Long story short, geoip2 lib behaves badly and one of its dependencies
pulls in an open ended range of jackson-databind which is breaking our
build as it tries to pull in 2.9.0-SNAPSHOT. See:
https://github.com/maxmind/GeoIP2-java/issues/77

As noted in that thread, the easy solution is to just <exclude> jackson and
pull in ours.  The catch is that geoip2 specifies a slightly higher version
of jackson than we globally use (2.8.x instead of 2.7.x).  Adding the
exclusion does allow for compiling, but I haven't tested anything.

I'd like to get thoughts on our preferred way to fix this.  E.g. add the
exclusion alone and test?  Bump the jackson version in enrichments
specifically and test? bump the whole version and test?

Ticket to track
https://issues.apache.org/jira/browse/METRON-734

Thanks, Justin

Reply via email to