[TEZ-3285] Tez UI: Lock down dependency versions

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.9.0
• Target Version/s: 0.9.0
• Hadoop Flags: Reviewed
• Assignee: Sreenath Somarajapuram
• Reporter: Sreenath Somarajapuram
• Created: 01/Jun/16 10:32
• Updated: 22/Aug/17 00:02
• Resolved: 10/Apr/17 09:44

Description

All dependencies of tez-ui is having fixed versions. But the dependencies of our dependencies are not. Hence a level down in the dependency tree, the build might be looking for the latest packages in every build. This affects the reliability of the UI build. This must be fixed in both the package managers used by Tez UI - NPM & Bower.

NPM:
npm shrinkwrap create a separate JSON from the currently installed packages, and ensure that the complete dependency tree is intact across all the build.

Yarn:
Replace NPM with Yarn. Yarn is a package manager developed to solve this issue and many more.

Bower:
Bower shrinkwrap resolver plugin can be used to lock the dependency versions.