[YARN-5433] Audit dependencies for Category-X

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 3.0.0-alpha2
• Component/s: timelineserver
• Target Version/s: 3.0.0-alpha2
• Hadoop Flags: Reviewed
• Assignee: Sangjin Lee
• Reporter: Sean Busbey
• Created: 26/Jul/16 15:44
• Updated: 15/Dec/16 00:47
• Resolved: 26/Oct/16 18:33

Description

Recently phoenix has found some category-x dependencies in their build (PHOENIX-3084, PHOENIX-3091), which also showed some problems in HBase (HBASE-16260).

Since the Timeline Server work brought in both of these as dependencies, we should make sure we don't have any cat-x dependencies either. From what I've seen in those projects, our choice of HBase version shouldn't be impacted but our Phoenix one is.

Greping our current dependency list for the timeline server component shows some LGPL:

...
[INFO]    net.sourceforge.findbugs:annotations:jar:1.3.2:compile
...

I haven't checked the rest of the dependencies that have changed since HADOOP-12893 went in, so ATM I've filed this against YARN since that's where this one example came in.

Issue Links

• relates to: YARN-5976 Update hbase version to 1.2 (removes phoenix dependencies)
• links to: newly added dependencies