Apache9 commented on PR #7592: URL: https://github.com/apache/hbase/pull/7592#issuecomment-3991197735
> @Apache9 Since Hadoop has moved to `com.nimbusds:nimbus-jose-jwt:jar:10.0.2` (which no longer brings jcip-annotations as a transitive dependency), Hadoop now explicitly depends on `com.github.stephenc.jcip` to provide jcip-annotations. However, in HBase, we currently have `net.jcip` specified in the supplemental-models.xml file, which also brings in jcip-annotations. Should we align with Hadoop and move to `com.github.stephenc.jcip`, or should we continue using `net.jcip`? The supplemental-models.xml file does not introduce dependencies, we use this file to tell some checks in the release stage(I can not recall the name) that these dependencies have incorrect license information but their licenses are compatibible. So if we do not need to depend on some libraries any more, we could just remove the related section in supplemental-models.xml, and there is also no problem to leave it as is. Since hadoop now depends on com.github.stephenc.jcip directly, why do we not pull the dependency in? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
