Github user mmiklavc commented on the issue:
https://github.com/apache/incubator-metron/pull/347
@merrimanr Love this effort. We just went through something similar in
getting the apache curator versions lined up for the Storm upgrade support
ticket. Thinking more about it, I'm not sure we need to explicitly exclude all
of these dependencies. Can we try just an explicit declaration at the global
level? Per "Dependency mediation" from the Maven docs:
> You can always guarantee a version by declaring it explicitly in your
project's POM. Note that if two dependency versions are at the same depth in
the dependency tree, until Maven 2.0.8 it was not defined which one would win,
**but since Maven 2.0.9 it's the order in the declaration that counts: the
first declaration wins**.
I *think* our own explicit declarations should supersede the transitive
dependencies, which should clean up our poms quite a bit if I'm right about
that.
https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html#Transitive_Dependencies
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
