Susheel Gupta created YARN-11535:
------------------------------------
Summary: Snakeyaml should be excluded from
jackson-dataformat-yaml-2.12.7 as it may cause transitive dependency issue.
Key: YARN-11535
URL: https://issues.apache.org/jira/browse/YARN-11535
Project: Hadoop YARN
Issue Type: Task
Components: yarn
Reporter: Susheel Gupta
Hadoop-project uses
[snakeyaml.version-2.0|https://github.com/apache/hadoop/blame/trunk/hadoop-project/pom.xml#L198]
and
[jackson-dataformat-yaml-2.12.7|https://github.com/apache/hadoop/blob/trunk/hadoop-project/pom.xml#L72].
But internally jackson-dataformat-yaml-2.12.7 uses compile dependency
[snakeyaml.version-1.27|https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.12.7]
.This may cause a transitive dependency issue in other services using hadoop
jar having jackson-dataformat-yaml-2.12.7 as jackson-dataformat-yaml-2.12.7
will use nearest dependency available of snakeyaml i.e 1.27 and ignore the
version of snakeyaml-2.0 from hadoop-project.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
