You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Nathan Gough (JIRA)" <ji...@apache.org> on 2019/06/12 14:29:00 UTC
[jira] [Commented] (NIFI-6251) Check for transitive dependency
upgrades for jackson-databind
[ https://issues.apache.org/jira/browse/NIFI-6251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16862161#comment-16862161 ]
Nathan Gough commented on NIFI-6251:
------------------------------------
Latest release of jackson-databind is now 2.9.9. The following is the state of transitive dependencies that are below 2.9.9:
Upgraded to jackson-databind:2.9.9 but not yet released
[https://github.com/maxmind/GeoIP2-java/pull/130]
{noformat}
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-enrich-processors ---
[INFO] org.apache.nifi:nifi-enrich-processors:jar:1.10.0-SNAPSHOT
[INFO] \- com.maxmind.geoip2:geoip2:jar:2.12.0:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.9.5:compile
{noformat}
Hbase-client jackson-databind upgraded 2.9.9 6/10/2019, not yet released
[https://github.com/apache/hbase/commit/83865713299823017fb8d316ce5512f283fa6e3e]
{noformat}
[INFO] Building nifi-hbase_2-client-service 1.10.0-SNAPSHOT [2/3]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-hbase_2-client-service --
[INFO] org.apache.nifi:nifi-hbase_2-client-service:jar:1.10.0-SNAPSHOT
[INFO] \- org.apache.hbase:hbase-client:jar:2.1.1:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.9.2:compile
{noformat}
Upgrade available for solr (8.1.1) but causing errors.
{noformat}
[INFO] Building nifi-solr-processors 1.10.0-SNAPSHOT [2/3]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-solr-processors ---
[INFO] org.apache.nifi:nifi-solr-processors:jar:1.10.0-SNAPSHOT
[INFO] \- org.apache.solr:solr-solrj:jar:6.2.0:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.5.4:compile
{noformat}
Upgrade path coming (eventually): https://issues.apache.org/jira/browse/HADOOP-15960
{noformat}
INFO] Building nifi-hadoop-libraries-nar 1.10.0-SNAPSHOT [2/2]
[INFO] --------------------------------[ nar ]---------------------------------
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-hadoop-libraries-nar ---
[INFO] org.apache.nifi:nifi-hadoop-libraries-nar:nar:1.10.0-SNAPSHOT
[INFO] \- org.apache.hadoop:hadoop-client:jar:3.0.0:compile
[INFO] \- org.apache.hadoop:hadoop-common:jar:3.0.0:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.7.8:compile
{noformat}
----
No upgrade path. May be better to switch to Cloudera releases? Not sure if there's a flume-ng-sinks Cloudera release.
{noformat}
[INFO] Building nifi-flume-processors 1.10.0-SNAPSHOT [2/3]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-flume-processors ---
[INFO] org.apache.nifi:nifi-flume-processors:jar:1.10.0-SNAPSHOT
[INFO] \- org.apache.flume.flume-ng-sinks:flume-dataset-sink:jar:1.6.0:compile
[INFO] \- org.kitesdk:kite-data-core:jar:1.0.0:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.3.1:compile
{noformat}
No upgrade path.
{noformat}
[INFO] Building nifi-druid-controller-service-api 1.10.0-SNAPSHOT [2/6]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-druid-controller-service-api ---
[INFO] org.apache.nifi:nifi-druid-controller-service-api:jar:1.10.0-SNAPSHOT
[INFO] \- io.druid:tranquility-core_2.11:jar:0.8.2:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.4.6:compile
{noformat}
No upgrade path.
{noformat}
[INFO] Building nifi-proxy-configuration 1.10.0-SNAPSHOT [2/3]
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-proxy-configuration ---
[INFO] org.apache.nifi:nifi-proxy-configuration:jar:1.10.0-SNAPSHOT
[INFO] \- org.apache.nifi:nifi-standard-utils:jar:1.10.0-SNAPSHOT:compile
[INFO] \- com.bazaarvoice.jolt:json-utils:jar:0.1.1:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.9.4:compile
[INFO] Building nifi-jolt-record-processors 1.10.0-SNAPSHOT [2/3]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-jolt-record-processors --
[INFO] org.apache.nifi:nifi-jolt-record-processors:jar:1.10.0-SNAPSHOT
[INFO] \- com.bazaarvoice.jolt:json-utils:jar:0.1.1:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.9.4:compile
{noformat}
----
Partial upgrade to 2.9.6 with metrics-datadog 2.0.0-RC1
{noformat}
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-datadog-reporting-task ---
[INFO] org.apache.nifi:nifi-datadog-reporting-task:jar:1.10.0-SNAPSHOT
[INFO] \- org.coursera:metrics-datadog:jar:1.1.5:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.4.2:compile
{noformat}
Could switch to 1.0.0-cdh6.2.0 release? [https://mvnrepository.com/artifact/org.kitesdk/kite-data-core/1.0.0-cdh6.2.0]
{noformat}
[INFO] Building nifi-kite-processors 1.10.0-SNAPSHOT [2/3]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] org.apache.nifi:nifi-kite-processors:jar:1.10.0-SNAPSHOT
[INFO] \- org.kitesdk:kite-data-core:jar:1.1.0:compile
[INFO] \- com.fasterxml.jackson.core:jackson-databind:jar:2.3.1:compile
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ nifi-kite-processors ---
{noformat}
> Check for transitive dependency upgrades for jackson-databind
> -------------------------------------------------------------
>
> Key: NIFI-6251
> URL: https://issues.apache.org/jira/browse/NIFI-6251
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Nathan Gough
> Priority: Major
> Labels: databind, jackson, jackson-databind
>
> The jackson-databind for direct dependencies was upgraded to 2.9.8. However, transitive dependencies use older versions of jackson-databind, so any new releases of these libs should be checked to see if they've upgraded their usage of jackson-databind >= 2.9.8. We can then upgrade these transitive deps usages of jackson-databind.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)