-
Type:
Sub-task
-
Status: Resolved
-
Priority:
Blocker
-
Resolution: Fixed
-
Affects Version/s: None
-
Component/s: dependencies
-
Labels:None
-
Hadoop Flags:Incompatible change
-
Release Note:HBase now ensures the jsr305 implementation from the findbugs project is not included in its binary artifacts or the compile / runtime dependencies of its user facing modules. Downstream users that rely on this jar will need to update their dependencies.
we should be using
<dependencies> <dependency> <groupId>com.github.stephenc.findbugs</groupId> <artifactId>findbugs-annotations</artifactId> <version>${findbugs-annotations}</version> <scope>compile</scope> </dependency>
to ensure we don't have a prohibited dependency, but it looks like we're still bringing in
<dependency> <groupId>com.google.code.findbugs</groupId> <artifactId>jsr305</artifactId> <version>${jsr305.version}</version> </dependency>
remove the findbugs version (even though the maven central pom claims the license is ALv2, that doesn't line up with the referenced project sites).