[YARN-6458] Use yarn package manager to lock down dependency versions for new web UI

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha4
• Hadoop Flags: Reviewed
• Assignee: Sreenath Somarajapuram
• Reporter: Sreenath Somarajapuram
• Created: 10/Apr/17 08:08
• Updated: 24/Apr/18 20:52
• Resolved: 04/Jun/17 16:37

Description

As we use semver to denote dependency version, every time a new build is made, the latest available version of the dependency would be downloaded. This affects the reliability of the UI build. Hence we must lockdown the dependencies.
Lockdown must happen in both the package managers used by the UI - NPM & Bower.

Yarn:
Replace NPM with Yarn. Yarn is a package manager developed to solve this issue and many more. It also enables offline build.

Bower:
Bower shrinkwrap resolver plugin can be used to lock the dependency versions.