Move to a different Json Schema validator - #2222

Dependency Additions

CQs required for

Json Schema Validator

• com.networknt:json-schema-validator:0.1.7

Jackson

• com.fasterxml.jackson.core:jackson-annotations:2.8.0
• com.fasterxml.jackson.core:jackson-core:2.8.7
• com.fasterxml.jackson.core:jackson-databind:2.8.7

Question: Why is jackson-annotations at 2.8.0 for the 2.8.7 versions? Can we submit these three as a single CQ (do they share the same repository?)

Note there are approved CQs for jackson 1.5.0

Apache Commons Lang

• org.apache.commons:commons-lang3:3.5

3.5 should be submitted, Apache commons-lang3 version 3.4 is already approved.

I decided to draw the whole project graph too using

./sbt spark-etl/dependencyGraphMl

Schema validator neighbours:

This information makes sense, as it corresponds to com.networknt:json-schema-validator:0.1.7 (approved, CQ 13652) pom.xml

But annotations version is a mystery.

Looks like it really should be 2.8.0 (probably their internal versions inconsistency): https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.8.7

Requests should be sent in all cases (same version / different versions of these deps) separately:

• jackson-databind:2.8.7 (approved, CQ 13656)
• jackson-core:2.8.7(approved, CQ 13657)
• jackson-annotations:2.8.0 (approved, CQ 13658)

org.apache.commons:commons-lang3:3.5 (approved, CQ 13653) neighbours:

At least opencsv depends on it too, request should be done too.

There is also org.apache.commons:commons-lang3:3.1 in deps:

But it's evicted by 3.5

Update: all deps are approved.

CQ's Approved. +1