Susheel Gupta created YARN-11535: ------------------------------------ Summary: Snakeyaml should be excluded from jackson-dataformat-yaml-2.12.7 as it may cause transitive dependency issue. Key: YARN-11535 URL: https://issues.apache.org/jira/browse/YARN-11535 Project: Hadoop YARN Issue Type: Task Components: yarn Reporter: Susheel Gupta
Hadoop-project usesĀ [snakeyaml.version-2.0|https://github.com/apache/hadoop/blame/trunk/hadoop-project/pom.xml#L198] and [jackson-dataformat-yaml-2.12.7|https://github.com/apache/hadoop/blob/trunk/hadoop-project/pom.xml#L72]. But internally jackson-dataformat-yaml-2.12.7 uses compile dependency [snakeyaml.version-1.27|https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.12.7] .This may cause a transitive dependency issue in other services using hadoop jar having jackson-dataformat-yaml-2.12.7 asĀ jackson-dataformat-yaml-2.12.7 will use nearest dependency available of snakeyaml i.e 1.27 and ignore the version of snakeyaml-2.0 from hadoop-project. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org