Fork me on GitHub
#announcements
<
2022-03-29
>
vemv08:03:26

nvd-clojure - security checker - https://github.com/rm-hull/nvd-clojure/blob/v2.4.0/CHANGELOG.md#changes-from-230-to-240 Now it uses the 7.x https://github.com/jeremylong/DependencyCheck/ series. Also new: performance and reporting improvements. Enjoy!

clojure-spin 7
🔐 2
jumar08:03:57

Looks very interesting, thanks! I've just tried it on a project that still uses JDK 8 and got this error:

lein with-profile -user run -m nvd.task.check "" "$(lein with-profile -user,-dev classpath)"
...
Exception in thread "main" Syntax error macroexpanding at (ring/adapter/jetty.clj:1:1).
        at clojure.lang.Compiler.load(Compiler.java:7665)
...
Caused by: java.lang.UnsupportedClassVersionError: org/eclipse/jetty/util/Attributes has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0

vemv08:03:49

note that nvd-clojure does not involve requiring ring.adapter.jetty , that would be at least part of your problem are you running nvd-clojure in its own isolated project as the readme says? other than that our CI matrix has JDK8/11/17 in it

jumar09:03:52

Ah no, I'm not running it like that - I though it's just an example while it seems it's a prerequisite. Let me try that

jumar09:03:42

It works great, thanks!

vemv09:03:05

Cheers 🍻 hope you can make great use of it!

Ivar Refsdal12:03:21

https://github.com/ivarref/yoltq, an on-prem queue library for Datomic that supports retries, backoff, ordering and more, is released with version 0.2.55! This version includes a critical bugfix. The bug could lead to stalled jobs in some cases. There are other small changes documented in the https://github.com/ivarref/yoltq#change-log.

👏 7
1