[ https://issues.apache.org/jira/browse/TEZ-4157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17094352#comment-17094352 ]
László Bodor commented on TEZ-4157: ----------------------------------- thanks for taking a look [~ashutoshc], [~jeagles] [~jeagles]: yeah, it seems like I missed that as it compiled successfully because of transitive dependencies... what do you think about netty 4 upgrade and remove netty3 from tez? hadoop has both of them, so: 1. we can upgrade to netty 4.0.52.Final to stay inline with hadoop (however this will cause further alerts as 4.0.52 also affected by CVS-s) -> I can start with this option right now 2. upgrade to latest netty > Remove unused direct netty dependency > ------------------------------------- > > Key: TEZ-4157 > URL: https://issues.apache.org/jira/browse/TEZ-4157 > Project: Apache Tez > Issue Type: Bug > Reporter: László Bodor > Assignee: László Bodor > Priority: Major > Attachments: TEZ-4157.01.patch > > > In the dependency tree, there are 2 occurrences of compile scope direct netty > dependencies, however, they're not used at all. I compiled locally > successfully without them. > E.g. when investigating blackduck alerts (complaining about netty deps for > current 3.10.5.Final), it would be cleaner to start from a dependency tree > where Tez doesn't depend on netty directly in order to eliminate its > responsibility (and move the focus to underlying hadoop for instance). -- This message was sent by Atlassian Jira (v8.3.4#803005)