[jira] [Commented] (NIFI-4297) Immediately actionable dependency upgrades

[ASF GitHub Bot (JIRA)]

    [ 
https://issues.apache.org/jira/browse/NIFI-4297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16192343#comment-16192343
 ] 

ASF GitHub Bot commented on NIFI-4297:
--------------------------------------

Github user alopresto commented on the issue:

    https://github.com/apache/nifi/pull/2084
  
    Thanks @mcgilman and @joewitt . I rebased against `1.5.0-SNAPSHOT master`, 
added the explicit dependency on `jackson-core` in 
`nifi-solr-processors/pom.xml` and removed `jackson-databind` from the 
`<dependencyManagement>` block in `nifi/pom.xml` and explicitly referenced the 
`${jackson.version}` variable throughout the children poms. The full build 
works, and I verified that not only does it compile, the project seems to be 
able to correctly perform JSON parsing in a variety of ways (used [this 
template](https://gist.github.com/alopresto/63c087854c5300f7c0763ce118c1eef6)) 
to verify. 
    
    ![Web Server and JSON Parsing 
Template](https://user-images.githubusercontent.com/798465/31206880-7cf37a8a-a92f-11e7-928b-5a43c0900bb1.png)
    
    I still need to evaluate if 
`org.codehaus.jackson:jackson-mapper-asl:1.9.13` is used anywhere, as 
discussion between @mcgilman and myself [revealed it is replaced by 
`com.fasterxml.jackson.core:jackson-core:2.9.1`](https://mvnrepository.com/artifact/org.codehaus.jackson/jackson-mapper-asl/1.9.13).
 


> Immediately actionable dependency upgrades
> ------------------------------------------
>
>                 Key: NIFI-4297
>                 URL: https://issues.apache.org/jira/browse/NIFI-4297
>             Project: Apache NiFi
>          Issue Type: Sub-task
>          Components: Extensions
>    Affects Versions: 1.3.0
>            Reporter: Andy LoPresto
>            Assignee: Andy LoPresto
>              Labels: dependencies, security
>
> The immediately actionable items are:
> * {{org.apache.logging.log4j:log4j-core}} in {{nifi-storm-spout}} 2.1 -> 2.8.2
> * {{org.apache.poi:poi}} in {{nifi-email-processors}} 3.14 -> 3.15
> * {{org.apache.logging.log4j:log4j-core}} in 
> {{nifi-elasticsearch-5-processors}} 2.7 -> 2.8.2
> * {{org.springframework:spring-web}} in {{nifi-jetty}} 4.2.4.RELEASE -> 
> 4.3.10.RELEASE
> * {{org.springframework:spring-web}} in {{nifi-jetty}} 4.2.4.RELEASE -> 
> 4.3.10.RELEASE
> * {{org.apache.derby:derby}} in {{nifi-kite-processors}} 10.11.1.1 -> 
> 10.12.1.1 (already excluded)
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-azure-processors}} 
> 2.6.0 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-expression-language}} 
> 2.6.1 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-standard-utils}} 
> 2.6.2 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-hwx-schema-registry}} 
> 2.7.3 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-solr-processors}} 
> 2.5.4 -> 2.8.6



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)