[jira] [Commented] (HBASE-16369) Clean up dependency management

["Nick Dimiduk (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HBASE-16369?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15410760#comment-15410760 ] 

Nick Dimiduk commented on HBASE-16369:
--------------------------------------

Start with dependency plugin. Using a more modern version than our parent pom recommends, but even this one has a known issue (MDEP-471) with Java8 method references. Looking just as hbase-server (4e08a8b), the residence of {{TestLogLevel}}, reveals:

{noformat}
[INFO] ------------------------------------------------------------------------
[INFO] Building Apache HBase - Server 2.0.0-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO] 
[INFO] --- maven-dependency-plugin:2.10:analyze-only (default-cli) @ hbase-server ---
[WARNING] Used undeclared dependencies found:
[WARNING]    org.apache.kerby:kerb-core:jar:1.0.0-RC2:test
[WARNING]    bouncycastle:bcprov-jdk15:jar:140:test
[WARNING]    org.apache.hadoop:hadoop-annotations:jar:2.7.1:compile
[WARNING]    org.apache.hbase:hbase-annotations:jar:2.0.0-SNAPSHOT:compile
[WARNING] Unused declared dependencies found:
[WARNING]    org.bouncycastle:bcprov-jdk16:jar:1.46:test
[WARNING]    org.apache.hadoop:hadoop-minicluster:jar:2.7.1:test
[WARNING]    org.apache.hbase:hbase-hadoop2-compat:test-jar:tests:2.0.0-SNAPSHOT:test
[WARNING]    org.mortbay.jetty:jetty-sslengine:jar:6.1.26:compile
[WARNING]    tomcat:jasper-runtime:jar:5.5.23:runtime
[WARNING]    org.apache.hadoop:hadoop-client:jar:2.7.1:compile
[WARNING]    org.apache.kerby:kerb-client:jar:1.0.0-RC2:test
[WARNING]    tomcat:jasper-compiler:jar:5.5.23:compile
[WARNING]    org.codehaus.jackson:jackson-jaxrs:jar:1.9.13:compile
[WARNING]    io.netty:netty:jar:3.6.2.Final:test
[WARNING]    org.apache.hbase:hbase-resource-bundle:jar:2.0.0-SNAPSHOT:compile
{noformat}

> Clean up dependency management
> ------------------------------
>
>                 Key: HBASE-16369
>                 URL: https://issues.apache.org/jira/browse/HBASE-16369
>             Project: HBase
>          Issue Type: Task
>          Components: build
>            Reporter: Nick Dimiduk
>            Priority: Critical
>             Fix For: 2.0.0
>
>
> Following the test breakage of HBASE-16317, and related issues HBASE-16361, and HBASE-15767, it's clear we don't have a handle on our dependencies. Not only does it lead to unexpected errors from used, undeclared dependencies, it also means we're at something of a loss to guarantee our dependencies in light of our compatibility guidelines. Adopt use of some combination of the [dependency|http://maven.apache.org/plugins/maven-dependency-plugin/usage.html] and [enforcer|http://maven.apache.org/enforcer/enforcer-rules/banTransitiveDependencies.html] plugins to assist in accounting.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)