: > *sigh* Yeah, we'll need to fix that. > > Does someone have time to remove the problematic dependency? > > .. Owen > > > > On Fri, Feb 16, 2018 at 9:37 AM, Jeff Dasch <hcs...@gmail.com> wrote: > > > Hi, > > > > I'm a contributor to Apache Rya (incubating), and during our release > > process we came across an incompatible LGPL dependency that appears to > > originate from Apache Giraph's dependency on the Findbugs Annotations > > library. Our plan  right now is to just make Giraph an optional > module > > within our project, but I was wondering if you knew any more about that > > license compatibility. Based on some quick searches, it looks like > > Findbugs has since become SpotBugs which is still LGPL. > > > > (GNU Lesser Public License) FindBugs-Annotations > > (com.google.code.findbugs:annotations:2.0.2 - > > http://findbugs.sourceforge.ne > > t/) > > > > [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating > > [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile > > [INFO] | +- com.google.code.findbugs:annotations:jar:2.0.2:compile > > > > thanks, > > -Jeff > > > >  https://github.com/apache/incubator-rya/pull/274 > > >