This is an automated email from the ASF dual-hosted git repository.
chengpan pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/zeppelin.git
The following commit(s) were added to refs/heads/master by this push:
new 356b525cca [ZEPPELIN-6120] Jackson dependency governance
356b525cca is described below
commit 356b525cca5fd20bf54b0217e80792a49c979f4d
Author: Cheng Pan <[email protected]>
AuthorDate: Mon Oct 7 21:15:54 2024 +0800
[ZEPPELIN-6120] Jackson dependency governance
### What is this PR for?
Currently, Jackson deps versions are inconsistent, which may cause
potential issues.
```
$ ls lib | grep jackson
jackson-annotations-2.12.7.jar
jackson-core-2.12.7.jar
jackson-core-asl-1.9.13.jar
jackson-databind-2.12.7.1.jar
jackson-mapper-asl-1.9.13.jar
jackson-module-jaxb-annotations-2.9.9.jar
jersey-media-json-jackson-2.30.jar
```
### What type of PR is it?
Improvement
### Todos
* [x] - Pin Jackson 2.12.7.2
* [x] - Manage all Jackson deps via BOM
* [x] - Remove redundant exclusions
* [x] - Pin `jakarta.activation:jakarta.activation-api:1.2.2` to satisfy
enforce-dependency-convergence
* [x] - Pin `jakarta.xml.bind:jakarta.xml.bind-api:2.3.3` to satisfy
enforce-dependency-convergence
### What is the Jira issue?
ZEPPELIN-6120
### How should this be tested?
```
$ ls lib | grep jackson
jackson-annotations-2.12.7.jar
jackson-core-2.12.7.jar
jackson-core-asl-1.9.13.jar
jackson-databind-2.12.7.2.jar
jackson-mapper-asl-1.9.13.jar
jackson-module-jaxb-annotations-2.12.7.jar
jersey-media-json-jackson-2.30.jar
```
### Screenshots (if appropriate)
### Questions:
* Does the license files need to update? Updated.
* Is there breaking changes for older versions? No.
* Does this needs documentation? No.
Closes #4863 from pan3793/ZEPPELIN-6120.
Signed-off-by: Cheng Pan <[email protected]>
---
neo4j/pom.xml | 2 --
pom.xml | 23 +++++++++++++
spark/interpreter/pom.xml | 7 ----
zeppelin-distribution/src/bin_license/LICENSE | 16 ++++-----
zeppelin-plugins/launcher/k8s-standard/pom.xml | 14 --------
zeppelin-plugins/notebookrepo/azure/pom.xml | 4 ---
zeppelin-plugins/notebookrepo/filesystem/pom.xml | 36 --------------------
zeppelin-plugins/notebookrepo/s3/pom.xml | 42 ------------------------
zeppelin-plugins/pom.xml | 4 ---
zeppelin-server/pom.xml | 30 -----------------
zeppelin-zengine/pom.xml | 16 ---------
11 files changed, 31 insertions(+), 163 deletions(-)
diff --git a/neo4j/pom.xml b/neo4j/pom.xml
index ba988273c0..37dbf321a2 100644
--- a/neo4j/pom.xml
+++ b/neo4j/pom.xml
@@ -33,7 +33,6 @@
<properties>
<neo4j.driver.version>4.1.1</neo4j.driver.version>
- <jackson.version>2.12.7.1</jackson.version>
<interpreter.name>neo4j</interpreter.name>
</properties>
@@ -41,7 +40,6 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>${jackson.version}</version>
</dependency>
<dependency>
diff --git a/pom.xml b/pom.xml
index 206ce225d7..ca05cecf7c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -121,7 +121,10 @@
<gson.version>2.8.9</gson.version>
<gson-extras.version>0.2.2</gson-extras.version>
<org-json.version>20240205</org-json.version>
+ <jackson.version>2.12.7.20240502</jackson.version>
<jetty.version>9.4.52.v20230823</jetty.version>
+ <jakarta.activation.version>1.2.2</jakarta.activation.version>
+ <jakarta.xml.bind.version>2.3.3</jakarta.xml.bind.version>
<httpcomponents.core.version>4.4.1</httpcomponents.core.version>
<httpcomponents.client.version>4.5.13</httpcomponents.client.version>
<httpcomponents.asyncclient.version>4.0.2</httpcomponents.asyncclient.version>
@@ -325,6 +328,26 @@
<version>${gson-extras.version}</version>
</dependency>
+ <dependency>
+ <groupId>com.fasterxml.jackson</groupId>
+ <artifactId>jackson-bom</artifactId>
+ <version>${jackson.version}</version>
+ <type>pom</type>
+ <scope>import</scope>
+ </dependency>
+
+ <dependency>
+ <groupId>jakarta.activation</groupId>
+ <artifactId>jakarta.activation-api</artifactId>
+ <version>${jakarta.activation.version}</version>
+ </dependency>
+
+ <dependency>
+ <groupId>jakarta.xml.bind</groupId>
+ <artifactId>jakarta.xml.bind-api</artifactId>
+ <version>${jakarta.xml.bind.version}</version>
+ </dependency>
+
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-configuration2</artifactId>
diff --git a/spark/interpreter/pom.xml b/spark/interpreter/pom.xml
index a8532c26ee..f47e0e7433 100644
--- a/spark/interpreter/pom.xml
+++ b/spark/interpreter/pom.xml
@@ -164,13 +164,6 @@
<artifactId>spark-core_${spark.scala.binary.version}</artifactId>
<version>${spark.version}</version>
<scope>provided</scope>
- <exclusions>
- <!-- Leads to conflicting Jackson versions in tests -->
- <exclusion>
- <groupId>org.apache.avro</groupId>
- <artifactId>*</artifactId>
- </exclusion>
- </exclusions>
</dependency>
<dependency>
diff --git a/zeppelin-distribution/src/bin_license/LICENSE
b/zeppelin-distribution/src/bin_license/LICENSE
index 0d5a9ce326..926aacedda 100644
--- a/zeppelin-distribution/src/bin_license/LICENSE
+++ b/zeppelin-distribution/src/bin_license/LICENSE
@@ -48,12 +48,15 @@ The following components are provided under Apache License.
(Apache 2.0) Codehaus Plexus Utils (org.codehaus.plexus:plexus-utils:3.2.1
- http://github.com/codehaus-plexus/plexus-utils)
(Apache 2.0) findbugs jsr305 (com.google.code.findbugs:jsr305:jar:1.3.9 -
http://findbugs.sourceforge.net/)
(Apache 2.0) Google Guava (com.google.guava:guava:15.0 -
https://code.google.com/p/guava-libraries/)
- (Apache 2.0) Jackson (com.fasterxml.jackson.core:jackson-core:2.9.10 -
https://github.com/FasterXML/jackson-core)
- (Apache 2.0) Jackson
(com.fasterxml.jackson.core:jackson-annotations:2.9.10 -
https://github.com/FasterXML/jackson-core)
- (Apache 2.0) Jackson (com.fasterxml.jackson.core:jackson-databind:2.9.10.8
- https://github.com/FasterXML/jackson-core)
+ (Apache 2.0) Jackson (com.fasterxml.jackson.core:jackson-core:2.15.4 -
https://github.com/FasterXML/jackson-core)
+ (Apache 2.0) Jackson
(com.fasterxml.jackson.core:jackson-annotations:2.15.4 -
https://github.com/FasterXML/jackson-core)
+ (Apache 2.0) Jackson (com.fasterxml.jackson.core:jackson-databind:2.15.4 -
https://github.com/FasterXML/jackson-core)
+ (Apache 2.0) Jackson-dataformat-CBOR
(com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.15.4 -
http://wiki.fasterxml.com/JacksonForCbor)
+ (Apache 2.0) Jackson-dataformat-Smile
(com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.15.4 -
http://wiki.fasterxml.com/JacksonForSmile)
+ (Apache 2.0) Jackson-dataformat-YAML
(com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.15.4 -
https://github.com/FasterXML/jackson)
+ (Apache 2.0) Jackson (org.codehaus.jackson:jackson-core-asl:1.9.13 -
http://jackson.codehaus.org/)
(Apache 2.0) Jackson Mapper ASL
(org.codehaus.jackson:jackson-mapper-asl:1.9.13 -
https://mvnrepository.com/artifact/org.codehaus.jackson/jackson-mapper-asl/1.9.13)
(Apache 2.0) javax.servlet
(org.eclipse.jetty.orbit:javax.servlet:jar:3.1.0.v201112011016 -
http://www.eclipse.org/jetty)
- (Apache 2.0) Jackson (org.codehaus.jackson:jackson-core-asl:1.9.13 -
http://jackson.codehaus.org/)
(Apache 2.0) Javassist (org.javassist:javassist:jar:3.18.1-GA:compile -
http://jboss-javassist.github.io/javassist/)
(Apache 2.0) JetS3t (net.java.dev.jets3t:jets3t:jar:0.9.3) -
http://www.jets3t.org/
(Apache 2.0) Jetty (org.eclipse.jetty:jetty - http://www.eclipse.org/jetty)
@@ -68,9 +71,6 @@ The following components are provided under Apache License.
(Apache 2.0) RoaringBitmap (org.roaringbitmap:RoaringBitmap:jar:0.5.11 -
https://github.com/lemire/RoaringBitmap)
(Apache 2.0) json4s (org.json4s:json4s-ast_2.10:jar:3.2.10 -
https://github.com/json4s/json4s)
(Apache 2.0) HPPC Collections (com.carrotsearch:hppc:0.7.1 -
http://labs.carrotsearch.com/hppc.html/hppc)
- (Apache 2.0) Jackson-dataformat-CBOR
(com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.6.2 -
http://wiki.fasterxml.com/JacksonForCbor)
- (Apache 2.0) Jackson-dataformat-Smile
(com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.6.2 -
http://wiki.fasterxml.com/JacksonForSmile)
- (Apache 2.0) Jackson-dataformat-YAML
(com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.6.2 -
https://github.com/FasterXML/jackson)
(Apache 2.0) json-flattener (com.github.wnameless:json-flattener:0.1.6 -
https://github.com/wnameless/json-flattener)
(Apache 2.0) Spatial4J (com.spatial4j:spatial4j:0.4.1 -
https://github.com/spatial4j/spatial4j)
(Apache 2.0) T-Digest (com.tdunning:t-digest:3.0 -
https://github.com/tdunning/t-digest)
@@ -126,7 +126,7 @@ The following components are provided under Apache License.
(Apache 2.0) parboiled-java (org.parboiled:parboiled-java:1.1.7 -
https://github.com/sirthias/parboiled)
(Apache 2.0) parboiled-core (org.parboiled:parboiled-core:1.1.7 -
https://github.com/sirthias/parboiled)
(Apache 2.0) ZkClient (com.101tec:zkclient:0.7 -
https://github.com/sgroschupf/zkclient)
- (Apache 2.0) jackson-module-scala
(com.fasterxml.jackson.module:jackson-module-scala_2.10:2.4.4 -
http://wiki.fasterxml.com/JacksonModuleScala)
+ (Apache 2.0) jackson-module-scala
(com.fasterxml.jackson.module:jackson-module-scala_2.10:2.15.4 -
http://wiki.fasterxml.com/JacksonModuleScala)
(Apache 2.0) BigQuery API v2-rev317-1.22.0
(com.google.apis:google-api-services-bigquery:v2-rev317-1.22.0 -
http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-bigquery)
(Apache 2.0) Google Cloud Debugger API v2-rev8-1.22.0
(com.google.apis:google-api-services-clouddebugger:v2-rev8-1.22.0 -
http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-clouddebugger)
(Apache 2.0) Google Dataflow API v1b3-rev36-1.22.0
(com.google.apis:google-api-services-dataflow:v1b3-rev36-1.22.0 -
http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-dataflow)
diff --git a/zeppelin-plugins/launcher/k8s-standard/pom.xml
b/zeppelin-plugins/launcher/k8s-standard/pom.xml
index aaa194ec70..cc68503702 100644
--- a/zeppelin-plugins/launcher/k8s-standard/pom.xml
+++ b/zeppelin-plugins/launcher/k8s-standard/pom.xml
@@ -52,20 +52,6 @@
<artifactId>jinjava</artifactId>
<version>${jinjava.version}</version>
<scope>compile</scope>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-annotations</artifactId>
- </exclusion>
- </exclusions>
</dependency>
<!-- Test libraries -->
<dependency>
diff --git a/zeppelin-plugins/notebookrepo/azure/pom.xml
b/zeppelin-plugins/notebookrepo/azure/pom.xml
index cea2ed8068..0778077817 100644
--- a/zeppelin-plugins/notebookrepo/azure/pom.xml
+++ b/zeppelin-plugins/notebookrepo/azure/pom.xml
@@ -50,10 +50,6 @@
<artifactId>azure-storage</artifactId>
<version>${azure.storage.version}</version>
<exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
<exclusion>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
diff --git a/zeppelin-plugins/notebookrepo/filesystem/pom.xml
b/zeppelin-plugins/notebookrepo/filesystem/pom.xml
index c8c828c98a..41de07e724 100644
--- a/zeppelin-plugins/notebookrepo/filesystem/pom.xml
+++ b/zeppelin-plugins/notebookrepo/filesystem/pom.xml
@@ -63,10 +63,6 @@
<artifactId>hadoop-azure</artifactId>
<version>${hadoop.version}</version>
<exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
<exclusion>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
@@ -79,10 +75,6 @@
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
</exclusion>
- <exclusion>
- <groupId>org.codehaus.jackson</groupId>
- <artifactId>jackson-mapper-asl</artifactId>
- </exclusion>
<exclusion>
<groupId>com.nimbusds</groupId>
<artifactId>nimbus-jose-jwt</artifactId>
@@ -99,14 +91,6 @@
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-servlet</artifactId>
</exclusion>
- <exclusion>
- <groupId>org.codehaus.jackson</groupId>
- <artifactId>jackson-core-asl</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
<exclusion>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-util</artifactId>
@@ -121,12 +105,6 @@
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-azure-datalake</artifactId>
<version>${hadoop.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
- </exclusions>
</dependency>
</dependencies>
</profile>
@@ -138,20 +116,6 @@
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-aws</artifactId>
<version>${hadoop.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-annotations</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
- </exclusions>
</dependency>
</dependencies>
</profile>
diff --git a/zeppelin-plugins/notebookrepo/s3/pom.xml
b/zeppelin-plugins/notebookrepo/s3/pom.xml
index 1df29eee33..674ab9b26c 100644
--- a/zeppelin-plugins/notebookrepo/s3/pom.xml
+++ b/zeppelin-plugins/notebookrepo/s3/pom.xml
@@ -36,38 +36,8 @@
<properties>
<aws.sdk.version>1.12.261</aws.sdk.version>
<plugin.name>NotebookRepo/S3NotebookRepo</plugin.name>
- <jackson.version>2.12.6</jackson.version>
</properties>
- <dependencyManagement>
- <dependencies>
- <!-- Fix enforcer plugin,
- since aws-java-sdk-s3 ships with multiple artifact versions of
- com.fasterxml.jackson.core:jackson-databind. -->
- <dependency>
- <groupId>com.fasterxml.jackson.dataformat</groupId>
- <artifactId>jackson-dataformat-cbor</artifactId>
- <version>${jackson.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
- </exclusions>
- </dependency>
- <dependency>
- <groupId>com.fasterxml.jackson.dataformat</groupId>
- <artifactId>jackson-dataformat-xml</artifactId>
- <version>${jackson.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
- </exclusions>
- </dependency>
- </dependencies>
- </dependencyManagement>
<dependencies>
<dependency>
<groupId>com.amazonaws</groupId>
@@ -117,22 +87,10 @@
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
</exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
<exclusion>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-util</artifactId>
</exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-annotations</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
<exclusion>
<groupId>com.google.errorprone</groupId>
<artifactId>error_prone_annotations</artifactId>
diff --git a/zeppelin-plugins/pom.xml b/zeppelin-plugins/pom.xml
index 644b534ef3..059f972235 100644
--- a/zeppelin-plugins/pom.xml
+++ b/zeppelin-plugins/pom.xml
@@ -58,10 +58,6 @@
<version>${project.version}</version>
<scope>provided</scope>
<exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
<!-- jcl-over-slf4j is provided by zeppelin-interprerter -->
<exclusion>
<groupId>commons-logging</groupId>
diff --git a/zeppelin-server/pom.xml b/zeppelin-server/pom.xml
index 93fdca7a45..df67668229 100644
--- a/zeppelin-server/pom.xml
+++ b/zeppelin-server/pom.xml
@@ -38,7 +38,6 @@
<javax.ws.rsapi.version>2.1</javax.ws.rsapi.version>
<libpam4j.version>1.11</libpam4j.version>
<jna.version>4.1.0</jna.version>
- <jackson.version>2.12.7.1</jackson.version>
<nimbus.version>9.37.2</nimbus.version>
<kerberos.version>2.0.0-M15</kerberos.version>
@@ -55,10 +54,6 @@
<artifactId>zeppelin-zengine</artifactId>
<version>${project.version}</version>
<exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
<exclusion>
<groupId>com.sun.jersey</groupId>
<artifactId>jersey-core</artifactId>
@@ -71,10 +66,6 @@
<groupId>com.sun.jersey</groupId>
<artifactId>jersey-server</artifactId>
</exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
<exclusion>
<groupId>org.ow2.asm</groupId>
<artifactId>asm</artifactId>
@@ -121,12 +112,6 @@
<groupId>io.dropwizard.metrics</groupId>
<artifactId>metrics-servlets</artifactId>
<version>${dropwizard.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
- </exclusions>
</dependency>
<dependency>
@@ -173,20 +158,6 @@
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-json-jackson</artifactId>
<version>${jersey.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-annotations</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-core</artifactId>
- </exclusion>
- </exclusions>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.inject</groupId>
@@ -202,7 +173,6 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>${jackson.version}</version>
</dependency>
<dependency>
diff --git a/zeppelin-zengine/pom.xml b/zeppelin-zengine/pom.xml
index dabe03e4c9..6326770a72 100644
--- a/zeppelin-zengine/pom.xml
+++ b/zeppelin-zengine/pom.xml
@@ -39,22 +39,10 @@
<org.reflections.version>0.9.8</org.reflections.version>
<xml.apis.version>1.4.01</xml.apis.version>
<commons.vfs2.version>2.6.0</commons.vfs2.version>
- <!-- Should match which the version from commons-vfs2 -->
- <jackson.annocations.version>2.9.8</jackson.annocations.version>
<eclipse.jgit.version>4.5.4.201711221230-r</eclipse.jgit.version>
<eirslett.version>1.6</eirslett.version>
</properties>
- <dependencyManagement>
- <dependencies>
- <dependency>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-annotations</artifactId>
- <version>${jackson.annocations.version}</version>
- </dependency>
- </dependencies>
- </dependencyManagement>
-
<dependencies>
<dependency>
<groupId>${project.groupId}</groupId>
@@ -205,10 +193,6 @@
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
</exclusion>
- <exclusion>
- <groupId>com.fasterxml.jackson.core</groupId>
- <artifactId>jackson-databind</artifactId>
- </exclusion>
</exclusions>
</dependency>
