[
https://issues.apache.org/jira/browse/HBASE-23077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17053575#comment-17053575
]
Duo Zhang commented on HBASE-23077:
-----------------------------------
Oh I met another problem. The spotbugs-annotations is LGPL so we can not
include it in the artifacts. I tried to declare it as optional, but still got
an error when building to say that there is a license error...
With mvn dependency:tree, I can see that all spotbugs-annotations dependencies
are optional or provided, so do not know how to fix this...
{noformat}
--
This product includes SpotBugs Annotations licensed under the GNU LESSER
GENERAL PUBLIC LICENSE, Version 2.1.
ERROR: Please check ^^^^^^^^^^^^ this License for acceptability here:
https://www.apache.org/legal/resolved
If it is okay, then update the list named 'non_aggregate_fine' in the
LICENSE.vm file.
If it isn't okay, then revert the change that added the dependency.
More info on the dependency:
<groupId>com.github.spotbugs</groupId>
<artifactId>spotbugs-annotations</artifactId>
<version>3.1.12</version>
maven central search
g:com.github.spotbugs AND a:spotbugs-annotations AND v:3.1.12
project website
https://spotbugs.github.io/
project source
https://github.com/spotbugs/spotbugs/
{noformat}
> move entirely to spotbugs
> -------------------------
>
> Key: HBASE-23077
> URL: https://issues.apache.org/jira/browse/HBASE-23077
> Project: HBase
> Issue Type: Improvement
> Components: build, test
> Reporter: Sean Busbey
> Priority: Major
>
> we've been relying on spotbugs definitions with findbugs tooling for awhile
> now. I think spotbugs now provides its own versions of everything we need
> (and Yetus supports spotbugs directly).
> Do a pass removing findbugs tooling from all branches in favor of spotbugs.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
