Clojurians Log v2
tools-deps
make-classpath-map
A dev version of the Clojure CLI 1.10.3.849 is now available • Adds support for a trailing map in -X calls (similar to 1.11 trailing map to vararg calls) • Updates all Maven deps to latest (maven-resolver 1.7.0, maven core 1.8.3) - https://maven.apache.org/docs/3.8.1/release-notes.html ◦ CVE-2020-13956 - bumps deps on Apache HttpClient (unlikely this would actually be affecting you) ◦ CVE-2021-26291 - potential problems accessing Maven repos, changes of note: ▪︎ http repo access is now blocked by default (to avoid possible MITM). tools.deps has always used https repos in the default repository list (central and clojars) but you could see some impact here if you are currently specifying a http Maven repo (but don't do that) ▪︎ concerns about repository urls getting "hijacked" by transitive pom deps (or their super poms) that declare their own different urls. afaict they made no changes here, but did clarify how repos are resolved on https://maven.apache.org/guides/mini/guide-multiple-repositories.html#repository-order. From a deps perspective, we only use repositories declared in the top-level deps.edn (if transitive deps need a custom repo, you will need to add it at top-level too). For tools.deps use of pom dependencies, we are providing the repos of the top deps.edn file (which should always put Maven Central and Clojars first), then deferring to Maven for the rest.
Anyhow, would appreciate anyone trying this, particularly if you use repositories other than central and clojars.
> Adds support for a trailing map in -X calls (similar to 1.11 trailing map to vararg calls)
Can you give an example of what this looks like on the command line?
-X:foo :a 1 :b 2 '{:c 3}' ?
yep, that
cool
haven't added the doc yet as this is not a stable release
maybe I can share that
still a couple things to fix there
and of course, trailing can be the only arg
clj -X clojure.core/prn '{:a 1 :b 2}'