[IOTDB-3051] [easy-fix] javax.servelet dependency conflict

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Labels: easy-fix
• Assignee: Unassigned
• Reporter: Xiangdong Huang
• Created: 30/Apr/22 05:54
• Updated: 30/Apr/22 05:54

Description

see https://github.com/apache/iotdb/discussions/5620

 

when using `mvn dependency:tree`,  we can find many modules depends on javax.* (especially for javax.servelet). However, the versions of these dependencies are not compatible. 

 

I have did some preliminary work:

• IoTDB-server module depends on Jetty for supporting Rest API, and jetty depends on javax.servlet-api-3.1.0;
• hadoop module depends on  org.apache.hadoop:hadoop-mapreduce-client-core and it depends on javax.servlet-api-2.5

 

This issue wants to find a way to make a consensus on the dependency version, i.e., either upgrade to 3.1 or downgrade to 2.5, depends on which can guarantee the system works well.