[Java] Remove Jackson from compile-time dependencies for arrow-vector

[asfimport]

I would like to upgrade Jackson to the latest version (2.9.5). If there are no objections I will create a PR (it is literally just changing the version number in the pom - no code changes required).

Reporter: Andy Grove / @andygrove

PRs and other links:

• GitHub Pull Request apache/arrow#3877

_{Note: This issue was originally created as ARROW-2501. Please see the migration documentation for further details.}

[asfimport]

Wes McKinney / @wesm:
@jacques-n @siddharthteotia @StevenMPhillips any objections to this?

[asfimport]

Wes McKinney / @wesm:
@jacques-n what should we do on this? We have a PR open about this already

[asfimport]

Jacques Nadeau / @jacques-n:
I think we should change the jira to be removing Jackson from the compile time dependencies of arrow vector.

[asfimport]

Wes McKinney / @wesm:
Seems reasonable. I updated the title and moved to 0.12

[asfimport]

Wes McKinney / @wesm:
Doesn't seem like this is going to get done in 0.13. Thoughts?

[asfimport]

Andy Grove / @andygrove:
I originally filed this just to get onto a more recent version of Jackson (security fixes IIRC). Now the scope has changed to removing Jackson as a compile-time dependency but I don't understand how that would work since the code depends on Jackson.

[asfimport]

Jacques Nadeau / @jacques-n:
I think the use of Jackson is limited to a very small piece of non-core functionality. We should move that functionality out of the vector module to a place where people can use it only if they need to (if we even need that functionality). Several core classes are labeled with Jackson but they shouldn't need to be (Field, Schema, DictionaryEncoding). JsonFileReader and Writer need this stuff but that should really be separate from vector since that isn't focused on a real use case from my perspective (or maybe even just move to tests). 

[asfimport]

Wes McKinney / @wesm:
Could this be done in 0.14? cc @pravindra @siddharthteotia