adoroszlai commented on PR #3236:
URL: https://github.com/apache/ozone/pull/3236#issuecomment-1122509375

   > MVN dependency tree does show one occurrence
   > Guess coming from `ozone-filesystem-hadoop2`
   
   That one is not a problem because `ozone-filesystem-hadoop2` is supposed to 
be used with Hadoop jars and their dependencies available at runtime.  I think 
that's normal use of `provided` scope.
   
   > BTW. why don't we just exclude this commons dependency in the parent pom 
rather than bothering an already available dependency.?
   
   `commons-lang` was just an example that we hit recently.  Any other 
transitive dependency of `spotbugs` would cause similar failure.  We are just 
less likely to use those.
   
   Users are not expected to provide `spotbugs` at runtime, it is only used by 
the `spotbugs` plugin at build time.  Hence I think the proper fix is to remove 
it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to